Overview

URL comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
IP193.109.246.68
ASNAS29076 Filanco LTD
Location Russian Federation
Report completed2017-07-17 18:20:38 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-07-17 2 rot.spotsniper.ru/?src=ujs6 Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 193.109.246.68

Date UQ / IDS / BL URL IP
2017-09-18 20:10:00 +0200
0 - 0 - 1 smash-cs.ru/load/0-0-1-2291-20 193.109.246.68
2017-09-09 13:48:45 +0200
0 - 0 - 7 ray-minecraft.ru/load/klienty_minecraft/minec (...) 193.109.246.68
2017-09-07 13:38:50 +0200
0 - 0 - 0 kibicowsko.ru 193.109.246.68
2017-08-30 15:15:34 +0200
0 - 2 - 0 film24.moy.su/ 193.109.246.68
2017-08-24 04:03:53 +0200
2 - 0 - 14 stihinet.ucoz.ru/publ/marshak/stikhi_marshaka (...) 193.109.246.68
2017-08-22 19:57:17 +0200
0 - 0 - 1 playbaze.ru/_ld/0/97_InuriaPrivateCS.rar 193.109.246.68
2017-08-19 09:32:16 +0200
0 - 0 - 16 www.managerfifa.ru/load/ 193.109.246.68
2017-08-14 20:43:11 +0200
0 - 0 - 0 uranus.clan.su 193.109.246.68
2017-08-12 01:48:39 +0200
0 - 2 - 0 uranus.clan.su 193.109.246.68
2017-08-05 03:44:17 +0200
0 - 0 - 1 steamgifts.clan.su/_ld/0/1_steamgifts.rar 193.109.246.68

Last 10 reports on ASN: AS29076 Filanco LTD

Date UQ / IDS / BL URL IP
2017-09-22 03:07:25 +0200
0 - 0 - 1 www.k-meridian.ru/ 62.152.55.222
2017-09-22 01:55:48 +0200
0 - 1 - 0 crtdiu-nov.ucoz.ru/news/istorija_razvitija_uc (...) 193.109.246.58
2017-09-22 01:05:58 +0200
0 - 1 - 0 crtdiu-nov.ucoz.ru/news/istorija_razvitija_uc (...) 193.109.246.58
2017-09-21 22:37:57 +0200
0 - 4 - 0 piterra.net/ 193.109.246.7
2017-09-21 22:07:43 +0200
0 - 1 - 0 www.ayas.ru/404.html 78.108.93.186
2017-09-21 19:54:14 +0200
0 - 1 - 0 www.ayas.ru/404.html 78.108.93.186
2017-09-21 19:22:36 +0200
0 - 1 - 0 www.ayas.ru/404.html 78.108.93.186
2017-09-21 19:06:33 +0200
0 - 1 - 0 www.ayas.ru/404.html 78.108.93.186
2017-09-21 18:21:34 +0200
0 - 0 - 1 gekkon56.narod.ru/moskovskie-lekarstva.html 193.109.247.223
2017-09-21 10:55:05 +0200
0 - 0 - 17 www.fastestmoney.ru/index/onlajn_igry/0-25 193.109.246.62

No other reports on domain: .



JavaScript

Executed Scripts (46)


Executed Evals (88)

#1 JavaScript::Eval (size: 9018, repeated: 1) - SHA256: 7325a8441d35ef90dd8fd5e6ec864b71bd6607cce3b3bbec24816feda541b244

                                        (["ainput", ["bgdata", "Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy8tcXVYTzBhY2Z3TFlPcE53cC1XRy1VaDhYQThnVkVWY0I2UU9TdkRzQjV3Lmpz", "", "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"], null, ["conf", null, "6LcyAwsUAAAAAAEpVfKCOS4XR0X6PJtQTEuFKyNr", 0, null, ["JS_FASTCLICK", "JS_BFRAME", "JS_MC_FETCH"]], "http://comeback-strike.moy.su:80", ["ctask", [
        ["hctask", "942db662", "21b299fb0c0e9b791ad1dd4203515557fc6e930d954fafc3e54398399bfd4cc5", 0, 100],
        ["hctask", "91d21a30", "70a6cc5e289afa7a610d51ae5fda48fe0b44444e22a789eebc96f25dae5a2ace", 0, 100],
        ["hctask", "1f06c7eb", "94f0b7b25acb9c80a06a509feb16d02b06e4ea6c40df591be69c43307c5f8d03", 0, 100]
    ], "/recaptcha/api2/webworker.js"],
    [2, 1, 1], null, null, ["ftask", [1, 27]]
])
                                    

#2 JavaScript::Eval (size: 127, repeated: 1) - SHA256: 8fcf5c13def1acf580a55ca5ccc210b28248e47452e7e8a466febe3cb185fa0c

                                        (["finput", null, ["conf", null, "6LcyAwsUAAAAAAEpVfKCOS4XR0X6PJtQTEuFKyNr", 0, null, ["JS_FASTCLICK", "JS_BFRAME", "JS_MC_FETCH"]]])
                                    

#3 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: ce62a6f2d9961fac003a8a715bf895f7d44f8bd520b4275650739d7aaf41e931

                                        0,
function(z) {
    Z(z, 1);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 77c4bfad516695b229e2c1e1f5bf3f6f185c82bd671a8a1e1144284c12673634

                                        0,
function(z) {
    Z(z, 2);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 209b6c7d446b0a8b48d506db63a47deb70616a6145f7480bd5e13578a98309da

                                        0,
function(z) {
    Z(z, 4);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 19aa96682d168e78d90e34a2a0cba775308abd126c4d0e6fba64099887a534b1

                                        0,
function(z) {
    k(z, 1);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 1) - SHA256: aba84931e2d34835bd8ff0695d648570a5a0d0e6dd90f8a53284be40da116393

                                        0,
function(z) {
    k(z, 2);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: f9e3b47ce85d8e3993ad57453de18c6417472109a9ba23523b4fbe2beae64a86

                                        0,
function(z) {
    k(z, 4);
}
                                    

#10 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 11afa37dafabdf821ea57863603b8e4ffb18adffb041e0bd6bd9f387e9643d91

                                        0,
function(z) {
    z.D(0);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 979b6b27081de3be7b0d5296f40cbb9ec6e7b5f4f8d7408a877adda52f60ef0e

                                        0,
function(z) {
    z.D(3);
}
                                    

#12 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 1688b88a11d4a2aecd10b3de416a5e6b6a0391ca44cf1a8bbc50c2441fb4700c

                                        0,
function(z) {
    z.D(4);
}
                                    

#13 JavaScript::Eval (size: 30, repeated: 1) - SHA256: defb19aba457070dd62e8a0d926a516f550568dabeaa2e909a46533b53590c4f

                                        0,
function(z) {
    z.D(7);
}
                                    

#14 JavaScript::Eval (size: 38, repeated: 1) - SHA256: 89043c38845087ab677b6d25dc3a55140383b6f42dbcc1935752740ab3718a4b

                                        0,
function(z) {
    z.X && q(z, 0);
}
                                    

#15 JavaScript::Eval (size: 96, repeated: 1) - SHA256: 4792d3557072b2b69d33a8028958c15ad6b50d66b060dadbc0896159e25126ff

                                        0,
function(z, S) {
    (z = (S = I(z), z).W(S), z[0]).removeEventListener(z[1], z[2], false);
}
                                    

#16 JavaScript::Eval (size: 49, repeated: 1) - SHA256: fc77ed5bb1427bfeaf44d0ec07fc48632d30742a770f74d3c485108020b59320

                                        0,
function(z, S) {
    S = z.W(I(z)), J(z, S);
}
                                    

#17 JavaScript::Eval (size: 183, repeated: 1) - SHA256: 57262dc23a76933545a6895399854db82d8d9c26a250e2a1fe57fdfe9001f9d7

                                        0,
function(z, S) {
    S.push(z[0] << 24 | z[1] << 16 | z[2] << 8 | z[3]), S.push(z[4] << 24 | z[5] << 16 | z[6] << 8 | z[7]), S.push(z[8] << 24 | z[9] << 16 | z[10] << 8 | z[11]);
}
                                    

#18 JavaScript::Eval (size: 125, repeated: 1) - SHA256: f86b82dd011a085f83f215d425aa91e7b8864ca6855f92c47f750f7eb306a72e

                                        0,
function(z, S) {
    if ((S = this.T[z], void 0) === S) {
        throw G(this, 30, 0, z), this.v;
    }
    return S();
}
                                    

#19 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 05c7daf30e982b53212201b869ed73715d6a7150cf03b9db3d23545f0275dbfb

                                        0,
function(z, S) {
    m(z, 1, 5) || (S = v(z), L(z, S.Y, S.w.apply(S.g, S.M)));
}
                                    

#20 JavaScript::Eval (size: 79, repeated: 1) - SHA256: b5b43dd94b13ff0e3c690e57ed297e656ea00bc789969723988909ad5f1d0719

                                        0,
function(z, S, c) {
    (S = (S = I(z), c = I(z), z.W(S)), L)(z, c, U(S));
}
                                    

#21 JavaScript::Eval (size: 86, repeated: 1) - SHA256: 7fba0139112e29504a7a9ae0c0a122ba7fba30205d8f490b6bc76040173c63fd

                                        0,
function(z, S, c) {
    0 != (c = (S = I(z), I)(z), z.W(S)) && L(z, 180, z.W(c));
}
                                    

#22 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 75b675f23347eeb00420d9c8262537caa50db4582a925ed6afec83c95d719ce6

                                        0,
function(z, S, c) {
    S = I(z), c = I(z), L(z, c, "" + z.W(S));
}
                                    

#23 JavaScript::Eval (size: 82, repeated: 1) - SHA256: 6563f6e1d55b6c02d08c37d540bbca3a439db36a5ca030cbb20ba6e6dea8afcb

                                        0,
function(z, S, c) {
    S = I(z), c = I(z), S = z.T[S] && z.W(S), L(z, c, S);
}
                                    

#24 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 204c2ae5f615568a62e408ab8e57947a28c61f2c4fa45c85b49e99fcd7edaa53

                                        0,
function(z, S, c) {
    c = (S = I(z), I)(z), L(z, c, z.W(c) % z.W(S));
}
                                    

#25 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 192e38822a2d91d536652ecdd7fa067431e8bdb937eacf45a27ddb562ff1fb31

                                        0,
function(z, S, c) {
    c = (S = I(z), I)(z), L(z, c, z.W(c) * z.W(S));
}
                                    

#26 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 24794025612b41acd4e62b3b521fc56115b1bbc65beb9e74f4e1955ce23c6e18

                                        0,
function(z, S, c) {
    c = (S = I(z), I)(z), L(z, c, z.W(c) + z.W(S));
}
                                    

#27 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 0bff8e0e33752b7a0590f2c3771f496c114fcc26c03e2193ecc83966ba4ddecc

                                        0,
function(z, S, c) {
    c = (S = I(z), I)(z), L(z, c, z.W(c) - z.W(S));
}
                                    

#28 JavaScript::Eval (size: 244, repeated: 1) - SHA256: 75b924a222d4c09aca1918256552a9e31e2ca1279849b21369da97b624499ccb

                                        0,
function(z, S, c) {
    if (3 == z.length) {
        for (c = 0; 3 > c; c++) {
            S[c] += z[c];
        }
        for (z = (c = 0, [13, 8, 13, 12, 16, 5, 3, 10, 15]); 9 > c; c++) {
            S[3](S, c % 3, z[c]);
        }
    }
}
                                    

#29 JavaScript::Eval (size: 121, repeated: 1) - SHA256: 9042e4e83e9f8638db73a5c5b3ef037ac2f372000683c89d87a2ce6a42b64067

                                        0,
function(z, S, c) {
    m(z, 1, 5) ||
        (S = I(z), c = I(z), L(z, c, function(z) {
            return eval(z);
        }(z.W(S))));
}
                                    

#30 JavaScript::Eval (size: 133, repeated: 1) - SHA256: a07f004485a304e7f09f1f9c0da8a6ff531e36596b969b132be534896652ad11

                                        0,
function(z, S, c) {
    return c = function() {
        return z;
    }, S = function() {
        return c();
    }, S[this.i] = function(H) {
        z = H;
    }, S;
}
                                    

#31 JavaScript::Eval (size: 206, repeated: 1) - SHA256: c6d43c5f61502de6b48165e46cf85613512d01213a30967c775bedac9bbebcae

                                        0,
function(z, S, c, x) {
    ((c = (x = (c = (z &= (S = z & 4, 3), I)(this), I(this)), this.W(c)), S && (c = E(("" + c).replace(/\r\n/g, "\n"))), z) &&
        g(this, x, l(c.length, 2)), g)(this, x, c);
}
                                    

#32 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 50792e881008af573636786312f84555b8ff52be11a92b2316e4d4c18da864f7

                                        0,
function(z, S, c, x) {
    (S = (c = (S = I(z), I(z)), x = I(z), c = z.W(c), z).W(S), L)(z, x, S[c]);
}
                                    

#33 JavaScript::Eval (size: 93, repeated: 1) - SHA256: b4bc3008baf507fa099dd39292c4bb6233885ef5cb542df9ced0e5d78f29aa17

                                        0,
function(z, S, c, x) {
    (x = (c = (S = I(z), I(z)), I)(z), L)(z, x, z.W(S) | z.W(c));
}
                                    

#34 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 26a2ca0f1a6a3bfa551143f762ae2fdee6e0d6c8637b5fd59169b7e4f6102165

                                        0,
function(z, S, c, x) {
    (x = (c = (S = I(z), I(z)), I)(z), L)(z, x, z.W(S) || z.W(c));
}
                                    

#35 JavaScript::Eval (size: 92, repeated: 1) - SHA256: c651c9cdbfb99fad53d99c46b6f6bd3eb8922d995ba181740f39c5c0d3168bbd

                                        0,
function(z, S, c, x) {
    (x = (c = (S = I(z), I(z)), I)(z), z).W(S)[z.W(c)] = z.W(x);
}
                                    

#36 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 522acfff8a66af3fb8948dce95d7b0060f26284b61a33a50005a1b4fa2f818da

                                        0,
function(z, S, c, x) {
    c = (S = I(z), I)(z), x = I(z), L(z, x, z.W(S) << c);
}
                                    

#37 JavaScript::Eval (size: 85, repeated: 1) - SHA256: e93b218397d6c217f234df3a12bd934c133481f2f12943fd2addaf8d7fdf304a

                                        0,
function(z, S, c, x) {
    c = (S = I(z), I)(z), x = I(z), L(z, x, z.W(S) >> c);
}
                                    

#38 JavaScript::Eval (size: 155, repeated: 1) - SHA256: 507cb02fc2bf6b5d5186ade0b99f011db1b13edc6bf42fa1e1e8e16f36fad3be

                                        0,
function(z, S, c, x) {
    for (; c--;) {
        180 != c &&
            194 != c && S.T[c] && (S.T[c] = S[x](S[z](c), this));
    }
    S[z] = this;
}
                                    

#39 JavaScript::Eval (size: 241, repeated: 1) - SHA256: 60c7418dfebba7299fca687effcfcc637f2d56dcb888d124944640633aeeef4f

                                        0,
function(z, S, c, x) {
    if ((S = z.$.pop())) {
        for (c = I(z); 0 < c; c--) {
            x = I(z), S[x] = z.T[x];
        }
        (S[28] = z.T[28], S)[95] = z.T[95], z.T = S;
    } else {
        L(z, 180, z.a.length);
    }
}
                                    

#40 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 21a9f1740cc5c03d7cab35064d5e288c5ff38a5acd4886ff9a922d30fe068dd6

                                        0,
function(z, S, c, x) {
    try {
        x = z[(S + 2) % 3], z[S] = z[S] - z[(S + 1) % 3] - x ^ (1 == S ? x << c : x >>> c);
    } catch (H) {
        throw H;
    }
}
                                    

#41 JavaScript::Eval (size: 96, repeated: 1) - SHA256: b9e4590b720a7dd9ea1d73f03d641762d7a6e4334b9a9bbb7835ca41f425f126

                                        0,
function(z, S, c, x) {
    x = (S = I(z), c = I(z), I)(z), L(z, x, (z.W(S) in z.W(c)) + 0);
}
                                    

#42 JavaScript::Eval (size: 104, repeated: 1) - SHA256: bd44734dd3bb962f1502fc1bf4775050f8350e0b4d56e426ab14d1ff9182fc0e

                                        0,
function(z, S, c, x) {
    x = (S = I(z), c = I(z), I)(z), z.W(S) == z.W(c) && L(z, x, z.W(x) + 1);
}
                                    

#43 JavaScript::Eval (size: 103, repeated: 1) - SHA256: b7f6bea45f32dae371c774876b65610c0b3d191afb6e28dc461e779cfdb0d3c4

                                        0,
function(z, S, c, x) {
    x = (S = I(z), c = I(z), I)(z), z.W(S) > z.W(c) && L(z, x, z.W(x) + 1);
}
                                    

#44 JavaScript::Eval (size: 126, repeated: 1) - SHA256: 170c4a0a090d6507f9e88036b853d8d29a8990a96668849d9f201d76beed809f

                                        0,
function(z, S, c, x, B) {
    (c = (x = (S = I(z), c = I(z), z).W(I(z)), B = z.W(I(z)), z.W(c)), L)(z, S, F(z, c, x, B));
}
                                    

#45 JavaScript::Eval (size: 238, repeated: 1) - SHA256: 54c0993e0a72b5fffad4ba0ed7a141fab403723a76f86700f4563e0dd09ff38a

                                        0,
function(z, S, c, x, B) {
    for (c = (S = [], I)(z), x = 0; x < c; x++) {
        B = I(z), S.push(z.W(B));
    }
    c = I(z), L(z, c, function(z, c) {
        z.U++;
        try {
            for (c = 0; c < S.length; c++) {
                (0, S[c])(z);
            }
        } finally {
            z.U--;
        }
    });
}
                                    

#46 JavaScript::Eval (size: 134, repeated: 1) - SHA256: f88afb09c88408e8d4f00c300f694cea0bb01d41ed48698903423cf253c08e23

                                        0,
function(z, S, c, x, B) {
    for (x = (S = I(z), c = N(z), B = 0, []); B < c; B++) {
        x.push(I(z));
    }
    L(z, S, x);
}
                                    

#47 JavaScript::Eval (size: 220, repeated: 1) - SHA256: c8c50e5226a12a3d50b87c04180a4dc02c1a159cbb5c1a72c4a10b36452536a0

                                        0,
function(z, S, c, x, B) {
    x = (B = (x = (c = (S = I(z), I(z)), I(z)), S = z.W(S), z.W(I(z))), c = z.W(c), z).W(x), 0 !== S &&
        (x = F(z, x, B, 1, S, c), S.addEventListener(c, x, M), L(z, 145, [S, c, x]));
}
                                    

#48 JavaScript::Eval (size: 401, repeated: 1) - SHA256: 95ef8bec5fc1293f2c5acbe6086f46c5bd3567dd18c7a56948a91436c2cd2dae

                                        0,
function(z, S, c, x, B, h) {
    if (!m(z, 1, 255)) {
        if ("object" == (z = (x = (c = (S = (x = (S = I(z), c = I(z), I)(z), B = I(z), z.W(S)), z).W(c), z).W(x), z.W(B)), U)(S)) {
            for (h in B = [], S) {
                B.push(h);
            }
            S = B;
        }
        for (h = (B = 0, S.length); B < h; B += x) {
            c(S.slice(B, B + x), z);
        }
    }
}
                                    

#49 JavaScript::Eval (size: 214, repeated: 1) - SHA256: 1eacd07fb9310411eb70055656abd11407c76cfbf8a5f05c1064d477cf51a78c

                                        0,
function(z, S, c, x, B, h) {
    return (h = (x = function() {
        return x[c.N + (B[c.L] === S) - !h[c.L]];
    }, B = function() {
        return x();
    }, c = this, c.S), B)[c.i] = function(z) {
        x[c.o] = z;
    }, B[c.i](z), z = B;
}
                                    

#50 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 18db0675db14c71f6c3456ab6c77a64de2590b81001d985df346c8f5244845cb

                                        0,
function(z, S, c, x, B, h, W) {
    m(z, 1, 5) ||
        (S = v(z), x = S.g, B = S.w, c = S.M, W = c.length, 0 == W ? (h = new(x[B])) : 1 == W ? (h = new(x[B])(c[0])) : 2 == W ? (h = new(x[B])(c[0], c[1])) : 3 == W ? (h = new(x[B])(c[0], c[1], c[2])) : 4 == W ? (h = new(x[B])(c[0], c[1], c[2], c[3])) : G(z, 22), L(z, S.Y, h));
}
                                    

#51 JavaScript::Eval (size: 895, repeated: 1) - SHA256: 8248ba586220dc7e3a41703c0fc8873ca97fbe5060a97209fcb9d8a73f345698

                                        0,
function(z, S, c, x, B, h, W, O, f, X) {
    if (void 0 != (S = I(z), c = N(z), x = "", z).T[98]) {
        for (B = z.W(98), W = B.length, h = 0; c--;) {
            h = (h + N(z)) % W, x += B[h];
        }
    } else {
        for (B = 0, x = []; B < c; B++) {
            x.push(I(z));
        }
        for (c = [], h = B = 0; B < x.length;) {
            f = x[B++], 128 > f ? (c[h++] = String.fromCharCode(f)) : 191 < f && 224 > f ? (O = x[B++], c[h++] = String.fromCharCode((f & 31) << 6 | O & 63)) : 239 < f && 365 > f ? (O = x[B++], W = x[B++], X = x[B++], W = ((f & 7) << 18 | (O & 63) << 12 | (W & 63) << 6 | X & 63) - 65536, c[h++] = String.fromCharCode(55296 + (W >> 10)), c[h++] = String.fromCharCode(56320 + (W & 1023))) : (O = x[B++], W = x[B++], c[h++] = String.fromCharCode((f & 15) << 12 | (O & 63) << 6 | W & 63));
        }
        x = c.join("");
    }
    L(z, S, x);
}
                                    

#52 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#53 JavaScript::Eval (size: 50, repeated: 1) - SHA256: 9b8d91ea37c267efec709a921965c3b243a3cc1e83ff04ec2bd368feb0bca58b

                                        0,
function($, _) {
    _.push(String.fromCharCode($[0]))
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 559aead08264d5795d3909718cdd05abd49572e84fe55590eef31a88a08fdffd

                                        A
                                    

#55 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 1622d075af33ba91b2cc58d85246c895aa05d2f84f7f24720bd343d70b6e7e91

                                        A = function(z, S) {
    return z[S] << 24 | z[S + 1] << 16 | z[S + 2] << 8 | z[S + 3];
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#57 JavaScript::Eval (size: 487, repeated: 1) - SHA256: e03fd57b48ad31f0ee0ed008889a5c3a0e2345ba3d62fb952c6059a2f2c076e0

                                        E = function(z, S, c, x, H) {
    for (x = c = (S = [], 0); x < z.length; x++) {
        H = z.charCodeAt(x), 128 > H ? (S[c++] = H) : (2048 > H ? (S[c++] = H >> 6 | 192) : (55296 == (H & 64512) &&
            x + 1 < z.length && 56320 == (z.charCodeAt(x + 1) & 64512) ? (H = 65536 + ((H & 1023) << 10) + (z.charCodeAt(++x) & 1023), S[c++] = H >> 18 | 240, S[c++] = H >> 12 & 63 | 128) : (S[c++] = H >> 12 | 224), S[c++] = H >> 6 & 63 | 128), S[c++] = H & 63 | 128);
    }
    return S;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 1) - SHA256: f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9

                                        F
                                    

#59 JavaScript::Eval (size: 272, repeated: 1) - SHA256: 579d22a7b887043c70e05ec80fa3a2c678e3c186fb070a83d319cbc8acf179ec

                                        F = function(z, S, c, x, H, d) {
    return function() {
        var D = x & 1,
            p = [6, S, c, void 0, H, d, arguments];
        if (x & 2) {
            var B = (w(z, p), e)(z, true, false, false);
        } else {
            D && z.V.length ? w(z, p) : D ? (w(z, p), e(z, true, false, false)) : (B = K(z, p));
        }
        return B;
    };
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#61 JavaScript::Eval (size: 424, repeated: 1) - SHA256: ac0de75df1df680926fd02e77d84ed318e6b0bee216725f0704dafc4fda531f9

                                        G = function(z, S, c, x, H) {
    (c = ((S = [(H = z.W(194), S), H >> 8 & 255, H & 255], void 0 != x) &&
        S.push(x), 0 == z.W(28).length && (z.T[28] = void 0, L(z, 28, S)), x = "", c &&
        (c.message && (x += c.message), c.stack && (x += ":" + c.stack)), z.W(95)), 3) < c &&
        (x = x.slice(0, c - 3), c -= x.length + 3, x = E(x.replace(/\r\n/g, "\n")), g(z, 22, l(x.length, 2).concat(x), 9)), L(z, 95, c);
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c

                                        I
                                    

#63 JavaScript::Eval (size: 293, repeated: 1) - SHA256: 89c110830190ea6c882930e07131c5b25a46a9eb57ee8937df8262fa8ab85317

                                        I = function(z, S, c) {
    if (!((S = z.W(180), S) in z.a)) {
        throw G(z, 31), z.v;
    }
    return ((void 0 == z.A && (z.A = A(z.a, S - 4), z.F = void 0), z.F != S >> 3) &&
        (z.F = S >> 3, c = [0, 0, 0, z.W(72)], z.Z = R(z.A, z.F, c)), L(z, 180, S + 1), z.a)[S] ^ z.Z[S % 8];
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

                                        J
                                    

#65 JavaScript::Eval (size: 85, repeated: 1) - SHA256: cf63bb2e56e92bca4aaf0955f045327be3de9c58a9ec873b46c660c41b6e6255

                                        J = function(z, S) {
    ((z.$.push(z.T.slice()), z.T)[180] = void 0, L)(z, 180, S);
}
                                    

#66 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#67 JavaScript::Eval (size: 326, repeated: 1) - SHA256: e9a63aa28fd20fc375cc5dd9d657d543f604f4029fd787cfd65eaf4daa2de8d1

                                        L = function(z, S, c) {
    if (180 == S || 194 == S) {
        if (z.T[S]) {
            z.T[S][z.i](c);
        } else {
            z.T[S] = z.R(c);
        }
    } else if (125 != S && 22 != S && 108 != S && 28 != S || !z.T[S]) {
        z.T[S] = z.l(c, z.W);
    }
    72 == S && (z.A = void 0, L(z, 180, z.W(180) + 4));
}
                                    

#68 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b

                                        N
                                    

#69 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 35ab51f5face7d88c448303dfa28f819955d6c5142012825a081f39de8a9c156

                                        N = function(z, S) {
    return (S = I(z), S) & 128 && (S = S & 127 | I(z) << 7), S;
}
                                    

#70 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 5c62e091b8c0565f1bafad0dad5934276143ae2ccef7a5381e8ada5b1a8d26d2

                                        P
                                    

#71 JavaScript::Eval (size: 133, repeated: 1) - SHA256: e5e9311f744b36ba12ec784b93d1acb2d6c3971cf1ed51f2bf2b4526353416ad

                                        P = function(z, S, c) {
    return (c = z.W(180), z.a && c < z.a.length ? (L(z, 180, z.a.length), J(z, S)) : L(z, 180, S), Y)(z, c);
}
                                    

#72 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac

                                        R
                                    

#73 JavaScript::Eval (size: 367, repeated: 1) - SHA256: b25252330282a7ef4c40fbb513f2a2fa9e0662ef65ed15325c5945ec60f10bd1

                                        R = function(z, S, c, x) {
    try {
        for (x = 0; 101513633568 != x;) {
            z += (S << 4 ^ S >>> 5) + S ^ x + c[x & 3], x += 3172301049, S += (z << 4 ^ z >>> 5) + z ^ x + c[x >>> 11 & 3];
        }
        return [z >>> 24, z >> 16 & 255, z >> 8 & 255, z & 255, S >>> 24, S >> 16 & 255, S >> 8 & 255, S & 255];
    } catch (H) {
        throw H;
    }
}
                                    

#74 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#75 JavaScript::Eval (size: 654, repeated: 1) - SHA256: 9e57c2fc52ab2f7cfea0e1daddd0daa51e0774197c5dfe5d07ec1ed75bf75b29

                                        Y = function(z, S, c, x, H, d, D, p) {
    z.U++;
    try {
        for (c = (x = (H = (d = 0, void 0), 5001), z.a).length;
            (--x || z.K) && (d = z.W(180)) < c;) {
            try {
                L(z, 194, d), D = I(z), (H = z.W(D)) && H.call ? H(z) : G(z, 21, 0, D), z.G = true, m(z, 0, 2);
            } catch (B) {
                B != z.v &&
                    (p = z.W(105), 105 != p ? (L(z, p, B), L(z, 105, 105)) : G(z, 22, B));
            }
        }
        x || G(z, 33);
    } catch (B) {
        try {
            G(z, 22, B);
        } catch (h) {
            C(z, h);
        }
    }
    return c = z.W(40), S && L(z, 180, S), z.U--, c;
}
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: bbeebd879e1dff6918546dc0c179fdde505f2a21591c9a9c96e36b054ec5af83

                                        Z
                                    

#77 JavaScript::Eval (size: 116, repeated: 1) - SHA256: d87179bb37003971c2f8acb53fd3eb183d09713171c05a05858869f8fec12979

                                        Z = function(z, S, c, x) {
    for (c = I(z), x = 0; 0 < S; S--) {
        x = x << 8 | I(z);
    }
    L(z, c, x);
}
                                    

#78 JavaScript::Eval (size: 2, repeated: 9) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#79 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#80 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#81 JavaScript::Eval (size: 1, repeated: 1) - SHA256: cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29

                                        g
                                    

#82 JavaScript::Eval (size: 414, repeated: 1) - SHA256: 663dfc91a7378bbda0233a607a0ab77be4034a8f66a145f2d1b434d0206a2e87

                                        g = function(z, S, c, x, H, d) {
    for (z = (((H = z.W(S), 22) == S ? (S = function(z, S, c, x) {
                if ((c = (S = H.length, S - 4) >> 3, H).c != c) {
                    c = (x = [0, 0, 0, (H.c = c, d)], (c << 3) - 4);
                    try {
                        H.J = R(A(H, c), A(H, c + 4), x);
                    } catch (W) {
                        throw W;
                    }
                }
                H.push(H.J[S & 7] ^ z);
            }, d = z.W(117)) : (S = function(z) {
                H.push(z);
            }), x) &&
            S(x & 255), x = 0, c.length); x < z; x++) {
        S(c[x]);
    }
}
                                    

#83 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#84 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 9ad414a4d256ec89064015e2b89b687f003cecc8afafba0f493ad34fb88362ff

                                        k = function(z, S, c, x) {
    (x = (c = I(z), I)(z), g)(z, x, l(z.W(c), S));
}
                                    

#85 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9

                                        n
                                    

#86 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080

                                        v
                                    

#87 JavaScript::Eval (size: 256, repeated: 1) - SHA256: 0e66c4f11c70ff0f827cadbde2f02f9cc559ac517af0de4a9e9f3f84c76d0da5

                                        v = function(z, S, c, x, H, d) {
    for (H = (x = (S = {}, c = I(z), S.Y = I(z), S.M = [], I(z)) - 1, I)(z), d = 0; d < x; d++) {
        S.M.push(I(z));
    }
    for (S.w = z.W(c), S.g = z.W(H); x--;) {
        S.M[x] = z.W(S.M[x]);
    }
    return S;
}
                                    

#88 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

Executed Writes (5)

#1 JavaScript::Write (size: 0, repeated: 2) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 304, repeated: 1) - SHA256: 5ce8db876457ffd419ce9a7a790ecf50bb2634acdab5bd6a5cd0153c48df8688

                                        < iframe style = "position:fixed;right:0px;top:0px;z-index:2147483640;"
height = "0"
width = "0"
onload = "resizeFrame();"
id = "iFaPDFdSQ1"
frameborder = "0"
scrolling = "no"
src = "/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83" > < /iframe>
                                    

#3 JavaScript::Write (size: 118, repeated: 1) - SHA256: 9afcefa2928a22b02704a4d6d601684a7f793cc1db7f70fcbc0e9892b3342759

                                        < script type = "text/javascript"
src = "//pl14318198.puserving.com/a2/49/14/a2491467a19ffc3f9fe0dbe66e54bae0.js" > < /script>
                                    

#4 JavaScript::Write (size: 91, repeated: 1) - SHA256: 1ccbde28e4a4fc7f075ed731ee7884f9ed8dc9e2e61c2daaa5c33734c91cb4f6

                                        < script type = "text/javascript"
src = "//s68.ucoz.net/cgi/uutils.fcg?a=uSD&ca=1&c=-" > < /script>
                                    

#5 JavaScript::Write (size: 80, repeated: 1) - SHA256: 3a064febdb34f573fcfb8e3b0231f61679cebe25ae9d93a631545434cdf6077e

                                        < script type = "text/javascript"
src = "//sys000.uid.me/canalyzer/?c=uSD2" > < /script>
                                    


HTTP Transactions (146)


Request Response
                                        
                                            GET /load/programmy/bandicam_crack/20-1-0-96 HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 7comeback-strikeuCoz=; path=/; expires=Sat, 18-Jul-2015 16:20:00 GMT; domain=.comeback-strike.moy.su; 7comeback-strikeld=YACw42xZ; path=/; expires=Tue, 17-Jul-2018 16:20:00 GMT; domain=.comeback-strike.moy.su; 7comeback-strikeuzll=1500308400; path=/; expires=Tue, 17-Jul-2018 16:20:00 GMT; domain=.comeback-strike.moy.su;
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Vary: host
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14813
Md5:    61caf42268381c8539871672ef9fb5d8
Sha1:   357bab4d993f9a0b523c76d1fb8d24a365df38f7
Sha256: cae93d548db62658b69735765fca61cec8a2db5b58da8a889d8171275d51a907
                                        
                                            GET /stat/pixel.gif?host=ucoz&event=adsterra&r=0.6897859207756956 HTTP/1.1 
Host: 188.120.226.43
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         188.120.226.43
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:04 GMT
Content-Length: 0
Last-Modified: Wed, 09 Nov 2016 09:24:35 GMT
Connection: keep-alive
Etag: "5822eb53-0"
Accept-Ranges: bytes


--- Additional Info ---
                                        
                                            GET /hit;ucoznet?r;s1176*885*24;uhttp%3A//comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96;0.47867930399569436 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         88.212.201.197
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Mon, 17 Jul 2017 16:20:04 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;ucoznet?q;r;s1176*885*24;uhttp%3A//comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96;0.47867930399569436
Content-Length: 32
Expires: Sat, 16 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1PREEq1-lSfb1PREEq00HPsM; path=/; expires=Mon, 16 Jul 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /hit;ucoznet?q;r;s1176*885*24;uhttp%3A//comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96;0.47867930399569436 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: FTID=1PREEq1-lSfb1PREEq00HPsM

                                         
                                         88.212.201.197
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 17 Jul 2017 16:20:04 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Sat, 16 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=2qC1W-1aCMfb1PREEq00HPsW; path=/; expires=Mon, 16 Jul 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /a2/49/14/a2491467a19ffc3f9fe0dbe66e54bae0.js HTTP/1.1 
Host: pl14318198.puserving.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         213.196.2.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.10.3
Date: Mon, 17 Jul 2017 16:20:05 GMT
Content-Length: 26486
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   26486
Md5:    9656d91a4686defd2dab061732d95af9
Sha1:   3928fd063f2496b5f87b888e619f04a01370db7d
Sha256: df740a2a4f5103112bc48c98fd5ce920de4e33b15f416eac79c1ce6eba519158
                                        
                                            GET /.s/src/css/171.css HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 20 Apr 2017 08:03:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"58f86b3f-4032"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3606
Md5:    0bcb26f983b4f4ac9b2d1991524dd821
Sha1:   3aa63123f64dfc50816e2700832a7357858011e8
Sha256: 84fd77ee1e027ad21289b88c05b08c8b9c173a223501fa71b0b8248a498ecbda
                                        
                                            GET /.s/src/ulightbox/ulightbox.css HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 20 Apr 2017 08:03:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"58f86b40-1903"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1816
Md5:    16a98ef0253c22d58624c7337acfc582
Sha1:   5a4d5f98e9db7410200100d9f8edda7c77674138
Sha256: d4aa71195a650985ba3eb6a9008bf21ed4d0e60393c89c12175cff2361563bdb
                                        
                                            GET /cgi/uutils.fcg?a=soc_comment_get_data&site=7comeback-strike HTTP/1.1 
Host: s68.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
P3P: CP="CAO PSA OUR"
Set-Cookie: uSoc=; path=/; expires=Sun, 17-Jul-2016 16:20:01 GMT; domain=.ucoz.net; uSoc101=; path=/; expires=Sun, 17-Jul-2016 16:20:01 GMT; domain=.ucoz.net; uSoc102=; path=/; expires=Sun, 17-Jul-2016 16:20:01 GMT; domain=.ucoz.net; uSoc107=; path=/; expires=Sun, 17-Jul-2016 16:20:01 GMT; domain=.ucoz.net; uSoc109=; path=/; expires=Sun, 17-Jul-2016 16:20:01 GMT; domain=.ucoz.net;
Cache-Control: no-cache, no-store
Pragma: no-cache
Vary: host


--- Additional Info ---
Magic:  ASCII C program text
Size:   532
Md5:    1a09737125a8947e6a2369b9f2c53727
Sha1:   1930ba4af3a31103055c3b403afd4439af284c6c
Sha256: 1c899cf8281590ca854b0536c43a70912b2d64d4921f25c6eba562025a668019
                                        
                                            GET /.s/src/ulightbox/ulightbox.js HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Tue, 23 May 2017 11:04:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"5924174b-580e"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7619
Md5:    144c61dc9776f33b43337a3cb47a4114
Sha1:   b27124fb6462cac2b31548bd8c8092bbdb13cbc0
Sha256: 5408213c2114d7e106d334c7e6bf37a1b0f0d0eaa23b364729a2a603c3cc6999
                                        
                                            GET /.s/src/layer7.css HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"5950f318-7248"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7585
Md5:    684551e0b1f6d034f336d0a51b5270d2
Sha1:   f6d92ab8855911037a76bfe60f11bd14def95e6e
Sha256: 8f10335c04808c79eac13abb7ef56a9e75ecb27ae33bf837ffdb6de4ec7303bd
                                        
                                            GET /.s/src/socCom.css HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 20 Apr 2017 08:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"58f86b3e-221a"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2064
Md5:    9765be1c283650470ff3b299488cf0c2
Sha1:   7f210cad0b23e6b1069a233adbe25a0a9b4c2d93
Sha256: c14bd1f37b5021342535b79119d50b4314c179f073fbbf280ab79439b2e52414
                                        
                                            GET /.s/src/socCom.js HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 20 Apr 2017 08:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"58f86b3e-18c8"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2039
Md5:    1c6ab789d426dc40b4e5b96b13c2d53c
Sha1:   d2589196db722af452ec83ccedb72c4627dbbdab
Sha256: 2f94e158db6ca22c1ee09cc8ae2ad282c587412080b276df164dc112021976b2
                                        
                                            GET /.s/src/social.css HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 20 Apr 2017 08:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"58f86b3e-8f6"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   580
Md5:    4e4ff71c1194876c5ab7fcad62083986
Sha1:   eb82bb2a416c4e2471bdc4ac3c659deba2ede91d
Sha256: ce7cd428e5f3bd4714fd0eda0c5d4920490ef794983eea21ddb3cb3c6e7b25a9
                                        
                                            GET /.s/t/171/6.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 2364
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-93c"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 194 x 39
Size:   2364
Md5:    47b4fc0d11cb05d4fe7d9133912e31f7
Sha1:   74a938dcdaf2f859e74cd1f0bdd22db39c3d5546
Sha256: d89c6e297485f9acb77e22fa164f9b0df35a59869d3ef0ee4bc24c748ee2eb11
                                        
                                            GET /.s/src/crt_adb.js HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Fri, 30 Jun 2017 12:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"59564920-bd6c"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13367
Md5:    522b6c4d9a1dade51a44a9c8e36bd909
Sha1:   6fa1fdad3b09547aec63f1c819fe2f9fbe315025
Sha256: ee25a41de5c232d2eb25d1194023632dc041e496e6293a2083a7236ba0931014
                                        
                                            GET /.s/img/fr/mcr.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 348
Last-Modified: Thu, 06 Apr 2017 09:23:32 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "58e60914-15c"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 15
Size:   348
Md5:    c7c13b5cc1fd1f2003801cc36fb9668c
Sha1:   e491ea081d73cefca91571475b7f3de403b08145
Sha256: b1532fbb9c546fdee5b45583c446f24f089035298f95f4ad2ac166d5f1eb8a2e
                                        
                                            GET /.s/img/fr/ajax3.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 1079
Last-Modified: Thu, 06 Apr 2017 09:23:32 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "58e60914-437"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   1079
Md5:    d700ad83d0a3c70488805e3ed515bf15
Sha1:   2e48c5d8842adf6064eeb4d08cead686595dde40
Sha256: 9777513b1dee8fbb0942cc13160510ff06cd1e868bd5dd24d060930871443ce6
                                        
                                            GET /.s/t/171/2.jpg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 18956
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-4a0c"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   18956
Md5:    b5eca2a9bb351102cf8211a23e902f10
Sha1:   5a06fa85a31a266d03a960d569b956f478ac5849
Sha256: 8e3b8d7774c72ede3905f2da867a6471b7bd8235bd05898bf7d18f8f6fa9095b
                                        
                                            GET /.s/t/171/7.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 939
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-3ab"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 40
Size:   939
Md5:    83b7b848969b197814c57cf3ea0d5bb5
Sha1:   9de4b5be47196b9cdce168a90bc1d7568b77e74a
Sha256: 330037cef08eeedc5d540013d25a610e2aeaa74300ad9a74e2f189f2710affa5
                                        
                                            GET /.s/t/171/9.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 933
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-3a5"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 40
Size:   933
Md5:    75bba92736adb3ffb574d354046f0be4
Sha1:   9dcfc5b5db12789f605b6ac88651f32c95b69358
Sha256: 0ba55b52cf79e94625e84686185f3f48494652d120c231d5dbd1aacf4862a9d0
                                        
                                            GET /?src=ss2&data=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&r64=&cid=A1B100&cb=0.574702425064558 HTTP/1.1 
Host: ucounter.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         31.172.81.159
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:06 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync3.adsniper.ru/?src=ss1&s_data=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**
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /.s/src/jquery-1.7.2.js HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 20 Apr 2017 08:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"58f86b3e-17278"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33673
Md5:    e5b91035b17cfcfbdf4f8cca0d6ee275
Sha1:   9493101d0bdbe786d623fb9aa193d7c02bdb4a2b
Sha256: 20a25700ea16bd83e3dea0574651c7d1eec264834aab0dcd771307551fd613db
                                        
                                            GET /aro.js HTTP/1.1 
Host: js.advideo.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         178.218.212.121
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=utf-8
                                        
Server: nginx/1.10.1
Date: Mon, 17 Jul 2017 16:20:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   281
Md5:    4480383dce588743705d05619f2b37f0
Sha1:   4ae19ef122594d9d3b1e1d0a13d0c6422b01e1d7
Sha256: 2bdf4f6372e446dc5ff6d20402a6a6fa100cc1226c8c75fe7a974dbd7e776098
                                        
                                            GET /.s/img/icon/thumbu2_.png HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 200
Last-Modified: Thu, 06 Apr 2017 09:23:41 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "58e6091d-c8"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 12 x 10, 8-bit/color RGBA, non-interlaced
Size:   200
Md5:    6ddcef35af64306e1a5c565e9ad6d345
Sha1:   7af92db5caa84bc8885fa4eb944e2e435bc280d0
Sha256: 631351c46214f59ec4af48f9fcccecfbe1209b76265900431ba1c7a74acb92ec
                                        
                                            GET /.s/img/icon/thumbd2_.png HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 212
Last-Modified: Thu, 06 Apr 2017 09:23:41 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "58e6091d-d4"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 12 x 10, 8-bit/color RGBA, non-interlaced
Size:   212
Md5:    250cd363aa4f1f290624d43d4f71d762
Sha1:   3fc6e82c8eb89610a6aaaa90b5f91449df94bb74
Sha256: 92b935b6112c66bdeb8051cc585d945fe8e3fd9e470300720d12821a4617fc86
                                        
                                            GET /.s/img/ma/m/i3.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 9296
Last-Modified: Thu, 06 Apr 2017 09:23:43 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "58e6091f-2450"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 220 x 19
Size:   9296
Md5:    7c664f6f2f667fc7865869aa9b44d805
Sha1:   1cab258984997c005adeeb18ee17b961376dbe7a
Sha256: 9cf0f584767e187fce250df4a1aeaa01c0a89fa1dd4090c48bc064a8f05fdd1e
                                        
                                            GET /.s/t/171/12.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 943
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-3af"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 40
Size:   943
Md5:    92dd0e40ae422b276c41167c5c4c1187
Sha1:   00c5abc12fbc0322dc3630f7b14366a6caeda440
Sha256: 303127bbdb68bfa953a7a87e9fa3be537015cc63ee857764cb833316b850c8c3
                                        
                                            GET /_ld/0/50259351.jpg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 36127
Last-Modified: Wed, 07 Nov 2012 03:15:49 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "5099d265-8d1f"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   36127
Md5:    ffa8772cdd0b57717da31c87bffea32e
Sha1:   c5a6378f8c25a31c6c3964493cf28b483462ae6f
Sha256: a7ecb0cbadec0651def3c6d23d37dc5ec0e6c890bb3f7f3e572a29b3a0cbdfaf
                                        
                                            GET /.s/t/171/14.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 946
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-3b2"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 40
Size:   946
Md5:    4427a5f5f71a9fef530b3bef1cf41c13
Sha1:   c59682e18a44fe3e86ab214028f3ff1133634f2b
Sha256: 89426dceaac2a425880b0d883b605df99d398456b386dc35d4d2aa0374cc417b
                                        
                                            GET /.s/t/171/16.jpg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 1753
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-6d9"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1753
Md5:    a6d68433dc381729550ca4359739f819
Sha1:   2391d243c28a987416b7748a89bc5c1978110bca
Sha256: d75e3fad2f61f2bfc9a94c784c829be87bc371c5af36ea8206e129f176b9db40
                                        
                                            GET /.s/t/171/17.jpg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Content-Length: 1673
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-689"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1673
Md5:    1df63985689c1f6e5040f98c2ea5efcb
Sha1:   d9d3bdc92e8b5b330ef10fc0eef5083ac6c53d48
Sha256: a721105f27cd9d1547976f3164c749f816449a0defea16a54591d97902ae7b32
                                        
                                            GET /?src=ss1&s_data=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** HTTP/1.1 
Host: sync3.adsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         31.172.81.172
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:06 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: uuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 12 Jul 2037 16:20:06 GMT; Domain=adsniper.ru
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync3.adsniper.ru/?src=ss1&s_data=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*
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /?src=ss1&s_data=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* HTTP/1.1 
Host: sync3.adsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: uuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.172
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:06 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //ucounter.ucoz.net/?src=ss2&s_data=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**
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /?src=ss2&s_data=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** HTTP/1.1 
Host: ucounter.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         31.172.81.159
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:06 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 12 Jul 2037 16:20:06 GMT; Domain=ucounter.ucoz.net
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //ucounter.ucoz.net/?src=ss2&s_data=CAIQARi2x7PLBVoXCgJjYhIRMC41NzQ3MDI0MjUwNjQ1NTha5QQKBGRhdGES3ARNam81T2pNNE9qRXdPVG8xTXpveU1qb3lPVG81TWpvMk5qbzJOVG96TVRvME16bzBPVG95T1RvMk1qb3hPalV4T2pnd09qRXlORG81TlRvek1EbzBPakk2TVRVNk1UQXlPak16T2pVeU9qZzBPamczT2pnd09qRXhOam80TVRvMU1Ub3pPRG95TlRveE9EbzNOem8zTWpveE1Eb3hNalE2T1RrNk9EZzZPREU2T0RnNk9UWTZNVEE2TVRFeU9qazFPak13T2pnNk5Eb3pPRG8zTkRvMk1EbzBPVG95T1RvNU1qb3hORG96TWpvNE56b3pOam81TlRvek1EbzRPalE2TXpnNk9UTTZNems2TmpFNk9EUTZNakE2TVRFNk5qRTZOekk2TVRBek9qSTBPakU2TVRRNk1qTTZNemc2TnpjNk5UazZNVEE1T2pnNE9qZzFPamsxT2pFd01Ub3pPakV4TkRvM09EbzROVG80TVRvM01UbzVOVG8zTkRvek16b3pOam8xTkRvd09qRXlPall5T2pjd09qRXlORG81TlRvek1EbzRPalE2TXpnNk9URTZOREU2TmpJNk1UUTZPVEk2TnpnNk16TTZPVEU2TlRNNk16ZzZNamM2T1RveU5Ub3lPVG8wT2pFeE1Eb3pOVG93T2pJeE9qVTFPalUwT2pnd09qVXpPak14T2pnd09qY3hPak02TVRZNk56YzZNak02TmpBNk56bzJPamcxT2pNeU9qY3hPakV3TXpveE1EbzBPakl4T2pRM09qSTNPamN6T2pNNU9qTTFPamcwogEQy9EpFmsLEeeG4AAlkMBkfIICBkExQjEwMA**
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /?src=ss2&s_data=CAIQARi2x7PLBVoXCgJjYhIRMC41NzQ3MDI0MjUwNjQ1NTha5QQKBGRhdGES3ARNam81T2pNNE9qRXdPVG8xTXpveU1qb3lPVG81TWpvMk5qbzJOVG96TVRvME16bzBPVG95T1RvMk1qb3hPalV4T2pnd09qRXlORG81TlRvek1EbzBPakk2TVRVNk1UQXlPak16T2pVeU9qZzBPamczT2pnd09qRXhOam80TVRvMU1Ub3pPRG95TlRveE9EbzNOem8zTWpveE1Eb3hNalE2T1RrNk9EZzZPREU2T0RnNk9UWTZNVEE2TVRFeU9qazFPak13T2pnNk5Eb3pPRG8zTkRvMk1EbzBPVG95T1RvNU1qb3hORG96TWpvNE56b3pOam81TlRvek1EbzRPalE2TXpnNk9UTTZNems2TmpFNk9EUTZNakE2TVRFNk5qRTZOekk2TVRBek9qSTBPakU2TVRRNk1qTTZNemc2TnpjNk5UazZNVEE1T2pnNE9qZzFPamsxT2pFd01Ub3pPakV4TkRvM09EbzROVG80TVRvM01UbzVOVG8zTkRvek16b3pOam8xTkRvd09qRXlPall5T2pjd09qRXlORG81TlRvek1EbzRPalE2TXpnNk9URTZOREU2TmpJNk1UUTZPVEk2TnpnNk16TTZPVEU2TlRNNk16ZzZNamM2T1RveU5Ub3lPVG8wT2pFeE1Eb3pOVG93T2pJeE9qVTFPalUwT2pnd09qVXpPak14T2pnd09qY3hPak02TVRZNk56YzZNak02TmpBNk56bzJPamcxT2pNeU9qY3hPakV3TXpveE1EbzBPakl4T2pRM09qSTNPamN6T2pNNU9qTTFPamcwogEQy9EpFmsLEeeG4AAlkMBkfIICBkExQjEwMA** HTTP/1.1 
Host: ucounter.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: suuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.159
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:06 GMT
Content-Length: 616
Connection: keep-alive
Set-Cookie: s_ttl_ss2=1500308406; Path=/; Expires=Tue, 18 Jul 2017 16:20:06 GMT; Domain=ucounter.ucoz.net
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   616
Md5:    1d21fa82384d91de895092c80e149e74
Sha1:   44da9ab3772bc52cb4f370c28800d0916c9fd88c
Sha256: 1021f0ba1557f4d3b5718782dcf4e7def8bf10cd7470e514c0655ed5f4580f47
                                        
                                            GET /.s/src/uwnd.js?2 HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 20 Apr 2017 08:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"58f86b3e-3764f"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   60797
Md5:    299d70ce961bd1d9365d30c0b3e883ef
Sha1:   841a8206307961db116838150c5344089cec4e7b
Sha256: 613cb4849d83f2863ae0a991b38330e095f7ead6793a6d0448e304205782b08c
                                        
                                            GET /v633422372/297f3/AmmDdx4pSYY.jpg HTTP/1.1 
Host: cs633422.vk.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         95.213.15.183
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Apache
Date: Mon, 17 Jul 2017 16:20:07 GMT
Content-Length: 1706
Connection: close
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Last-Modified: Mon, 16 May 2016 12:50:39 GMT
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1706
Md5:    c643fdfadb606b3315c5acf12e518c3b
Sha1:   ced87822f4b884d41d59aa67b97e635d4ce56843
Sha256: 1013596c9d4f2bd3776ef83919b854d83be5caba992106ea41a946c437ac5c77
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:08 GMT
Expires: Fri, 21 Jul 2017 16:20:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    326650bdc843cab49d5298eddaf1c14d
Sha1:   0e9c40aa47c527acd7c42b4d1b95aa168f301bb1
Sha256: 2822f3fb65368a594cffd98ab441bea53ed1881636dc3e1b9e8e63087a24dfdc
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=321706, public, no-transform, must-revalidate
Last-Modified: Fri, 14 Jul 2017 09:41:26 GMT
Expires: Fri, 21 Jul 2017 09:41:26 GMT
Date: Mon, 17 Jul 2017 16:20:08 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    feec02a24095e65e818da9ac640e9e31
Sha1:   e36d560928fdf1e3add590a2b0752d028f70b75f
Sha256: ceaf2a49bd504b714de50c1b7d29ba6a7065705c26778bf0078a167f1a48d737
                                        
                                            GET /recaptcha/api.js?onload=reCallback&render=explicit&hl=ru HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Mon, 17 Jul 2017 16:20:08 GMT
Date: Mon, 17 Jul 2017 16:20:08 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   427
Md5:    39dd67b43e75fcc32c6ae93f12054cdb
Sha1:   c0b9e0c9971bac7d7ee179a09929a0344155f862
Sha256: 84e45a26a96db3c988b37008052b745538a9a86e2f5c9b4774193ae17d66a5e8
                                        
                                            GET /hit;video_show?r;s1176*885*24;uhttp%3A//comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96;0.8056213405416572 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: FTID=1PREEq1-lSfb1PREEq00HPsM; VID=2qC1W-1aCMfb1PREEq00HPsW

                                         
                                         88.212.201.197
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Mon, 17 Jul 2017 16:20:09 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;video_show?q;r;s1176*885*24;uhttp%3A//comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96;0.8056213405416572
Content-Length: 32
Expires: Sat, 16 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=0; path=/; expires=Sat, 01 Jan 2000 00:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /hit;video_show?q;r;s1176*885*24;uhttp%3A//comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96;0.8056213405416572 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: VID=2qC1W-1aCMfb1PREEq00HPsW

                                         
                                         88.212.201.197
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 17 Jul 2017 16:20:09 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Sat, 16 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /cgi/uutils.fcg?a=uSD&ca=2&ug=999&r=0.918588531799191 HTTP/1.1 
Host: s68.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: uAnaG8aP73n=off; path=/; expires=Tue, 18-Jul-2017 00:20:05 GMT; domain=.ucoz.net;


--- Additional Info ---
Magic:  ASCII text
Size:   489
Md5:    8b6898d99db3fffa1371e744e848cdc3
Sha1:   577514bd06d8fc94688da58ee739fa8defaec5e4
Sha256: 4913d3f9d93f778c85c40c9d93d6e598a675e183bc5b3106d192daa58dc04fbc
                                        
                                            GET /.s/src/base.css HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:01 GMT
Last-Modified: Thu, 08 Jun 2017 13:20:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"59394f0c-3473"
Expires: Sun, 06 Aug 2017 16:20:01 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3689
Md5:    86ce9e9aa49bbdc0dc80f868aa7f364d
Sha1:   ec37e7c9bd6e57e96640f36e5207e32fd2fb220d
Sha256: 78c9f396a0db587d7dabbe92e468875a4a40a1c9333d8a3f8869df0cbca4fbaa
                                        
                                            GET /canalyzer/?c=uSD2 HTTP/1.1 
Host: sys000.uid.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         217.199.217.44
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: uServ/3.2.2
Date: Mon, 17 Jul 2017 16:20:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store
Pragma: no-cache


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   48
Md5:    4e7a7cfdea619e0a6cec8fed0c076dbe
Sha1:   0232cf97c88a2a6e2c337221e2b240f9081f513a
Sha256: ba903fbef63891619c8eb33c37673eaf06148af720c760911bfdee5ac32e962c
                                        
                                            GET /cgi/uutils.fcg?a=uSD&ca=1&c=- HTTP/1.1 
Host: s68.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: uAnaG8aP73n=off

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: uSD=-; path=/; expires=Tue, 18-Jul-2017 16:20:11 GMT; domain=.ucoz.net;


--- Additional Info ---
                                        
                                            GET /.s/t/171/1.jpg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 656
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-290"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   656
Md5:    2fca93cde0263ac6dac237f0ed36eb23
Sha1:   857f391ce0c8c82c26dc1a1e338191f9982dbbd4
Sha256: 78bf911d53dcb8b037172b51506d4c33886b6a681ffc960b40c1fd248a60add5
                                        
                                            GET /abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83 HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   871
Md5:    185d3360865c43aac05a2c4cfaec71ba
Sha1:   14cb572eefc304f722e051f2fb94e79e3e636ec4
Sha256: 41675000d433fa7d63808899ab3191a52e565ea20a6d783261d75c7855802bda
                                        
                                            GET /.s/t/171/4.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 298
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-12a"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 194 x 9
Size:   298
Md5:    824a94e29a55af1285cf135eccb36acb
Sha1:   5a7e99481e0f449a567610b90bc0b27910faacc1
Sha256: ccf687f1e600d8268e968106c747b925f5291769d8b117e76cc00e22b580b665
                                        
                                            GET /mchat/ HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Last-Modified: Mon, 17 Jul 2017 16:19:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"596ce396-8558"
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6181
Md5:    9044434f3ee53653e5be301da68a10c6
Sha1:   b5fd73f791910964ddb1f9d9d6976350f3b5694a
Sha256: d0599b58599b7192cc97822dc3a3ac6300b26b5ecd2d8ff931c5f30a7d935151
                                        
                                            GET /.s/t/171/22.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/css/171.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 124
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-7c"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 13
Size:   124
Md5:    db3c75f16cfcec24b69e68fbc62b22d7
Sha1:   bbb909a313d8ce992aeafe67bb65620c1d43b31c
Sha256: 2142f58b6d09b2b0f9a6d6846a76683f67defd4a6c7708bf1d79df4550052a24
                                        
                                            GET /.s/t/171/5.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 2625
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-a41"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 194 x 45
Size:   2625
Md5:    3da03108a23e00867c43d40553a65d0f
Sha1:   3ef68a19d40e21145bbff878d91ecf5b16e15051
Sha256: e8f54c06481205bf98111e8a6f6939755d87ac413bd1e94c0973b2b8ea84a04b
                                        
                                            GET /.s/img/sh/wait.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/base.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 265
Last-Modified: Thu, 06 Apr 2017 09:23:44 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "58e60920-109"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 8
Size:   265
Md5:    c44da6bb38458d2c57e23104c53d8e05
Sha1:   5e9352aa3d0b522fff659c48299d1b3006c78f47
Sha256: 163da6b91f78ccad8c824ef31e5dbd2a89fb8d93f2381d43faa96acf502ca3e8
                                        
                                            GET /0.gif?pid=ADSNIPER&id=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.8950481238459193 HTTP/1.1 
Host: advombat.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         138.201.227.193
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 154
Connection: keep-alive
Location: http://x01.aidata.io/0.gif?pid=ADSNIPER&id=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.8950481238459193


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /.s/t/171/3.jpg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 10550
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-2936"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   10550
Md5:    5d2e59cccbeaafa977c548ee83a319d2
Sha1:   cf1f873097cd2594223033c7305cc94da353733f
Sha256: 141f184bc3f53e5514ffbaaac8b64af5f528d08fde3038ad9911cb4df8a9ecc2
                                        
                                            GET /cm.gif?p=25&id=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.5153483833315722 HTTP/1.1 
Host: ad.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         94.100.180.76
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=22Okeb14rrnb0000070E14nb:::; path=/; expires=Wed, 18-Jul-18 16:20:16 GMT; domain=.mail.ru
Expires: Mon, 17 Jul 2017 22:20:16 GMT
Cache-Control: max-age=21600
Last-Modified: Mon, 17 Jul 2017 16:20:16 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /.s/t/171/10.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 204
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-cc"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 5
Size:   204
Md5:    4eaf6a9ab5cf5132aac2f07c26eccf93
Sha1:   ff089e5a4f7f14cf9536a34c89b63bed6c6a8b44
Sha256: 66779903b32d6a2cbb3bcd8511a1c520e1f2ba4197aa77ced79ce4324b8b50ca
                                        
                                            GET /.s/t/171/8.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 207
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-cf"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 5 x 40
Size:   207
Md5:    770b2ca32926807c6d468a2bebbc7eff
Sha1:   f73db86761bc6a0d621cd7717d696e6fcd45c001
Sha256: 49bd244a3b543153d5ae94ed8480c332bd02a6fd63611b2c59285ab2b9579c51
                                        
                                            GET /.s/t/171/21.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/css/171.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 324
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-144"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 13
Size:   324
Md5:    fadd6154f28050cd850e81db45330586
Sha1:   9f22831a00376d2a7d3c84082453bcc20ae1c6f5
Sha256: 49b019f577dd20e618d1c6ea1e7e89a7420fde89ae0bae9c0603e94ba45c271e
                                        
                                            GET /m?cdsp=271315&c=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.7150202091096709 HTTP/1.1 
Host: cm.marketgid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         87.242.88.110
HTTP/1.1 301 Moved Permanently
Content-Type: application/octet-stream
                                        
Server: nginx/1.11.10
Date: Mon, 17 Jul 2017 16:20:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: muidn=h6hgMVQPhkkj;Domain=.marketgid.com;Path=/;Expires=Tue, 19-Jan-2038 03:14:08 GMT; muidn=h6hg39il3fkj;Domain=.marketgid.com;Path=/;Expires=Tue, 19-Jan-2038 03:14:08 GMT;
Location: http://sync.bumlam.com/?src=mirs1&uid=h6hgMVQPhkkj
Expires: Mon, 17 Jul 2017 16:20:15 GMT
Cache-Control: no-cache


--- Additional Info ---
                                        
                                            GET /match/adsniper?uid=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.9474776803791609 HTTP/1.1 
Host: sync.audtd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         78.155.222.213
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Set-Cookie: chk=OK; Max-Age=6; Domain=.audtd.com; Path=/; Expires=Mon, 17 Jul 2017 16:20:22 GMT
Location: http://sync.audtd.com/match/adsniper?uid=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.9474776803791609&checked=true&rst=1500308416368&rf=http%3A%2F%2Fcomeback-strike.moy.su%2Fload%2Fprogrammy%2Fbandicam_crack%2F20-1-0-96&type=gif
Vary: Accept
Content-Length: 248
Date: Mon, 17 Jul 2017 16:20:16 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   248
Md5:    64f76d80ad649dd48d70ea78f204efa8
Sha1:   1f974dbf92cf6d41217970cbc35f599d7dc300f0
Sha256: ca259959f9ac6e73bfa4bf12b367c5de555c55254ee3d1f86484b8274698c942
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:16 GMT
Expires: Fri, 21 Jul 2017 16:20:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    810164c27cad0bbcd4d9f981eeb9913d
Sha1:   0f82934e162815a7daa43b6a4ab4e01c35e6cc75
Sha256: acb9eaf252147d41045b966bcc8f6d4285dcf18bf2f91f16afa396728ea151c8
                                        
                                            GET /_st/my.css HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/mchat/
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Last-Modified: Wed, 25 Jul 2012 14:23:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"5010014a-3e99"
Expires: Sun, 06 Aug 2017 16:20:11 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3397
Md5:    eb771f489990bc4bba81b701ea3c6aef
Sha1:   37b741a2c292fb6ed259616a76bb5652fd88c04e
Sha256: b814dd73b4cc2496b2a34265a856580d37d20aa88cfdeb6c885df306a8b54cbd
                                        
                                            GET /adv/dummy/000/img/ucoz-logo.png HTTP/1.1 
Host: s68.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83
Cookie: uAnaG8aP73n=off; uSD=-

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Content-Length: 4585
Last-Modified: Fri, 24 Jan 2014 15:10:41 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "52e28271-11e9"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 136 x 136, 8-bit/color RGBA, non-interlaced
Size:   4585
Md5:    14d37a3409afc2c450c62b97bc8019da
Sha1:   43fc12bf16a292d6d10b17ab7d1e37785288858c
Sha256: fc4f998c5fcacc6cf161f1bedf46ec55e56273670ecce8b59e947b68d3c5bdb2
                                        
                                            GET /?src=ujs6 HTTP/1.1 
Host: rot.spotsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83

                                         
                                         31.172.81.158
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync3.adsniper.ru/?src=ss1&s_data=CAEQABjAx7PLBVIF36LEjAk*
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /?src=mirs1&uid=h6hgMVQPhkkj HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         31.172.81.160
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync3.adsniper.ru/?src=ss1&s_data=CAEQABjAx7PLBVIFpMTQrwZiDGg2aGdNVlFQaGtrag**
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /?src=ujs6&s_subid=btn HTTP/1.1 
Host: rot.spotsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83

                                         
                                         31.172.81.158
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync3.adsniper.ru/?src=ss1&s_data=CAEQABjAx7PLBVIF36LEjAlaDgoHc19zdWJpZBIDYnRu
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /match/adsniper?uid=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.9474776803791609&checked=true&rst=1500308416368&rf=http%3A%2F%2Fcomeback-strike.moy.su%2Fload%2Fprogrammy%2Fbandicam_crack%2F20-1-0-96&type=gif HTTP/1.1 
Host: sync.audtd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: chk=OK

                                         
                                         78.155.222.213
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Set-Cookie: pid=AU000D2DF8A8A; Max-Age=62899200; Domain=.audtd.com; Path=/; Expires=Mon, 15 Jul 2019 16:20:16 GMT
Location: https://sync.audsp.com/friggin-meguc/renegade?id=AU000D2DF8A8A&fpd=adsniper
Vary: Accept
Content-Length: 202
Date: Mon, 17 Jul 2017 16:20:16 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   202
Md5:    1d2c954e3d4e772bb3b92c49415ac324
Sha1:   786e4985b3f73b1f0cc683d34f81622d9a1ae2b0
Sha256: 859e2777ad221b8b3d4fff66a301946794447d970f1d38625cc697b7fab5e9bd
                                        
                                            GET /?src=ss1&s_data=CAEQABjAx7PLBVIF36LEjAk* HTTP/1.1 
Host: sync3.adsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83
Cookie: uuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.172
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //rot.spotsniper.ru/?src=ujs6&s_data=CAIQABjAx7PLBaIBEMvRKRZrCxHnhuAAJZDAZHw*
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /0.gif?pid=ADSNIPER&id=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.8950481238459193 HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
Location: http://x01.aidata.io/0.gif?pid=ADSNIPER&id=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.8950481238459193&bounce=1
Expires: Mon, 17 Jul 2017 16:20:15 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:15 GMT
Set-Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /recaptcha/api2/r20170712134223/recaptcha__ru.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 78824
Date: Thu, 13 Jul 2017 00:52:23 GMT
Expires: Fri, 13 Jul 2018 00:52:23 GMT
Last-Modified: Wed, 12 Jul 2017 21:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 401273
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   78824
Md5:    b45aa69c3af61bdd6255680aefae1e46
Sha1:   5186eb96db3bfdf8d4bc836032270b1800d156d8
Sha256: fe1a8877a07cc1c51023332346c67c849f7e7992a6788c92b52d6507317e6b33
                                        
                                            GET /0.gif?pid=ADSNIPER&id=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.8950481238459193&bounce=1 HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
Location: http://cm.g.doubleclick.net/pixel?google_nid=aidata_ddp&back=1STPARTY&google_cm
Set-Cookie: gl=1;path=/;expires=Mon, 24 Jul 2017 16:20:16 GMT;max-age=604800 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:15 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:15 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /?src=ujs6&s_data=CAIQABjAx7PLBaIBEMvRKRZrCxHnhuAAJZDAZHw* HTTP/1.1 
Host: rot.spotsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83

                                         
                                         31.172.81.158
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 12 Jul 2037 16:20:16 GMT; Domain=spotsniper.ru
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //rot.spotsniper.ru/?src=ujs6&s_data=CAIQARjAx7PLBaIBEMvRKRZrCxHnhuAAJZDAZHw*
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         195.159.219.11
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "772194506798B1D14AADA31F45689964BE5FCF55FDA761329C739481CB2C8177"
Last-Modified: Fri, 14 Jul 2017 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14734
Expires: Mon, 17 Jul 2017 20:25:50 GMT
Date: Mon, 17 Jul 2017 16:20:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    e46584d47426ee31889f8b9aca79c9d4
Sha1:   6d349bb8e55f206b91e32516f8780c0ab74e6ee6
Sha256: 772194506798b1d14aada31f45689964be5fcf55fda761329c739481cb2c8177
                                        
                                            GET /?src=ujs6&s_data=CAIQARjAx7PLBaIBEMvRKRZrCxHnhuAAJZDAZHw* HTTP/1.1 
Host: rot.spotsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83
Cookie: suuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.158
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 598
Connection: keep-alive
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Expires: Thu, 01 Jan 1985 00:00:01 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
P3P: CP="NOI DEV TAI PSA PSD OUR STP COM NAV INT DEM STA PRE LOC"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   598
Md5:    eb60ec5b322a542ebca5575f44149378
Sha1:   88f64b963af91166f50804fd12ed0e8a04daff4b
Sha256: 4edb310305861894b52392804839f0d3ede307f87aed3d17af778af8c593c2ae
                                        
                                            GET /pixel?google_nid=aidata_ddp&back=1STPARTY&google_cm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://cm.g.doubleclick.net/pixel?google_nid=aidata_ddp&back=1STPARTY&google_cm=&google_tc=
Date: Mon, 17 Jul 2017 16:20:16 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 300
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 17-Jul-2017 16:35:16 GMT; path=/; domain=.doubleclick.net


--- Additional Info ---
Magic:  HTML document text
Size:   300
Md5:    5e2f4a044cd214b3b454f8d350a0a52e
Sha1:   f8ecd5e2176630547f1ce81966aa5279b1d9f910
Sha256: 16d0b56ec9b811ab04aa36690d42bc005215d21e09fa7788b7379de8c8890adf
                                        
                                            GET /pixel?google_nid=aidata_ddp&back=1STPARTY&google_cm=&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://x01.aidata.io/0.gif?pid=GOOGLE&back=1STPARTY&google_gid=CAESEFx2iqZUw6U6lS1elK1d0ys&google_cver=1
Date: Mon, 17 Jul 2017 16:20:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 313
X-XSS-Protection: 1; mode=block
Set-Cookie: id=24089752f4b649d8||t=1500308417|et=730|cs=002213fd4847dae2d2ef80f0ec; expires=Wed, 17-Jul-2019 16:20:17 GMT; path=/; domain=.doubleclick.net test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnpEOKIoM_74GHfMTjiCqYU8BclWUo0wBfVN0FI_ZD4B9qmsV0fEQ; expires=Wed, 17-Jul-2019 16:20:17 GMT; path=/; domain=.doubleclick.net; HttpOnly


--- Additional Info ---
Magic:  HTML document text
Size:   313
Md5:    a20950eb5dfe188e8b6469a4de351c1f
Sha1:   8cdb8a41e8baa0b01abe925f2747470a7099a921
Sha256: 7b2c4dd349bae792d7d9d16361db26afca9433447b608881c386aa52ae3acbb0
                                        
                                            GET /?src=ss1&s_data=CAEQABjAx7PLBVIF36LEjAlaDgoHc19zdWJpZBIDYnRu HTTP/1.1 
Host: sync3.adsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83
Cookie: uuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.172
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //rot.spotsniper.ru/?src=ujs6&s_data=CAIQABjAx7PLBVoOCgdzX3N1YmlkEgNidG6iARDL0SkWawsR54bgACWQwGR8
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /?src=ss1&s_data=CAEQABjAx7PLBVIFpMTQrwZiDGg2aGdNVlFQaGtrag** HTTP/1.1 
Host: sync3.adsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: uuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.172
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:16 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=mirs1&s_data=CAIQABjAx7PLBWIMaDZoZ01WUVBoa2tqogEQy9EpFmsLEeeG4AAlkMBkfA**
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /0.gif?pid=GOOGLE&back=1STPARTY&google_gid=CAESEFx2iqZUw6U6lS1elK1d0ys&google_cver=1 HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg; gl=1

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 0
Connection: keep-alive
Location: http://rgi.io/match?back=1STPARTY
Set-Cookie: rgi=1;path=/;expires=Tue, 18 Jul 2017 16:20:17 GMT;max-age=86400 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:16 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:16 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /?src=mirs1&s_data=CAIQABjAx7PLBWIMaDZoZ01WUVBoa2tqogEQy9EpFmsLEeeG4AAlkMBkfA** HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         31.172.81.160
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 12 Jul 2037 16:20:17 GMT; Domain=bumlam.com
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=mirs1&s_data=CAIQARjAx7PLBWIMaDZoZ01WUVBoa2tqogEQy9EpFmsLEeeG4AAlkMBkfA**
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
                                        
                                            GET /adv/dummy/000/css/style.css HTTP/1.1 
Host: s68.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83
Cookie: uAnaG8aP73n=off; uSD=-

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:11 GMT
Last-Modified: Fri, 24 Jan 2014 15:10:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/"52e28271-19f0"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1568
Md5:    3e329dac9a6860d246b99f1be7795d09
Sha1:   e0c13b4a09fe87fa35be5f879ba8cec9b6689c3a
Sha256: 48e134dd37e539eb92a097971b55aa4ffc3a9465c9bfdfcec8490940cc62fb49
                                        
                                            GET /?src=ujs6&s_data=CAIQABjAx7PLBVoOCgdzX3N1YmlkEgNidG6iARDL0SkWawsR54bgACWQwGR8 HTTP/1.1 
Host: rot.spotsniper.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83
Cookie: suuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.158
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 229
Connection: keep-alive
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Expires: Thu, 01 Jan 1985 00:00:01 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
P3P: CP="NOI DEV TAI PSA PSD OUR STP COM NAV INT DEM STA PRE LOC"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   229
Md5:    0c298c02f138de2f10e56516fbfddd97
Sha1:   a858cee2bb209b7fe91b3a036f34a7973c5d0597
Sha256: 35b767ad740f9da5f3fd457c05371981e651a970bdcc1353a9007c17e7565481
                                        
                                            GET /?src=mirs1&s_data=CAIQARjAx7PLBWIMaDZoZ01WUVBoa2tqogEQy9EpFmsLEeeG4AAlkMBkfA** HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: suuid3=IiRjYmQxMjkxNi02YjBiLTExZTctODZlMC0wMDI1OTBjMDY0N2M*

                                         
                                         31.172.81.160
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Etag: cbd12916-6b0b-11e7-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /adv/dummy/000/img/bg.gif HTTP/1.1 
Host: s68.ucoz.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s68.ucoz.net/adv/dummy/000/css/style.css
Cookie: uAnaG8aP73n=off; uSD=-

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:12 GMT
Content-Length: 1268
Last-Modified: Fri, 24 Jan 2014 15:10:41 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "52e28271-4f4"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 485 x 3
Size:   1268
Md5:    b19967d808ed7c42b41316d6c8474f55
Sha1:   18d80748bd4041b13a3373a429281ec65347a0e2
Sha256: 16c9962c4ecd52efc16d9d639d52fc60b9e427b6e454190d162f1aa1d220ad50
                                        
                                            GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s68.ucoz.net/adv/dummy/000/css/style.css
Origin: http://comeback-strike.moy.su

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 56982
Date: Tue, 09 May 2017 10:15:38 GMT
Expires: Wed, 09 May 2018 10:15:38 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 5983479


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   56982
Md5:    0b6b6d863c47f637aeb88740cff5003e
Sha1:   6398a1a339cb02eb52b91dca9ab863fd73d6ee0f
Sha256: c47ef5b3cdcdac7f732fcdd8e3e89aa56e99714baf48f692f7ede3cde8b9f556
                                        
                                            GET /hit;ucoz_topline_worldwide?rhttp%3A//comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96;s1176*885*24;uhttp%3A//comeback-strike.moy.su/abnl/%3Fadsdata%3DBNwOP4f9kl0ex2xmC6Qsp%5E%21%3B34%21wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI%5Ef83;0.563203291873209 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/abnl/?adsdata=BNwOP4f9kl0ex2xmC6Qsp^!;34!wFLNAbYUThbzgw2YV2riD8Lajc3Zyb7XUH6RV3l1zVZ1vF6RDJaTDbfS309414ZKyxGlKJ66dVviUd1jI^f83
Cookie: VID=2qC1W-1aCMfb1PREEq00HPsW

                                         
                                         88.212.201.197
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 17 Jul 2017 16:20:17 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Sat, 16 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         192.35.177.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Transfer-Encoding: Binary
Last-Modified: Mon, 17 Jul 2017 10:08:56 GMT
Etag: "c80d9eb07748fc1f500300e91ec9a603793ac49a"
Expires: Tue, 18 Jul 2017 10:08:56 GMT
Cache-Control: max-age=43200,public,no-transform,must-revalidate
Content-Length: 1398
Connection: close


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    ee7f776332ec9b623728b26d4292a179
Sha1:   c80d9eb07748fc1f500300e91ec9a603793ac49a
Sha256: cb8a693e8d63f201e102e3e5d4a085c084cd4bb79f683769abf5f2fcdede030b
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.16.25.216
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=d22d02a153af4a88e72b6fcb8e82289e11500308417; expires=Tue, 17-Jul-18 16:20:17 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Mon, 17 Jul 2017 15:46:28 GMT
Expires: Fri, 21 Jul 2017 15:46:28 GMT
Etag: "77cea53c44e0e8e3f2efa5ed62039a34e9ce1553"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 37fe8718543b872d-ARN


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    443f497aa6729e3261cd9045c82bdde6
Sha1:   77cea53c44e0e8e3f2efa5ed62039a34e9ce1553
Sha256: 4ac898dfb5e70d94ec1d1b8e5d1df8dd1f23b6957a23af431a11afd8de1a4962
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:17 GMT
Server: Apache
Last-Modified: Sun, 16 Jul 2017 16:09:07 GMT
Expires: Sun, 23 Jul 2017 16:09:07 GMT
Etag: D4A92D194A0B3A1C8D6A95B36D15503420F566CF
Cache-Control: max-age=517129,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    0032549c741d1a5daac0ba6663b9f60b
Sha1:   d4a92d194a0b3a1c8d6a95b36d15503420f566cf
Sha256: 75398f5915abeccd8118ea902ce50516545916f798893a7faf789b911549cf9e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:17 GMT
Server: Apache
Last-Modified: Sat, 15 Jul 2017 22:05:35 GMT
Expires: Sat, 22 Jul 2017 22:05:35 GMT
Etag: CAC3BB6725C4FEB91F0935C38DB35401DD3B4CC7
Cache-Control: max-age=452117,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp31
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    18aff7cfacaff18258021d4b96f9c999
Sha1:   cac3bb6725c4feb91f0935c38db35401dd3b4cc7
Sha256: ddff8e97376754c6448cd8cfaf36c8ca91c8fef5e0c24ac46224d0bea8afb588
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:17 GMT
Server: Apache
Last-Modified: Sat, 15 Jul 2017 22:05:35 GMT
Expires: Sat, 22 Jul 2017 22:05:35 GMT
Etag: 4E4ACF3FECC805D983BF31077922F677F3729442
Cache-Control: max-age=452117,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    352e6ea8ebd6d894187a469835298188
Sha1:   4e4acf3fecc805d983bf31077922f677f3729442
Sha256: 0fd389035d6dbd35c7cf42fc2b70b2c6f29a06ecdd66192741e4039bc05fe0af
                                        
                                            GET /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&pid=w&uid=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.6993265635519527 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         136.243.44.222
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
Set-Cookie: uid=d23b6690-6b0b-11e7-b721-d43d7eece3f6; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 15 Jul 2027 16:20:17 GMT
Location: /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&pid=w&uid=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.6993265635519527&cs=1


--- Additional Info ---
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 27974
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Fri, 14 Jul 2017 21:04:05 GMT
Content-Encoding: gzip
Expires: Mon, 17 Jul 2017 17:20:17 GMT
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Fri Jul 14 17:24:58 2017, max compression
Size:   27974
Md5:    b082eff161104b9bdaf2891ec10f3ad0
Sha1:   8575138a9d3097599546e0686f0e30246a21c017
Sha256: 98c5c92e6f13f3d35dc392263d4ca91ce0ce275912d500de0e9dad34115bd17f
                                        
                                            GET /match?back=1STPARTY HTTP/1.1 
Host: rgi.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         144.76.203.221
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:18 GMT
Content-Length: 154
Connection: keep-alive
Location: http://x01.aidata.io/0.gif?pid=RGI&id=JGVa8VBHDQIE33CRlCEpdA&back=1STPARTY
Expires: Mon, 17 Jul 2017 16:20:17 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:17 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
Set-Cookie: __upin=JGVa8VBHDQIE33CRlCEpdA;domain=.rgi.io;path=/;max-age=63072000


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&pid=w&uid=cbd12916-6b0b-11e7-86e0-002590c0647c&cb=0.6993265635519527&cs=1 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: uid=d23b6690-6b0b-11e7-b721-d43d7eece3f6

                                         
                                         136.243.44.222
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:18 GMT
Content-Length: 35
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /watch/39883200?wmode=5&callback=_ymjsp849275087&page-url=http%3A%2F%2Fcomeback-strike.moy.su%2Fload%2Fprogrammy%2Fbandicam_crack%2F20-1-0-96&ut=noindex&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170717182017%3Aet%3A1500308419%3Aen%3Autf-8%3Av%3A850%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A317353071302%3Arqn%3A1%3Arn%3A874534224%3Ahid%3A292064132%3Arqnl%3A1%3Ast%3A1500308419%3Au%3A15003084181043649640%3At%3ABandicam%20%2B%20Crack%20-%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%20-%20%D0%9A%D0%B0%D1%82%D0%B0%D0%BB%D0%BE%D0%B3%20%D1%84%D0%B0%D0%B9%D0%BB%D0%BE%D0%B2%20-%20Comeback-Strike%20%7C%20%D0%92%D1%81%D1%91%20%D0%BE%20Counter-Strike HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         87.250.250.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.8.1
Date: Mon, 17 Jul 2017 16:20:18 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 17 Jul 2017 16:20:18 GMT
Expires: Mon, 17 Jul 2017 16:20:18 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=7284744791500308418; domain=.yandex.ru; path=/; expires=Thu, 15-Jul-2027 16:20:18 GMT yp=1815668418.yrts.1500308418; domain=.yandex.ru; path=/; expires=Thu, 15-Jul-2027 16:20:18 GMT yabs-sid=540547351500308418; path=/
Location: https://mc.yandex.ru/watch/39883200/1?wmode=5&callback=_ymjsp849275087&page-url=http%3A%2F%2Fcomeback-strike.moy.su%2Fload%2Fprogrammy%2Fbandicam_crack%2F20-1-0-96&ut=noindex&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170717182017%3Aet%3A1500308419%3Aen%3Autf-8%3Av%3A850%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A317353071302%3Arqn%3A1%3Arn%3A874534224%3Ahid%3A292064132%3Arqnl%3A1%3Ast%3A1500308419%3Au%3A15003084181043649640%3At%3ABandicam%20%2B%20Crack%20-%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%20-%20%D0%9A%D0%B0%D1%82%D0%B0%D0%BB%D0%BE%D0%B3%20%D1%84%D0%B0%D0%B9%D0%BB%D0%BE%D0%B2%20-%20Comeback-Strike%20%7C%20%D0%92%D1%81%D1%91%20%D0%BE%20Counter-Strike
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /friggin-meguc/renegade?id=AU000D2DF8A8A&fpd=adsniper HTTP/1.1 
Host: sync.audsp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         78.155.222.212
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Location: //cm.g.doubleclick.net/pixel?google_nid=auditorius&google_cm&google_hm=QVUwMDBEMkRGOEE4QQ&fpd=adsniper&google_ula=383167865
Date: Mon, 17 Jul 2017 16:20:18 GMT
Content-Length: 162


--- Additional Info ---
Magic:  ASCII text
Size:   162
Md5:    b1c0daae776b6a4128b21969c8555481
Sha1:   655a7902d59af3f967abf3e7089fd4122fca7c31
Sha256: 1c4977dd77845223b63bbc5dc2339dc0407ef68d05074c1327d63302406111a3
                                        
                                            GET /watch/39883200/1?wmode=5&callback=_ymjsp849275087&page-url=http%3A%2F%2Fcomeback-strike.moy.su%2Fload%2Fprogrammy%2Fbandicam_crack%2F20-1-0-96&ut=noindex&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170717182017%3Aet%3A1500308419%3Aen%3Autf-8%3Av%3A850%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A317353071302%3Arqn%3A1%3Arn%3A874534224%3Ahid%3A292064132%3Arqnl%3A1%3Ast%3A1500308419%3Au%3A15003084181043649640%3At%3ABandicam%20%2B%20Crack%20-%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%20-%20%D0%9A%D0%B0%D1%82%D0%B0%D0%BB%D0%BE%D0%B3%20%D1%84%D0%B0%D0%B9%D0%BB%D0%BE%D0%B2%20-%20Comeback-Strike%20%7C%20%D0%92%D1%81%D1%91%20%D0%BE%20Counter-Strike HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: yandexuid=7284744791500308418; yp=1815668418.yrts.1500308418; yabs-sid=540547351500308418

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.8.1
Date: Mon, 17 Jul 2017 16:20:18 GMT
Content-Length: 112
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 17 Jul 2017 16:20:18 GMT
Expires: Mon, 17 Jul 2017 16:20:18 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   112
Md5:    d155d19e24afc2759caf9142492833d8
Sha1:   5690e52046749c139e23ba3d39ae979cc8d07ae2
Sha256: 6e0baa1e7a24c367009a3dc354ba79512a4ad92ddec19355103e6b7ed4c9d2bc
                                        
                                            GET /0.gif?pid=RGI&id=JGVa8VBHDQIE33CRlCEpdA&back=1STPARTY HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg; gl=1; rgi=1

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:18 GMT
Content-Length: 0
Connection: keep-alive
Location: http://tags.bluekai.com/site/29099?limit=0&id=fyZ13BFDmHzwToyXGmfkLg&redir=http://x01.aidata.io/0.gif?pid=ORACLE%26id=$_BK_UUID%26back=1STPARTY
Set-Cookie: oracle=1;path=/;expires=Mon, 24 Jul 2017 16:20:18 GMT;max-age=604800 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:17 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:17 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:18 GMT
Expires: Fri, 21 Jul 2017 16:20:18 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    37fea05d03943e910853a2e233293802
Sha1:   15314d7ec0d17fb919f2b70d2a74876dd708482f
Sha256: ff88728f281063989eff178210f6d6c2097bc955d6b1551c8a438fad5234ec4f
                                        
                                            GET /pixel?google_nid=auditorius&google_cm&google_hm=QVUwMDBEMkRGOEE4QQ&fpd=adsniper&google_ula=383167865 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: id=24089752f4b649d8||t=1500308417|et=730|cs=002213fd4847dae2d2ef80f0ec; IDE=AHWqTUnpEOKIoM_74GHfMTjiCqYU8BclWUo0wBfVN0FI_ZD4B9qmsV0fEQ

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.audsp.com/match/google?uid=CAESENBZof3JR_beoVPvZmeY-xE&fpd=adsniper&google_cver=1&google_ula=383167865,0
Date: Mon, 17 Jul 2017 16:20:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 326
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,36,35",quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  HTML document text
Size:   326
Md5:    66e2ffdea35b2a95dd3f97225af4f8d7
Sha1:   0369e47e1b541178e8cd2fcfa2a341c9309b9258
Sha256: ac0a4b113546850d88a706f2ad0cfa1f869f063e2e127df2ff73e413a348a706
                                        
                                            GET /match/google?uid=CAESENBZof3JR_beoVPvZmeY-xE&fpd=adsniper&google_cver=1&google_ula=383167865,0 HTTP/1.1 
Host: sync.audsp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         78.155.222.212
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Content-Length: 0
Location: https://sync.audtd.com/match/google_dsp?uid=CAESENBZof3JR_beoVPvZmeY-xE&fpd=adsniper&google_cver=1&google_ula=383167865,0
Connection: close


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:18 GMT
Server: Apache
Last-Modified: Mon, 17 Jul 2017 03:14:10 GMT
Expires: Mon, 24 Jul 2017 03:14:10 GMT
Etag: 501434E7DC3ED389835FA4A4DCBA071DA6713B38
Cache-Control: max-age=557031,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    4cd60656c65be1a6c9b4b3348347ab04
Sha1:   501434e7dc3ed389835fa4a4dcba071da6713b38
Sha256: 1ff951b422f39df01b510d40189a6f67f004fc736c4d9ca98581ecdbc66ff3c4
                                        
                                            GET /site/29099?limit=0&id=fyZ13BFDmHzwToyXGmfkLg&redir=http://x01.aidata.io/0.gif?pid=ORACLE%26id=$_BK_UUID%26back=1STPARTY HTTP/1.1 
Host: tags.bluekai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         129.146.13.101
HTTP/1.1 302 Found
                                        
Date: Mon, 17 Jul 2017 16:20:18 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
Set-Cookie: bkdc=phx; expires=Sat, 13-Jan-2018 16:20:18 GMT; path=/; domain=.bluekai.com bku=3lW991nMqa7Nf867; expires=Sat, 13-Jan-2018 16:20:18 GMT; path=/; domain=.bluekai.com
Location: http://tags.bluekai.com/site/29099?dt=0&r=1939282569&sig=1092067562&bkca=KJpn0zpBnnWND1+1LDtgMe/657Jp04VGvQdJgThyp6ln2AkUv6oB0u00puQovqeuNbXy1BHnpWhJnW7D0XpUB2Onp60pnye32x205wjhPED09fJPTotXT6BewPt9lvEW8shqyIYx91KQAWQ9F8XMe9==
BK-Server: 941c


--- Additional Info ---
                                        
                                            GET /match/google_dsp?uid=CAESENBZof3JR_beoVPvZmeY-xE&fpd=adsniper&google_cver=1&google_ula=383167865,0 HTTP/1.1 
Host: sync.audtd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: chk=OK; pid=AU000D2DF8A8A

                                         
                                         78.155.222.213
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Set-Cookie: pid=AU000D2DF8A8A; Max-Age=62899200; Domain=.audtd.com; Path=/; Expires=Mon, 15 Jul 2019 16:20:19 GMT
Location: https://sync.1dmp.io/pixel.gif?cid=42c1eb39-c43d-417a-a9a7-87023d15699b&pid=a23e3bdc-64f5-405f-a7fb-2db0e0f535ee&uid=AU000D2DF8A8A&ru=https%3A%2F%2Fsync.audtd.com%2Fmatch%2F1dmp%3Fuid%3D%5BUID%5D%26fpd%3Dadsniper
Vary: Accept
Content-Length: 492
Date: Mon, 17 Jul 2017 16:20:19 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   492
Md5:    91a72a35b61687832a6bd492267331ba
Sha1:   97056cb71619cc0c6fa9b3f9bb571b94bdaaecbd
Sha256: 0275544c06aba04bf37bd24b477e10286e30f2bcdf407c6c1e00f8e02e1ccc22
                                        
                                            GET /pixel.gif?cid=42c1eb39-c43d-417a-a9a7-87023d15699b&pid=a23e3bdc-64f5-405f-a7fb-2db0e0f535ee&uid=AU000D2DF8A8A&ru=https%3A%2F%2Fsync.audtd.com%2Fmatch%2F1dmp%3Fuid%3D%5BUID%5D%26fpd%3Dadsniper HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: uid=d23b6690-6b0b-11e7-b721-d43d7eece3f6

                                         
                                         136.243.44.222
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Length: 0
Connection: keep-alive
Expires: 0, 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate, private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
Location: https://sync.audtd.com/match/1dmp?uid=d23b6690-6b0b-11e7-b721-d43d7eece3f6&fpd=adsniper


--- Additional Info ---
                                        
                                            GET /site/29099?dt=0&r=1939282569&sig=1092067562&bkca=KJpn0zpBnnWND1+1LDtgMe/657Jp04VGvQdJgThyp6ln2AkUv6oB0u00puQovqeuNbXy1BHnpWhJnW7D0XpUB2Onp60pnye32x205wjhPED09fJPTotXT6BewPt9lvEW8shqyIYx91KQAWQ9F8XMe9== HTTP/1.1 
Host: tags.bluekai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: bkdc=phx; bku=3lW991nMqa7Nf867

                                         
                                         129.146.13.101
HTTP/1.1 302 Found
                                        
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Location: http://x01.aidata.io/0.gif?pid=ORACLE&id=Uob5Jy9999OoAZhj&back=1STPARTY
Set-Cookie: bku=3lW991nMqa7Nf867; expires=Sat, 13-Jan-2018 16:20:19 GMT; path=/; domain=.bluekai.com
BK-Server: 5785


--- Additional Info ---
                                        
                                            GET /0.gif?pid=ORACLE&id=Uob5Jy9999OoAZhj&back=1STPARTY HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg; gl=1; rgi=1; oracle=1

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Length: 0
Connection: keep-alive
Location: http://ib.adnxs.com/getuid?//x01.aidata.io/0.gif%3Fpid%3DAPPNEXUS%26id%3D%24UID%26back=1STPARTY
Set-Cookie: anx=1;path=/;expires=Thu, 20 Jul 2017 16:20:19 GMT;max-age=259200 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:18 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:18 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /getuid?//x01.aidata.io/0.gif%3Fpid%3DAPPNEXUS%26id%3D%24UID%26back=1STPARTY HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         185.33.223.197
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Mon, 17 Jul 2017 16:20:21 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fx01.aidata.io%2F0.gif%253Fpid%253DAPPNEXUS%2526id%253D%2524UID%2526back%3D1STPARTY
AN-X-Request-Uuid: 15325fe2-463b-4597-ab01-4042e4973037
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Tue, 18-Jul-2017 16:20:21 GMT; Domain=.adnxs.com; HttpOnly uuid2=6629358061244430007; Path=/; Max-Age=7776000; Expires=Sun, 15-Oct-2017 16:20:21 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 302.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.201:80


--- Additional Info ---
                                        
                                            GET /js/px.js?ch=2 HTTP/1.1 
Host: static.criteo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         178.250.2.74
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Length: 346
Connection: keep-alive
Expires: Tue, 18 Jul 2017 16:20:19 GMT
Cache-Control: max-age=86400, public
Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   346
Md5:    f84f931c0dd37448e03f0dabf4e4ca9f
Sha1:   9c2c50edcf576453ccc07bf65668bd23c76e8663
Sha256: 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
                                        
                                            GET /js/px.js?ch=1 HTTP/1.1 
Host: static.criteo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         178.250.2.74
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Length: 346
Connection: keep-alive
Expires: Tue, 18 Jul 2017 16:20:19 GMT
Cache-Control: max-age=86400, public
Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   346
Md5:    f84f931c0dd37448e03f0dabf4e4ca9f
Sha1:   9c2c50edcf576453ccc07bf65668bd23c76e8663
Sha256: 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
                                        
                                            GET /bounce?%2Fgetuid%3F%2F%2Fx01.aidata.io%2F0.gif%253Fpid%253DAPPNEXUS%2526id%253D%2524UID%2526back%3D1STPARTY HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: sess=1; uuid2=6629358061244430007

                                         
                                         185.33.223.197
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Mon, 17 Jul 2017 16:20:21 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: //x01.aidata.io/0.gif?pid=APPNEXUS&id=6629358061244430007&back=1STPARTY
AN-X-Request-Uuid: 319ed89b-fe24-41e1-a1be-bd92872ed314
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Tue, 18-Jul-2017 16:20:21 GMT; Domain=.adnxs.com; HttpOnly uuid2=6629358061244430007; Path=/; Max-Age=7776000; Expires=Sun, 15-Oct-2017 16:20:21 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 302.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.221.134:80


--- Additional Info ---
                                        
                                            GET /.s/t/171/13.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 207
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-cf"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 5 x 40
Size:   207
Md5:    a4a0bf3b265da63cf860e762f4d9099c
Sha1:   42e4e409b34f78f37310c68b97293bb43ef78553
Sha256: 788e4728a8372bc9ba780f166df07646073391761fdd108d7e29393e094ed6a4
                                        
                                            GET /.s/t/171/11.gif HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 196
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-c4"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 5
Size:   196
Md5:    22bb3a25982c6fa75a1c9397644ef593
Sha1:   e1d210e11c24fe1a8bd8d8fe1318287b02671652
Sha256: 6bd1748ee368126db44306f7aa0c5e5445cf3fbb43309ba49d81db8087fc53d2
                                        
                                            GET /.s/img/icon/social/vk.svg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/social.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 772
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "5950f318-304"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   772
Md5:    7c4eb8cae0b565c023c4406add5f8041
Sha1:   079ce5d3277df672b57a73476a28d0bf0b1c1fe2
Sha256: 05a3f8587400860aa87bb18c9a9cd5b22a45ca4fc4a37a7922d29e48549b2fc9
                                        
                                            GET /.s/img/stars/3/12.png HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 1161
Last-Modified: Thu, 06 Apr 2017 09:23:45 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "58e60921-489"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 12 x 36, 8-bit/color RGBA, non-interlaced
Size:   1161
Md5:    350693463200bbe9388eec7d1a208289
Sha1:   9a310a7dd3c068636b224d253e0df9ce09784df2
Sha256: aa22bfd07d6d73ee1e2fc304bf81625c716e83f81e1dfc044560b54595bdec28
                                        
                                            GET /.s/img/icon/social/u.svg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/social.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 612
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "5950f318-264"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   612
Md5:    1e726893f02be39b70d24d502a3a9998
Sha1:   98c6fcf43a67426ed7e9c7a839e8115494ca8072
Sha256: d0608cf0c4aff79f20a198427f7df73300d643face9bea72b8d406b432b84df9
                                        
                                            GET /.s/img/icon/social/ya.svg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/social.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 660
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "5950f318-294"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   660
Md5:    7676c3eee5bd955efe08fd05367a443b
Sha1:   595e4e8dbf5ff472606434d0f45806d088de4c0c
Sha256: b72d3f61ac56b4aa27bad5769589705004aff1f0ad341785ca72dc46ba16de5b
                                        
                                            GET /.s/t/171/15.jpg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 429
Last-Modified: Wed, 03 Dec 2014 12:48:14 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "547f068e-1ad"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   429
Md5:    ea8db8514ad7aafba067ee1d02ae206c
Sha1:   9889cab173f73b4d756cbcc37d8f5748e29c4a2e
Sha256: 2a9cfb1e0485252cf84bb9365649fb0cb709657b078d32f654d0012d4be36de5
                                        
                                            GET /.s/img/icon/social/gp.svg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/social.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 1120
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "5950f318-460"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   1120
Md5:    348bfc6787de942d481a3a4558773192
Sha1:   e12630959b3fa206c9719865acef2c704b3314d0
Sha256: 16179a8a9c9cd7b020fee4ec331d1afc473e4a67cc0d941fb1d59e206079c5e7
                                        
                                            GET /.s/img/icon/social/fb.svg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/social.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 611
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "5950f318-263"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   611
Md5:    d178cc46dcbcf2b6f19445674fe3fe58
Sha1:   26f9747489d9e796926f7bbe11817c420afda3af
Sha256: a9265d79c9ff74d4deeab5dce9643ed838018a6b4346605e002867858534f4bf
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: yandexuid=7284744791500308418; yp=1815668418.yrts.1500308418; yabs-sid=540547351500308418

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Expires: Mon, 10 Jun 2047 16:20:19 GMT
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /0.gif?pid=APPNEXUS&id=6629358061244430007&back=1STPARTY HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg; gl=1; rgi=1; oracle=1; anx=1

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Length: 0
Connection: keep-alive
Location: http://sync.1dmp.io/pixel.gif?cid=f3c5784e-9a1e-4a1c-887d-dfe2e0b8668b&pid=fe3f3a81-853f-42c7-992a-63a613fc388f&uid=fyZ13BFDmHzwToyXGmfkLg&ru=http%3A//x01.aidata.io/0.gif%3Fpid%3D1STPARTY
Set-Cookie: 1dmp=1;path=/;expires=Mon, 24 Jul 2017 16:20:19 GMT;max-age=604800 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:18 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:18 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /recaptcha/api2/r20170712134223/styles__ltr.css HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LcyAwsUAAAAAAEpVfKCOS4XR0X6PJtQTEuFKyNr&co=aHR0cDovL2NvbWViYWNrLXN0cmlrZS5tb3kuc3U6ODA.&hl=ru&v=r20170712134223&theme=light&size=compact&cb=wpq86rsdhxce

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 90584
Date: Thu, 13 Jul 2017 00:52:31 GMT
Expires: Fri, 13 Jul 2018 00:52:31 GMT
Last-Modified: Wed, 12 Jul 2017 21:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 401268
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   90584
Md5:    4a7c48ebe955bac8a471985221963052
Sha1:   ad28178580d54791e2456b5866db69f8da02ca8e
Sha256: 461ffbe317d895a061503d22376a9e89b80e15311b135fdbda190b80d3fa798b
                                        
                                            GET /.s/img/icon/social/ok.svg HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/.s/src/social.css
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:14 GMT
Content-Length: 1858
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "5950f318-742"
Expires: Sun, 06 Aug 2017 16:20:14 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   1858
Md5:    08bbc2fa9b08463b0d061041d62b408e
Sha1:   370c53ccc3edd296cd35fb9e3de20dabfdae78d9
Sha256: e1369586f1d82834ecc0ccab2f5f1a6f7565f2c715243d956bd7eb1404c8fba9
                                        
                                            GET /recaptcha/api2/anchor?k=6LcyAwsUAAAAAAEpVfKCOS4XR0X6PJtQTEuFKyNr&co=aHR0cDovL2NvbWViYWNrLXN0cmlrZS5tb3kuc3U6ODA.&hl=ru&v=r20170712134223&theme=light&size=compact&cb=wpq86rsdhxce HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 17 Jul 2017 16:20:19 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   9802
Md5:    3087a3dbb026fb2f7d1ea59fb3f42855
Sha1:   9c94787a443130b04fab42cd96bfcd1fcc4e6156
Sha256: 406619904f78b43167680ea3373c8f58f8f5869520d2b3d0d6c23119c8b61b27
                                        
                                            GET /recaptcha/api2/logo_48.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/api2/r20170712134223/styles__ltr.css

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 2228
Date: Thu, 13 Jul 2017 17:50:58 GMT
Expires: Thu, 20 Jul 2017 17:50:58 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 340162
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   2228
Md5:    ef9941290c50cd3866e2ba6b793f010d
Sha1:   4736508c795667dcea21f8d864233031223b7832
Sha256: 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
                                        
                                            GET /js/bg/-quXO0acfwLYOpNwp-WG-Uh8XA8gVEVcB6QOSvDsB5w.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LcyAwsUAAAAAAEpVfKCOS4XR0X6PJtQTEuFKyNr&co=aHR0cDovL2NvbWViYWNrLXN0cmlrZS5tb3kuc3U6ODA.&hl=ru&v=r20170712134223&theme=light&size=compact&cb=wpq86rsdhxce

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4835
Date: Thu, 13 Jul 2017 17:51:07 GMT
Expires: Fri, 13 Jul 2018 17:51:07 GMT
Last-Modified: Mon, 03 Jul 2017 13:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 340153
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4835
Md5:    6a4997f4d99f33de76e959e77f1802e7
Sha1:   77fefbcfd2e7215dd23e7761f7aa0ac16a1fbfc9
Sha256: 245e17e640425d8d62672082139ea7413bdba70fe6557dda7814cc939a5c0696
                                        
                                            GET /s/roboto/v16/Y5yuUJGDLtmYv2_3fMB4fA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LcyAwsUAAAAAAEpVfKCOS4XR0X6PJtQTEuFKyNr&co=aHR0cDovL2NvbWViYWNrLXN0cmlrZS5tb3kuc3U6ODA.&hl=ru&v=r20170712134223&theme=light&size=compact&cb=wpq86rsdhxce
Origin: https://www.google.com

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27244
Date: Tue, 09 May 2017 12:47:03 GMT
Expires: Wed, 09 May 2018 12:47:03 GMT
Last-Modified: Mon, 17 Apr 2017 21:22:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 5974397
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  data
Size:   27244
Md5:    a56107fdc2f236943bef324e78b7679e
Sha1:   59b5aa3cf0597613df81025a460c4eba138d9326
Sha256: 64c4d672ff54ecc2bb20fd2691cacb03d24131c9af7d639640b4ab91d535d5bb
                                        
                                            GET /recaptcha/api2/webworker.js?hl=ru&v=r20170712134223 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Mon, 17 Jul 2017 16:20:20 GMT
Date: Mon, 17 Jul 2017 16:20:20 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   98
Md5:    21277a15d4752cae1156d74e85a049f3
Sha1:   dc4f3e1acbb1b6000f349f81cd99c597b289d09b
Sha256: 65925850e750e543efc9e28e11b1ae4b1951a618c73985625e73a29d8f36af39
                                        
                                            GET /recaptcha/api2/bframe?hl=ru&v=r20170712134223&k=6LcyAwsUAAAAAAEpVfKCOS4XR0X6PJtQTEuFKyNr HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 17 Jul 2017 16:20:20 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   681
Md5:    593984d5b4d0116bb5b2eddf6fdc7a57
Sha1:   e51c1b2b75954269761c90b4275f4221549754e9
Sha256: a64308875e322a51f417aeca5d887dcd68961be174b0d15899da97b650a9c689
                                        
                                            GET /match/1dmp?uid=d23b6690-6b0b-11e7-b721-d43d7eece3f6&fpd=adsniper HTTP/1.1 
Host: sync.audtd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: chk=OK; pid=AU000D2DF8A8A

                                         
                                         78.155.222.213
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Set-Cookie: pid=AU000D2DF8A8A; Max-Age=62899200; Domain=.audtd.com; Path=/; Expires=Mon, 15 Jul 2019 16:20:20 GMT
Location: https://x01.aidata.io/0.gif?pid=AUDITORIUS_DMP&id=AU000D2DF8A8A&dest=https%3A%2F%2Fsync.audtd.com%2Fmatch%2Faidata%3Fuid%3D%24UID%26fpd%3Dadsniper
Vary: Accept
Content-Length: 352
Date: Mon, 17 Jul 2017 16:20:20 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   352
Md5:    4b8225bd2dc20495eaf6b7d60218bb50
Sha1:   cb9c748555cc367b2ccca9842d578074c3ed5ecc
Sha256: 354f8f047940f5ffb904e7c92a84a67a587159d1772db7f15d450a003417e4f2
                                        
                                            GET /pixel.gif?cid=f3c5784e-9a1e-4a1c-887d-dfe2e0b8668b&pid=fe3f3a81-853f-42c7-992a-63a613fc388f&uid=fyZ13BFDmHzwToyXGmfkLg&ru=http%3A//x01.aidata.io/0.gif%3Fpid%3D1STPARTY HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: uid=d23b6690-6b0b-11e7-b721-d43d7eece3f6

                                         
                                         136.243.44.222
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:20 GMT
Content-Length: 0
Connection: keep-alive
Expires: 0, 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate, private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
Location: http://x01.aidata.io/0.gif?pid=1STPARTY


--- Additional Info ---
                                        
                                            GET /0.gif?pid=1STPARTY HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg; gl=1; rgi=1; oracle=1; anx=1; 1dmp=1

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:20 GMT
Content-Length: 0
Connection: keep-alive
Location: http://bcp.crwdcntrl.net/5/c=7645/?http://x01.aidata.io/0.gif?pid=LOTAME&id=fyZ13BFDmHzwToyXGmfkLg&back=1STPARTY
Set-Cookie: lotame=1;path=/;expires=Mon, 24 Jul 2017 16:20:20 GMT;max-age=604800 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:19 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:19 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 16:20:21 GMT
Server: Apache
Last-Modified: Sun, 16 Jul 2017 22:50:24 GMT
Expires: Sun, 23 Jul 2017 22:50:24 GMT
Etag: 576572F1B2B9356A58DF061C3B400117F5B80D0C
Cache-Control: max-age=541202,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp31
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    52b6f8c555597d78543f3a46104b67b6
Sha1:   576572f1b2b9356a58df061c3b400117f5b80d0c
Sha256: 5ba75db953f0b740fdb602b8831fe960f589dba61bbf8ae8ed8f29a6f95351af
                                        
                                            GET /5/c=7645/?http://x01.aidata.io/0.gif?pid=LOTAME&id=fyZ13BFDmHzwToyXGmfkLg&back=1STPARTY HTTP/1.1 
Host: bcp.crwdcntrl.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         52.18.145.75
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Date: Mon, 17 Jul 2017 16:20:21 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://bcp.crwdcntrl.net/5/ct=y/c=7645/?http://x01.aidata.io/0.gif?pid=LOTAME&id=fyZ13BFDmHzwToyXGmfkLg&back=1STPARTY
P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
Pragma: no-cache
Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net
X-Server: 172.25.11.147
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /0.gif?pid=AUDITORIUS_DMP&id=AU000D2DF8A8A&dest=https%3A%2F%2Fsync.audtd.com%2Fmatch%2Faidata%3Fuid%3D%24UID%26fpd%3Dadsniper HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg; gl=1; rgi=1; oracle=1; anx=1; 1dmp=1

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:21 GMT
Content-Length: 0
Connection: keep-alive
Location: https://sync.audtd.com/match/aidata?uid=fyZ13BFDmHzwToyXGmfkLg&fpd=adsniper
Set-Cookie: audmp=1;path=/;expires=Mon, 17 Jul 2017 16:20:22 GMT;max-age=1 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:20 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:20 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /5/ct=y/c=7645/?http://x01.aidata.io/0.gif?pid=LOTAME&id=fyZ13BFDmHzwToyXGmfkLg&back=1STPARTY HTTP/1.1 
Host: bcp.crwdcntrl.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: _cc_cc=ctst

                                         
                                         52.18.145.75
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Date: Mon, 17 Jul 2017 16:20:21 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://x01.aidata.io/0.gif?pid=LOTAME&id=fyZ13BFDmHzwToyXGmfkLg&back=1STPARTY
P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
Pragma: no-cache
Set-Cookie: _cc_aud="ABR4nGNgYGCIzHl8hAEGmBkYuGaAGIyfXSCUM5AEAHBLBYE%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Fri, 13-Apr-2018 16:20:20 GMT;Max-Age=23328000 _cc_cc="ACZ4nGNQsDBMTDY3NzSwSDZOS0k2NUkyTTO0SDNPMTdJNktLNTJjAILInMdHGOCAf9dBXca71gz%2FGRkZdiKYt0%2Bqw5jXTz1ig7HPHT3EDGMfXjyHBa7zNELNm6k9jDD2ayQ1E79YwpiXkIz80HBfAK4Vib3pTyGM%2BQ5JGABiB0tB";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Fri, 13-Apr-2018 16:20:20 GMT;Max-Age=23328000 _cc_id=81ac77108c3fdc54b5f18f7d74c6fe26;Path=/;Domain=crwdcntrl.net;Expires=Fri, 13-Apr-2018 16:20:20 GMT _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Fri, 13-Apr-2018 16:20:20 GMT
X-Server: 172.25.11.38
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /0.gif?pid=LOTAME&id=fyZ13BFDmHzwToyXGmfkLg&back=1STPARTY HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: __upin=fyZ13BFDmHzwToyXGmfkLg; gl=1; rgi=1; oracle=1; anx=1; 1dmp=1; lotame=1; audmp=1

                                         
                                         138.201.227.192
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 17 Jul 2017 16:20:21 GMT
Content-Length: 0
Connection: keep-alive
Location: http://pix04.revsci.net/J13421/b3/0/3/0.302?DM_LOC=x01.aidata.io&id=fyZ13BFDmHzwToyXGmfkLg&matchId=aidata&back=1STPARTY
Set-Cookie: audsci=1;path=/;expires=Mon, 24 Jul 2017 16:20:21 GMT;max-age=604800 __upin=fyZ13BFDmHzwToyXGmfkLg;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Mon, 17 Jul 2017 16:20:20 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 17 Jul 2017 16:20:20 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /match/aidata?uid=fyZ13BFDmHzwToyXGmfkLg&fpd=adsniper HTTP/1.1 
Host: sync.audtd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: chk=OK; pid=AU000D2DF8A8A

                                         
                                         78.155.222.213
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Set-Cookie: pid=AU000D2DF8A8A; Max-Age=62899200; Domain=.audtd.com; Path=/; Expires=Mon, 15 Jul 2019 16:20:21 GMT
Location: https://cm.g.doubleclick.net/pixel?google_nid=auditorius_ddp&google_cm&fpd=adsniper
Vary: Accept
Content-Length: 226
Date: Mon, 17 Jul 2017 16:20:21 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   226
Md5:    669ae98c74d2ad701f1a3e5ccd4c891e
Sha1:   d450c6b7f094a9917ac041ac1dbdbf636dc6f479
Sha256: ee770d44aeeb5302d868c7da8c9a64c424c1c897a60868188a5702ea7bbec32a
                                        
                                            GET /pixel?google_nid=auditorius_ddp&google_cm&fpd=adsniper HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: id=24089752f4b649d8||t=1500308417|et=730|cs=002213fd4847dae2d2ef80f0ec; IDE=AHWqTUnpEOKIoM_74GHfMTjiCqYU8BclWUo0wBfVN0FI_ZD4B9qmsV0fEQ

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync2.audtd.com/google?uid=CAESEJXwPrtKaBrgm6HsuookmBo&google_error=&fpd=adsniper&google_cver=1
Date: Mon, 17 Jul 2017 16:20:21 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 312
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,36,35",quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  HTML document text
Size:   312
Md5:    74f5aa5013ee1a0e9bd1099d52345ba9
Sha1:   31cfd6e688cd32290e69b89313163dd709ece08f
Sha256: 73056fcd88a811d6a2de75e3d43e6c69d050eafd014d5eca617d45197d7051cd
                                        
                                            GET /J13421/b3/0/3/0.302?DM_LOC=x01.aidata.io&id=fyZ13BFDmHzwToyXGmfkLg&matchId=aidata&back=1STPARTY HTTP/1.1 
Host: pix04.revsci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96

                                         
                                         38.72.130.155
HTTP/1.1 302 Found
                                        
X-TraceID: UNKmtPCslls0qcAAGAxAw==
Server: ASI-BGAS/17.01.27-0036
Set-Cookie: NETID01=43d4953ace4f15ffac885f0895fc8ff5; Domain=.revsci.net; Expires=Mon, 13-Aug-2018 16:20:21 GMT; Path=/ rts_AAAA=MLuB86QsXkGiDUw6LAw6IpFSRlBRRBL4FFlFQ0QQY2EVF3OV; Domain=.revsci.net; Expires=Tue, 17-Jul-2018 16:20:21 GMT; Path=/
X-Proc-data: pd0-bgas17-0
P3P: policyref="http://js.revsci.net/w3c/rsip3p.xml", CP="NON PSA PSD IVA IVD OTP SAM IND UNI PUR COM NAV INT DEM CNT STA PRE OTC HEA"
Timing-Allow-Origin: *
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: /J13421/b3/Z/3/0.302?DM_LOC=x01.aidata.io&id=fyZ13BFDmHzwToyXGmfkLg&matchId=aidata&back=1STPARTY&asidi=VaggQfgRDF8a0DYvNxuARQ
Content-Length: 0
Date: Mon, 17 Jul 2017 16:20:21 GMT


--- Additional Info ---
                                        
                                            GET /J13421/b3/Z/3/0.302?DM_LOC=x01.aidata.io&id=fyZ13BFDmHzwToyXGmfkLg&matchId=aidata&back=1STPARTY&asidi=VaggQfgRDF8a0DYvNxuARQ HTTP/1.1 
Host: pix04.revsci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: NETID01=43d4953ace4f15ffac885f0895fc8ff5; rts_AAAA=MLuB86QsXkGiDUw6LAw6IpFSRlBRRBL4FFlFQ0QQY2EVF3OV

                                         
                                         38.72.130.155
HTTP/1.1 302 Found
                                        
X-TraceID: UNKzm7dzVls1LMAAFSprQ==
Server: ASI-BGAS/17.01.27-0036
Set-Cookie: pudm_AAAA=MLtxE4zXlg1E8FKiVvBAf8JKukouWQoAbaSluD8N8gNdEEIXU1E5UaHUFAWr/J4Cxleo4ayltOAChqw7gOCHQXECGRWKGYItby3qZ94=; Domain=.revsci.net; Expires=Tue, 17-Jul-2018 16:20:21 GMT; Path=/ rts_AAAA=MLuB86QsXkGiDUw6LAw6IpFSRlBRRBL4FFlFQ0QQY2EVF3OV; Domain=.revsci.net; Expires=Tue, 17-Jul-2018 16:20:21 GMT; Path=/
X-Proc-data: pd0-bgas11-0
P3P: policyref="http://js.revsci.net/w3c/rsip3p.xml", CP="NON PSA PSD IVA IVD OTP SAM IND UNI PUR COM NAV INT DEM CNT STA PRE OTC HEA"
Timing-Allow-Origin: *
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: //x01.aidata.io/0.gif?pid=AUDSCI&id=BKblN-O9KOnTKKg4JkpvctFzG6Is&back=1STPARTY
Content-Length: 0
Date: Mon, 17 Jul 2017 16:20:21 GMT


--- Additional Info ---
                                        
                                            GET /google?uid=CAESEJXwPrtKaBrgm6HsuookmBo&google_error=&fpd=adsniper&google_cver=1 HTTP/1.1 
Host: sync2.audtd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://comeback-strike.moy.su/load/programmy/bandicam_crack/20-1-0-96
Cookie: chk=OK; pid=AU000D2DF8A8A

                                         
                                         78.155.222.211
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Content-Length: 0
Etag: W/"0-1B2M2Y8AsgTpgAmY7PhCfg"
Date: Mon, 17 Jul 2017 16:20:22 GMT
Connection: close


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: comeback-strike.moy.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 7comeback-strikeld=YACw42xZ; 7comeback-strikeuzll=1500308400; ppu_main_a2491467a19ffc3f9fe0dbe66e54bae0=1; _ym_uid=15003084181043649640; _ym_isad=2

                                         
                                         193.109.246.68
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx/1.8.0
Date: Mon, 17 Jul 2017 16:20:17 GMT
Content-Length: 894
Last-Modified: Wed, 25 Feb 2009 14:44:31 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: "49a5594f-37e"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   894
Md5:    a3a0510761359bcc2613a45c76546d42
Sha1:   c66b17eac9b5b07d4c3242448b079adc2949128e
Sha256: e50d733849b9ff216b9cb7d884bffe006c908a71106455f7a25f297fce487f32