Overview

URL un-install.info
IP37.1.211.156
ASNAS35017 Swiftway Sp. z o.o.
Location United States
Report completed2019-06-21 15:12:04 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 37.1.211.156

Date UQ / IDS / BL URL IP
2018-05-09 23:06:36 +0200
0 - 0 - 1 www.bytexis.com/download/msn-password-recover (...) 37.1.211.156
2017-10-01 21:55:02 +0200
0 - 0 - 0 www.null-logics.com/software/the-bat-password (...) 37.1.211.156

Last 10 reports on ASN: AS35017 Swiftway Sp. z o.o.

Date UQ / IDS / BL URL IP
2019-06-30 17:40:16 +0200
0 - 0 - 0 crazy-holiday.biz/ 46.21.146.239
2019-06-30 16:55:29 +0200
0 - 1 - 0 fap18videos.com/ 94.100.24.174
2019-06-30 16:53:52 +0200
0 - 1 - 0 teen18folders.mobi/ 94.100.24.174
2019-06-30 16:47:46 +0200
0 - 1 - 0 teen18forum.mobi/ 94.100.24.174
2019-06-30 16:47:18 +0200
0 - 1 - 0 joyteens.blue/ 94.100.24.174
2019-06-30 16:44:14 +0200
0 - 1 - 0 teenfolder.org/ 94.100.24.174
2019-06-30 16:43:37 +0200
0 - 1 - 0 teen18folders.mobi/ 94.100.24.174
2019-06-30 16:36:45 +0200
0 - 1 - 0 teen18planet.link/ 94.100.24.174
2019-06-30 16:35:47 +0200
0 - 1 - 0 joyteens.blue/ 94.100.24.174
2019-06-30 16:35:17 +0200
0 - 2 - 0 18teens.blue/ 94.100.24.174

No other reports on domain: un-install.info



JavaScript

Executed Scripts (42)


Executed Evals (1)

#1 JavaScript::Eval (size: 4, repeated: 1) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this
                                    

Executed Writes (5)

#1 JavaScript::Write (size: 306, repeated: 1) - SHA256: 264161db8a220a93a331aed7110937b464b8718881278a8ebc31384bd1cfc1bc

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_0"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_0']});</script > < /body></html >
                                    

#2 JavaScript::Write (size: 306, repeated: 1) - SHA256: 5efcb9fc2a44ea42dca7f3a6201c413bf996957c8642429d6bfa6d151206a13e

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_1"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_1']});</script > < /body></html >
                                    

#3 JavaScript::Write (size: 256, repeated: 1) - SHA256: a88eb96aebe92665b2d71ba5f3f9a316e9d0b427da714b7a3549b943b1ddb469

                                        < a href = '//www.liveinternet.ru/click'
target = _blank > < img src = '//counter.yadro.ru/hit?t26.6;r;s1176*885*24;uhttp%3A//un-install.info/;0.8307008818182551'
alt = ''
title = 'LiveInternet: ?>:070=> G8A;> ?>A5B8B5;59 70 A53>4=O'
border = '0'
width = '0'
height = '0' > < /a>
                                    

#4 JavaScript::Write (size: 1274, repeated: 1) - SHA256: a92e08504911f110cc0a52fbb1f7dea3a37d8098d66f59559068897206655287

                                        < iframe id = "google_ads_frame0"
name = "google_ads_frame0"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&amp;output=html&amp;adk=1812271804&amp;adf=807048394&amp;lmt=1561122690&amp;plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C30%3A1048576&amp;guci=1.2.0.0.2.2.0.0&amp;format=0x0&amp;url=http%3A%2F%2Fun-install.info%2F&amp;ea=0&amp;flash=10.0.45&amp;pra=5&amp;wgl=0&amp;dt=1561122691265&amp;bpp=79&amp;fdt=324&amp;idt=324&amp;shv=r20190617&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;nras=1&amp;correlator=1633085741116&amp;frm=20&amp;pv=2&amp;ga_vid=1469064294.1561122692&amp;ga_sid=1561122692&amp;ga_hid=1818569587&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1176&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=6&amp;fc=1936&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cs%7C&amp;abl=NS&amp;fu=16&amp;bc=1&amp;ifi=0&amp;uci=a!0&amp;dtd=802"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#5 JavaScript::Write (size: 1337, repeated: 1) - SHA256: d09c168956abe2f59e93824dff5fcb68ec968a87352b10bb09a9e5a264d00194

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "940"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&amp;output=html&amp;h=90&amp;slotname=2756372086&amp;adk=4193989893&amp;adf=807048394&amp;w=940&amp;fwrn=4&amp;fwrnh=100&amp;lmt=1561122690&amp;rafmt=1&amp;guci=1.2.0.0.2.2.0.0&amp;format=940x90&amp;url=http%3A%2F%2Fun-install.info%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;dt=1561122692350&amp;bpp=20&amp;fdt=26&amp;idt=26&amp;shv=r20190617&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=0x0&amp;nras=1&amp;correlator=1633085741116&amp;frm=20&amp;pv=1&amp;ga_vid=1469064294.1561122692&amp;ga_sid=1561122692&amp;ga_hid=1818569587&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=118&amp;ady=158&amp;biw=1176&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=1936&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;uci=a!1&amp;dtd=46"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (48)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: un-install.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         37.1.211.156
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 21 Jun 2019 13:11:29 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7549
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7549
Md5:    742907f896a5d4763151580f55a25b6f
Sha1:   4763bb4f3623c64de689ac7c96eecf144700fc7b
Sha256: 475e11d9ffe309495092824886c1b1f8cefa97c950af68b7c954e0ba31eec55d
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Fri, 21 Jun 2019 13:11:30 GMT
Expires: Fri, 21 Jun 2019 13:11:30 GMT
Cache-Control: private, max-age=3600
Etag: 14949323673342585829
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 34139
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   34139
Md5:    30541a37768d94a481af56e2995bbdae
Sha1:   0583c7256b00e4e962cbf0eeed528467569d5901
Sha256: f52b62dd490df36d2d6d12fcb0239c9d4433a0d25b152ee5d4b9dffdecdd047b
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: un-install.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         37.1.211.156
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Fri, 21 Jun 2019 13:11:30 GMT
Server: Apache
Last-Modified: Mon, 18 Sep 2017 18:16:07 GMT
Etag: "47e-5597abc80e7c0"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    2c7b0e3b1cc79c230e2bebff131577da
Sha1:   74761ab0ce181c51cc07e31cad92cb95b2a01538
Sha256: e5c7cb2a464d5419417a2bcf9e8b952252f0c01a1cd9776825f41e1d9d500e7d
                                        
                                            GET /css/style.css HTTP/1.1 
Host: un-install.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         37.1.211.156
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 21 Jun 2019 13:11:30 GMT
Server: Apache
Last-Modified: Mon, 18 Sep 2017 18:16:24 GMT
Etag: "702-5597abd844e00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 571
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   571
Md5:    e4699f4c72e09d2416653b44a459f79a
Sha1:   016a7cf58a7abf4764aba3989ca6cfbb74703fa9
Sha256: 5edf418428ea5cf4abed4d933d39e0c5ed671f8200821600a0c4b65f2c392d5e
                                        
                                            GET /webicons/logo.png HTTP/1.1 
Host: un-install.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         37.1.211.156
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 21 Jun 2019 13:11:31 GMT
Server: Apache
Last-Modified: Mon, 18 Sep 2017 18:16:28 GMT
Etag: "18be-5597abdc15700"
Accept-Ranges: bytes
Content-Length: 6334
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   6334
Md5:    001255269d26ecc845cf26b665b65189
Sha1:   a6649aa5170c2187e7ba3d67ab3d697f80dbb988
Sha256: ff3ea5ccc6e75ffdda75695922a0714d9a601b13a8d99149a9f801f221789e4a
                                        
                                            GET /bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: un-install.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         37.1.211.156
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 21 Jun 2019 13:11:30 GMT
Server: Apache
Last-Modified: Mon, 18 Sep 2017 18:16:36 GMT
Etag: "184dc-5597abe3b6900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16659
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16659
Md5:    01b48844c5d5823b9569334313619c76
Sha1:   0fc21c11e829610a104b8fe3bfca7c1a3ee4bc01
Sha256: 9bdc1a1193ab7d91bf3623c22c9450fc537f4413527dee5662e1dacdee9b2fc3
                                        
                                            GET /pagead/js/r20190617/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Fri, 21 Jun 2019 13:11:31 GMT
Expires: Fri, 21 Jun 2019 13:11:31 GMT
Cache-Control: private, max-age=1209600
Etag: 10442217873249368825
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 79885
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   79885
Md5:    140af7419ac7f40e115c8bc88b3820cd
Sha1:   de5b38465287e7d091283900d372ba1dacc369db
Sha256: 49f18d30c8246a3de2421c62be3521ebd63422c7d7db195ffa026adfa3aaea6d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 21 Jun 2019 13:11:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fda05d7d68db02f0bd1d5984a2026dda
Sha1:   619cc73b3d1605cebc446030d07c028da1881350
Sha256: 6c2fa6334e29892ff73394a13b28a9b4e9893dbf1cd3dffd8a96dd258164b791
                                        
                                            GET /jquery.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         205.185.208.52
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Fri, 21 Jun 2019 13:11:32 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 83875
Last-Modified: Fri, 24 Oct 2014 00:16:08 GMT
Server: nginx
Etag: W/"54499a48-4508e"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1561122692.dop005.sk1.t,1561122692.cds043.sk1.c


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   83875
Md5:    ea735805900bbd9b4dc4f93e4348b8d8
Sha1:   2e2d5c3270d6a6a0e4aab05f3a3f4ea8f8f7c07c
Sha256: 962d003a78697a2a9508f3da6cc6a65259f3fb9b59d6eaa1486f7034830494b2
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 21 Jun 2019 13:11:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /bootstrap/js/bootstrap.min.js HTTP/1.1 
Host: un-install.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         37.1.211.156
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 21 Jun 2019 13:11:32 GMT
Server: Apache
Last-Modified: Mon, 18 Sep 2017 18:16:44 GMT
Etag: "6cae-5597abeb57b00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7283
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7283
Md5:    fe642f9077a16cdd27eab5224886fe33
Sha1:   3ad41d16ae0771962d7cacb8e328a19ce87aa256
Sha256: 265a8b703e3130e85f71a0e83c44c09ae375bd376bb7f12c8e0f0590473c6662
                                        
                                            GET /pub-config/r20160913/ca-pub-4825517397485610.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 118
Date: Fri, 21 Jun 2019 06:14:09 GMT
Expires: Fri, 21 Jun 2019 18:14:09 GMT
Last-Modified: Fri, 21 Jun 2019 00:26:55 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=43200
Age: 25043
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   118
Md5:    6f5e216d6b559d8c625c16d9cf3aea0d
Sha1:   67c7c642c603aee5bd2bac15ebfb279807a8a74e
Sha256: 84a4c2774af94b013729bc5934fbf0fa87d5f4e2b001bd1cd0a7bce5ba41d7eb
                                        
                                            GET /pagead/html/r20190617/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 18 Jun 2019 02:55:52 GMT
Expires: Tue, 02 Jul 2019 02:55:52 GMT
Etag: 9107516332936589630
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 7041
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 296140
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7041
Md5:    4d5b08eb17ce9abbc47ca66d331012ad
Sha1:   e299b1ee08219ed5b423a4f35df11773a7bed487
Sha256: addfd42cc39ee41cebeaa6d619ed68860c60babc98e2ed32b9895590b829d386
                                        
                                            GET /bootstrap/fonts/glyphicons-halflings-regular.woff HTTP/1.1 
Host: un-install.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/bootstrap/css/bootstrap.min.css

                                         
                                         37.1.211.156
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Fri, 21 Jun 2019 13:11:32 GMT
Server: Apache
Last-Modified: Mon, 18 Sep 2017 18:16:40 GMT
Etag: "5afc-5597abe787200"
Accept-Ranges: bytes
Content-Length: 23292
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   23292
Md5:    5eae1f7217b606d3580dd70ac840fea1
Sha1:   c6ea7b1a5bb16b160cc9b8a02f6f6371b5ef7b73
Sha256: 63faf0af44a428f182686f0d924bb30e369a9549630c7b98a969394f58431067
                                        
                                            GET /activeview/js/current/osd.js?cb=%2Fr20100101 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 21 Jun 2019 13:11:32 GMT
Expires: Fri, 21 Jun 2019 13:11:32 GMT
Cache-Control: private, max-age=3000
Etag: "1560942906114731"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28369
Md5:    8db47ba555b42042e6492f7ffe4f42c8
Sha1:   b3b5b1e3e3a7c3c1898670ca9a5e65b32743933f
Sha256: f5da7901614295cb0a44910a4a9a79cc48089735f1f61a3d4f4dedbaf6cc74dd
                                        
                                            GET /pagead/ads?client=ca-pub-4825517397485610&output=html&adk=1812271804&adf=807048394&lmt=1561122690&plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C30%3A1048576&guci=1.2.0.0.2.2.0.0&format=0x0&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&pra=5&wgl=0&dt=1561122691265&bpp=79&fdt=324&idt=324&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&nras=1&correlator=1633085741116&frm=20&pv=2&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=6&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cs%7C&abl=NS&fu=16&bc=1&ifi=0&uci=a!0&dtd=802 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 21 Jun 2019 13:11:32 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 21-Jun-2019 13:26:32 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 21 Jun 2019 13:11:32 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   571
Md5:    13b4f955513f03353e9e704b2f691f38
Sha1:   29287ddfc290e405412a07942339ebb88ee59f7e
Sha256: 446cb7a7250f18bdad82f4b8abb6d7b592fb1f0a223ba8f8fcb0a8c1bb75b3ac
                                        
                                            GET /pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 21 Jun 2019 13:11:32 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 21-Jun-2019 13:26:32 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 21 Jun 2019 13:11:32 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15411
Md5:    775650135a490ac83bc2e188c2fcee1e
Sha1:   1a3b872f1a8a0998cdcab8fa615acc6a870cea5e
Sha256: db63be579a5cf7bf8a8d491f15f8ab1c2d56d7c2782fba915426e871eba52572
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Fri, 21 Jun 2019 12:13:54 GMT
Expires: Fri, 21 Jun 2019 14:13:54 GMT
Last-Modified: Tue, 21 May 2019 23:53:44 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17595
Cache-Control: public, max-age=7200
Age: 3459


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17595
Md5:    585dd98ad9bada516652979df577ade8
Sha1:   b81e0ee5e2648994c7c92e4becb6a8420113e462
Sha256: e88dfebceadff72fc5bb3ab4a4dfa71d835acbb4d183091d66e72e762fb306d5
                                        
                                            GET /hit?t26.6;r;s1176*885*24;uhttp%3A//un-install.info/;0.8307008818182551 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         88.212.201.193
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Fri, 21 Jun 2019 13:11:33 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t26.6;r;s1176*885*24;uhttp%3A//un-install.info/;0.8307008818182551
Content-Length: 32
Expires: Wed, 20 Jun 2018 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1T3DU50VhQfq1T3DU500D1nW; path=/; expires=Fri, 19 Jun 2020 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 21 Jun 2019 13:11:33 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    02e4db796071abdd6a26da3ddab71a2a
Sha1:   1e8b98e538a601a356032954ad9397e7bf59b246
Sha256: 14d705ca70fc24e5a5baa3861f272c8fcbf0a5ed6cb689fc87ce8ce1ef552d7a
                                        
                                            GET /r/collect?v=1&_v=j76&a=1818569587&t=pageview&_s=1&dl=http%3A%2F%2Fun-install.info%2F&ul=en-us&de=UTF-8&dt=UninstallInfo%20-%20Effective%20Windows%20Software%20Uninstall%20Tips!&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAEQ~&jid=823685350&gjid=844596159&cid=1469064294.1561122692&tid=UA-19880537-16&_gid=1166128325.1561122693&_r=1&z=1088817123 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 21 Jun 2019 13:11:33 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /hit?q;t26.6;r;s1176*885*24;uhttp%3A//un-install.info/;0.8307008818182551 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/
Cookie: FTID=1T3DU50VhQfq1T3DU500D1nW

                                         
                                         88.212.201.193
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 21 Jun 2019 13:11:33 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 124
Expires: Wed, 20 Jun 2018 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=2WyvBK2v8NPq1T3DU500D1nZ; path=/; expires=Fri, 19 Jun 2020 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 15
Size:   124
Md5:    4660f056c3cfa7218cf3c568a57b6dc6
Sha1:   e31d15f76c94b613ee78d2e0d02c68ef2e95d580
Sha256: 53533c2162403e1d6c646644d83b177b6fdff275ea3542dbe7729aae143cb78a
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 21 Jun 2019 13:11:33 GMT
Content-Length: 1574
Connection: keep-alive
Set-Cookie: __cfduid=d778688194b9bb8030cfe84bd8400afb91561122693; expires=Sat, 20-Jun-20 13:11:33 GMT; path=/; domain=.globalsign.com; HttpOnly
Expires: Tue, 25 Jun 2019 12:34:27 GMT
X-Powered-By: Undertow/1
Etag: "c03c6671108f5f406aeed0dc5670bc1bf6cc40df"
Last-Modified: Fri, 21 Jun 2019 12:34:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4ea63aa049d44253-OSL


--- Additional Info ---
Magic:  data
Size:   1574
Md5:    0a591ad87519365e6ce4e958f2fa26e4
Sha1:   c03c6671108f5f406aeed0dc5670bc1bf6cc40df
Sha256: 357cfdd3da9b7691cba6400389acd66a83e8c0ef8e08df862a87de7beb561558
                                        
                                            GET /css?family=Roboto:300,400,500&lang=en HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 21 Jun 2019 13:11:33 GMT
Date: Fri, 21 Jun 2019 13:11:33 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   246
Md5:    35edfaf3706067225cc7ea2d0d94532c
Sha1:   6e9644b3c7b58cdef164a50bdf82b2252d3bd4a8
Sha256: bec7b716971e6c1366e1a6f4cbbf41f8ea70a6dd23b3c955b16b569639d06d71
                                        
                                            GET /pagead/images/adchoices/icon.png HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 20 Jun 2019 21:24:39 GMT
Expires: Fri, 21 Jun 2019 21:24:39 GMT
Etag: 426692510519060060
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 295
X-XSS-Protection: 0
Age: 56814
Cache-Control: public, max-age=86400
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 15 x 15, 16-bit/color RGBA, non-interlaced
Size:   295
Md5:    d848a2953307aa510bdad31f5bf84671
Sha1:   e9d6d8daa9255f99e4e778ff4c4b47806bdb18c1
Sha256: 7fd59024b6ca83f11f7a3448ec148309a13b705725716df134f699e60a96eb1b
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Fri, 21 Jun 2019 13:11:33 GMT
Content-Length: 44214
Last-Modified: Thu, 20 Jun 2019 12:58:20 GMT
Connection: keep-alive
Etag: "5d0b82ec-acb6"
Content-Encoding: gzip
Expires: Fri, 21 Jun 2019 14:11:33 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   44214
Md5:    2fbdfda813cf327ce24dc187ba73a83e
Sha1:   21bb41e62f394c1d75f8043f89ae3891d5a248ac
Sha256: 8b3c2dbf4445530e5526a5aaf55c66b0a5da23f80693f9a3163ca50a1056f5d3
                                        
                                            GET /activeview/js/current/osd_listener.js?cache=r20110914 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 21 Jun 2019 13:11:33 GMT
Expires: Fri, 21 Jun 2019 13:11:33 GMT
Cache-Control: private, max-age=3000
Etag: "1560942906114731"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28309
Md5:    0de2f82434cbc3106747211d48776bff
Sha1:   7c6e0952688c179e20758187be16b16688129f11
Sha256: 3cf43811a89c192ab153d7df1d78c6b485f26cd4f418701cb81ab2262dc7fe0a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 21 Jun 2019 13:11:33 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    de881e7597e7b09e9205c889304c32ee
Sha1:   b963f4d26aec373dd4d83b66fb322b0de9b12053
Sha256: e8f958e250ba403150f43fad6f7413e94e94d096cec7a58bb4c3969a307b96ff
                                        
                                            GET /pagead/js/r20190617/r20110914/client/qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 17 Jun 2019 13:12:55 GMT
Expires: Mon, 01 Jul 2019 13:12:55 GMT
Etag: 6538069984257946832
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 5129
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 345518
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5129
Md5:    ffee3e9aa616c558117046f0dbdb4420
Sha1:   c6706f3858aa9d0eff4061afc323350e68e75214
Sha256: d26bcc7b72700a5ff2c24715777b69084d5316348a0485a936996be9daf7e065
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 21 Jun 2019 13:11:33 GMT
Content-Length: 61
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Connection: keep-alive
Etag: "561bb0f5-3d"
Content-Encoding: gzip
Expires: Fri, 21 Jun 2019 14:11:33 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, was "advert.gif", from Unix, last modified: Mon Oct 12 15:06:12 2015
Size:   61
Md5:    aad2d5e940637a676e25e6cc7a684a83
Sha1:   c77946775d4c1719c48eb691edfbcf873b0738f5
Sha256: d9d219b8ba39a549d43400945b848dde73269f25dab5b75b85439c451ca0a525
                                        
                                            GET /pagead/js/r20190617/r20110914/client/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 17 Jun 2019 14:20:58 GMT
Expires: Mon, 01 Jul 2019 14:20:58 GMT
Etag: 13035555226395208220
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 13748
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 341435
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13748
Md5:    bd110c2a2f631f53c4f6cdefcde25f6c
Sha1:   52e4309f404b667df86c1f4f6e8e74bec283959f
Sha256: af27b351ea01d9bb26e0ef2b82abfb31f03dd9ffa3b114237819f13b6efeca1d
                                        
                                            GET /pagead/js/r20190617/r20110914/abg_lite.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 17 Jun 2019 13:25:00 GMT
Expires: Mon, 01 Jul 2019 13:25:00 GMT
Etag: 6573556938112826056
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 11290
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 344793
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11290
Md5:    f1607f7669399668c55b54fb7bbe3215
Sha1:   f98052b250ed8335c76b2326ca79969ee3ed8c98
Sha256: 6d4e2953abe27747b821c96b8b00ad85ff6c0684fa97a1bf1fff6a0f01e509b5
                                        
                                            OPTIONS /watch/47922644?wmode=7&page-url=http%3A%2F%2Fun-install.info%2F&charset=utf-8&browser-info=ti%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20190621151133%3Aet%3A1561122693%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A937968358745%3Arqn%3A1%3Arn%3A483918798%3Ahid%3A637363736%3Awn%3A36178%3Ahl%3A1%3Agdpr%3A14%3Av%3A1609%3Arqnl%3A1%3Ast%3A1561122693%3Au%3A1561122693613120095%3At%3AUninstallInfo%20-%20Effective%20Windows%20Software%20Uninstall%20Tips! HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://un-install.info
Access-Control-Request-Method: POST

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Server: nginx/1.12.2
Date: Fri, 21 Jun 2019 13:11:33 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /pagead/js/r20190617/r20110914/client/window_focus.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 17 Jun 2019 13:12:55 GMT
Expires: Mon, 01 Jul 2019 13:12:55 GMT
Etag: 10388620150615422707
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1056
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 345518
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1056
Md5:    5480e70499b1f667066a16e67c07cd6b
Sha1:   2439638bd24c59ba018266f7a808b390eb831bc1
Sha256: ef897e4298007171b9c0e99c34109d533aa3434a3cf13e06a93068f8f4f7fc31
                                        
                                            GET /simgad/15931905980883326971?w=200&h=200 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 1283
Date: Sun, 02 Jun 2019 09:14:55 GMT
Expires: Mon, 01 Jun 2020 09:14:55 GMT
Last-Modified: Mon, 15 May 2017 17:25:35 GMT
X-Content-Type-Options: nosniff
x-dns-prefetch-control: off
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1655798
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 200 x 200, 8-bit colormap, non-interlaced
Size:   1283
Md5:    6454b84b312a79650b53b91262e24d46
Sha1:   730314037534cbb7bd94d87b7f952c60bab8be43
Sha256: 1d42201037bd7efafc71324d27c1aa0d2e3b6362194b2a61c1e3fee02a18232f
                                        
                                            GET /pagead/adview?ai=CvqlLhNcMXdnzK8-FygWDvIG4AZy4xpJXmZ_M2NIFwI23ARABIIHKmyJgw9ykhZgYoAHjz5m_A8gBAagDAaoEwQFP0M1EuYGVhFPbdOSBWj1XPvHrf9ayqJHXln253W2DsZFCn4eTR-Fgws7PpMC3ovq7NXeoDg-3yBf0KLM5bz_4rtC-zgXNIoUHFfsSxd6_WkLANI9f1DUnCzfsLHH-gu51BIZ7hXF3HyHUg3gFayFjCcYVswE-dWb45vW0pRQa7M3V4h3xR1EaVlq00O5Zjfg8lW77kOj58oLEa288CohyI9mURSBp17G3rDd-MPFAEL0llLUq1E8CTIti7zbgY9DXwASHpbaWngGSBQQIBBgBkgUECAUYBIAHgN6dPqgHjs4bqAfVyRuoB8HTG6gHhdQbqAeB1BuoB4LUG6gHhtQbqAfg0xuoB7oGqAfZyxuoB8_MG6gHpr4b2AcB8gcEEKXPFNIICQiA4YAQEAEYDoAKAdgTCg&sigh=cQKrTTXWK3c&template_id=5001&tpd=AGWhJmvkYLLwOloVkPkKgoAgADmw_q-54iHoMA2FVvjq4XinDQ&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 21 Jun 2019 13:11:33 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Set-Cookie: IDE=AHWqTUmZ5i3xA4RIxzi1w_cSaCP3YnBBVcrDIfYoeXjJDWlxQ2BoFO0-7agUM0qu; expires=Sun, 20-Jun-2021 13:11:33 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 21 Jun 2019 13:11:33 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 21 Jun 2019 12:54:42 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 0
Cache-Control: public, max-age=3600
Age: 1011
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 21 Jun 2019 13:11:33 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    aa45cb3e7b4b248f16361f769b48f98a
Sha1:   3fd75e82b5c5ae94b89ac955a7861ec934b8eae7
Sha256: dd818f81f461dcfee3d75cc0832f2fb4e7cee9fa0e35160d30d9b6fb9047dad8
                                        
                                            GET /pcs/activeview?xai=AKAOjsslRRqA-1Du6wHvHk42rIhpS5k0Otu5K7C3NzBfiSEn8Wz2rijnqkxs01f7pURL7jC501NMN89AIJVfTXKOptxie74XCUGCNIR9xz1Lj_yZUtH5-LpNHg&sai=AMfl-YTYoH8ip5iGoacW1imbaswBeUNg5is9XIECHpWhyo86-ESp2zAI29k62VromLNYMkSEEyRe5tbWdcft&sig=Cg0ArKJSzNwoNK-n-bxjEAE&r=pv&xdi=0&hac=1&id=osdim&vs=2&uc=0&upc=0&tgt=nf&cl=0&v=20190619 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4825517397485610&output=html&h=90&slotname=2756372086&adk=4193989893&adf=807048394&w=940&fwrn=4&fwrnh=100&lmt=1561122690&rafmt=1&guci=1.2.0.0.2.2.0.0&format=940x90&url=http%3A%2F%2Fun-install.info%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1561122692350&bpp=20&fdt=26&idt=26&shv=r20190617&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=1633085741116&frm=20&pv=1&ga_vid=1469064294.1561122692&ga_sid=1561122692&ga_hid=1818569587&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=118&ady=158&biw=1176&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=1&uci=a!1&dtd=46

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 21 Jun 2019 13:11:33 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /watch/47922644?wmode=5&callback=_ymjsp729182864&page-url=http%3A%2F%2Fun-install.info%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20190621151133%3Aet%3A1561122693%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A937968358745%3Arqn%3A1%3Arn%3A483918798%3Ahid%3A637363736%3Awn%3A36178%3Ahl%3A1%3Agdpr%3A14%3Av%3A1609%3Arqnl%3A1%3Ast%3A1561122693%3Au%3A1561122693613120095%3At%3AUninstallInfo%20-%20Effective%20Windows%20Software%20Uninstall%20Tips! HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/

                                         
                                         87.250.250.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.12.2
Date: Fri, 21 Jun 2019 13:11:33 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: yandexuid=8374264731561122693; Expires=Sat, 20-Jun-2020 13:11:33 GMT; Domain=.yandex.ru; Path=/ yabs-sid=650591051561122693; Path=/ i=KAoaPG+lBVjmh4mE+dTINa+8KA9awwwDzFx0fCyjaBSUmsMaC19zonA7OtJOyPYlXpxE6jmwD7VH2/gFCE4RIBoL0QA=; Expires=Sat, 20-Jun-2020 13:11:33 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly yp=1592658693.yrts.1561122693#1592658693.yrtsi.1561122693; Expires=Mon, 18-Jun-2029 13:11:33 GMT; Domain=.yandex.ru; Path=/
Last-Modified: Fri, 21-Jun-2019 13:11:33 GMT
Expires: Fri, 21-Jun-2019 13:11:33 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Location: /watch/47922644/1?wmode=5&callback=_ymjsp729182864&page-url=http%3A%2F%2Fun-install.info%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20190621151133%3Aet%3A1561122693%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A937968358745%3Arqn%3A1%3Arn%3A483918798%3Ahid%3A637363736%3Awn%3A36178%3Ahl%3A1%3Agdpr%3A14%3Av%3A1609%3Arqnl%3A1%3Ast%3A1561122693%3Au%3A1561122693613120095%3At%3AUninstallInfo%20-%20Effective%20Windows%20Software%20Uninstall%20Tips%21
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /s/roboto/v19/KFOlCnqEu92Fr1MmEU9fBBc-.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Roboto:300,400,500&lang=en
Origin: https://googleads.g.doubleclick.net

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20464
Date: Fri, 31 May 2019 07:43:17 GMT
Expires: Sat, 30 May 2020 07:43:17 GMT
Last-Modified: Mon, 25 Mar 2019 20:14:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1834097
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   20464
Md5:    87284894879f5b1c229cb49c8ff6decc
Sha1:   fb1bd3baf122d5d350eb387f0536c20da71f09df
Sha256: ba98f991d002c6bfaaf7b874652ffdcde9261a86925db87df3ed2861ea080adf
                                        
                                            GET /watch/47922644/1?wmode=5&callback=_ymjsp729182864&page-url=http%3A%2F%2Fun-install.info%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20190621151133%3Aet%3A1561122693%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A937968358745%3Arqn%3A1%3Arn%3A483918798%3Ahid%3A637363736%3Awn%3A36178%3Ahl%3A1%3Agdpr%3A14%3Av%3A1609%3Arqnl%3A1%3Ast%3A1561122693%3Au%3A1561122693613120095%3At%3AUninstallInfo%20-%20Effective%20Windows%20Software%20Uninstall%20Tips%21 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/
Cookie: yandexuid=8374264731561122693; yabs-sid=650591051561122693; i=KAoaPG+lBVjmh4mE+dTINa+8KA9awwwDzFx0fCyjaBSUmsMaC19zonA7OtJOyPYlXpxE6jmwD7VH2/gFCE4RIBoL0QA=; yp=1592658693.yrts.1561122693#1592658693.yrtsi.1561122693

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Fri, 21 Jun 2019 13:11:34 GMT
Content-Length: 149
Connection: keep-alive
Last-Modified: Fri, 21-Jun-2019 13:11:34 GMT
Expires: Fri, 21-Jun-2019 13:11:34 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   149
Md5:    ffcc5a5cb63501b503665a2133ca3f6f
Sha1:   ba878b171054ae50d5e56a3eb00ba2280d8698d5
Sha256: 90f0529ccd5f25e014a5bbc7558c6c003abf62d8b0f489dd5f1eb68c98853962
                                        
                                            GET /s/roboto/v19/KFOmCnqEu92Fr1Mu4mxM.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Roboto:300,400,500&lang=en
Origin: https://googleads.g.doubleclick.net

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20268
Date: Mon, 03 Jun 2019 10:15:42 GMT
Expires: Tue, 02 Jun 2020 10:15:42 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1565752
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   20268
Md5:    60fa3c0614b8fb2f394fa29944c21540
Sha1:   42c8ae79841c592a26633f10ee9a26c75bcf9273
Sha256: c1dc87f99c7ff228806117d58f085c6c573057fa237228081802b7d8d3cf7684
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 21 Jun 2019 13:11:34 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    dc11b23e5fcea0fd4b4a5d868b321585
Sha1:   6d22295d3cb3b86fcbfeb0e675091871e386b6a3
Sha256: 596973ba5408c985c62ecff31addb37e770ad67d3178480ab011c1247f38eb4d
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 21 Jun 2019 13:11:34 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUmZ5i3xA4RIxzi1w_cSaCP3YnBBVcrDIfYoeXjJDWlxQ2BoFO0-7agUM0qu

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 21 Jun 2019 13:11:34 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 0
Set-Cookie: DSID=NO_DATA; expires=Fri, 21-Jun-2019 14:11:34 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 21 Jun 2019 13:11:34 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            OPTIONS /watch/47922644?page-url=http%3A%2F%2Fun-install.info%2F&charset=utf-8&browser-info=ti%3A7%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20190621151148%3Aet%3A1561122708%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A659%3Als%3A937968358745%3Arqn%3A2%3Arn%3A9250866%3Ahid%3A637363736%3Agdpr%3A14%3Av%3A1609%3Arqnl%3A1%3Ast%3A1561122709%3Au%3A1561122693613120095 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://un-install.info
Access-Control-Request-Method: POST

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Server: nginx/1.12.2
Date: Fri, 21 Jun 2019 13:11:48 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /watch/47922644?page-url=http%3A%2F%2Fun-install.info%2F&charset=utf-8&browser-info=ti%3A4%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20190621151148%3Aet%3A1561122708%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A659%3Als%3A937968358745%3Arqn%3A2%3Arn%3A9250866%3Ahid%3A637363736%3Agdpr%3A14%3Av%3A1609%3Arqnl%3A1%3Ast%3A1561122709%3Au%3A1561122693613120095 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://un-install.info/
Cookie: yandexuid=8374264731561122693; yabs-sid=650591051561122693; i=KAoaPG+lBVjmh4mE+dTINa+8KA9awwwDzFx0fCyjaBSUmsMaC19zonA7OtJOyPYlXpxE6jmwD7VH2/gFCE4RIBoL0QA=; yp=1592658693.yrts.1561122693#1592658693.yrtsi.1561122693

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 21 Jun 2019 13:11:48 GMT
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 21-Jun-2019 13:11:48 GMT
Expires: Fri, 21-Jun-2019 13:11:48 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87