Overview

URL www.videospornosexo.com/tag/vestido/
IP104.28.7.109
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-02-19 00:16:24 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-02-19 2 www.videospornosexo.com/tag/vestido/ Malware
2018-02-19 2 www.videospornosexo.com/wp-content/plugins/feedburner-form/control/fbstyle. (...) Malware
2018-02-19 2 www.videospornosexo.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 Malware
2018-02-19 2 www.videospornosexo.com/wp-content/themes/BangTube/js/swfobject.js Malware
2018-02-19 2 www.videospornosexo.com/wp-content/themes/BangTube/js/config.js Malware
2018-02-19 2 www.videospornosexo.com/wp-content/plugins/jetpack/css/jetpack.css?ver=5.3 Malware
2018-02-19 2 www.videospornosexo.com/wp-content/themes/BangTube/js/video-js/video.min.js Malware
2018-02-19 2 www.videospornosexo.com/wp-includes/js/jquery/jquery.js?ver=1.12.4 Malware
2018-02-19 2 www.videospornosexo.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=c (...) Malware
2018-02-19 2 www.videospornosexo.com/wp-includes/js/wp-embed.min.js?ver=ccea1703f4ae1ea6 (...) Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 104.28.7.109

Date UQ / IDS / BL URL IP
2017-10-02 09:33:50 +0200
0 - 4 - 0 phsbulldogs.pw/ 104.28.7.109
2017-08-17 18:50:06 +0200
0 - 2 - 0 scottcountyclerk.com/1320-2/ 104.28.7.109

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-06-23 18:05:14 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/hd-watc (...) 104.25.169.98
2018-06-23 18:03:25 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/hd-watc (...) 104.25.170.98
2018-06-23 18:01:58 +0200
0 - 0 - 8 disk-space.ru/download/6800c2021c/VZLOM_VK_20 (...) 104.31.81.97
2018-06-23 18:01:04 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/hd-watc (...) 104.25.170.98
2018-06-23 17:57:00 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/hd-watc (...) 104.25.170.98
2018-06-23 17:54:54 +0200
0 - 1 - 0 escollection.es/web/ 104.18.60.134
2018-06-23 17:54:26 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/123hd-w (...) 104.25.170.98
2018-06-23 17:53:19 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/fortv-m (...) 104.25.169.98
2018-06-23 17:52:22 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/hd-watc (...) 104.25.170.98
2018-06-23 17:50:43 +0200
0 - 0 - 0 citygov.ancorathemes.com/forums/topic/hd-watc (...) 104.25.169.98

No other reports on domain: videospornosexo.com



JavaScript

Executed Scripts (53)


Executed Evals (16)

#1 JavaScript::Eval (size: 87, repeated: 1) - SHA256: aab310ed9d84ead154e032927d4a74c007f4b03655f5596b12339ea61881ba4e

                                        (function() {
    return (new Date).getTime() + "." + Math.random().toString(36).substring(5)
})();
                                    

#2 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 275a77f2ce7e5e03c6c7307d88be14b378a1990c30dc2e187bcc683635339cf5

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm1').toLowerCase();
    return a
})();
                                    

#3 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 652d7a3f82ecdf2350524d449fa5c967d5ae7cf4af44033e44fcf71b6da2a841

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm10').toLowerCase();
    return a
})();
                                    

#4 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 390a7ba8b8ef377e917fec6bedfb5b420972719f00ee7238f26542bfb0dbbb44

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm11').toLowerCase();
    return a
})();
                                    

#5 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 7ee0b81f51338bc5430709537a5b8d88699fa222a9ec426d291108da0fa56897

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm12').toLowerCase();
    return a
})();
                                    

#6 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 6d840fc23000474e57955388c5301f99d652fb2457a2d4151317b05dcef3fe96

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm13').toLowerCase();
    return a
})();
                                    

#7 JavaScript::Eval (size: 94, repeated: 1) - SHA256: d0e63f2cf955adc010d2dea4318ad5cbb60569fe8da3539e8bbb121bd5d8b28e

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm14').toLowerCase();
    return a
})();
                                    

#8 JavaScript::Eval (size: 93, repeated: 1) - SHA256: d08b351313230f2d28c7920c51afd30b25430619031123f6a194ff8eaa67ba4e

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm2').toLowerCase();
    return a
})();
                                    

#9 JavaScript::Eval (size: 93, repeated: 1) - SHA256: eb5e4ddd5cc788cc5c2cecccf8aab9657add98683c8d000082c4b01e8af7366c

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm3').toLowerCase();
    return a
})();
                                    

#10 JavaScript::Eval (size: 93, repeated: 1) - SHA256: d735e514bfca0ced4cb0dbb984c49361d81b7e523f196b8f683829709e314664

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm4').toLowerCase();
    return a
})();
                                    

#11 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 49d80e83ec2ed31e723d5e685e278010c816907608a28cf3cbb54c783a7fd70f

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm5').toLowerCase();
    return a
})();
                                    

#12 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 57a9146e591bc48364b7c25e3e4312ece0f20374f987ac477d89549b3b34ac30

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm6').toLowerCase();
    return a
})();
                                    

#13 JavaScript::Eval (size: 93, repeated: 1) - SHA256: fdd887941ffcc440a54f2037db751a01aeede086c58de2cf89e0f26e4574937c

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm7').toLowerCase();
    return a
})();
                                    

#14 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 8bfa0370172607083d52f9f2d143393d7b0bef8e94b2fa87e1329b32a80cc655

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm8').toLowerCase();
    return a
})();
                                    

#15 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 4feb676aa50b2757de7890a7261eee0ba266bdeeb7f7ec1ca7a01e8119337ab5

                                        (function() {
    var a = google_tag_manager["GTM-N958XK9"].macro('gtm9').toLowerCase();
    return a
})();
                                    

#16 JavaScript::Eval (size: 84, repeated: 1) - SHA256: 8aecc742acec2a088ddf55b244521ceb59136fc113975afc1f3bd31453c6f2b5

                                        (function() {
    var b = 18;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
                                    

Executed Writes (21)

#1 JavaScript::Write (size: 19, repeated: 1) - SHA256: 08ba4ac72afbf67060c5c1e8e224ee3ffe01350f89cece28b14405f0fe1f7269

                                        & amp;
cb = 11992228874
                                    

#2 JavaScript::Write (size: 19, repeated: 1) - SHA256: df14d81abcf0a2aa4423ad6251edde4d25e042868e271158f93303dda19c23a9

                                        & amp;
cb = 17303852143
                                    

#3 JavaScript::Write (size: 19, repeated: 1) - SHA256: 331b7f68670a07cbe1477f351daac2344fb580b4d7c48a282e7df2bc21b10576

                                        & amp;
cb = 66771540696
                                    

#4 JavaScript::Write (size: 18, repeated: 3) - SHA256: e0215c16fadbc057d1be3260dc2234924c46fa5579ac861f11b11d7dc5a736c7

                                        & amp;
charset = UTF - 8
                                    

#5 JavaScript::Write (size: 54, repeated: 3) - SHA256: 02fa9b8b6b1e9eb6d84d412ef5d3ab45bef532b59d41d20ae4dd8c11c10b95f0

                                        & amp;
loc = http % 3 A //www.videospornosexo.com/tag/vestido/
                                    

#6 JavaScript::Write (size: 11, repeated: 3) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#7 JavaScript::Write (size: 6, repeated: 1) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#8 JavaScript::Write (size: 309, repeated: 1) - SHA256: 3fec01446b8a6221020e909eafbb2c246576bca9e13cc99f3157b012a290b2ac

                                        < a href = 'http://ads.cupidonetwork.com/www/delivery/ck.php?oaparams=2__bannerid=17__zoneid=4__cb=b038087fad__oadest=https%3A%2F%2Fgoo.gl%2F84MNWh'
target = '_blank' > < img src = 'http://ads.cupidonetwork.com/www/images/cda0a05ab5cd310c05928e80d7874f6d.gif'
width = '300'
height = '250'
alt = ''
title = ''
border = '0' / > < /a>
                                    

#9 JavaScript::Write (size: 309, repeated: 1) - SHA256: 936fa0944e5161bb83f21736439ffb422e2aec9f70767209a9bf91c21268d760

                                        < a href = 'http://ads.cupidonetwork.com/www/delivery/ck.php?oaparams=2__bannerid=46__zoneid=4__cb=7943c347d9__oadest=https%3A%2F%2Fgoo.gl%2FTttjXP'
target = '_blank' > < img src = 'http://ads.cupidonetwork.com/www/images/d658a88df8246ca0efc2f77ae566330e.gif'
width = '300'
height = '250'
alt = ''
title = ''
border = '0' / > < /a>
                                    

#10 JavaScript::Write (size: 316, repeated: 1) - SHA256: b803e95262d3c0c22d53074396b4c87bfbbc6279126aafab0ffd8944272d5686

                                        < a href = 'http://ads.cupidonetwork.com/www/delivery/ck.php?oaparams=2__bannerid=91__zoneid=28__cb=2d9db3266c__oadest=http%3A%2F%2Fwww.casadasinfieis.com'
target = '_blank' > < img src = 'http://ads.cupidonetwork.com/www/images/25c886424ad868e6fd1f01db2d486ec3.jpg'
width = '300'
height = '250'
alt = ''
title = ''
border = '0' / > < /a>
                                    

#11 JavaScript::Write (size: 60, repeated: 1) - SHA256: 10c8d2e7a57fd27d33d1879409af3f6e8e8bb7646b023c40d397498262f2ebd4

                                        < div id = "histats_counter_2634"
style = "display: none;" > < /div>
                                    

#12 JavaScript::Write (size: 538, repeated: 1) - SHA256: a3bbfcf9f80ccf7d974c31945e994d3cafa12326843f2ab9fda339d029fd2267

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=suportevertical&cat=2&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=346526&idsite=145308&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142676" > < /iframe>
                                    

#13 JavaScript::Write (size: 271, repeated: 1) - SHA256: 7f1fe4e1196bb7aafaae80a5923ef3b0790f45beb2c75a34cabfa2612f59fab0

                                        < iframe frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?idzone=346524&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142443&sub=&tags=&screen_resolution=1176x885&email=" > < /iframe>
                                    

#14 JavaScript::Write (size: 271, repeated: 1) - SHA256: 7872583d8cef1953e175f637bfd583b94b8c333cbce2de785a14852ea31c006c

                                        < iframe frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?idzone=346526&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142797&sub=&tags=&screen_resolution=1176x885&email=" > < /iframe>
                                    

#15 JavaScript::Write (size: 271, repeated: 1) - SHA256: 6476287607259fd57ae7d8ad8f8b91b10092cc1b7a57015e4b881a626d03aeba

                                        < iframe frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?idzone=346526&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996143080&sub=&tags=&screen_resolution=1176x885&email=" > < /iframe>
                                    

#16 JavaScript::Write (size: 229, repeated: 1) - SHA256: 61b93d542ac54cd0952ad9895c1ede38533bf3146b636b69b9b0af7e3270daff

                                        < iframe id = "ero_banner2016974"
width = "300"
height = "263"
frameborder = "0"
scrolling = "no"
src = "//adspaces.ero-advertising.com/banads/view.php?time=1518996140&spaceid=2016974&tz=-1&cnt=1&act=start"
ALLOWTRANSPARENCY = "true" > < /iframe>
                                    

#17 JavaScript::Write (size: 77, repeated: 1) - SHA256: aa5040129e29d9fd5521128308150fb0db3e301800f50798324c13f9fc4d3b73

                                        < script src = 'http://s10.histats.com/js15.js'
type = 'text/javascript' > < /script>
                                    

#18 JavaScript::Write (size: 109, repeated: 1) - SHA256: d874b69adf44bc36c16fdfd54f3bb39cdad6a5dc822eed37dcbc6a2ad43f476b

                                        < script type = "text/javascript"
src = "http://ads.exoclick.com/popunder2.js"
onload = "exoLaunchPop(3);" > < /script>
                                    

#19 JavaScript::Write (size: 85, repeated: 3) - SHA256: a0091791c0d86aee26eb385233766817a47b6131be336daa734af31c668ac297

                                        < script type = 'text/javascript'
src = 'http://ads.cupidonetwork.com/www/delivery/ajs.php
                                    

#20 JavaScript::Write (size: 10, repeated: 1) - SHA256: d4a31e777c4a531e17ea9063733cd754a7bf7a52e604041bf1a73e029d582a40

                                        ? zoneid = 28
                                    

#21 JavaScript::Write (size: 9, repeated: 2) - SHA256: c4d3a25522eb79a46c9eba4fe44f73d5b3f2e9a02e6a72b572199b217d4d0776

                                        ? zoneid = 4
                                    


HTTP Transactions (114)


Request Response
                                        
                                            GET /tag/vestido/ HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; expires=Mon, 18-Feb-19 23:22:18 GMT; path=/; domain=.videospornosexo.com; HttpOnly wfvt_3486158178=5a8a075537457; expires=Sun, 18-Feb-2018 23:38:05 GMT; Max-Age=1800; path=/; httponly
X-Powered-By: PHP/5.6.30
Vary: Accept-Encoding,Cookie
Link: <http://www.videospornosexo.com/wp-json/>; rel="https://api.w.org/"
Server: cloudflare
CF-RAY: 3ef4ba4c463642af-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9734
Md5:    9e0191a85dc575f0be1090e08c47158b
Sha1:   3be6a29a49dfc0b2693cf40a10bccc8862d99984
Sha256: 32f1e6288497dcdac94139dfa65e7b98817d6c3705a83671760ae7419fc1879e

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /button/buttons.js HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         91.135.34.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=259200
Content-Encoding: gzip
Etag: W/"5a7e059e-d7d8"
Expires: Wed, 21 Feb 2018 22:47:23 GMT
Server: nginx/1.12.2
Content-Length: 15126
Date: Sun, 18 Feb 2018 23:22:19 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15126
Md5:    a27fffc3fbad0965ba25078443e4372c
Sha1:   e257f7b57eca966837e2bc2193c0858aa56061b2
Sha256: 1f13add76cdb261bd122f452e716982028864728da480aa29c31e0f4dc4c7030
                                        
                                            GET /wp-content/themes/BangTube/css/reset.css HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"749-555f4a2ffc2c7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba5122d04273-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   924
Md5:    80ef81f556cb3fcf59cf463ee3b8a312
Sha1:   618e84b3d45316b2bc15b5748099fa9284250a78
Sha256: e2426cf7463f1ab607d67f28abcb7fd8ed7e44344115574213009964358cf505
                                        
                                            GET /wp-content/themes/BangTube/css/text.css HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"47a-555f4a2ffc2c7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba5127e942a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   440
Md5:    bd518d24f3c08775ceea7243d52be8d1
Sha1:   3c7d825c8c2aaadaaff5a3ecb2f7346c8f88ccf5
Sha256: c54b94285f7e006bc0633102421f62e74d16530546fae4fe5d12341498f50140
                                        
                                            GET /wp-content/themes/BangTube/style.css HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"2e0c-555f4a2ffc2c7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba512730426d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3294
Md5:    fbda367b2d3ce133db73f47801297cb7
Sha1:   6c9028e5adbda68c79c5e14da65e71eb50e17bf5
Sha256: 94960d113ed5f28c687ff9153915eedd699ddef4e4d0b059877da33528f81ddf
                                        
                                            GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         108.161.189.121
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 22 Jan 2015 19:53:38 GMT
Etag: W/"04425bbdc6243fc6e54bf8984fe50330"
Server: NetDNA-cache/2.2
Expires: Wed, 13 Feb 2019 23:22:19 GMT
Cache-Control: max-age=31104000
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5969
Md5:    ba373cbdaa527fa77147813bfde39b60
Sha1:   f9fd3e50cf868db4fecac96a74f808f47c81f0e4
Sha256: 1a16f82176c65ee75de3937bf1bcc897e8c41c346714157cf1c760c4d1bd0944
                                        
                                            GET /wp-content/themes/BangTube/red.css HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"4ae-555f4a2ffce7f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba5122374279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   473
Md5:    17b9ad37fa90ecb7a0518d6c03d4edf3
Sha1:   c44f0cecc283c2d7e7bc5061dc3433eab6052bc6
Sha256: 9dece23ea94ab0eb6478ea4a6a0a6da352de7f40df7b01095aa2a2683beb3707
                                        
                                            GET /wp-content/plugins/feedburner-form/control/fbstyle.css?ver=ccea1703f4ae1ea64f3101b4fdd1ba5d HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"6aa-555f4a303397f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba51672742af-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   631
Md5:    741f30f3332d2b09a157479e2bc4ae6c
Sha1:   4a11c992f0dece8fa8f040c7f739755164ba58d9
Sha256: 9479b293e41fb9acebbefdbae931015030cc59da3f79278c7786a07142670c0d

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /button/async-buttons.js HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         91.135.34.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=259200
Content-Encoding: gzip
Etag: W/"5a7e05fd-168f0"
Expires: Wed, 21 Feb 2018 22:53:24 GMT
Server: nginx/1.12.2
Content-Length: 19114
Date: Sun, 18 Feb 2018 23:22:19 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19114
Md5:    46a6a14887f558210b40252fbbb4d9a7
Sha1:   91bbd652cf8f93efd6cb238720f849ccf4a1120f
Sha256: 66634bb0bd524015bddf21c9833fa9f0afd9652820d754e2c3ba21f1ad8c9a5a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/5.6.30
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Sun, 25 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=604800
Server: cloudflare
CF-RAY: 3ef4ba5137764261-OSL


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"176-555f4a3046647"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba51a2ee4273-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   241
Md5:    adf659d40cdbf40aa150c2c765242b7e
Sha1:   139f21a147d8ff38610e3b30224e333e5b2f4825
Sha256: 52082cf36af67385b80b5b67ae80cdef7296ef940bdd67a244bc582b89fb658b
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: W/"2748-555f4a30f4387"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba51c2554279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4034
Md5:    2f89b08855471c7476435ce0bec33ba7
Sha1:   970533f152623df03b5fc6fb793b21889e4e0349
Sha256: d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/BangTube/js/swfobject.js HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"27ec-555f4a2ffc2c7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba5207a44261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3966
Md5:    f16753e888161dda5eb648cd1aecb652
Sha1:   910d2e49f7774ca5ec734f38b659dca032cc926a
Sha256: ead1598f51bb66498ce1210b9eb5219a7e3d85f93f17b29712bfcc7e228b913e

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/BangTube/js/config.js HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"3bb-555f4a2ffbedf"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba51d73c42af-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    ffebfa690eb7b3ccea54c6dc3bb42752
Sha1:   dd53a4d8564b6fe6c917fbe23e04b66c197343ca
Sha256: 50c1f6b9fdf74b10d0b1758d9319498406145d4299925c210bd925ccb34d359c

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/jetpack/css/jetpack.css?ver=5.3 HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Sep 2017 15:08:46 GMT
Etag: W/"1047c-55913894ebdf7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba51a00342a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11820
Md5:    d1e5f286a9b99d81e9c732af8e7d0342
Sha1:   91a340b5b6cee3d94e125320519aa98ef2ae8264
Sha256: 2bfeb249c5e9ac431c437749ae786c6f056099f9bf0ca794973bfc4a19524683

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/BangTube/responsive.css HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"235d-555f4a2ffce7f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba5257b84261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2302
Md5:    968506eb15f2516527f17dfd8f1bdbf8
Sha1:   25f879ad99ab84064cad3ca6723e5dbaa1d2764d
Sha256: 8e5d21e6cab33a76c58acc691e55ad22d0fab2c6e2021441ecc1d63783c2e6dc
                                        
                                            GET /wp-content/themes/BangTube/js/video-js/video-js.min.css HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"4432-555f4a2ffbedf"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba5223054273-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2831
Md5:    b89babe74ae3a9b0ef3e671d02d3ce51
Sha1:   8a26149fd181a804b29f1583b3dd1bab769acad0
Sha256: 325191a42fe48f7d04fccd2ef31fe8facdf73dc4aeadbb4ed7ba26dcf1477737
                                        
                                            GET /wp-content/uploads/2014/09/logo-videos-sexo-porno1.png HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Content-Length: 26440
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "6748-555f4a3052997"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba52575642af-OSL


--- Additional Info ---
Magic:  PNG image, 444 x 110, 8-bit/color RGBA, non-interlaced
Size:   26440
Md5:    24a473de9334b156c8e19d9aba11e925
Sha1:   aa0d16ce8ba2c1a890cbb2d94a0d2b594893710f
Sha256: 6954516fe08235ee63e3854b97c4a237f2bb712e1e658928443e9050d9d98a3b
                                        
                                            GET /wp-content/themes/BangTube/js/video-js/video.min.js HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: W/"f81a-555f4a2ffbedf"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba5242654279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16585
Md5:    d1d78c300df926b86dc011be984b35b0
Sha1:   204ae5cb3671968bb6f3c6da8d60bd4475ab30cb
Sha256: 998be1a545f6b247ee929c6869c62ca9b13ae641bad2c0201427f739f0eecae8

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: W/"17ba0-555f4a30f476f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:19 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba51b74c426d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33789
Md5:    3a80fc6d5f853164f2f53a98659c0c21
Sha1:   3327cc9fd1e64d96894c1322e3ef52dea7fe4cf1
Sha256: c390de9d0d8953f70b165680d6122a3fc871006c67a676030596a4c36e882674

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=ccea1703f4ae1ea64f3101b4fdd1ba5d HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 20 Sep 2017 00:53:50 GMT
Etag: W/"2e8b-5599468be6b97"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba53a05542a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4338
Md5:    2f27df5af00191475ff30c2e32158692
Sha1:   fa724be74b68b03598c65b7c8fc965e0c03d49f7
Sha256: 0da745e388c33620756da87f3cca71a6dbba002632595f563e4c52378b361d90
                                        
                                            GET /wp-content/themes/BangTube/img/default.jpg HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 6724
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "1a44-555f4a2ffc2c7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba54106542a3-OSL


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   6724
Md5:    9709c51babf4d644fe127f8ab60c7b51
Sha1:   48d9f166b9f41ba203a93a6f03fa9ecff2fd6d6e
Sha256: 3762738507179dce702cf133c6a6269b5fab440d3a30d8dc34603cf94854fc12
                                        
                                            GET /wp-content/uploads/fotos-porno/img_9160_mulher-nua-no-funk-em-s-atilde-o-paulo.jpg HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 22938
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: "599a-555f4a306100f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5413804273-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc54.23.100\377"
Size:   22938
Md5:    2527b47080012af7b116598a6d753772
Sha1:   f029b6d950f22a1bd7a11e0d2c756827b0066ccf
Sha256: 9ae6fb011b9e6bea217425e293fe83c36398520ab21a9a86c1d208abd2557da9
                                        
                                            GET /wp-content/uploads/fotos-porno/img_6315_vestido-mais-curto-que-ja-vi-wmv.jpg HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 32386
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: "7e82-555f4a30d342f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5417a4426d-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc53.27.0\377"
Size:   32386
Md5:    9d69676165ad33e25d5420f40d943c3c
Sha1:   fe3ea6059de47a7829095297f1465ac92949a9f4
Sha256: adf28091e826fac64cd75b2575576ac48e69b05530e5c5556adc9fcfb8038f62
                                        
                                            GET /wp-content/uploads/fotos-porno/img_9642_funk-de-vestido.jpg HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 25200
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: "6270-555f4a309733f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5410214261-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc54.23.100\377"
Size:   25200
Md5:    00e920a0a3fdf6edb5300501300806a5
Sha1:   9bdc95e82282dd5eb9b13726e604819d449df1b1
Sha256: 5b4c1e4aa6426559ca1bea2faa0b639e7f3edac7a5046f7ee940f24fcb6cdef1
                                        
                                            GET /wp-content/uploads/fotos-porno/img_7667_safada-de-vestido-hiper-curto-dan-ccedil-ando-funk-www-xvideosadulto-com.jpg HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 25289
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: "62c9-555f4a307311f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5412b84279-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc54.23.100\377"
Size:   25289
Md5:    a92290b3d69c87b91442117d1d988990
Sha1:   a02186808dc7d19764abe0e87a62f6c5a2113ba8
Sha256: 386c971ba5b3965087b698ddba4f68c4f329e8597bfc416527be3656fbb240c9
                                        
                                            GET /videos/thumbslll/80/9c/60/809c6000fdaec40ec5fb4a536f31b175/809c6000fdaec40ec5fb4a536f31b175.16.jpg HTTP/1.1 
Host: img100-673.xvideos.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         185.88.181.6
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Content-Length: 0
Location: http://img-hw.xvideos-cdn.com/videos/thumbslll/80/9c/60/809c6000fdaec40ec5fb4a536f31b175/809c6000fdaec40ec5fb4a536f31b175.16.jpg


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/jetpack/modules/wpgroho.js?ver=ccea1703f4ae1ea64f3101b4fdd1ba5d HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Sep 2017 15:08:46 GMT
Etag: W/"3f7-55913894cc60f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba55d0b042a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   491
Md5:    4bdf599441273825d42144ca34fa69d2
Sha1:   75a1493e734099057e8745ceeb5b7475b743a1e9
Sha256: d77168e165291bbfcbf277427d738bee6aee2a35a1cb9423af733ed042fc7f6c

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /js/gprofiles.js?ver=2018Febaa HTTP/1.1 
Host: s.gravatar.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         192.0.73.2
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Sep 2015 14:13:14 GMT
Etag: W/"55faca7a-50aa"
Content-Encoding: gzip
Expires: Sun, 25 Feb 2018 23:22:20 GMT
Cache-Control: max-age=604800


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6790
Md5:    ff36b4357f0ea3917228ae97b5e6235e
Sha1:   74ccb81763373e358dc62e3289aaf53c11c2fdcc
Sha256: b1ad3f05ad77fb3147e88ac46f9af538ab7a79e072fd3b53a4c6017656980815
                                        
                                            GET /wp-content/uploads/fotos-porno/img_8948_gostosas-dan-ccedil-ando-no-baile-funk.jpg HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 26187
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: "664b-555f4a30c807f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5417ae42af-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc54.23.100\377"
Size:   26187
Md5:    30fb4c84c4567ee20adb90318ffca885
Sha1:   844923584a5d03e5104b156dfa8af17334b234c8
Sha256: 0ea63d35c6523d11f474e523997c1b0115bd3263e71399b7d14df801f252d5e2
                                        
                                            GET /videos/thumbslll/41/32/88/41328896bf3c1a4073b8662dc19309d8/41328896bf3c1a4073b8662dc19309d8.27.jpg HTTP/1.1 
Host: img100-880.xvideos.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         185.88.181.10
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Content-Length: 0
Location: http://img-hw.xvideos-cdn.com/videos/thumbslll/41/32/88/41328896bf3c1a4073b8662dc19309d8/41328896bf3c1a4073b8662dc19309d8.27.jpg


--- Additional Info ---
                                        
                                            GET /ads.php?type=300x250&login=suportevertical&cat=2&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=346526&idsite=145308 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   425
Md5:    17ee1b5442f9db242de70b47b81773a1
Sha1:   1d9d14bbcbeb7b886ccbe4ac600e1f1adb5d2c7f
Sha256: 1908985caa65dd5fea8397a3745243478ac593510dddebc6fd29b078f87f3ecc
                                        
                                            GET /adspace/2016974.js HTTP/1.1 
Host: adspaces.ero-advertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         185.70.212.101
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: close
Expires: Tue, 03 Jul 2001 06:00:00 GMT
Last-Modified: Sun, 18 Feb 2018 23:22:20 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NOI DSP COR TAIa SAMa NOR"
Set-Cookie: uvid=56b946751aef1b0f274a833ad40921c7; expires=Mon, 18-Feb-2019 23:22:20 GMT; Max-Age=31536000; path=/; domain=.ero-advertising.com uvid=56b946751aef1b0f274a833ad40921c7; expires=Mon, 18-Feb-2019 23:22:20 GMT; Max-Age=31536000; path=/; domain=.eroadvertising.com
X-Backend-Server: nl1-web213-51


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   846
Md5:    36c19e348dc9a94d02b8b6b285b80595
Sha1:   8006ce5778f35cd7d385370e443011099171be16
Sha256: 13ad0e16ed4a3e27f6a2fa175fcbb18766303392451cbc9fc883f83c56c454ac
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=ccea1703f4ae1ea64f3101b4fdd1ba5d HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:19 GMT
Etag: W/"576-555f4a30f5af7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:20 GMT
Cache-Control: public, max-age=432000
Server: cloudflare
CF-RAY: 3ef4ba55d3e64273-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   756
Md5:    77ce65aa27658b26944312e742e1d204
Sha1:   952f595220a39db2f6c8e65c648fa6b1ecf92024
Sha256: 277851a5b1d095133da0244edd6952c2f6fe5ec1b25633812001abb796681616

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /splash.php?idzone=1321290&type=3 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13203
Md5:    b2ab095f11e1156829c1844336ec72a7
Sha1:   8fca6e1b3535b85518eaa9ab0356c9e32bd898c1
Sha256: 2924fbc0583685befa7e32d91eec00cb04ad85d4f620429774ed30294a20cd4e
                                        
                                            GET /96/2e/fa/962efaf219a90ed1bff9f6e3b69ad1e0.js HTTP/1.1 
Host: pl154945.puhtml.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         213.196.2.2
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.1
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 25296
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   25296
Md5:    21d34776a0bef3fc1324bc170b3096fd
Sha1:   edac527f43d2d00c3e5af40b5afb98520a969408
Sha256: 4c60ac22df5f52e83148134db3a16acb79d9ce034016c62399f5b5e5f85dab42
                                        
                                            GET /js/soboo2.js HTTP/1.1 
Host: www.seomaster.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         159.203.95.24
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.4.6 (Ubuntu)
Date: Sun, 18 Feb 2018 23:22:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 30 Sep 2016 22:11:43 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   36636
Md5:    97ec4d560976f51973af9ae04fbad4d3
Sha1:   74fcbbb7b8ab5dee24de4d125387a6107d70226a
Sha256: 5e030ef2aa3ac61ebaa5143630170b478deb78b03a8e8d1fe9f73518cbf0f704
                                        
                                            GET /go/page/js_ad_pop?plain_text=1&skip_lpo=1&freq_cap=1&win_width=1024&win_height=768&dcb=casadinhastraidoras.com&page=gallery&pid=g1403642-pmo&lang=portuguese HTTP/1.1 
Host: banners.adultfriendfinder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         69.165.96.18
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Sun, 18 Feb 2018 23:20:18 GMT
Server: Apache
X-PERF: 0.071964,0.036662,TM_3_0.0023080,DB_4_0.0043700,CD_9_0.0059130,FS_3_0.0014310,PK_1_0.0000720,CE_19_0.0212080
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3171
Age: 122
Via: 1.1 varnish-v4
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3171
Md5:    4d48648bfcd630ceb9c3f6cdfe0b9a85
Sha1:   c2be64a8546480e82534234395768daf241f2068
Sha256: cec7c7190e8122e17de7150cf5359592ec7a3c9d46a4ced5c35c3c03466afcad
                                        
                                            GET /videos/thumbslll/9a/12/b5/9a12b58373af7b8d544ccd63abb1f9e0/9a12b58373af7b8d544ccd63abb1f9e0.5.jpg HTTP/1.1 
Host: img-l3.xvideos.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         8.248.121.254
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 18 Feb 2018 23:22:20 GMT
Content-Length: 328
Connection: keep-alive
Cache-Control: max-age=2419200
Expires: Sun, 18 Mar 2018 23:22:20 GMT
Server: nginx
Access-Control-Allow-Origin: *
Age: 0


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   328
Md5:    43c2f06f695cc2ea70f54049e295eda2
Sha1:   d14865834f68570b217821b72e66bc34257101d5
Sha256: 393cf2bfde446e675ee167d5673e2f8421f40a282cd7ce0a2fbde64ddf89ce38
                                        
                                            GET /videos/thumbslll/80/9c/60/809c6000fdaec40ec5fb4a536f31b175/809c6000fdaec40ec5fb4a536f31b175.16.jpg HTTP/1.1 
Host: img100-673.xvideos.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         185.88.181.6
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Content-Length: 0
Location: http://img-hw.xvideos-cdn.com/videos/thumbslll/80/9c/60/809c6000fdaec40ec5fb4a536f31b175/809c6000fdaec40ec5fb4a536f31b175.16.jpg


--- Additional Info ---
                                        
                                            GET /videos/thumbslll/41/32/88/41328896bf3c1a4073b8662dc19309d8/41328896bf3c1a4073b8662dc19309d8.27.jpg HTTP/1.1 
Host: img100-880.xvideos.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         185.88.181.10
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Content-Length: 0
Location: http://img-hw.xvideos-cdn.com/videos/thumbslll/41/32/88/41328896bf3c1a4073b8662dc19309d8/41328896bf3c1a4073b8662dc19309d8.27.jpg


--- Additional Info ---
                                        
                                            GET /wp-content/themes/BangTube/img/red/cats.gif HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/red.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 1151
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "47f-555f4a2ffca97"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5bb1bb42a3-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 23
Size:   1151
Md5:    ed13b3711505d0c76bbe1f572051598c
Sha1:   48ecb534e22109a30c88a3191fe0d679a87e9b0b
Sha256: 83bb52f904340fe746d004077e5751784c4a071b77f423ca920405dd7e013912
                                        
                                            GET /wp-content/themes/BangTube/img/topmenubullet.png HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/style.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 978
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "3d2-555f4a2ffca97"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5bb5454273-OSL


--- Additional Info ---
Magic:  PNG image, 2 x 18, 8-bit/color RGBA, non-interlaced
Size:   978
Md5:    b70d78467ab922d8c069b0a67a67cdad
Sha1:   ca029785731fc178fc8990fa769018ba218edb31
Sha256: fc55e8509a73a1064cf83e17fb6d733f2be4eede9a465c993e0f31790f64f001
                                        
                                            GET /wp-content/themes/BangTube/img/transbg.png HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/style.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 944
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "3b0-555f4a2ffce7f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5b91e64261-OSL


--- Additional Info ---
Magic:  PNG image, 20 x 20, 8-bit/color RGBA, non-interlaced
Size:   944
Md5:    d7289395be169e8f58bdbe05446ebfa0
Sha1:   0759c38e46c6df5bd528bf092718b6dfa63735b5
Sha256: 899cbdeb600939bb548fd33ecb8862050e782a9666b8495451e067a5fb4c1178
                                        
                                            GET /wp-content/themes/BangTube/img/search.png HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/style.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 1268
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "4f4-555f4a2ffce7f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5b942b4279-OSL


--- Additional Info ---
Magic:  PNG image, 20 x 20, 8-bit/color RGBA, non-interlaced
Size:   1268
Md5:    d9a09e15873990a84ec9eeb29938046b
Sha1:   28356004476b901838283e55619bf918ed66e0ab
Sha256: 16b96cc916a8b9d5e59c531e4f896729067b81688689038ff56558c3fd7ed64a
                                        
                                            GET /wp-content/themes/BangTube/img/general/catsli.gif HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/red.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 1101
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "44d-555f4a2ffca97"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5bb10042af-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 7 x 4
Size:   1101
Md5:    0ccbd251943567793173693b503b02d4
Sha1:   866b7970f3853db0c5f65a90f31e8158b5e3775e
Sha256: ebdab0c74d9c0e1dd04087013aa52ccb17bad91f80416b184f054100c5ad5d68
                                        
                                            GET /wp-content/themes/BangTube/img/titlebarbullet_orange.png HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/style.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 978
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "3d2-555f4a2ffce7f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5bf5544273-OSL


--- Additional Info ---
Magic:  PNG image, 11 x 9, 8-bit/color RGBA, non-interlaced
Size:   978
Md5:    2e3995455794f497f99cbfeb2cec2853
Sha1:   7fd1524bbeaea0c74eddf64e2419e9a8e475166c
Sha256: 9fa50155b934a55c6c5058193e3337b2396dc6bda66be7a6ede829efa82e44fa
                                        
                                            GET /wp-content/themes/BangTube/img/titlebar.gif HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/style.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 1353
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "549-555f4a2ffca97"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5bf1d142a3-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 2 x 41
Size:   1353
Md5:    f95170a6a47e29e27cbe501a39349a83
Sha1:   56c9e951c65ef3589826e90fe875c06fcc62e2ac
Sha256: ada7f981c14bf6016b5ed19bb74011b14a5fe1f66a3bed1ef019e7f65e9e84aa
                                        
                                            GET /slidebar/script.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID} HTTP/1.1 
Host: promo.awempire.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         93.93.53.199
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:21 GMT
Transfer-Encoding: chunked
Connection: close


--- Additional Info ---
Magic:  ASCII C++ program text, with CRLF line terminators
Size:   15570
Md5:    220f72fda82695f8a742473f04383ac9
Sha1:   fb0e8c2067b3449a282dd81190a879625a4d49f3
Sha256: 7b56daf7f1eea02848274a2f4e857300ea87ead2767f278bb004522fd46b399e
                                        
                                            GET /wp-content/themes/BangTube/img/red/bg.jpg HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/red.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 106343
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "19f67-555f4a2ffca97"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:21 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5b9117426d-OSL


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   106343
Md5:    2c542559ff0d428b51745b60fc38ad4d
Sha1:   3870b2a33ea1bac4e98f5b7f05718f066e0bf6e6
Sha256: c06ed35dbc1009e05ab601717e2ee4c16f454507bf65d614839c1a65a2afa82d
                                        
                                            GET /www/delivery/ajs.php?zoneid=4&cb=11992228874&charset=UTF-8&loc=http%3A//www.videospornosexo.com/tag/vestido/ HTTP/1.1 
Host: ads.cupidonetwork.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         104.27.178.122
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=de089b6202e8f0d3dcf1882844d1bf77c1518996141; expires=Mon, 18-Feb-19 23:22:21 GMT; path=/; domain=.cupidonetwork.com; HttpOnly OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/ OAID=240afd1cbf57da76e4faba85426bfff3; expires=Mon, 18-Feb-2019 23:08:07 GMT; Max-Age=31536000; path=/
X-Powered-By: PHP/5.6.30
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Server: cloudflare
CF-RAY: 3ef4ba5c740742bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    023d06845685ef0e569e74b1152c8b81
Sha1:   9e286176bed8fa93c87fa7e91641aeda0664fdfc
Sha256: de8209b03a4658ab0fc9fa8d214ff3d01e96c5eb8ff9fcca898ace4ca6ca4c61
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=119234, public, no-transform, must-revalidate
Last-Modified: Sun, 18 Feb 2018 22:14:11 GMT
Expires: Tue, 20 Feb 2018 10:14:11 GMT
Etag: "33f8c97248ab4cf81dbf7ef8f47eec77843859d9"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    7946de914298786c9583780641f58d62
Sha1:   33f8c97248ab4cf81dbf7ef8f47eec77843859d9
Sha256: 2274ed7639e491bee918ef487b96004e3c53ad3e22b69292c4ece6cbc112ec7e
                                        
                                            GET /www/images/cda0a05ab5cd310c05928e80d7874f6d.gif HTTP/1.1 
Host: ads.cupidonetwork.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=de089b6202e8f0d3dcf1882844d1bf77c1518996141; OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=240afd1cbf57da76e4faba85426bfff3

                                         
                                         104.27.178.122
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 29766
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:35:28 GMT
Etag: "7446-555f51d343ee7"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Mon, 19 Feb 2018 03:22:21 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba5d242942bb-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   29766
Md5:    cda0a05ab5cd310c05928e80d7874f6d
Sha1:   1720282a8c04f9c1f884179112085131a3fb2dd1
Sha256: c2e8958397ff3918617c58f64af2d100e2006d23f858845935c5a562daba70f6
                                        
                                            GET /videos/thumbslll/9a/12/b5/9a12b58373af7b8d544ccd63abb1f9e0/9a12b58373af7b8d544ccd63abb1f9e0.5.jpg HTTP/1.1 
Host: img-l3.xvideos.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         8.248.121.254
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Content-Length: 328
Connection: keep-alive
Cache-Control: max-age=2419200
Expires: Sun, 18 Mar 2018 23:22:21 GMT
Server: nginx
Access-Control-Allow-Origin: *
Age: 0


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   328
Md5:    43c2f06f695cc2ea70f54049e295eda2
Sha1:   d14865834f68570b217821b72e66bc34257101d5
Sha256: 393cf2bfde446e675ee167d5673e2f8421f40a282cd7ce0a2fbde64ddf89ce38
                                        
                                            GET /videos/thumbslll/41/32/88/41328896bf3c1a4073b8662dc19309d8/41328896bf3c1a4073b8662dc19309d8.27.jpg HTTP/1.1 
Host: img-hw.xvideos-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         151.139.128.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1477728744
Cache-Control: public, max-age=3270006
Content-Length: 23024
X-HW: 1518996141.dop011.am5.t,1518996141.cds008.am5.s,1518996141.dop001.da2.r,1518996141.cds049.da2.c,1518996141.cds008.am5.p
Access-Control-Allow-Origin: *
Last-Modified: Sat, 29 Oct 2016 08:12:24 GMT


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   23024
Md5:    7f1cf227d8a7ba90483d1ac3e44790e7
Sha1:   c4904c2221fa17aca63791ecc6e6ba8be9031d2a
Sha256: 7ec732710f65f051ed5c4516da352a226862e7e6d32637b50fdbdf53d4b42b41
                                        
                                            GET /videos/thumbslll/80/9c/60/809c6000fdaec40ec5fb4a536f31b175/809c6000fdaec40ec5fb4a536f31b175.16.jpg HTTP/1.1 
Host: img-hw.xvideos-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         151.139.128.10
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 18 Feb 2018 23:22:21 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Cache-Control: max-age=60
Content-Length: 329
X-HW: 1518996141.dop004.am5.t,1518996141.cds019.am5.s,1518996141.dop001.da2.r,1518996141.cds031.da2.p,1518996141.cds019.am5.p
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   329
Md5:    7fb2b56623822ab4b23c43665482aca9
Sha1:   15f04e40224f31767c2f61dbe05b34128a0f130c
Sha256: 4002d911d94a806c4100cc10aa41c8b5da77482306253897624e6c7bb1dd4f4b
                                        
                                            GET /videos/thumbslll/80/9c/60/809c6000fdaec40ec5fb4a536f31b175/809c6000fdaec40ec5fb4a536f31b175.16.jpg HTTP/1.1 
Host: img-hw.xvideos-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         151.139.128.10
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 18 Feb 2018 23:22:22 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Cache-Control: max-age=59
Content-Length: 329
X-HW: 1518996142.dop011.am5.t,1518996142.cds019.am5.c
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   329
Md5:    7fb2b56623822ab4b23c43665482aca9
Sha1:   15f04e40224f31767c2f61dbe05b34128a0f130c
Sha256: 4002d911d94a806c4100cc10aa41c8b5da77482306253897624e6c7bb1dd4f4b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Feb 2018 23:22:22 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=120835, public, no-transform, must-revalidate
Last-Modified: Sun, 18 Feb 2018 22:42:17 GMT
Expires: Tue, 20 Feb 2018 10:42:17 GMT
Etag: "bddf8538130248d95e33429caed3ece659980165"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    9547370c8a063767a70c73e3fed224c2
Sha1:   bddf8538130248d95e33429caed3ece659980165
Sha256: ae82db174390d3eb911f46a9db6cf9cabbfb97a7d1209726c37dbf0025b52d6e
                                        
                                            GET /ads.js HTTP/1.1 
Host: ads.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         68.232.35.135
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: max-age=10800
Date: Sun, 18 Feb 2018 23:22:22 GMT
Expires: Mon, 19 Feb 2018 02:22:22 GMT
Last-Modified: Sun, 18 Feb 2018 20:37:32 GMT
Server: ECS (arn/4667)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 443


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   443
Md5:    cbb8b45f5ef5845de6de73b8ffef0f61
Sha1:   5b78b6a25d90c45daeee42605f966a1a33ac94f0
Sha256: 93a4268dd44a091102944c734b66dc93af7b6a86f8d2944108955ed597426560
                                        
                                            GET /wp-content/js/devicepx-jetpack.js?ver=201807 HTTP/1.1 
Host: s0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         192.0.77.32
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5841a56f-52b6"
Content-Encoding: gzip
Expires: Sun, 10 Feb 2019 19:03:27 GMT
Cache-Control: max-age=31536000
X-ac: 4.arn _dca
X-nc: HIT arn 32


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3163
Md5:    844b0e2ae8eba4159dd5edd8efbde50c
Sha1:   757861da25bea58b1bc03203f65ae93673cfc065
Sha256: ef84d445c23339e2c3742857d7e020c89d639f1ddc434b6f6a585ac9907bbb92
                                        
                                            GET /ads-iframe-display.php?idzone=346524&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142443&sub=&tags=&screen_resolution=1176x885&email= HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; expires=Thu, 03-Feb-2078 23:22:22 GMT; Max-Age=1892160000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pE%B3%D6%C3%84%88%D5B%89%A5%7DDx%F7%A4%7E%FB%19%98y%F0%1C%21%DDL%12%8D%16%D8YG%8A%EE%DC%00%0B%97%0C%96%09%ED%AB%85%B7%F0%AA%C6%7E%18%3AT%B2%F5%9E%60u%B9%FCnh%08%BCK%89%E3%3CNG%D8%CF%10%FD%05%DF%19%2A%25%C0%D6%FA%00%A3%8F%24%0B; expires=Mon, 19-Feb-2018 23:22:22 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   657
Md5:    e4ed899e68a112f2cd0edbac9229e889
Sha1:   b37fed3b35dbbd6d176d1408502f5cb7b28e66eb
Sha256: 321ec58e11e570fb44f0a8a6efc1f1c4b57ca9b7cfc07061ce27cd40922ab642
                                        
                                            GET /www/delivery/ajs.php?zoneid=28&cb=66771540696&charset=UTF-8&loc=http%3A//www.videospornosexo.com/tag/vestido/ HTTP/1.1 
Host: ads.cupidonetwork.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=de089b6202e8f0d3dcf1882844d1bf77c1518996141; OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=240afd1cbf57da76e4faba85426bfff3

                                         
                                         104.27.178.122
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.30
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=240afd1cbf57da76e4faba85426bfff3; expires=Mon, 18-Feb-2019 23:08:08 GMT; Max-Age=31536000; path=/ _OACCAP[1]=1; expires=Mon, 18-Feb-2019 23:08:08 GMT; Max-Age=31536000; path=/ _OASCCAP[1]=1; path=/ _OACBLOCK[1]=1518995288; expires=Tue, 20-Mar-2018 23:08:08 GMT; Max-Age=2592000; path=/
Server: cloudflare
CF-RAY: 3ef4ba62653342bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    fe90c26b400015c0364608a19b872a26
Sha1:   2fa87e29aed6379888fcfa34e559cdfe06ab4476
Sha256: 13dbc40470150d53c34419f25f6c28309797bb078da33837e68d508f32a7abe5
                                        
                                            GET /e-201807.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         192.0.76.3
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5a0c8e17-3298"
Content-Encoding: gzip
Expires: Sun, 10 Feb 2019 19:03:27 GMT
Cache-Control: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2896
Md5:    595b2ae428e0d2c0bc37c7c1c3f061d7
Sha1:   aca03d341cb522977ad187def779916c77054512
Sha256: f54bb71cebef34bf2284fb4e6cdf5341d065888d8221d002c37d7ec106a94301
                                        
                                            GET /wp-content/themes/BangTube/img/libullet.png HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/style.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Feb 2018 23:22:22 GMT
Content-Length: 947
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "3b3-555f4a2ffc6af"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:22 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba63a5854279-OSL


--- Additional Info ---
Magic:  PNG image, 6 x 5, 8-bit/color RGBA, non-interlaced
Size:   947
Md5:    0676ce9a3fe8571bd53b2d3d7b602e0d
Sha1:   b67422492e3b2b918d8283bbcc81c9217b4cc338
Sha256: 5eb5d191ee58caf833bddbc81f19b409660f5b379066b7bc38925cef2d4fd4e5
                                        
                                            GET /wp-content/themes/BangTube/img/h2bullet.png HTTP/1.1 
Host: www.videospornosexo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/wp-content/themes/BangTube/style.css
Cookie: __cfduid=d5d34871c06ca5863b12faa2adb98c8c11518996138; wfvt_3486158178=5a8a075537457; __unam=c0d59f6-161ab39af48-15dd5064-1

                                         
                                         104.28.6.109
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Feb 2018 23:22:22 GMT
Content-Length: 964
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:01:18 GMT
Etag: "3c4-555f4a2ffca97"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Fri, 23 Feb 2018 23:22:22 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba6373754261-OSL


--- Additional Info ---
Magic:  PNG image, 9 x 9, 8-bit/color RGBA, non-interlaced
Size:   964
Md5:    1c3800ed92373d99c0724f5b58216e3c
Sha1:   99d4719c3e0413e6532e6d45a7f16624c4a9c3f7
Sha256: 2ddeaafe311aacc13e97e9cdcbea1f1ab0a5aa7dc9fcfaf3ce776cfe41c0006c
                                        
                                            GET /www/images/25c886424ad868e6fd1f01db2d486ec3.jpg HTTP/1.1 
Host: ads.cupidonetwork.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=de089b6202e8f0d3dcf1882844d1bf77c1518996141; OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=240afd1cbf57da76e4faba85426bfff3; _OACCAP[1]=1; _OASCCAP[1]=1; _OACBLOCK[1]=1518995288

                                         
                                         104.27.178.122
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Feb 2018 23:22:22 GMT
Content-Length: 78605
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:35:28 GMT
Etag: "1330d-555f51d352d2f"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Mon, 19 Feb 2018 03:22:22 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba63656442bb-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   78605
Md5:    25c886424ad868e6fd1f01db2d486ec3
Sha1:   bcb6495188767b9b310cdd7d1d7ae700e8241955
Sha256: eb270f0357a6b65514ac48e0fb6239ebf98ba9930613def394ee1765c24aa451
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=suportevertical&cat=2&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=346526&idsite=145308&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142676 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pE%B3%D6%C3%84%88%D5B%89%A5%7DDx%F7%A4%7E%FB%19%98y%F0%1C%21%DDL%12%8D%16%D8YG%8A%EE%DC%00%0B%97%0C%96%09%ED%AB%85%B7%F0%AA%C6%7E%18%3AT%B2%F5%9E%60u%B9%FCnh%08%BCK%89%E3%3CNG%D8%CF%10%FD%05%DF%19%2A%25%C0%D6%FA%00%A3%8F%24%0B

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; expires=Thu, 03-Feb-2078 23:22:22 GMT; Max-Age=1892160000; domain=exoclick.com impressions=x%9Cm%8CK%0A%800%0C%05%EF%92%134%92jM%0F%23A%AA%06%B4%A8%AD%0B%11%EF%EEo%EB%E6%C1%BC%81%11F%3E%94%0B%AC%AC%C1%D2%0B%13%1F%E9%1E%184%27%F0%B7%F1%2Ff%9D%C2%83h%D1%D5u%89%F4%FC%8Ea%94%94%7F%1DV%0C%AD%CC%B3%C6%BE%E9%D6%B0l%21%B6%3B%7C1%242%E0%CF%F3%02%A3%EB%24%0C; expires=Mon, 19-Feb-2018 23:22:22 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   684
Md5:    bfc7d6243737daaa0823bf5dd1d4ecff
Sha1:   290deb35a2db862a05ba8898f6f3502340bc0d94
Sha256: 662f2fd94ffcf660260a97a57368bd8e7df5f9a0aecd0e20c1e95459e67954bf
                                        
                                            GET /ads-iframe-display.php?idzone=346526&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142797&sub=&tags=&screen_resolution=1176x885&email= HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pE%B3%D6%C3%84%88%D5B%89%A5%7DDx%F7%A4%7E%FB%19%98y%F0%1C%21%DDL%12%8D%16%D8YG%8A%EE%DC%00%0B%97%0C%96%09%ED%AB%85%B7%F0%AA%C6%7E%18%3AT%B2%F5%9E%60u%B9%FCnh%08%BCK%89%E3%3CNG%D8%CF%10%FD%05%DF%19%2A%25%C0%D6%FA%00%A3%8F%24%0B

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; expires=Thu, 03-Feb-2078 23:22:22 GMT; Max-Age=1892160000; domain=exoclick.com impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27h%D4R%C7%C3%84%84%D5%40E%A5-%22%BC%7BR%DB%D6m%3E%BC%FF%E1%3FO%82.%26%81%BA%AE%B0q%9E%14%5D%B1%04%8C%9C%228%26t%0F%26%9E%C3%835%1Ak%1BT%A2%F4%86%60%F21%7Dn%A8%09%3A%BF%AE%BC%0Cm%BF%87%ED%08Kw%C2%7B%86JU%E0r%D1%0A%89R%9B%7F%B5%F9%06%18%05F%1C; expires=Mon, 19-Feb-2018 23:22:22 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    443e35b3abd5c5132415cf83caf394de
Sha1:   62b4f51159ea2823730e16a0d602a1b0de8bcc18
Sha256: 35b0b78f3869c3ade37d2728468c9ba7680a85d95b35c3b50f51196c75799d4a
                                        
                                            GET /www/delivery/ajs.php?zoneid=4&cb=17303852143&charset=UTF-8&loc=http%3A//www.videospornosexo.com/tag/vestido/ HTTP/1.1 
Host: ads.cupidonetwork.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=de089b6202e8f0d3dcf1882844d1bf77c1518996141; OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=240afd1cbf57da76e4faba85426bfff3; _OACCAP[1]=1; _OASCCAP[1]=1; _OACBLOCK[1]=1518995288

                                         
                                         104.27.178.122
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.30
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: _OACBLOCK[1]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ %5FOACBLOCK%5B1%5D=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ _OACCAP[1]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ %5FOACCAP%5B1%5D=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ _OASCCAP[1]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ %5FOASCCAP%5B1%5D=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ OAID=240afd1cbf57da76e4faba85426bfff3; expires=Mon, 18-Feb-2019 23:08:08 GMT; Max-Age=31536000; path=/ _OACCAP[1]=1; expires=Mon, 18-Feb-2019 23:08:08 GMT; Max-Age=31536000; path=/ _OASCCAP[1]=1; path=/ OACBLOCK=1.1518995288; expires=Tue, 20-Mar-2018 23:08:08 GMT; Max-Age=2592000; path=/ OACCAP=1.1; expires=Mon, 18-Feb-2019 23:08:08 GMT; Max-Age=31536000; path=/ OASCCAP=1.1; path=/
Server: cloudflare
CF-RAY: 3ef4ba64b59042bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    d2409a92960bdad0d6246aedaee8c4e4
Sha1:   7bd6b051c8f6127cff1811feb4be7f9fb127f9fe
Sha256: b3254f91418f148364e131ffd0e98f83a8944cf19a1e552b8d0fdd11d40e471a
                                        
                                            GET /banads/view.php?time=1518996140&spaceid=2016974&tz=-1&cnt=1&act=start HTTP/1.1 
Host: adspaces.ero-advertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: uvid=56b946751aef1b0f274a833ad40921c7

                                         
                                         185.70.212.101
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:22 GMT
Transfer-Encoding: chunked
Connection: close
P3P: CP="NOI DSP COR TAIa SAMa NOR"
Expires: Tue, 03 Jul 2001 06:00:00 GMT
Last-Modified: Sun, 18 Feb 2018 23:22:22 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
X-Backend-Server: nl1-web213-25
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1763
Md5:    7086173e15ef0140fb73cd3c72c87564
Sha1:   bfdc4e5fd829c32b664142756110e908bf72bb23
Sha256: aa4b150e062509476bc66df81512508069793521456cd291447e4593c772842a
                                        
                                            GET /library/530318/d12db84386239d91f51e7cd39f3d17f552ad9e3f.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?idzone=346524&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142443&sub=&tags=&screen_resolution=1176x885&email=
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pE%B3%D6%C3%84%88%D5B%89%A5%7DDx%F7%A4%7E%FB%19%98y%F0%1C%21%DDL%12%8D%16%D8YG%8A%EE%DC%00%0B%97%0C%96%09%ED%AB%85%B7%F0%AA%C6%7E%18%3AT%B2%F5%9E%60u%B9%FCnh%08%BCK%89%E3%3CNG%D8%CF%10%FD%05%DF%19%2A%25%C0%D6%FA%00%A3%8F%24%0B

                                         
                                         68.232.35.135
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Date: Sun, 18 Feb 2018 23:22:22 GMT
Etag: "5a39509b-724f1"
Expires: Mon, 18 Feb 2019 23:22:22 GMT
Last-Modified: Tue, 19 Dec 2017 17:47:07 GMT
Server: ECS (arn/459E)
X-Cache: HIT
Content-Length: 468209


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   468209
Md5:    01704ab9ae0e1308231a8d848811b838
Sha1:   d12db84386239d91f51e7cd39f3d17f552ad9e3f
Sha256: 8fb1067230a4d48d5a53e91d116053b43f97de253e8831918e8abd402945916d
                                        
                                            GET /ads-iframe-display.php?idzone=346526&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996143080&sub=&tags=&screen_resolution=1176x885&email= HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27h%D4R%C7%C3%84%84%D5%40E%A5-%22%BC%7BR%DB%D6m%3E%BC%FF%E1%3FO%82.%26%81%BA%AE%B0q%9E%14%5D%B1%04%8C%9C%228%26t%0F%26%9E%C3%835%1Ak%1BT%A2%F4%86%60%F21%7Dn%A8%09%3A%BF%AE%BC%0Cm%BF%87%ED%08Kw%C2%7B%86JU%E0r%D1%0A%89R%9B%7F%B5%F9%06%18%05F%1C

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; expires=Thu, 03-Feb-2078 23:22:23 GMT; Max-Age=1892160000; domain=exoclick.com impressions=x%9C%9D%8DA%0A%840%10%04%FF2%2Fp%26%D1%24%93%C7%2CA%B2%3A%A0%A2%9B%ECa%11%FF%BEA%AF9%88%97%86%EA%86%AE%C0%C4%BB0%A1i%1B%EC%7C%60%CD%7B%2A%01%A3%E4%04%5E%18%FD%89Y%E6xb%8B%D6%B9%0E5%95%DE2L%21%E5%EA%86%86%A1%0F%EB%2A%CB%F0z%7F%E2%F6%8DK%FF%83%EB%0C%B5n%C0%1FEK%0A%95%B1%15-%3D%D0%AA%7B%DA%E3%0F%18%89F%1E; expires=Mon, 19-Feb-2018 23:22:23 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   685
Md5:    93ad0ff188c9db46f731dc125c6894b8
Sha1:   a0f8c0af4d7b855ca2d7e5f8b197187c71017e61
Sha256: 93f226009d86a5ec6ad18abcb3c5a6f543dd0c8dbf6f6692c17579696c2fa282
                                        
                                            GET /datanew/banners/64637/4084560.gif HTTP/1.1 
Host: data.eroadvertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://adspaces.ero-advertising.com/banads/view.php?time=1518996140&spaceid=2016974&tz=-1&cnt=1&act=start

                                         
                                         104.16.141.19
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Feb 2018 23:22:23 GMT
Content-Length: 53047
Connection: keep-alive
Set-Cookie: __cfduid=d8bf531a75171e811bec4288fe0d8e00d1518996143; expires=Mon, 18-Feb-19 23:22:23 GMT; path=/; domain=.eroadvertising.com; HttpOnly
Cache-Control: public, max-age=315360000
Cf-Bgj: imgq:85
Cf-Polished: origSize=53507
Etag: "5a1ecb71-d103"
Expires: Wed, 16 Feb 2028 23:22:23 GMT
Last-Modified: Wed, 29 Nov 2017 15:00:01 GMT
X-Compressor: static175
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba6766974285-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   53047
Md5:    ee062566472f5dac3badf0fd2a00a67c
Sha1:   c14eac86ee35a55a8122c19e9d3081a19fdbaba7
Sha256: 6b2da0a0a3cc14dfd433f63996b6d49211d41042910143d5c0bc7dcd8a27ae33
                                        
                                            GET /www/images/d658a88df8246ca0efc2f77ae566330e.gif HTTP/1.1 
Host: ads.cupidonetwork.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __cfduid=de089b6202e8f0d3dcf1882844d1bf77c1518996141; OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=240afd1cbf57da76e4faba85426bfff3; _OACCAP[1]=1; _OASCCAP[1]=1; OACBLOCK=1.1518995288; OACCAP=1.1; OASCCAP=1.1

                                         
                                         104.27.178.122
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Feb 2018 23:22:23 GMT
Content-Length: 144608
Connection: keep-alive
Last-Modified: Fri, 04 Aug 2017 22:35:28 GMT
Etag: "234e0-555f51d34ac47"
CF-Cache-Status: MISS
Vary: Accept-Encoding
Expires: Mon, 19 Feb 2018 03:22:23 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 3ef4ba65f5c042bb-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   144608
Md5:    d658a88df8246ca0efc2f77ae566330e
Sha1:   235abcaf40efbe4db1f54ff91ef389d388a43f33
Sha256: 40249fa413c40fa15c71196a371e8e9d1e324016fcff3619adb1d280cee575de
                                        
                                            GET /g.gif?v=ext&j=1%3A5.3&blog=71346554&post=0&tz=0&srv=www.videospornosexo.com&host=www.videospornosexo.com&ref=&rand=0.6293754752206192 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         192.0.76.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:24 GMT
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sun, 18 Feb 2018 23:16:28 GMT
Expires: Mon, 19 Feb 2018 01:16:28 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17172
Age: 356
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17172
Md5:    43adefe535269f3b75e0f229d0dba4d6
Sha1:   5e3bed19757401b3aa6c8ab8b5f26aa17add8a3a
Sha256: fc7f9d5234f97de0433021d02e8969a93003d90bf16d40a9cb2d8f5c7bfaa398
                                        
                                            GET /soboo2/css/soboo2.css HTTP/1.1 
Host: www.seomaster.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         159.203.95.24
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.4.6 (Ubuntu)
Date: Sun, 18 Feb 2018 23:22:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 24 May 2016 18:12:01 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2630
Md5:    b0d79217c8d73a972fa58b48baa568f0
Sha1:   8c0735a7ae1685adb7b418ed34506d19219ecfb1
Sha256: 952a6eee875d05069bd9bfd26070805940a8b546539811c3605fbe738a481d93
                                        
                                            GET /ads-priv.php?i=1 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9C%9D%8DA%0A%840%10%04%FF2%2Fp%26%D1%24%93%C7%2CA%B2%3A%A0%A2%9B%ECa%11%FF%BEA%AF9%88%97%86%EA%86%AE%C0%C4%BB0%A1i%1B%EC%7C%60%CD%7B%2A%01%A3%E4%04%5E%18%FD%89Y%E6xb%8B%D6%B9%0E5%95%DE2L%21%E5%EA%86%86%A1%0F%EB%2A%CB%F0z%7F%E2%F6%8DK%FF%83%EB%0C%B5n%C0%1FEK%0A%95%B1%15-%3D%D0%AA%7B%DA%E3%0F%18%89F%1E

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sun, 18 Feb 2018 23:22:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: exo-splash-i=1; expires=Mon, 18-Feb-2019 23:22:24 GMT; Max-Age=31536000; path=/; domain=exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /popunder2.js HTTP/1.1 
Host: ads.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9C%9D%8DA%0A%840%10%04%FF2%2Fp%26%D1%24%93%C7%2CA%B2%3A%A0%A2%9B%ECa%11%FF%BEA%AF9%88%97%86%EA%86%AE%C0%C4%BB0%A1i%1B%EC%7C%60%CD%7B%2A%01%A3%E4%04%5E%18%FD%89Y%E6xb%8B%D6%B9%0E5%95%DE2L%21%E5%EA%86%86%A1%0F%EB%2A%CB%F0z%7F%E2%F6%8DK%FF%83%EB%0C%B5n%C0%1FEK%0A%95%B1%15-%3D%D0%AA%7B%DA%E3%0F%18%89F%1E

                                         
                                         68.232.35.135
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: max-age=10800
Date: Sun, 18 Feb 2018 23:22:24 GMT
Expires: Mon, 19 Feb 2018 02:22:24 GMT
Last-Modified: Sun, 18 Feb 2018 22:06:19 GMT
Server: ECS (arn/45E3)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 29242


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29242
Md5:    ab495a13fd0dcfedb1f90eba0d57f129
Sha1:   85360db8f5301418e4aa5c99e59f0429637d6c1a
Sha256: 5e5371e0ecfbbd8c72c728151b528322b2fa72d7bd4bb02434222647c1b6b079
                                        
                                            GET /r/__utm.gif?utmwv=5.7.1&utms=1&utmn=569671868&utmhn=www.videospornosexo.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x775&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Arquivos%20vestido%20-%20Videos%20porno%20Sexo%7C%20V%C3%ADdeos%20Amadores%2CV%C3%ADdeos%20porno%2Camadoras%2Csexo%20gr%C3%A1tis&utmhid=219973607&utmr=-&utmp=%2Ftag%2Fvestido%2F&utmht=1518996144429&utmac=UA-59447809-1&utmcc=__utma%3D47061024.737196895.1518996144.1518996144.1518996144.1%3B%2B__utmz%3D47061024.1518996144.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=239200664&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Sun, 18 Feb 2018 23:22:24 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /library/530318/107f090b9ac64dbe7adb2fb03cec7d118e5604f1.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?idzone=346526&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996142797&sub=&tags=&screen_resolution=1176x885&email=
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27h%D4R%C7%C3%84%84%D5%40E%A5-%22%BC%7BR%DB%D6m%3E%BC%FF%E1%3FO%82.%26%81%BA%AE%B0q%9E%14%5D%B1%04%8C%9C%228%26t%0F%26%9E%C3%835%1Ak%1BT%A2%F4%86%60%F21%7Dn%A8%09%3A%BF%AE%BC%0Cm%BF%87%ED%08Kw%C2%7B%86JU%E0r%D1%0A%89R%9B%7F%B5%F9%06%18%05F%1C

                                         
                                         68.232.35.135
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Date: Sun, 18 Feb 2018 23:22:23 GMT
Etag: "5a39509b-6e2ab"
Expires: Mon, 18 Feb 2019 23:22:23 GMT
Last-Modified: Tue, 19 Dec 2017 17:47:07 GMT
Server: ECS (arn/467A)
X-Cache: HIT
Content-Length: 451243


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   451243
Md5:    9cad580771e48f51c11bd10232b98569
Sha1:   107f090b9ac64dbe7adb2fb03cec7d118e5604f1
Sha256: f6d3d813d08f48556cba969f6cad49a6f0ce127c5b7cf184ea3cc29d1897ddb9
                                        
                                            GET /library/530318/b1b992e28cb2dd59c8af9c880871e5478002ac0e.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?idzone=346526&type=300x250&p=http%3A//www.videospornosexo.com/tag/vestido/&dt=1518996143080&sub=&tags=&screen_resolution=1176x885&email=
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225a8a0aae706388.921782452608705940%22%3B%7D; impressions=x%9C%9D%8DA%0A%840%10%04%FF2%2Fp%26%D1%24%93%C7%2CA%B2%3A%A0%A2%9B%ECa%11%FF%BEA%AF9%88%97%86%EA%86%AE%C0%C4%BB0%A1i%1B%EC%7C%60%CD%7B%2A%01%A3%E4%04%5E%18%FD%89Y%E6xb%8B%D6%B9%0E5%95%DE2L%21%E5%EA%86%86%A1%0F%EB%2A%CB%F0z%7F%E2%F6%8DK%FF%83%EB%0C%B5n%C0%1FEK%0A%95%B1%15-%3D%D0%AA%7B%DA%E3%0F%18%89F%1E

                                         
                                         68.232.35.135
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Date: Sun, 18 Feb 2018 23:22:24 GMT
Etag: "5a395099-4fba7"
Expires: Mon, 18 Feb 2019 23:22:24 GMT
Last-Modified: Tue, 19 Dec 2017 17:47:05 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 326567


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   326567
Md5:    9b7fe1be99cb649d0b893c86ff9ea496
Sha1:   b1b992e28cb2dd59c8af9c880871e5478002ac0e
Sha256: a9064aa832aad0685a0081bc8b6af0e7b188f7a360d9cf0c5114837e5b80b062
                                        
                                            GET /js15.js HTTP/1.1 
Host: s10.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         46.105.201.240
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sun, 18 Feb 2018 23:17:47 GMT
Etag: "927317778"
Last-Modified: Mon, 12 Jun 2017 15:26:32 GMT
Content-Length: 4101
Content-Encoding: gzip
Vary: Accept-Encoding
X-CDN-Pop: sbg
X-CDN-Pop-IP: 137.74.120.0/27
X-Cacheable: Matched cache
Accept-Ranges: bytes
X-IPLB-Instance: 4761


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4101
Md5:    74560ced65f9fb66f0febf74b808851c
Sha1:   4a8631b077b07e6a64d2b796d9ba77b0a812381b
Sha256: a80d9aa5ac898ca342df91e76aa17f248c2a22fd967fa9167283c4739d068238
                                        
                                            GET /stats/0.php?3032963&@f16&@g1&@h1&@i1&@j1518996145608&@k0&@l1&@mArquivos%20vestido%20-%20Videos%20porno%20Sexo%7C%20V%C3%ADdeos%20Amadores%2CV%C3%ADdeos%20porno%2Camadoras%2Csexo%20gr%C3%A1tis&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1176&@vhttp%3A%2F%2Fwww.videospornosexo.com%2Ftag%2Fvestido%2F&@w HTTP/1.1 
Host: s4.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         208.43.241.179
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Sun, 18 Feb 2018 23:22:25 GMT
Content-Length: 378
Connection: close
Set-Cookie: CountUid=e78cdb12-9cpx-489f-a16d-ddec59b9bb3e; domain=.histats.com; Max-Age=31536000; Expires=Mon, 18-Feb-2019 23:22:25 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   378
Md5:    4be411ba083b04ea2b682fc0ec92e578
Sha1:   e4e7772f712792ae24c23e45d34dc7c3ef31f51f
Sha256: b32c6a1556511394b843d5d8db553fb33b7c93753ba2813e53f8f1d570b9f61c
                                        
                                            GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Fwww.videospornosexo.com%2Ftag%2Fvestido%2F&j= HTTP/1.1 
Host: e.dtscout.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         107.182.233.217
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.10.3 (Ubuntu)
Date: Sun, 18 Feb 2018 23:22:27 GMT
Transfer-Encoding: chunked
Connection: close
X-Z: E
Set-Cookie: m=1; expires=Sun, 18-Feb-2018 23:52:27 GMT; Max-Age=1800; path=/; domain=dtscout.com b=1; expires=Mon, 19-Feb-2018 07:22:27 GMT; Max-Age=28800; path=/; domain=dtscout.com ah=1; expires=Mon, 19-Feb-2018 23:22:27 GMT; Max-Age=86400; path=/; domain=dtscout.com pi=1; expires=Mon, 19-Feb-2018 23:22:27 GMT; Max-Age=86400; path=/; domain=dtscout.com df=1518996147; expires=Tue, 18-Feb-2020 23:22:27 GMT; Max-Age=63072000; path=/; domain=dtscout.com d=null; expires=Fri, 17-Feb-2023 23:22:27 GMT; Max-Age=157680000; path=/; domain=dtscout.com l=a7bp2VqKCrO49jmBEW6wAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.dtscout.com; path=/
Expires: Sun, 18 Feb 2018 23:22:26 GMT
Cache-Control: no-cache


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   3876
Md5:    64057d0834d5e58bb10e6256a42a4e5d
Sha1:   1fa37547caf977503399e25e7a9b53e2c1e000ba
Sha256: 64119b44d6d8c26ff290f52a6ceff87bd0006526d385f64b54e83d165f694cdf
                                        
                                            GET /slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color= HTTP/1.1 
Host: promo.awempire.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         93.93.53.199
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 3042
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3042
Md5:    c779f724c5d358d8076dff3a37d20b8c
Sha1:   fe5bf0b05864c178d8655df3fb5121730b2c73a9
Sha256: d0fdd755161a3527d09ab654f7076e22e6e7d63bef1f1e47361ef0cb605abba5
                                        
                                            GET /live_feeds/script_basic_livefeed.php?width=280&height=156&&bgColor=00242E&displayMode=outframe&type=popunder&psId=rivercastell&psTool=208_1&psProgram=revs&subAffId={SUBAFFID}&category=couple&site=myc&statId=slidebar HTTP/1.1 
Host: promo.awempire.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.53.199
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 4528
Connection: close


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   4528
Md5:    72f4a433979daca958baafaa82bae887
Sha1:   2dae52e135a21eaae38a37924c9db80437d15765
Sha256: 15f3e74df3b220ba4550f142a2957f1b5f5ebbf388acf0c7ff4cfd64ad99c938
                                        
                                            GET /npt/slidebar/img/logo/340x60/myc.png HTTP/1.1 
Host: static1.awestatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.195
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Origin: *
X-Real-Source: sad1
Expires: Sun, 25 Feb 2018 23:22:28 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
Etag: "278566742"
Last-Modified: Fri, 05 Dec 2014 10:29:29 GMT
Content-Length: 5046
Date: Sun, 18 Feb 2018 23:22:28 GMT
Server: unknown


--- Additional Info ---
Magic:  PNG image, 340 x 60, 8-bit/color RGBA, non-interlaced
Size:   5046
Md5:    62db32493714726fa6ce9e36b2a2ff5d
Sha1:   4c3f6e4820a97c59d1c8d077e50b134bdf32a3c7
Sha256: 5b1d297978dbe9039533de92d6beb1690a6ac99f633d95ae0a53061d1e2b5414
                                        
                                            GET /ff268cab8d9fbae1ed7506f97496274f15/58896ef5e9d400a582c91888a98299bc_erotic_285x160.jpg?cno=180208 HTTP/1.1 
Host: galleryn3.jsmstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.190
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 14035
Connection: close
Last-Modified: Fri, 26 Jan 2018 21:16:09 GMT
Etag: "25c564a0143646f42c99ad0b8d544116"
Cache-Control: max-age=1209600, public
Access-Control-Allow-Origin: *
Expires: Sun, 04 Mar 2018 23:22:28 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   14035
Md5:    25c564a0143646f42c99ad0b8d544116
Sha1:   72510cbe92a3b14d70f7c660c970b60d146974eb
Sha256: 3a979a5391053dc80b9c6a7c381449b8ffc3a732cc5c8eb5b91c4c76d915d161
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Feb 2018 23:22:28 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e47befca66008641e082d6e9458bbf07
Sha1:   9c5f20e531521dba1dce9af5c655c99737fcdc64
Sha256: dd2b055c309ae3fbd963564fec3d5a3761f116666ec193ddd099d2c5410a187f
                                        
                                            GET /ff268cab8d9fbae1ed7506f97496274f1e/ee1a048686dac6126516775e9b39cc04_erotic_285x160.jpg?cno=180208 HTTP/1.1 
Host: galleryn1.jsmstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.190
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 12535
Connection: close
Last-Modified: Tue, 06 Feb 2018 09:47:28 GMT
Etag: "b3e86312af371cfc64f03d59edea4cb9"
Cache-Control: max-age=1209600, public
Access-Control-Allow-Origin: *
Expires: Sun, 04 Mar 2018 23:22:28 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   12535
Md5:    b3e86312af371cfc64f03d59edea4cb9
Sha1:   b0703f4b5f7ac1f817aa2a84cd6e666b53d06e27
Sha256: 9168a74e5e04e38a2fa87709c62bf7c13fc0468cd600074ae7aa873d761aabb0
                                        
                                            GET /ff268cab8d9fbae1ed7506f97496274f1e/e80a4bb16721f783108d25ed9054d41f_erotic_285x160.jpg?cno=180208 HTTP/1.1 
Host: galleryn1.jsmstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.190
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 10670
Connection: close
Last-Modified: Wed, 07 Feb 2018 11:40:55 GMT
Etag: "199ca924c39a6ce88515a19d711f414a"
Cache-Control: max-age=1209600, public
Access-Control-Allow-Origin: *
Expires: Sun, 04 Mar 2018 23:22:28 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10670
Md5:    199ca924c39a6ce88515a19d711f414a
Sha1:   d549ac6ac9db881d6a9aaa1e7cd5d7c63f070ff3
Sha256: b6fb820dc16e4beb3cea72a26fbe6286fd48e5159e1ad8e8cd3da673672c1487
                                        
                                            GET /ff268cab8d9fbae1ed7506f97496274f1a/a9f62d927dfcd705625e6048858d672a_erotic_285x160.jpg?cno=180208 HTTP/1.1 
Host: galleryn3.jsmstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.190
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 8921
Connection: close
Last-Modified: Sun, 19 Nov 2017 02:18:58 GMT
Etag: "892b77e7c38cf8d609fb24acd876866f"
Cache-Control: max-age=1209600, public
Access-Control-Allow-Origin: *
Expires: Sun, 04 Mar 2018 23:22:28 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8921
Md5:    892b77e7c38cf8d609fb24acd876866f
Sha1:   f8ae9d0b59f9cecdafacd39b3662ad209dc3ae5f
Sha256: 935040b96c9b4f5e086f0d363fef68b77d91ef3ed36dc70e9708d6c3de906396
                                        
                                            GET /ff268cab8d9fbae1ed7506f97496274f10/0d6d2be47f28f352a0ddfd112ea5dcb8_erotic_285x160.jpg?cno=180208 HTTP/1.1 
Host: galleryn3.jsmstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.190
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 15195
Connection: close
Last-Modified: Mon, 09 Oct 2017 21:07:24 GMT
Etag: "57a797a369ba36c2b767d35b8a878735"
Access-Control-Allow-Origin: *
Expires: Sun, 04 Mar 2018 23:22:28 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   15195
Md5:    57a797a369ba36c2b767d35b8a878735
Sha1:   6fbfd59d79ea7527986aa2e6796394ed1d10348c
Sha256: 89f52833d236f7d227711f91b724f4d3d01b1bc96366e81be9222af0895a635d
                                        
                                            GET /ff268cab8d9fbae1ed7506f97496274f1b/b842d7a427ec5f8f03bccbd4ef9473e6_erotic_285x160.jpg?cno=180208 HTTP/1.1 
Host: galleryn2.jsmstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.190
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 11532
Connection: close
Last-Modified: Wed, 11 Oct 2017 08:17:25 GMT
Etag: "833d8bd1362ae32946ac12870cdfdef3"
Access-Control-Allow-Origin: *
Expires: Sun, 04 Mar 2018 23:22:28 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   11532
Md5:    833d8bd1362ae32946ac12870cdfdef3
Sha1:   4811b26f8d4f4a25e41f0f60881b9c36d5f73277
Sha256: a4fc8584a37c8beacc10b5eb8545f9199789d008f2d8e8a2481877618b200c21
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Feb 2018 23:22:28 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /ff268cab8d9fbae1ed7506f97496274f10/008264bc96f3fb2b5a492d9c3bc3a4a6_erotic_285x160.jpg?cno=180208 HTTP/1.1 
Host: galleryn1.jsmstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.190
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:28 GMT
Content-Length: 12318
Connection: close
Last-Modified: Mon, 09 Oct 2017 18:38:17 GMT
Etag: "234ef91f3d8f9baf6ed3b0820205579c"
Access-Control-Allow-Origin: *
Expires: Sun, 04 Mar 2018 23:22:28 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   12318
Md5:    234ef91f3d8f9baf6ed3b0820205579c
Sha1:   eac1c97b0d54d32877ff76a632b3182b0192700a
Sha256: 2560872ee3a8bc06e5d2907261f2b1e48deb3bc990f63594b94d69dfcead98f6
                                        
                                            GET /flash/live_feeds/AS3BasicLiveFeed_023.swf HTTP/1.1 
Host: static1.awestatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         93.93.51.195
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Access-Control-Allow-Origin: *
X-Real-Source: sad1
Expires: Sun, 25 Feb 2018 23:22:28 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Thu, 17 Aug 2017 12:11:35 GMT
Etag: "2714474728"
Accept-Ranges: bytes
Content-Length: 180224
Date: Sun, 18 Feb 2018 23:22:28 GMT
Server: unknown


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Aug 17 14:11:35 2017
Size:   180224
Md5:    824e7918111613a5a602db63ca05c01e
Sha1:   f7b66ef3b0cef5bf4903103daaa6c9b3ca5f5f38
Sha256: 3ddc704ebf0973441bbd17f397b5a53ea66b41c893b9323326e69ca9d796e323
                                        
                                            GET /gtm.js?id=GTM-N958XK9 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         172.217.20.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 18 Feb 2018 23:22:29 GMT
Expires: Sun, 18 Feb 2018 23:22:29 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   19112
Md5:    0e3ec2c256a8b52a73da9cb92f3fc7f6
Sha1:   7ba13510a375793b84e29d896858e44d634e79ea
Sha256: 35c5a875b9539905719c3163aeade49ebc2c41115f3677f6fec7f8b0b3c88a26
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sun, 18 Feb 2018 21:28:22 GMT
Expires: Sun, 18 Feb 2018 23:28:22 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Age: 6848
Cache-Control: public, max-age=7200
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /collect?v=1&_v=j66&a=1357784207&t=pageview&_s=1&dl=http%3A%2F%2Fpromo.awempire.com%2Fslidebar%2Findex.php%3Fsite%3Dmyc%26superCategory%3Dgirls%26cobrandId%3D%26psId%3Drivercastell%26psTool%3D208_1%26psProgram%3Drevs%26campaignId%3D%26sound%3D0%26subAffId%3D%7BSUBAFFID%7D%26category%3Dcouple%26col%3D1%26width%3D300%26bgcolor%3D00242E%26color%3D&dr=http%3A%2F%2Fwww.videospornosexo.com%2Ftag%2Fvestido%2F&ul=en-us&de=UTF-8&dt=Slidebar%20content&sd=24-bit&sr=1176x885&vp=300x775&je=1&fl=10.0%20r45&_u=YGBAgUQ~&jid=1917085354&gjid=1441202906&cid=764107595.1518996150&tid=UA-99734645-4&_gid=368594509.1518996150&gtm=G2dN958XK9&cd4=&cd5=rivercastell&cd6=208_1&cd8=&cd9=revs&cd14=myc&cd17=1518996149580.xqfuersg&cd19=http%3A%2F%2Fwww.videospornosexo.com%2Ftag%2Fvestido%2F&cd20=www.videospornosexo.com&cd18=764107595.1518996150&z=1835759002 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 15 Feb 2018 07:03:28 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 317942
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Feb 2018 23:22:30 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    2951f9488265f59294ae60b47101232e
Sha1:   e169cb313d66782e96a168f47250c8bb22ab17ea
Sha256: 4a5c17cf988b77c7b6bc621333fb72216e183f7c91388b68367ca3534299ece8
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j66&tid=UA-99734645-4&cid=764107595.1518996150&jid=1917085354&gjid=1441202906&_gid=368594509.1518996150&_u=YGBAgUQ~&z=712221622 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         64.233.162.154
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-99734645-4&cid=764107595.1518996150&jid=1917085354&_v=j66&z=712221622
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sun, 18 Feb 2018 23:22:30 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 365
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   365
Md5:    233f9836492fef9a03816162c87b9f08
Sha1:   1de3ff0f23de3d03fcd832f4c207faa921b3bfb6
Sha256: 76a9bd5a1e9117d7bb9aac9ccab02f562e8b312a65460d37a798181809f76cc4
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Feb 2018 23:22:31 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a169dcc6c22aca5f6a373759f64f62ec
Sha1:   f7fe09b9afcce8fa75602174db14cac0713fe824
Sha256: fe0ed019c346e862f943e24ffafa850c5a2922ff7c7fa6aa96bba4322cbd5227
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=384057, public, no-transform, must-revalidate
Last-Modified: Fri, 16 Feb 2018 10:01:30 GMT
Expires: Fri, 23 Feb 2018 10:01:30 GMT
Date: Sun, 18 Feb 2018 23:22:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    a1e1fa02464e4bcc836ccdf83021120c
Sha1:   af5e3d57e248584914ce77ab652a473135466910
Sha256: 28202b015fb67a59c7485b3aab9ac9f7ad5a9199d0d67b70048806fc0bf3f761
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-99734645-4&cid=764107595.1518996150&jid=1917085354&_v=j66&z=712221622 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         172.217.20.36
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 18 Feb 2018 23:22:31 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-99734645-4&cid=764107595.1518996150&jid=1917085354&_v=j66&z=712221622&slf_rd=1&random=1797347366
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.159.219.19
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 06 Feb 2018 08:38:29 GMT
Etag: "60c-564871a6400ed"
Accept-Ranges: bytes
Content-Length: 1548
Date: Sun, 18 Feb 2018 23:22:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1548
Md5:    4ff7c953f3794a9fe20d758bc0a6adc5
Sha1:   c3355b50849912486e676a485bb762de573b99d7
Sha256: f177cc2ffbb7f9d9f4d863a7d1c0cf3ec39b21b6c870ec3a9182d82d7db12bee
                                        
                                            GET /crossdomain.xml HTTP/1.1 
Host: promo.awempire.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: _ga=GA1.2.764107595.1518996150; _gid=GA1.2.368594509.1518996150; _dc_gtm_UA-99734645-4=1

                                         
                                         93.93.53.199
HTTP/1.1 200 OK
Content-Type: application/xml
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:31 GMT
Content-Length: 4208
Connection: close
Last-Modified: Thu, 03 Aug 2017 07:21:44 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  XML document text
Size:   4208
Md5:    71640574ea37c8a77cf4308f171d5229
Sha1:   e9f8f576fff960784125ee4d2526efe71d9aef6f
Sha256: 8c4d25f0bc612f89477a6b886099c4764e62892f9bdf94ab9d6565cb65705ccf
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Feb 2018 23:22:31 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    18c315286ab03e2b0e5e855dd3cfce59
Sha1:   f44b94f65283cac0f3a1b0671148701e3dc4fabf
Sha256: 68fc3c2e9bead211e7cb655db7d9d347fb2f9c530fdc0a31dfe84651a25ce8dd
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-99734645-4&cid=764107595.1518996150&jid=1917085354&_v=j66&z=712221622&slf_rd=1&random=1797347366 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://promo.awempire.com/slidebar/index.php?site=myc&superCategory=girls&cobrandId=&psId=rivercastell&psTool=208_1&psProgram=revs&campaignId=&sound=0&subAffId={SUBAFFID}&category=couple&col=1&width=300&bgcolor=00242E&color=

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 18 Feb 2018 23:22:31 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /live_feeds/get_settings_base.php?site=myc&rnd=0%2E5743507063016295&cobrandId=&type=popunder HTTP/1.1 
Host: promo.awempire.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: _ga=GA1.2.764107595.1518996150; _gid=GA1.2.368594509.1518996150; _dc_gtm_UA-99734645-4=1

                                         
                                         93.93.53.199
HTTP/1.1 200 OK
Content-Type: text/json
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:31 GMT
Content-Length: 197
Connection: close
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   197
Md5:    2fceaa23007a1e69ebc86f91a23d3fd6
Sha1:   1b3133569648669d3d827e5743682085ff0ad5c1
Sha256: 58697bde2bf98ed0fd42c3b11703107103d2b6f39d4dd9b8c1f197638a8bc469
                                        
                                            GET /live_feeds/get_performer_base.php?category=couple&rnd=0%2E6287397528067231&site=myc&banList= HTTP/1.1 
Host: promo.awempire.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: _ga=GA1.2.764107595.1518996150; _gid=GA1.2.368594509.1518996150; _dc_gtm_UA-99734645-4=1

                                         
                                         93.93.53.199
HTTP/1.1 200 OK
Content-Type: text/json
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:31 GMT
Content-Length: 301
Connection: close
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   301
Md5:    4c59797510e0c6ad35ba0f16e4571391
Sha1:   549d6e4760ff747d68c8da10119e33265a00ff05
Sha256: 2099a176ddc78bddd106094a68573fae1ba699a2799beb7898be92567857e8fd
                                        
                                            GET /npt/slidebar/img/flick/couple/03.gif HTTP/1.1 
Host: static1.awestatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videospornosexo.com/tag/vestido/

                                         
                                         93.93.51.195
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
X-Real-Source: sad3
Expires: Sun, 25 Feb 2018 23:22:28 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
Etag: "427599778"
Last-Modified: Thu, 15 Jan 2015 08:49:34 GMT
Content-Length: 2227020
Date: Sun, 18 Feb 2018 23:22:28 GMT
Server: unknown


--- Additional Info ---
Magic:  GIF image data, version 89a, 65 x 130
Size:   2227020
Md5:    d00675908bb0db1ca29c55c476cd8ad9
Sha1:   84763fd0d7293d6e0218c7effbbd142cfe2cf05c
Sha256: d00aeb39965a9d6376f218a03f08c9902abbdde6558c1f2146b6b73973e02676
                                        
                                            GET /KevinVSJane/l432604?psid=rivercastell HTTP/1.1 
Host: 109.71.162.191
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         109.71.162.191
HTTP/1.1 200 OK
Content-Type: video/x-flv
                                        
Server: unknown
Date: Sun, 18 Feb 2018 23:22:32 GMT
Connection: close
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, private


--- Additional Info ---