Overview

URL siotewellcres.opx.pl/arcon-502-skachat.html
IP188.165.206.157
ASNAS16276 OVH SAS
Location France
Report completed2018-12-29 18:54:47 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-29 2 siotewellcres.opx.pl/arcon-502-skachat.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 188.165.206.157

Date UQ / IDS / BL URL IP
2019-06-07 19:05:01 +0200
0 - 0 - 2 inschicidtap.opx.pl/ 188.165.206.157
2018-11-07 17:35:51 +0100
0 - 0 - 2 palashranjan.prv.pl/anal-ass-teen-tight.html 188.165.206.157
2018-10-11 18:14:27 +0200
0 - 0 - 2 letsgok.prv.pl/most-hardcore-porn-ever.html 188.165.206.157
2018-10-09 04:52:17 +0200
0 - 0 - 2 paramananda.prv.pl/anal-bleaching-not-still.html 188.165.206.157
2018-10-09 04:40:10 +0200
0 - 0 - 2 nagendra.prv.pl/anal-free-sexy.html 188.165.206.157
2018-09-26 02:57:27 +0200
0 - 0 - 2 palashkusum.prv.pl/anal-ass-free-gaping-vids.html 188.165.206.157
2018-09-07 19:27:13 +0200
0 - 0 - 1 parvesh.prv.pl/anal-ejaculation-induced.html 188.165.206.157
2018-09-07 17:40:51 +0200
0 - 0 - 2 panchanan.prv.pl/share-market-analysis.html.0 188.165.206.157
2018-09-07 17:01:06 +0200
0 - 0 - 1 parvesh.prv.pl/anal-enjoy-sex-woman.html 188.165.206.157
2018-09-07 10:24:06 +0200
0 - 0 - 2 nagendra.prv.pl/anal-free-sex-virgin.html 188.165.206.157

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2019-07-01 07:47:12 +0200
0 - 0 - 0 https://www.munplanet.com/articles/arlo-camer (...) 158.69.39.233
2019-07-01 04:15:44 +0200
0 - 3 - 0 www.asind.ae/wp-content/uploads/2019/seconder (...) 5.39.72.197
2019-07-01 03:56:20 +0200
0 - 0 - 0 webcamsteen.com/16y4[CUSTOM_AFF 192.99.67.89
2019-07-01 02:43:31 +0200
0 - 0 - 0 167.114.144.169/Android/ 167.114.144.169
2019-06-30 21:34:01 +0200
0 - 0 - 0 streams.tvxweb.org 158.69.54.221
2019-06-30 21:30:47 +0200
0 - 0 - 0 source.magikserv.com 37.187.171.206
2019-06-30 20:09:51 +0200
0 - 0 - 0 www.kweeper.com/popcorn2kg/sentence/6382508 91.121.242.21
2019-06-30 18:49:10 +0200
0 - 0 - 0 www.ovh.com 198.27.92.1
2019-06-30 18:18:47 +0200
0 - 0 - 0 liczniki.org/hit.php?l=alltube&o=1 94.23.92.123
2019-06-30 18:11:40 +0200
0 - 0 - 0 hardrock.blogdns.org/ 91.121.69.126

No other reports on domain: opx.pl



JavaScript

Executed Scripts (53)


Executed Evals (0)


Executed Writes (44)

#1 JavaScript::Write (size: 257, repeated: 2) - SHA256: c40519db158fb94a757b25c3fce37d77b474b55dd45daf788d191234e2275bb5

                                        < div style = "height:0px;width:0px;overflow:hidden" > < iframe src = "https://eus.rubiconproject.com/usync.html?&geo=eu&co=no"
frameborder = "0"
marginwidth = "0"
marginheight = "0"
scrolling = "NO"
width = "0"
height = "0"
style = "height:0px;width:0px" > < /iframe></div > < /div>
                                    

#2 JavaScript::Write (size: 19, repeated: 1) - SHA256: c394b9f98fbf1770e48e808db9418bc679fcae3e98d5b187689aabbe00126fb8

                                        & amp;
cb = 11521478074
                                    

#3 JavaScript::Write (size: 18, repeated: 1) - SHA256: d9e8a2685df93ceb8154b5eae15c18e5286919c6e10f671276a02f2f0476b7a1

                                        & amp;
cb = 1828933025
                                    

#4 JavaScript::Write (size: 19, repeated: 1) - SHA256: bcdbf1120f84ffe3dfbda192b1dfb96f78cf6da59ebb9d34cc1d2330ef0452d2

                                        & amp;
cb = 30910776004
                                    

#5 JavaScript::Write (size: 18, repeated: 1) - SHA256: 668dbeb526e59bf8b51e93aa27d26131cb99af3ece8980c21ca66febbb6fb380

                                        & amp;
cb = 4430700792
                                    

#6 JavaScript::Write (size: 19, repeated: 1) - SHA256: 049281eae40237191316587f87ba1d7498d985ebd7de53c36b9c7cd8f65c2f7f

                                        & amp;
cb = 95819859587
                                    

#7 JavaScript::Write (size: 19, repeated: 1) - SHA256: fd212dabae6ce768b6fd39e9317b04bc81ffa89b3a806b725f2f4aa95fcc0644

                                        & amp;
cb = 97537230789
                                    

#8 JavaScript::Write (size: 18, repeated: 6) - SHA256: e0215c16fadbc057d1be3260dc2234924c46fa5579ac861f11b11d7dc5a736c7

                                        & amp;
charset = UTF - 8
                                    

#9 JavaScript::Write (size: 61, repeated: 6) - SHA256: 0bcc0bba722d12a2fc5fecbe3b75f8dfc15972afbee21be82b9952157d1b3f84

                                        & amp;
loc = http % 3 A //siotewellcres.opx.pl/arcon-502-skachat.html
                                    

#10 JavaScript::Write (size: 15, repeated: 1) - SHA256: e62fb5d3ff07809872005b7d54ef6dbd4c2fe266cb0a145d0eb62942155d1703

                                        & cb = 40911609546
                                    

#11 JavaScript::Write (size: 15, repeated: 1) - SHA256: 3e7931100150e4261a28371316f6477017d4ff4f6a0da2db40ae450e43097dcd

                                        & cb = 96521598969
                                    

#12 JavaScript::Write (size: 14, repeated: 2) - SHA256: e5f73d24520e13f84b608bbd56702fc84964435449a7d3e48cd0b6e3f0f31d2f

                                        & charset = UTF - 8
                                    

#13 JavaScript::Write (size: 57, repeated: 2) - SHA256: d02927ae29129ec428ca7707395b6c06f42b9f4ec152814a6c4417bb271408df

                                        & loc = http % 3 A //siotewellcres.opx.pl/arcon-502-skachat.html
                                    

#14 JavaScript::Write (size: 11, repeated: 8) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#15 JavaScript::Write (size: 826, repeated: 1) - SHA256: 2c736b7c58dcabeb3c870c9637914a655d4ecc05ae6bc152e8b2b9eac63a8a9c

                                        <!--  Begin Rubicon Project Tag -->
<!--  Site: PN Grupa Pino   Zone: prvpl_middle_ATF   Size: Wide Skyscraper  -->
<!--  PLACEMENT: Above the Fold;   -->
< script language = "JavaScript"
type = "text/javascript" >
    rp_account = '10163';
rp_site = '132208';
rp_zonesize = '624724-9';
rp_adtype = 'js';
rp_smartfile = '[SMART FILE URL]'; < /script> < script type = "text/javascript"
src = "https://ads.rubiconproject.com/ad/10163.js" > < /script>
    <!--  End Rubicon Project Tag --><div id='beacon_9ec3818d0d' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='https://ox2.sterta.pl/www/delivery/lg.php?bannerid=810&amp;campaignid=222&amp;zoneid=245&amp;loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&amp;cb=9ec3818d0d' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
                                    

#16 JavaScript::Write (size: 832, repeated: 1) - SHA256: ef3c149304fdb35edcce3c207a5318337d41859bdc14f84724fc9889915c5caa

                                        <!--  Begin Rubicon Project Tag -->
<!--  Site: PN Grupa Pino   Zone: prvpl_top_ATF   Size: Polish Double Billboard  -->
<!--  PLACEMENT: Above the Fold;   -->
< script language = "JavaScript"
type = "text/javascript" >
    rp_account = '10163';
rp_site = '132208';
rp_zonesize = '624722-40';
rp_adtype = 'js';
rp_smartfile = '[SMART FILE URL]'; < /script> < script type = "text/javascript"
src = "https://ads.rubiconproject.com/ad/10163.js" > < /script>
    <!--  End Rubicon Project Tag --><div id='beacon_87739cd72a' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='https://ox2.sterta.pl/www/delivery/lg.php?bannerid=809&amp;campaignid=222&amp;zoneid=223&amp;loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&amp;cb=87739cd72a' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
                                    

#17 JavaScript::Write (size: 887, repeated: 1) - SHA256: 8386a9e466f04151f4cbf7b7f77564bcfb11d3c2dbfc754ac5bb14e45616286f

                                        <!-- kod w miejscu placementu prv.pl_ros_dbb -->
< div class = "spolecznoscinet"
id = "spolecznosci-337" > < /div>
    <!-- kod przed zamkniciem body -->
    < script type = "text/javascript" >
    var _qasp = _qasp || [];
_qasp.push('go');
_qasp.push(['setPAID', 'sadprv']); < /script> < script type = "text/javascript" >
    (function(d, x, a) {
        var z = d.createElement(x);
        z.type = 'text/javascript';
        z.src = a;
        var s = d.getElementsByTagName(x)[0];
        s.parentNode.insertBefore(z, s);
    })(document, 'script', 'https://s.spolecznosci.net/js/core2-min.20.js'); < /script><div id='beacon_e475bbf676' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 624 & amp;
campaignid = 194 & amp;
zoneid = 32 & amp;
loc = http % 3 A % 2 F % 2 Fsiotewellcres.opx.pl % 2 Farcon - 502 - skachat.html & amp;
cb = e475bbf676 ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div>
                                    

#18 JavaScript::Write (size: 325, repeated: 1) - SHA256: d432951294cb9e16c9b1a05805b91ce9b4ac58d0cb7c956c8fcfd1f850472a7e

                                        < a href = "http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=e04fc530d6__oadest=https://clk.tradedoubler.com/click?p=64960&a=2354327&g=24478692&pools=510263,385741"
target = "_blank" > < img border = "0"
src = "https://vht.tradedoubler.com/file/64960/2018/12/10/37339/750x200.jpg"
title = "eMAG&#46;pl" > < /a>
                                    

#19 JavaScript::Write (size: 668, repeated: 1) - SHA256: ecaf489fba45457f3f49e8bdf191dd212f6cc4f482b5aecf02c368829d3a201d

                                        < a href = 'http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=807__zoneid=254__cb=876996e1b5__oadest=http%3A%2F%2Fsterta.pl%2Fpozycja-twojej-strony.html'
target = '_blank' > < img src = 'http://ox2.sterta.pl/www/images/07f240f8282acb2bfe26ec5422935aa3.jpg'
width = '160'
height = '600'
alt = ''
title = ''
border = '0' / > < /a><div id='beacon_876996e1b5' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 807 & amp;
campaignid = 221 & amp;
zoneid = 254 & amp;
loc = http % 3 A % 2 F % 2 Fsiotewellcres.opx.pl % 2 Farcon - 502 - skachat.html & amp;
cb = 876996e1 b5 ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div>
                                    

#20 JavaScript::Write (size: 677, repeated: 1) - SHA256: 7b738655a5bb9fd2eaae113e592d7a9518dd7915c4ee591fcfc731a8c09eebce

                                        < div data - rp - type = "trp-display-creative"
data - rp - impression - id = "7df41b5e-ba92-40c5-a6df-5fb390cc6e89"
data - rp - aqid = "0:"
data - rp - acct - id = "10163" >
    < div style = "width: 0; height: 0; overflow: hidden;" > < img border = "0"
width = "1"
height = "1"
src = "http://beacon-eu-ams3.rubiconproject.com/beacon/d/7df41b5e-ba92-40c5-a6df-5fb390cc6e89?oo=0&accountId=10163&siteId=132208&zoneId=624722&sizeId=40&e=6A1E40E384DA563B0F9E58542F48C89B519EA51C21B70C5369F21121FFCDC7D1286404D41D5101AB05634AA445F383EE9833B6E12CCD46A9643DB9FCFAE19D8AD59CB5FAEBC6A82A8386996C71225E6A1C45189F33B502F0B17E1DA35A9FE14818F2677DC46CA53F42FC750E78643D4D61ACC829CFC5FFA509486FA62D86CD0DBB4F33CDE214CF90"
alt = "" / > < /div>
                                    

#21 JavaScript::Write (size: 676, repeated: 1) - SHA256: 7ece023a73821ecd17787ca1f90ccfd5e1d7c9ba4591fd1f1b85381d027c317c

                                        < div data - rp - type = "trp-display-creative"
data - rp - impression - id = "9489aba4-134b-4851-b6d7-4ea6655f3a0e"
data - rp - aqid = "0:"
data - rp - acct - id = "10163" >
    < div style = "width: 0; height: 0; overflow: hidden;" > < img border = "0"
width = "1"
height = "1"
src = "http://beacon-eu-ams3.rubiconproject.com/beacon/d/9489aba4-134b-4851-b6d7-4ea6655f3a0e?oo=0&accountId=10163&siteId=132208&zoneId=624724&sizeId=9&e=6A1E40E384DA563B3F1434DBD248705756DF7CDFF38D0E8BFD5F46AD032F3DE604044943FE5F294A775ED1208DE223699833B6E12CCD46A9FDDB10ADB1AB1818D59CB5FAEBC6A82A8386996C71225E6A1C45189F33B502F0B17E1DA35A9FE148961166F2F09DF4B8D2EBDE5CF9A2A3BED0E20A015BD85B5F109478760DFABCFE32997889F1DA11D8"
alt = "" / > < /div>
                                    

#22 JavaScript::Write (size: 2719, repeated: 1) - SHA256: 3a01fb2b2af334e57da2cd39e6864d7be32e6ebe5155e1adc97ce5bbf5a60600

                                        < div id = "left_box"
style = "display:none;" > <!-- kod w miejscu placementu Prv.pl_ROS_Skyscraper2 -->
    < div class = "spolecznoscinet"
id = "spolecznosci-1888" > < /div> < script type = "text/javascript" >
    var _qasp = _qasp || [];
_qasp.push('go');
_qasp.push(['setPAID', 'sadprv']); < /script> < script type = "text/javascript" >
    (function(d, x, a) {
        var z = d.createElement(x);
        z.type = 'text/javascript';
        z.src = a;
        var s = d.getElementsByTagName(x)[0];
        s.parentNode.insertBefore(z, s);
    })(document, 'script', 'https://s.spolecznosci.net/js/core2-min.20.js'); < /script><div id='beacon_3e5524d4ea' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 901 & amp;
campaignid = 194 & amp;
zoneid = 81 & amp;
loc = http % 3 A % 2 F % 2 Fsiotewellcres.opx.pl % 2 Farcon - 502 - skachat.html & amp;
cb = 3e5524 d4ea ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div><img src="https://ad.prv.pl/img/close_x.png" title="zamknij reklame" alt="zamknij" style="border: 1px solid #FF0000;position: relative;bottom: 18px;right: -15px;cursor: pointer;"  class="button_close"> < /div> < script type = "text/javascript" >
    function wndsize() {
        var w = 0;
        var h = 0;
        if (!window.innerWidth) {
            if (!(document.documentElement.clientWidth == 0)) {
                w = document.documentElement.clientWidth;
                h = document.documentElement.clientHeight;
            } else {
                w = document.body.clientWidth;
                h = document.body.clientHeight;
            }
        } else {
            w = window.innerWidth;
            h = window.innerHeight;
        }
        return {
            width: w,
            height: h
        };
    }
var w = document.body.clientWidth;
var wsize = wndsize();
var top_margin = 0;
var box_height = 600;
var box_width = 160;
var content_width = 1040;
top_margin = ((wsize.height - box_height) / 2);
$(document).ready(function() {
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var left_box = document.getElementById('left_box');
    left_box.setAttribute('style', '* position: absolute !important;z-index: 2;text-align: right !important;');
    left_box.style.position = 'fixed';
    left_box.style.left = left_margin + 'px';
    left_box.style.width = box_width + 'px';
    left_box.style.height = screen.height + 'px';
    left_box.style.top = top_margin + 'px';
    left_box.style.display = 'block';
});

function resize_handler_left() {
    var wsize = wndsize();
    var top_margin = ((wsize.height - box_height) / 2);
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var left_box = document.getElementById('left_box');
    left_box.style.left = left_margin + 'px';
    left_box.style.top = top_margin + 'px';
}
if ('attachEvent' in window) {
    window.attachEvent('onresize', resize_handler_left);
} else if ('addEventListener' in window) {
    window.addEventListener('resize', resize_handler_left);
} else {
    window.onresize = resize_handler_left;
} < /script>
                                    

#23 JavaScript::Write (size: 2692, repeated: 1) - SHA256: 1b8e994d97a98ab9ff5f94e2e7b1299de9a2ab5eef2af117ee6cae3758de06bb

                                        < div id = "right_box"
style = "display:none;text-align:left;" > < div class = "spolecznoscinet"
id = "spolecznosci-421" > < /div> < script type = "text/javascript" >
    var _qasp = _qasp || [];
_qasp.push('go');
_qasp.push(['setPAID', 'sadprv']); < /script> < script type = "text/javascript" >
    (function(d, x, a) {
        var z = d.createElement(x);
        z.type = 'text/javascript';
        z.src = a;
        var s = d.getElementsByTagName(x)[0];
        s.parentNode.insertBefore(z, s);
    })(document, 'script', 'https://s.spolecznosci.net/js/core2-min.20.js'); < /script><div id='beacon_a02bcd8af1' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 707 & amp;
campaignid = 194 & amp;
zoneid = 82 & amp;
loc = http % 3 A % 2 F % 2 Fsiotewellcres.opx.pl % 2 Farcon - 502 - skachat.html & amp;
cb = a02bcd8af1 ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div><img src="https://ad.prv.pl/img/close_x.png" title="zamknij reklame" alt="zamknij" style="border: 1px solid #ff0000;position: relative;bottom: 19px;left: -16px;cursor: pointer;" class="button_close"> < /div> < script type = "text/javascript" >
    function wndsize() {
        var w = 0;
        var h = 0;
        if (!window.innerWidth) {
            if (!(document.documentElement.clientWidth == 0)) {
                w = document.documentElement.clientWidth;
                h = document.documentElement.clientHeight;
            } else {
                w = document.body.clientWidth;
                h = document.body.clientHeight;
            }
        } else {
            w = window.innerWidth;
            h = window.innerHeight;
        }
        return {
            width: w,
            height: h
        };
    }
var w = document.body.clientWidth;
var wsize = wndsize();
var top_margin = 0;
var box_height = 600;
var box_width = 160;
var content_width = 1040;
top_margin = ((wsize.height - box_height) / 2);
$(document).ready(function() {
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var left_box = document.getElementById('right_box');
    right_box.setAttribute('style', '* position: absolute !important;z-index: 2;text-align:left !important;');
    right_box.style.position = 'fixed';
    right_box.style.right = left_margin + 'px';
    right_box.style.width = box_width + 'px';
    right_box.style.height = screen.height + 'px';
    right_box.style.top = top_margin + 'px';
    right_box.style.display = 'block';
});

function resize_handler_right() {
    var wsize = wndsize();
    var top_margin = ((wsize.height - box_height) / 2);
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var right_box = document.getElementById('right_box');
    right_box.style.right = left_margin + 'px';
    right_box.style.top = top_margin + 'px';
}
if ('attachEvent' in window) {
    window.attachEvent('onresize', resize_handler_right);
} else if ('addEventListener' in window) {
    window.addEventListener('resize', resize_handler_right);
} else {
    window.onresize = resize_handler_right;
} < /script>
                                    

#24 JavaScript::Write (size: 346, repeated: 1) - SHA256: fd6c8ba5cf93da43213b47dd9428ce65752dfa1310e2a6bc176729feefcdc5c0

                                        < div id = 'beacon_62eca1ab47'
style = 'position: absolute; left: 0px; top: 0px; visibility: hidden;' > < img src = 'http://ox2.sterta.pl/www/delivery/lg.php?bannerid=0&amp;campaignid=0&amp;zoneid=44&amp;loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&amp;cb=62eca1ab47'
width = '0'
height = '0'
alt = ''
style = 'width: 0px; height: 0px;' / > < /div>
                                    

#25 JavaScript::Write (size: 258, repeated: 1) - SHA256: e949fd824404b0b3784db504980f9705858f7878cffcf0729c9882ba63b23eec

                                        < script type = "text/javascript"
src = "http://optimized-by.rubiconproject.com/a/10163/132208/624722-40.js?&cb=0.04684583337874726&tk_st=1&rf=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html&rp_s=c&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_40" > < /script>
                                    

#26 JavaScript::Write (size: 255, repeated: 1) - SHA256: cb21e80cf6d481ae61d47d45bd6c90938a2b17556e6cdf4a4fb16f53cbcb6e60

                                        < script type = "text/javascript"
src = "http://optimized-by.rubiconproject.com/a/10163/132208/624724-9.js?&cb=0.1571311539182627&tk_st=1&rf=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html&rp_s=c&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_9" > < /script>
                                    

#27 JavaScript::Write (size: 250, repeated: 1) - SHA256: 452602855f6d962bacaef76495994d273cc7ad27f79213e61d30e5516769b393

                                        < script type = "text/javascript"
src = "https://imppl.tradedoubler.com/imp?type(js)pool(510263)a(2354327)preurl(http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=e04fc530d6__oadest=)420974567"
charset = "ISO-8859-1" > < /script>
                                    

#28 JavaScript::Write (size: 726, repeated: 1) - SHA256: b584ee11fb2d25acba70dac0d3eeceb4290c3866793277e47974b905113e5c62

                                        < script type = "text/javascript" >
    var uri = 'https://imppl.tradedoubler.com/imp?type(js)pool(510263)a(2354327)preurl(http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=e04fc530d6__oadest=)' + new String(Math.random()).substring(2, 11);
document.write('<sc' + 'ript type="text/javascript" src="' + uri + '" charset="ISO-8859-1"></sc' + 'ript>'); < /script><div id='beacon_e04fc530d6' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 273 & amp;
campaignid = 123 & amp;
zoneid = 27 & amp;
loc = http % 3 A % 2 F % 2 Fsiotewellcres.opx.pl % 2 Farcon - 502 - skachat.html & amp;
cb = e04fc530d6 ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div>
                                    

#29 JavaScript::Write (size: 77, repeated: 6) - SHA256: e031a23b01a07e92eee9e9504efa6ab21eac4b3552f81266e0ed94fd96c1e63b

                                        < script type = 'text/javascript'
src = 'http://ox2.sterta.pl/www/delivery/ajs.php
                                    

#30 JavaScript::Write (size: 78, repeated: 2) - SHA256: 44d3ac878c505add25b83a61fc8d5ca624d6b832034ee1c05513f638a803fcd1

                                        < script type = 'text/javascript'
src = 'https://ox2.sterta.pl/www/delivery/ajs.php
                                    

#31 JavaScript::Write (size: 1002, repeated: 1) - SHA256: dc6fa7a946a68c733830b127f505845bfb2c5f55f35b15e37ca459294d605a24

                                        < script type = 'text/javascript' > <!--//<![CDATA[
    var m3_u = (location.protocol == 'https:' ? 'https://ox2.sterta.pl/www/delivery/ajs.php' : 'http://ox2.sterta.pl/www/delivery/ajs.php');
var m3_r = Math.floor(Math.random() * 99999999999);
if (!document.MAX_used) document.MAX_used = ',';
document.write("<scr" + "ipt type='text/javascript' src='" + m3_u);
document.write("?zoneid=253");
document.write('&amp;cb=' + m3_r);
if (document.MAX_used != ',') document.write("&amp;exclude=" + document.MAX_used);
document.write(document.charset ? '&amp;charset=' + document.charset : (document.characterSet ? '&amp;charset=' + document.characterSet : ''));
document.write("&amp;loc=" + escape(window.location));
if (document.referrer) document.write("&amp;referer=" + escape(document.referrer));
if (document.context) document.write("&context=" + escape(document.context));
if (document.mmm_fo) document.write("&amp;mmm_fo=1");
document.write("'><\/scr" + "ipt>");
//]]>--></script>
                                    

#32 JavaScript::Write (size: 1002, repeated: 1) - SHA256: 6fd9ec14c915e303d3dac98db8d4aa887ed8046df5cfff82bd3f49c4f21dece7

                                        < script type = 'text/javascript' > <!--//<![CDATA[
    var m3_u = (location.protocol == 'https:' ? 'https://ox2.sterta.pl/www/delivery/ajs.php' : 'http://ox2.sterta.pl/www/delivery/ajs.php');
var m3_r = Math.floor(Math.random() * 99999999999);
if (!document.MAX_used) document.MAX_used = ',';
document.write("<scr" + "ipt type='text/javascript' src='" + m3_u);
document.write("?zoneid=254");
document.write('&amp;cb=' + m3_r);
if (document.MAX_used != ',') document.write("&amp;exclude=" + document.MAX_used);
document.write(document.charset ? '&amp;charset=' + document.charset : (document.characterSet ? '&amp;charset=' + document.characterSet : ''));
document.write("&amp;loc=" + escape(window.location));
if (document.referrer) document.write("&amp;referer=" + escape(document.referrer));
if (document.context) document.write("&context=" + escape(document.context));
if (document.mmm_fo) document.write("&amp;mmm_fo=1");
document.write("'><\/scr" + "ipt>");
//]]>--></script>
                                    

#33 JavaScript::Write (size: 124, repeated: 1) - SHA256: 4b582d44340ca6a455fbb2d68028e1fd47706486ecc02132c074b6203141b88d

                                        < script type = 'text/javascript' > rp_requests = new RubiconAdServing.Requests();
rp_requests.sendRequest('624722-40'); < /script>
                                    

#34 JavaScript::Write (size: 123, repeated: 1) - SHA256: baa13aec7e2c77ac6b8afc178e7d492e7f94a462accd4c5313f16cd56b177ca2

                                        < script type = 'text/javascript' > rp_requests = new RubiconAdServing.Requests();
rp_requests.sendRequest('624724-9'); < /script>
                                    

#35 JavaScript::Write (size: 2263, repeated: 1) - SHA256: 24ffd8d14e0e9d442158b3f5c2954c9778f0babe7149639b9e06e5d3f36f7268

                                        < style > body {
    margin: 0;padding: 0
} < /style><script type="text/javascript
">var _qasp = {iframe:true};_qasp.push_top=function(a,b){if(typeof(parent.postMessage)=="
function ") parent.postMessage("
pushxd: "+a+"~"+b," * ");};_qasp.push=function(a){if(a !== null && typeof(a) == "
object " && "
push " in a) {  if(a.length == 2) {this.push_top(a[0], a[1]);} else if(a.length==1) {this.push_top(a[0]);}  else if(a.length > 2) {this.push_top(a.shift(), a.join("~"));} else if(a.length>=1) {this.push_top(a[0]);}} else if(typeof(a) == "
string ") {this.push_top(a);}return 1;};var noad=function(){_qasp.push(["
noad ", 1888, 193575])};</script><script type="
text / javascript ">(new Image()).src=" //a.spolecznosci.net/avd/122748/193575/11001/1888/?o=1546106057392";</script>
    < noscript > < img height = "1"
width = "1"
style = "display:none;"
src = "//a.spolecznosci.net/avd/122748/193575/11001/1888/?o=1546106057392" > < /noscript> < div style = "height:0!important;width:100%;min-height:0!important;text-align:center;" > < /div> < style > # sad_1888 {
        text - align: center;
    } < /style> < script type = 'text/javascript' > <!--//<![CDATA[
    var m3_u = (location.protocol == 'https:' ? 'https://ox2.sterta.pl/www/delivery/ajs.php' : 'https://ox2.sterta.pl/www/delivery/ajs.php');
var m3_r = Math.floor(Math.random() * 99999999999);
if (!document.MAX_used) document.MAX_used = ',';
document.write("<scr" + "ipt type='text/javascript' src='" + m3_u);
document.write("?zoneid=245");
document.write('&cb=' + m3_r);
if (document.MAX_used != ',') document.write("&exclude=" + document.MAX_used);
document.write(document.charset ? '&charset=' + document.charset : (document.characterSet ? '&charset=' + document.characterSet : ''));
document.write("&loc=" + escape(window.location));
if (document.referrer) document.write("&referer=" + escape(document.referrer));
if (document.context) document.write("&context=" + escape(document.context));
if (document.mmm_fo) document.write("&mmm_fo=1");
document.write("'><\/scr" + "ipt>");
//]]>--></script><noscript><a href='https://ox2.sterta.pl/www/delivery/ck.php?n=a593321d&cb=INSERT_RANDOM_NUMBER_HERE' target='_blank'><img src='https://ox2.sterta.pl/www/delivery/avw.php?zoneid=245&cb=INSERT_RANDOM_NUMBER_HERE&n=a593321d' border='0' alt='' /></a></noscript>
                                    

#36 JavaScript::Write (size: 2256, repeated: 1) - SHA256: 58e3e5fa97545191ff6fcd8495ebf36cbff8c38b174c652384d977a58b4346cd

                                        < style > body {
    margin: 0;padding: 0
} < /style><script type="text/javascript
">var _qasp = {iframe:true};_qasp.push_top=function(a,b){if(typeof(parent.postMessage)=="
function ") parent.postMessage("
pushxd: "+a+"~"+b," * ");};_qasp.push=function(a){if(a !== null && typeof(a) == "
object " && "
push " in a) {  if(a.length == 2) {this.push_top(a[0], a[1]);} else if(a.length==1) {this.push_top(a[0]);}  else if(a.length > 2) {this.push_top(a.shift(), a.join("~"));} else if(a.length>=1) {this.push_top(a[0]);}} else if(typeof(a) == "
string ") {this.push_top(a);}return 1;};var noad=function(){_qasp.push(["
noad ", 337, 131519])};</script><script type="
text / javascript ">(new Image()).src=" //a.spolecznosci.net/avd/54867/131519/11001/337/?o=1546106057392";</script>
    < noscript > < img height = "1"
width = "1"
style = "display:none;"
src = "//a.spolecznosci.net/avd/54867/131519/11001/337/?o=1546106057392" > < /noscript> < div style = "height:0!important;width:100%;min-height:0!important;text-align:center;" > < /div> < style > # sad_337 {
        text - align: center;
    } < /style> < script type = 'text/javascript' > <!--//<![CDATA[
    var m3_u = (location.protocol == 'https:' ? 'https://ox2.sterta.pl/www/delivery/ajs.php' : 'https://ox2.sterta.pl/www/delivery/ajs.php');
var m3_r = Math.floor(Math.random() * 99999999999);
if (!document.MAX_used) document.MAX_used = ',';
document.write("<scr" + "ipt type='text/javascript' src='" + m3_u);
document.write("?zoneid=223");
document.write('&cb=' + m3_r);
if (document.MAX_used != ',') document.write("&exclude=" + document.MAX_used);
document.write(document.charset ? '&charset=' + document.charset : (document.characterSet ? '&charset=' + document.characterSet : ''));
document.write("&loc=" + escape(window.location));
if (document.referrer) document.write("&referer=" + escape(document.referrer));
if (document.context) document.write("&context=" + escape(document.context));
if (document.mmm_fo) document.write("&mmm_fo=1");
document.write("'><\/scr" + "ipt>");
//]]>--></script><noscript><a href='https://ox2.sterta.pl/www/delivery/ck.php?n=a78415d9&cb=INSERT_RANDOM_NUMBER_HERE' target='_blank'><img src='https://ox2.sterta.pl/www/delivery/avw.php?zoneid=223&cb=INSERT_RANDOM_NUMBER_HERE&n=a78415d9' border='0' alt='' /></a></noscript>
                                    

#37 JavaScript::Write (size: 11, repeated: 1) - SHA256: 6d9a954f79da1132473a63cbac55865d93b1b06e078eccf89746862582585b13

                                        ? zoneid = 223
                                    

#38 JavaScript::Write (size: 11, repeated: 1) - SHA256: 50c4db91062a06215704ffae7011f11517ba104df8654a386f8f5beb3c411089

                                        ? zoneid = 245
                                    

#39 JavaScript::Write (size: 11, repeated: 1) - SHA256: 3b6c87d4053fefbd45fe35e021cbece885c1f8c3c3d05247273eb98952ac5f1f

                                        ? zoneid = 253
                                    

#40 JavaScript::Write (size: 11, repeated: 1) - SHA256: 152e15ea7f064cefa48a461b393ebfc378c61dba08a3b9a51e540ee33f22bdc6

                                        ? zoneid = 254
                                    

#41 JavaScript::Write (size: 10, repeated: 1) - SHA256: 338ba8ac3964539192fcdddf65a2019c4af8938e67335fe8f26477567e11c417

                                        ? zoneid = 32
                                    

#42 JavaScript::Write (size: 10, repeated: 1) - SHA256: ad81639dd29f2b36713408f1fc00c11e6b05e67e582aa2022f0cf38926af0750

                                        ? zoneid = 44
                                    

#43 JavaScript::Write (size: 10, repeated: 1) - SHA256: 0f7666bfbcad08e59652620e18803c8dbc17a40bc538a0d41f62b61f50530668

                                        ? zoneid = 81
                                    

#44 JavaScript::Write (size: 10, repeated: 1) - SHA256: b17535b2f8d05260b8615cf95e59d4e74e344bb1b86e58441f820f3208f1a5d0

                                        ? zoneid = 82
                                    


HTTP Transactions (61)


Request Response
                                        
                                            GET /arcon-502-skachat.html HTTP/1.1 
Host: siotewellcres.opx.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4865
Md5:    1d3dcae7f074df2d799a511b0273f0ce
Sha1:   55d06216f5bfb1d56ce02a5cb3bf128ddc53d58a
Sha256: 8883f42f1bbe89641dc55894ded2f35ce901bcefc8aa89b00fcacba975b64a3c

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /js/jquery-1.8.2.min.js HTTP/1.1 
Host: siotewellcres.opx.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:14 GMT
Last-Modified: Wed, 28 May 2014 09:48:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5385b0d0-16cfc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38787
Md5:    7cd754ada95ce6442ae4955b27f505d5
Sha1:   501faa874aad1b926cccd8c9789f9ee1926e3414
Sha256: 24744c024f75c24a5238865d97d94e7e02a85cc84e4bcd78c8e865e1a6002a81
                                        
                                            GET /rodo.js HTTP/1.1 
Host: ad.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:14 GMT
Last-Modified: Tue, 19 Jun 2018 09:59:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5b28d3f2-25d4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2945
Md5:    4e69a04fd5f4262f9f7e945196aba997
Sha1:   a1d512315aa57bda711eb4b2d90a5124a5f48eb6
Sha256: 085b89db143183590cb58462176255cba399a18ed888af19aca052605d459fc7
                                        
                                            GET /static/img/main/grupa_pino.png HTTP/1.1 
Host: error.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:14 GMT
Content-Length: 10369
Last-Modified: Tue, 19 Aug 2014 12:10:44 GMT
Connection: keep-alive
Etag: "53f33ec4-2881"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 600 x 25, 8-bit/color RGBA, non-interlaced
Size:   10369
Md5:    9767ee61556b65a7e3051c361c29af0d
Sha1:   9e92d5f0ea12a13f8acda80d4981f05a7a026ab0
Sha256: 377fd8ca6c95f77ab4ff1da63edd9cec59212ff006c551f599a3ff73e02794db
                                        
                                            GET /stats.php?url=siotewellcres.opx.pl&t=a4&file=stats.js HTTP/1.1 
Host: stats.grupapino.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: 01074f47bc1aee350d6a16052562fe6fac034ef9=f8a4f6cc5e7b896ee9676c690d5b9ba8; expires=Sun, 30-Dec-2018 17:54:14 GMT; Max-Age=86400


--- Additional Info ---
Magic:  ASCII C program text, with no line terminators
Size:   34
Md5:    687d91819e03291e884fd70a427f032e
Sha1:   f1668432d5cb1ab3919239fe57f8d8dc21d34f91
Sha256: b199d7759862fc5ab3f0e3cad9aadf3830199e5f612296ab0096c02045280787
                                        
                                            GET /dane/c590d970c64e8062e81657ecda49090bdf950335.JPG HTTP/1.1 
Host: cdn.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         178.32.206.242
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:13 GMT
Content-Length: 43429
Last-Modified: Mon, 07 Jan 2013 12:22:33 GMT
Connection: keep-alive
Etag: "50eabe09-a9a5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   43429
Md5:    9b01a820c3c8fc877d8171cacb05bf65
Sha1:   0c35e2525be907022a49d8a569b47179f3c53f84
Sha256: 0aa1baefdbe227c1a06f55f5a5546d99773183238592dd8e46ac7a51365b39a9
                                        
                                            GET /gtm.js?id=GTM-K2DLWR HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         172.217.21.136
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sat, 29 Dec 2018 17:54:15 GMT
Expires: Sat, 29 Dec 2018 17:54:15 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
Content-Length: 27420
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27420
Md5:    600480091f1303abe1177c4fdf970882
Sha1:   ff1eb1297fc2149410b7624be72491c6bf6eea35
Sha256: d7dfd77026cc8eeff910719f368d2b652bfcf7a1fb8c0353de8baad9bc674c91
                                        
                                            GET /static/img/main/logo_white.png HTTP/1.1 
Host: error.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:14 GMT
Content-Length: 1848
Last-Modified: Tue, 19 Aug 2014 12:10:44 GMT
Connection: keep-alive
Etag: "53f33ec4-738"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 124 x 30, 8-bit/color RGBA, non-interlaced
Size:   1848
Md5:    b3382dabf4b0a07d0af68613b296efce
Sha1:   5453843be2fd68ce5eda5418b9998cad0eb0bef5
Sha256: 321e8d4b1cc435163eca4c5e1cdf52850ad5c135aa94576a6591d1db557e140c
                                        
                                            GET /server.php?type=billsource=siotewellcres.opx.pl&medium=alias-404 HTTP/1.1 
Host: ad.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   653
Md5:    868e303f0592fbb1a343b75484c9a215
Sha1:   81aeefb10c684dbe7a57572e7b4d083e5223a130
Sha256: 9463427f0409c4d452942a5dd3b6a9bc1ed3525df6d7cf7c41c867c6290c82ec
                                        
                                            GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false
X-FB-Debug: szEdad7vqW7W0lWdZPeb2ZdJLQN2cQIgr/HnJSxeitsP/v+pzC/Bxw3PLqcHZQNSNp2NpVu+qnt04H36F4Bo2Q==
Date: Sat, 29 Dec 2018 17:54:15 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /www/delivery/ajs.php?zoneid=32&cb=95819859587&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; path=/ OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:15 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  UTF-8 Unicode text, with very long lines
Size:   1266
Md5:    c22c294d73325a4ac9660799725dc189
Sha1:   0c1c23a0eb91b9923fe7d8cfb7e41b23f126b5dc
Sha256: 68924d7db31637110532699920b679ea140da5ec87c42187c8d83180d0df0b1d
                                        
                                            GET /www/delivery/lg.php?bannerid=624&campaignid=194&zoneid=32&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=e475bbf676 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:15 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=113072
Date: Sat, 29 Dec 2018 17:54:15 GMT
Etag: "5c26b202-1d7"
Expires: Mon, 31 Dec 2018 01:18:47 GMT
Last-Modified: Fri, 28 Dec 2018 23:30:10 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    917b76bd31609c6335bb8d2d65892c3c
Sha1:   77a7a47ea714c6f223f894ed434a802bab096e69
Sha256: afde58b237e795bbdf5379c2ca16626c00be3281d80ddf718eaf5bdc06656e09
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=163050
Date: Sat, 29 Dec 2018 17:54:15 GMT
Etag: "5c27748b-1d7"
Expires: Mon, 31 Dec 2018 15:11:45 GMT
Last-Modified: Sat, 29 Dec 2018 13:20:11 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    2d8c2da8e758b3fdae00b0e0cd8470fe
Sha1:   c51a904224114275851316d9f0d369501461423d
Sha256: 653d9a794a978a8bc1c5c706f2b3914b1be15c510c6ba4796d8d87744acb15fb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 27 Dec 2018 14:42:42 GMT
Etag: D23BCE018D70CC9309148067E11F2529EC5BD8AA
X-OCSP-Responder-ID: mcdpcaocsp3
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=419905
Expires: Thu, 03 Jan 2019 14:32:41 GMT
Date: Sat, 29 Dec 2018 17:54:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    1e13b314af9d4190b0ed6215d69c1f02
Sha1:   d23bce018d70cc9309148067e11f2529ec5bd8aa
Sha256: fea43faafd2152aa6cacc38c70b5638c0e14576cd2c13aceb690803624e75918
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 26 Dec 2018 12:16:54 GMT
Etag: 1B8C8A04ED0E206A0AE1D89AD04C45E9D31AB5F0
X-OCSP-Responder-ID: mcdpcaocsp10
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=324760
Expires: Wed, 02 Jan 2019 12:06:56 GMT
Date: Sat, 29 Dec 2018 17:54:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    4d70e772d6f3da8c442438db1648a1e5
Sha1:   1b8c8a04ed0e206a0ae1d89ad04c45e9d31ab5f0
Sha256: 79c7f27e157dfe386e70c5b9d83ce0fcc620be33195c7df818a6971207249ea0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 26 Dec 2018 12:16:54 GMT
Etag: CC7F65B1217E3FAB842326F7DFF359E36E899F7E
X-OCSP-Responder-ID: mcdpcaocsp13
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=324756
Expires: Wed, 02 Jan 2019 12:06:52 GMT
Date: Sat, 29 Dec 2018 17:54:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f9cd693ff05693a4f60eb8f51baa06bd
Sha1:   cc7f65b1217e3fab842326f7dff359e36e899f7e
Sha256: 07c7ebb22ab3ba3bba3e33b6b3e9a2c704a396ec857953749223fac4f89cecaf
                                        
                                            GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Content-Encoding: gzip
timing-allow-origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: YoMhQ/yAKUvnCDDIPpuMm8Rd0g7J2AaH2vMi2Lc3RYerOC4KZ5kmzPeKJBjxPpNs08lJjKeGh2jXeU1cuhYxSA==
Date: Sat, 29 Dec 2018 17:54:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15030
Md5:    f6528a4cbdb2d04bd88a5a5e370f4475
Sha1:   635f39f92cc06fc06745087834f0c4f30e2c43c4
Sha256: 1eb7e7db9f51a9b0368b2d88abe8840b337b266c8f5ceb28f02831e121508180
                                        
                                            GET /js/core2-min.20.js HTTP/1.1 
Host: s.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Expires: Sat, 29 Dec 2018 18:54:16 GMT
Cache-Control: max-age=3600, private
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   109399
Md5:    d1b7132bd0b8e87a3c20df1f6d81633b
Sha1:   93a196260dea60122b8ea517e71d4a1bc586ddc9
Sha256: 31ed98ed48e883be26c91d446b4df6e6543478c5d67824d50c905139648243b3
                                        
                                            GET /rsrc.php/v3/yn/r/lH1ibRl5GKq.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Tue, 17 Dec 2019 23:18:33 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Content-MD5: LsIm49y5qOd6jowRdAWHyQ==
Cache-Control: public,max-age=31536000,immutable
X-FB-Debug: t+7Iqupt7lENz9XBnLdT9eqS36dEWq3IXGeu/Qq5hm57YbjvlExwPHr+eZFK1NJfnrYBIqcjFTa4kUfX/9fq9Q==
Date: Sat, 29 Dec 2018 17:54:16 GMT
Connection: keep-alive
Content-Length: 222


--- Additional Info ---
Magic:  PNG image, 16 x 16, 4-bit colormap, non-interlaced
Size:   222
Md5:    2ec226e3dcb9a8e77a8e8c11740587c9
Sha1:   3eeef1fffe964e01ca04216633d515b782671437
Sha256: 4c66cf58bddf9101dd5e3d83235728a64c8e7ef7032c4bcbbcc91b8aa7dcac18
                                        
                                            GET /www/delivery/ajs.php?zoneid=81&cb=97537230789&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:16 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   4197
Md5:    13fd04f3ba431f7ab5b4551f90ef3404
Sha1:   c3f3faa6b289522355f1a4e6de0c92194e28969a
Sha256: 82c484c374dba449c2240859aa8522d6463c8cbeb6ce43e07724eb8fa1d6437f
                                        
                                            GET /www/delivery/lg.php?bannerid=901&campaignid=194&zoneid=81&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=3e5524d4ea HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:16 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /rsrc.php/v3iEpO4/yw/l/en_US/P--rCkxNnMb.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false
Origin: https://www.facebook.com

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Sat, 28 Dec 2019 08:23:27 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: t3qvIP2Q6D/W5zEKg1G+sQ==
X-FB-Debug: OwneA5u//91/YdWLvfJhfIgtbY4IPzHxB5CmaUcndypElSXhURmFpMnkeCjkEJTXJ8DnDCzq25DstUX5GvVEPg==
Date: Sat, 29 Dec 2018 17:54:16 GMT
Connection: keep-alive
Content-Length: 142367


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   142367
Md5:    b77aaf20fd90e83fd6e7310a8351beb1
Sha1:   8dd01359f7856856d00cb12e1d5aaa10de1c0b83
Sha256: 2f7137e4e9c82340f9781265e6c0c073c2ffde84d3870a142ca6c8e1742920aa
                                        
                                            GET /www/delivery/ajs.php?zoneid=82&cb=1828933025&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:16 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   4147
Md5:    dca55417d362ba4b1319c9ee2ad72bc2
Sha1:   43c9d6c46a5b9ea5fa7b1882c926ab45e2589f8c
Sha256: 38f3387e9b72f055c438758dd24f0e28db84cf4cf799429a88fcc6aebd2d94b0
                                        
                                            GET /www/delivery/lg.php?bannerid=707&campaignid=194&zoneid=82&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=a02bcd8af1 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:16 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /www/delivery/ajs.php?zoneid=44&cb=30910776004&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:16 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   440
Md5:    c943fd60f1c6863a6eb19654bf7508c9
Sha1:   fb3b485339fe2525c493da12ba4107313522ee06
Sha256: 703330f61339b4cbeaf3f0349d1e519e69341bce1098ebd5960873f0b2961f03
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.91
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "BAB04601881EC688E24FDB2F73B8C9828DF3AA010F3CB21E94120B697EC17919"
Last-Modified: Fri, 28 Dec 2018 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43189
Expires: Sun, 30 Dec 2018 05:54:05 GMT
Date: Sat, 29 Dec 2018 17:54:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    42070446719952582d641794f9af11d7
Sha1:   241f7ccb07bc5637125f67826b3e5095b0979bbf
Sha256: bab04601881ec688e24fdb2f73b8c9828df3aa010f3cb21e94120b697ec17919
                                        
                                            GET /www/delivery/lg.php?bannerid=0&campaignid=0&zoneid=44&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=62eca1ab47 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:16 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.121
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Thu, 27 Dec 2018 19:45:31 GMT
Etag: "6b1332c4e48a1d5cb1a9de299294999f3ccde8dd"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=13867
Expires: Sat, 29 Dec 2018 21:45:24 GMT
Date: Sat, 29 Dec 2018 17:54:17 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    bcecd15ef50d0d8edcba980893d1b00e
Sha1:   6b1332c4e48a1d5cb1a9de299294999f3ccde8dd
Sha256: 40f2219b058d97ea0b3ef7c5442a98d94efcb1d03c08fed8e192e42ca0ce6ec5
                                        
                                            GET /img/close_x.png HTTP/1.1 
Host: ad.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:16 GMT
Content-Length: 620
Last-Modified: Wed, 02 Sep 2015 06:40:12 GMT
Connection: keep-alive
Etag: "55e699cc-26c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 14 x 14, 8-bit/color RGBA, non-interlaced
Size:   620
Md5:    95752efe60547ae27d0e79c46537dc1e
Sha1:   13f67926f33a5148c3b51f026c11abf38fb2a1f3
Sha256: d44fe33544eb7000a4be897820643c827d44076217f2ca3376bf3134409bb9fb
                                        
                                            GET /files/data.45.htm?Ho_siotewellcres.opx.pl HTTP/1.1 
Host: spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:17 GMT
Last-Modified: Fri, 28 Sep 2018 09:14:02 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Expires: Sun, 29 Dec 2019 17:54:17 GMT
Cache-Control: max-age=31536000, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8577
Md5:    405e2654494364b943169e4a43812b1b
Sha1:   7a4969844116464b57b1d38f601ad0a046855073
Sha256: a48022d68e70fe46c9ce10d383c1b25036cf5d95773c51ec1d5273dfaee6a6de
                                        
                                            GET /pet?s=prv&x=337,1888,421&h=421&safe=0&ut=&uu=null&cb=4760894148&uq=93238056536.883569&ref=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&sp_gdpr=&n=0.7601747051845403 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         178.32.202.248
HTTP/1.1 302 Found
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Set-Cookie: v = 1546106057.153; Domain=.spolecznosci.net; Path=/; Expires=Mon, 28 Jan 2019 17:54:17 GMT
Location: /pet?s=prv&x=337,1888,421&h=421&safe=0&ut=&uu=null&cb=4760894148&uq=93238056536.883569&ref=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&sp_gdpr=&n=0.7601747051845403&nr=1
Date: Sat, 29 Dec 2018 17:54:17 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /js/ads.js HTTP/1.1 
Host: s.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://spolecznosci.net/files/data.45.htm?Ho_siotewellcres.opx.pl

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:17 GMT
Content-Length: 17
Last-Modified: Thu, 08 Jun 2017 09:02:05 GMT
Expires: Sun, 29 Dec 2019 17:54:17 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   17
Md5:    3b4ac5fef7680215ad89802b8ada27de
Sha1:   34d7faeb7d4208612463067910a1c6108145ae01
Sha256: 67ae887c73eb787ae3c9c187909ab72e6df7f1de667acc7926681ef158a23fbc
                                        
                                            GET /geo_snet?cb=extraDataCached HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://spolecznosci.net/files/data.45.htm?Ho_siotewellcres.opx.pl
Cookie: v=1546106057.153; tgx=v%3A1%7CAd%3A0%7CSw%3A1176

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Cache-Control: private, max-age=3600
Expires: Sat, 29 Dec 2018 18:54:17 GMT
Set-Cookie: v = 1546106057.153; Domain=.spolecznosci.net; Path=/; Expires=Mon, 28 Jan 2019 17:54:17 GMT
X-Runtime: 0
X-Runtime-details: a0
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   195
Md5:    f31581273a03f89f7d86f82fa8302577
Sha1:   3b78ac3d3af9adbbc8fc5f1bc7e307c213c079c0
Sha256: c148c55a4fcc1fefefb5e875b26c7a381848fe915d234d7ef650b18dee186149
                                        
                                            GET /pet?s=prv&x=337,1888,421&h=421&safe=0&ut=&uu=null&cb=4760894148&uq=93238056536.883569&ref=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&sp_gdpr=&n=0.7601747051845403&nr=1 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: v=1546106057.153

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Last-Modified: Sat, 29 Dec 2018 17:54:17 GMT
Set-Cookie: v = 1546106057.153; Domain=.spolecznosci.net; Path=/; Expires=Mon, 28 Jan 2019 17:54:17 GMT
X-Runtime: 57
X-Runtime-details: a0-b0-c0-d34-da34-e35-f35-j35-k43-g44-y44-z57
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1020
Md5:    c5505a265f9cb1a0588e1524af1506ed
Sha1:   77d95fd7542da940bf3334ec3aaa2870baa437ed
Sha256: f58ac23eccdcfaee7006b0d251ef05787a6cca2246bb20e50250b5f8e2466078
                                        
                                            GET /ls.php?x=Wo.55~Kr.NO~Re.3143244~Ad.0~Sw.1176~Os.WINDOWS-7000~Ua.FIREFOX-3~Ct.RESIDENTIAL~Isp.BROADNET%20AS~Pv.0&attr=%7B%22siotewellcres.opx.pl%22%3A%7B%22pv%22%3A0%2C%22last%22%3A%222018-12-29T17%3A54%3A17.237Z%22%7D%7D HTTP/1.1 
Host: spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://spolecznosci.net/files/data.45.htm?Ho_siotewellcres.opx.pl
Cookie: v=1546106057.153; tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: v=1546106057.153; expires=Tue, 29-Jan-2019 17:54:17 GMT; Max-Age=2678400; path=/; domain=spolecznosci.net tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET+AS; expires=Tue, 29-Jan-2019 17:54:17 GMT; Max-Age=2678400; path=/; domain=spolecznosci.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28
Md5:    7faa7d4c8047fe580db080af59ce3dcb
Sha1:   9a67ed1d0c415c55aaf22ba10b76a52e14b41e07
Sha256: a001374e40979a6c320d3ccb03f1818e951a8cae58d1654f8b641161760c8861
                                        
                                            GET /avd/54867/131519/11001/337/?o=1546106057392 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: v=1546106057.153; tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS

                                         
                                         178.32.202.248
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Location: https://a.spolecznosci.net/avd/54867/131519/11001/337/?o=1546106057392


--- Additional Info ---
                                        
                                            GET /avd/122748/193575/11001/1888/?o=1546106057392 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: v=1546106057.153; tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS

                                         
                                         178.32.202.248
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Location: https://a.spolecznosci.net/avd/122748/193575/11001/1888/?o=1546106057392


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.91
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "4D5D3B46DAA17D7453E7F1E4FF6AF6D59AAABF513806A7B68E56EDA3328157DF"
Last-Modified: Fri, 28 Dec 2018 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43146
Expires: Sun, 30 Dec 2018 05:53:23 GMT
Date: Sat, 29 Dec 2018 17:54:17 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    459ecb2434f3e6c90bb921cb4d9abcd4
Sha1:   89b560e810731e6e803eef4aec1a3225ef5ea25c
Sha256: 4d5d3b46daa17d7453e7f1e4ff6af6d59aaabf513806a7b68e56eda3328157df
                                        
                                            GET /avd/54867/131519/11001/337/?o=1546106057392 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: v=1546106057.153; tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Set-Cookie: v = 1546106057.153; Domain=.spolecznosci.net; Path=/; Expires=Mon, 28 Jan 2019 17:54:17 GMT
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    df16d33739defe9bda1f4c45d36fd7a7
Sha1:   ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
Sha256: 90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
                                        
                                            GET /avd/122748/193575/11001/1888/?o=1546106057392 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: v=1546106057.153; tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Set-Cookie: v = 1546106057.153; Domain=.spolecznosci.net; Path=/; Expires=Mon, 28 Jan 2019 17:54:17 GMT
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    df16d33739defe9bda1f4c45d36fd7a7
Sha1:   ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
Sha256: 90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
                                        
                                            GET /www/delivery/ajs.php?zoneid=245&cb=40911609546&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:17 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   1182
Md5:    3707c52961c0a008ba74074d6a3413ed
Sha1:   714bd08d9c51ac1154793082c8fe03cd93834562
Sha256: cb2f9c377ed4b4c689b9e0962f07ca84fd6ecb37de39923bd3bdfa49041eb9f3
                                        
                                            GET /www/delivery/ajs.php?zoneid=223&cb=96521598969&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:17 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   1188
Md5:    1d9e9607df85085a5bab2e1e59ae6660
Sha1:   6f6a838fce10647f17fa89add278da70e08d4c2b
Sha256: f1b03ca3704a0923bdc04105eeb6a276a79c83377e8456ce16195fc77bfd5d24
                                        
                                            GET /www/delivery/lg.php?bannerid=810&campaignid=222&zoneid=245&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=9ec3818d0d HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:17 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /www/delivery/lg.php?bannerid=809&campaignid=222&zoneid=223&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=87739cd72a HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:17 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=153800
Date: Sat, 29 Dec 2018 17:54:18 GMT
Etag: "5c274f15-1d7"
Expires: Mon, 31 Dec 2018 12:37:38 GMT
Last-Modified: Sat, 29 Dec 2018 10:40:21 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ed97da2f53966f27e8e17d5f73d063c7
Sha1:   088b223633d1b5017bc5dc3631062d29ad4089b0
Sha256: 78edfd0181a05d6f70834c662c63d303ac1bdc81a5765904ac4b84d352ed1df4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=144142
Date: Sat, 29 Dec 2018 17:54:18 GMT
Etag: "5c2732ed-1d7"
Expires: Mon, 31 Dec 2018 09:56:40 GMT
Last-Modified: Sat, 29 Dec 2018 08:40:13 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    606e89712e428aeac9197959aaa296bd
Sha1:   ad2418b5e2b43a31ec8529569a7be6ac73c245e0
Sha256: de35a5a93ae507232181a54bb59b2f1fdc6332ba015f30a87b25b1dce01063f2
                                        
                                            GET /ad/10163.js HTTP/1.1 
Host: ads.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         2.23.143.150
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache
X-Powered-By: PHP/5.3.3
Content-Encoding: gzip
Content-Length: 7558
Cache-Control: max-age=8729
Expires: Sat, 29 Dec 2018 20:19:47 GMT
Date: Sat, 29 Dec 2018 17:54:18 GMT
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7558
Md5:    b5ac50f921c7e5f7ba554d7abc3fd7dd
Sha1:   393becfe2faa9ea630478fce951a92db781f97c0
Sha256: 72ff6b8c4437f21909ec3f4aa890998e0d21fe8a949c9de5b36f68ab3277bf98
                                        
                                            GET /a/10163/132208/624724-9.js?&cb=0.1571311539182627&tk_st=1&rf=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html&rp_s=c&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_9 HTTP/1.1 
Host: optimized-by.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         213.19.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sat, 29 Dec 2018 17:54:18 GMT
Server: RAS 2.4
Set-Cookie: khaos=JQ9RMLW4-D-8S6; Domain=.rubiconproject.com; Path=/; Expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000 ruid=; Domain=.rubiconproject.com; Path=/; Expires=Sat, 01-Jan-2000 00:00:00 GMT; Max-Age=0 rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD8RvIBHPs+m8df3rUgoBYV9S2nMtNrI65zB61CvZ46MhTRUcu15sW4EONQNbw1tRXjXD1QrChntAyvT/uMPKMwV+0h4SOK; Domain=.rubiconproject.com; Path=/ ses9=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Sun, 30-Dec-2018 06:59:59 GMT; Max-Age=47141 vis9=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Sun, 30-Dec-2018 06:59:59 GMT; Max-Age=47141 audit=2Vi9kzRSXWIC8mpNzKntTrys6syQ6kjYVvq3VFXfItGFls37mE++txDKIV3LFkGMnCVMNpsh83YpCTKJz/RJI4mkoTj/UsJ9aOl+AuD6gow=; Domain=.rubiconproject.com; Path=/; Expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1115
Keep-Alive: timeout=0, max=7
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1115
Md5:    b49cd9e06c747615fa19c17a224ec362
Sha1:   5e68f3ee16353e06535ed69f9b2776c9c07edac9
Sha256: 83d11077372f83cc854c6d4fb29b730691ede29eb72042c10dc2ec0d6857d0e1
                                        
                                            GET /www/delivery/ajs.php?zoneid=254&cb=11521478074&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   787
Md5:    a87cfb4d2bb004f92e78e9ccb730b420
Sha1:   73bad27aae802e44dbea7d8b150fea6a6658b1f0
Sha256: 7713a2c33bab2ae4bc917ae228c24fcdee0dfd9d11ea35ede9451069969dd4c5
                                        
                                            GET /www/delivery/lg.php?bannerid=807&campaignid=221&zoneid=254&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=876996e1b5 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /a/10163/132208/624722-40.js?&cb=0.04684583337874726&tk_st=1&rf=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html&rp_s=c&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_40 HTTP/1.1 
Host: optimized-by.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         213.19.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sat, 29 Dec 2018 17:54:18 GMT
Server: RAS 2.4
Set-Cookie: khaos=JQ9RMLW5-28-JK85; Domain=.rubiconproject.com; Path=/; Expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000 ruid=; Domain=.rubiconproject.com; Path=/; Expires=Sat, 01-Jan-2000 00:00:00 GMT; Max-Age=0 rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD8RvIBHPs+m8df3rUgoBYV9S2nMtNrI65zB61CvZ46MhTRUcu15sW4EONQNbw1tRXjXD1QrChntAyvT/uMPKMwV+0h4SOK; Domain=.rubiconproject.com; Path=/ ses40=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Sun, 30-Dec-2018 06:59:59 GMT; Max-Age=47141 vis40=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Sun, 30-Dec-2018 06:59:59 GMT; Max-Age=47141 audit=2Vi9kzRSXWLAQV5i+IVMKLys6syQ6kjYVvq3VFXfItGFls37mE++txDKIV3LFkGMnCVMNpsh83YpCTKJz/RJI4mkoTj/UsJ9aOl+AuD6gow=; Domain=.rubiconproject.com; Path=/; Expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1119
Keep-Alive: timeout=0, max=10
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1119
Md5:    6e223807dafe2984ac6982b2d7852119
Sha1:   e155d5e02cfed211650b652a580f108eedbbff81
Sha256: b2149586e061f4acae0b33cc8b83d2495d275a357899d741e2ed4c89ed8319c4
                                        
                                            GET /www/images/07f240f8282acb2bfe26ec5422935aa3.jpg HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:18 GMT
Content-Length: 32619
Last-Modified: Wed, 15 Mar 2017 11:01:48 GMT
Connection: keep-alive
Etag: "58c91f1c-7f6b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   32619
Md5:    07f240f8282acb2bfe26ec5422935aa3
Sha1:   1f5863a8a45633ef7257d85e805aa613cbe7c0b2
Sha256: dee8a11239f950012f0f4620c34240e35d977731c3b8e15380888ea59e7d3c50
                                        
                                            GET /www/delivery/ajs.php?zoneid=253&cb=4430700792&charset=UTF-8&loc=http%3A//siotewellcres.opx.pl/arcon-502-skachat.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   910
Md5:    6835912fd6143634e41e9a52b3b313a0
Sha1:   e63e2d65df615be6dab0abde12637d5b3b9ee1e2
Sha256: 9182c3f6f5ee6b60da07399d439e7339ae9236e73f00fc42c2995cdfd71a23f2
                                        
                                            GET /usync.html?&geo=eu&co=no HTTP/1.1 
Host: eus.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: khaos=JQ9RMLW4-D-8S6; rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD8RvIBHPs+m8df3rUgoBYV9S2nMtNrI65zB61CvZ46MhTRUcu15sW4EONQNbw1tRXjXD1QrChntAyvT/uMPKMwV+0h4SOK; ses9=132208^1; vis9=132208^1; audit=2Vi9kzRSXWIC8mpNzKntTrys6syQ6kjYVvq3VFXfItGFls37mE++txDKIV3LFkGMnCVMNpsh83YpCTKJz/RJI4mkoTj/UsJ9aOl+AuD6gow=

                                         
                                         104.123.140.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Thu, 06 Dec 2018 12:00:00 GMT
Content-Encoding: gzip
Content-Length: 7420
Cache-Control: max-age=42018
Expires: Sun, 30 Dec 2018 05:34:36 GMT
Date: Sat, 29 Dec 2018 17:54:18 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7420
Md5:    270df6513a8ae7556ad1a8bcc0fbe8c2
Sha1:   6a4e3a0e4293a9afa6e20d2f669a3ed6500c9ce9
Sha256: 8b6088e776f6cb06a25197f633f1089483609e60b7375b694907cabf5071d545
                                        
                                            GET /beacon/d/7df41b5e-ba92-40c5-a6df-5fb390cc6e89?oo=0&accountId=10163&siteId=132208&zoneId=624722&sizeId=40&e=6A1E40E384DA563B0F9E58542F48C89B519EA51C21B70C5369F21121FFCDC7D1286404D41D5101AB05634AA445F383EE9833B6E12CCD46A9643DB9FCFAE19D8AD59CB5FAEBC6A82A8386996C71225E6A1C45189F33B502F0B17E1DA35A9FE14818F2677DC46CA53F42FC750E78643D4D61ACC829CFC5FFA509486FA62D86CD0DBB4F33CDE214CF90 HTTP/1.1 
Host: beacon-eu-ams3.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: khaos=JQ9RMLW5-28-JK85; rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD8RvIBHPs+m8df3rUgoBYV9S2nMtNrI65zB61CvZ46MhTRUcu15sW4EONQNbw1tRXjXD1QrChntAyvT/uMPKMwV+0h4SOK; ses9=132208^1; vis9=132208^1; audit=2Vi9kzRSXWLAQV5i+IVMKLys6syQ6kjYVvq3VFXfItGFls37mE++txDKIV3LFkGMnCVMNpsh83YpCTKJz/RJI4mkoTj/UsJ9aOl+AuD6gow=; ses40=132208^1; vis40=132208^1

                                         
                                         213.19.162.47
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: private, max-age=0, no-cache
Expires: 01 Jan 1970 10:00:00 GMT
Pragma: no-cache
Content-Length: 43
Date: Sat, 29 Dec 2018 17:54:18 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /beacon/d/9489aba4-134b-4851-b6d7-4ea6655f3a0e?oo=0&accountId=10163&siteId=132208&zoneId=624724&sizeId=9&e=6A1E40E384DA563B3F1434DBD248705756DF7CDFF38D0E8BFD5F46AD032F3DE604044943FE5F294A775ED1208DE223699833B6E12CCD46A9FDDB10ADB1AB1818D59CB5FAEBC6A82A8386996C71225E6A1C45189F33B502F0B17E1DA35A9FE148961166F2F09DF4B8D2EBDE5CF9A2A3BED0E20A015BD85B5F109478760DFABCFE32997889F1DA11D8 HTTP/1.1 
Host: beacon-eu-ams3.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: khaos=JQ9RMLW4-D-8S6; rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD8RvIBHPs+m8df3rUgoBYV9S2nMtNrI65zB61CvZ46MhTRUcu15sW4EONQNbw1tRXjXD1QrChntAyvT/uMPKMwV+0h4SOK; ses9=132208^1; vis9=132208^1; audit=2Vi9kzRSXWIC8mpNzKntTrys6syQ6kjYVvq3VFXfItGFls37mE++txDKIV3LFkGMnCVMNpsh83YpCTKJz/RJI4mkoTj/UsJ9aOl+AuD6gow=

                                         
                                         213.19.162.47
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: private, max-age=0, no-cache
Expires: 01 Jan 1970 10:00:00 GMT
Pragma: no-cache
Content-Length: 43
Date: Sat, 29 Dec 2018 17:54:18 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            POST /gsdomainvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 29 Dec 2018 17:54:18 GMT
Content-Length: 1558
Connection: keep-alive
Set-Cookie: __cfduid=de9dfbfb5487b0a108c2f75ac9b9cf4001546106058; expires=Sun, 29-Dec-19 17:54:18 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Sat, 29 Dec 2018 16:06:48 GMT
Expires: Wed, 02 Jan 2019 16:06:48 GMT
Etag: "a8d1af26b4c51afc835f65c149d0dab8b27a0510"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 490e219485b14261-OSL


--- Additional Info ---
Magic:  data
Size:   1558
Md5:    bd64d9f411a19ef64f0614103304add1
Sha1:   a8d1af26b4c51afc835f65c149d0dab8b27a0510
Sha256: 1853b7775e95cc5ff5d67930effb9fcd44b89e39a1d19a7cd3c19dfb3803b833
                                        
                                            GET /imp?type(js)pool(510263)a(2354327)preurl(http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=e04fc530d6__oadest=)420974567 HTTP/1.1 
Host: imppl.tradedoubler.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html

                                         
                                         52.211.133.130
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=ISO-8859-2
                                        
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=0
Date: Sat, 29 Dec 2018 17:54:18 GMT
P3P: policyref="http://tracker.tradedoubler.com/w3c/p3p.xml",CP="NOI DSP COR NID CUR OUR NOR"
Pragma: no-cache
Server: TXServerHttp
Set-Cookie: BT=1z11zzZrz1MN66CzacaH2KezzHx1y6x1z9yacaH2Ke;expires=Sun, 29-Dec-2019 17:54:19 GMT;path=/;domain=.tradedoubler.com PI=1z11z1zZrz1iih1MzBRJoy1y21B55yyyy63RYyId1y29Z3gQyyy2SYVx1plw;expires=Sun, 29-Dec-2019 17:54:19 GMT;path=/;domain=.tradedoubler.com UI=1z11zzZrzqZgD5zI2eyENss;expires=Sun, 29-Dec-2019 17:54:19 GMT;path=/;domain=.tradedoubler.com PL=1z11zzZrz1WoebQz2ZdbyINrWyFfdSyy-3FiO48y3tJPw1z1ucfyINrWyFfdSyy-3FiO48y4IrImw1;expires=Sun, 29-Dec-2019 17:54:19 GMT;path=/;domain=.tradedoubler.com
Content-Length: 343
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   343
Md5:    98b7f7ced5699202b5a853d3d37fecfd
Sha1:   00ff0d7bda8c11df5368feeccf67fc1ddf9fbb81
Sha256: af67599b2f63812590914f0430ab8e762163c7b0ccc31b72509bb648bcd908b7
                                        
                                            GET /www/delivery/lg.php?bannerid=273&campaignid=123&zoneid=27&loc=http%3A%2F%2Fsiotewellcres.opx.pl%2Farcon-502-skachat.html&cb=e04fc530d6 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=c8719aa3715fa7c98d31ed3a2b5e86ab

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 29 Dec 2018 17:54:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=c8719aa3715fa7c98d31ed3a2b5e86ab; expires=Sun, 29-Dec-2019 17:54:18 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /file/64960/2018/12/10/37339/750x200.jpg HTTP/1.1 
Host: vht.tradedoubler.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://siotewellcres.opx.pl/arcon-502-skachat.html
Cookie: BT=1z11zzZrz1MN66CzacaH2KezzHx1y6x1z9yacaH2Ke; PI=1z11z1zZrz1iih1MzBRJoy1y21B55yyyy63RYyId1y29Z3gQyyy2SYVx1plw; UI=1z11zzZrzqZgD5zI2eyENss; PL=1z11zzZrz1WoebQz2ZdbyINrWyFfdSyy-3FiO48y3tJPw1z1ucfyINrWyFfdSyy-3FiO48y4IrImw1

                                         
                                         143.204.47.2
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 44075
Connection: keep-alive
Server: Apache
Last-Modified: Mon, 10 Dec 2018 11:20:27 GMT
Accept-Ranges: bytes
Date: Mon, 24 Dec 2018 13:39:50 GMT
Etag: "ac2b-57ca926deb4c0"
Cache-Control: max-age=604800, public
Expires: Mon, 17 Dec 2018 11:26:10 GMT
Age: 455275
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: EBf2-JRBiAlixBYq3Y3rdiUBocZVqZcvS8hRr5WFX2e_0HMyYsDSNw==


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   44075
Md5:    4460a2bba26ce3d17874faeea8cdb45e
Sha1:   9353fe9f3d17e53fb2a407c64dfde5fc680aefac
Sha256: ad2247ed3b6c8fb88d0503ea9850d0dbc9bb881f7634da283b7ff56734ece97b