Overview

URL https://www.blinnker.com/redirect/
IP52.178.105.179
ASN
Location United States
Report completed2019-04-13 23:06:01 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 52.178.105.179

Date UQ / IDS / BL URL IP
2019-06-21 11:12:47 +0200
0 - 0 - 0 https://www.qogotte.com/it/web?q=BANCA+SELLA 52.178.105.179
2019-06-03 23:53:54 +0200
0 - 3 - 0 www.qoqotte.com/site 52.178.105.179
2019-03-29 16:47:32 +0100
0 - 0 - 0 https://www.site-pl.com/main/ 52.178.105.179
2019-03-19 02:25:48 +0100
0 - 0 - 5 digi.coinup.org/no 52.178.105.179
2019-03-18 23:30:09 +0100
0 - 0 - 5 digi.coinup.org/dk 52.178.105.179
2019-03-18 18:10:03 +0100
0 - 0 - 5 digi.coinup.org/nl 52.178.105.179
2019-03-18 15:27:19 +0100
0 - 0 - 5 digi.coinup.org/co 52.178.105.179
2019-03-18 10:25:35 +0100
0 - 0 - 5 digi.coinup.org/no 52.178.105.179
2019-03-18 10:22:36 +0100
0 - 0 - 5 dig.coinup.org/no 52.178.105.179
2019-03-18 02:09:24 +0100
0 - 0 - 5 dig.coinup.org/nl/ 52.178.105.179

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-07-02 09:48:15 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049696316/ 143.204.52.228
2019-07-02 09:48:17 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049696333/ 143.204.52.228
2019-07-02 09:48:03 +0200
0 - 0 - 0 https://www.spreaker.com/show/ver-peru-x-urug (...) 52.51.101.146
2019-07-01 11:37:34 +0200
0 - 0 - 0 https://www.tig-uk.com/tts/nbn4298k3o7tvns8vp (...) 144.217.235.30
2019-07-01 11:37:22 +0200
0 - 0 - 0 https://www.tig-uk.com/tts/nbn4298k3o7tvns8vp (...) 144.217.235.30
2019-07-01 11:36:59 +0200
0 - 0 - 0 https://healthadviserpro.com/power-efficiency (...) 108.179.246.37
2019-07-01 11:35:37 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049291106/ 143.204.52.228
2019-07-01 11:31:59 +0200
0 - 0 - 1 https://fp.bwjf.cn/downInvoice/98d3884f381b46 (...) 39.107.217.15
2019-07-01 11:28:01 +0200
0 - 0 - 0 https://d9.flashtalking.com/d9core 52.211.104.166
2019-07-01 11:27:51 +0200
0 - 0 - 0 https://www.launchora.com/story/123movies-wat (...) 52.38.238.5

No other reports on domain: blinnker.com



JavaScript

Executed Scripts (31)


Executed Evals (0)


Executed Writes (2)

#1 JavaScript::Write (size: 306, repeated: 1) - SHA256: 264161db8a220a93a331aed7110937b464b8718881278a8ebc31384bd1cfc1bc

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_0"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_0']});</script > < /body></html >
                                    

#2 JavaScript::Write (size: 1347, repeated: 1) - SHA256: 5ae32b953683e8eee477045e9023015a64d6c3a48cd94d652b1133b9394686bc

                                        < iframe id = "google_ads_frame0"
name = "google_ads_frame0"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1847663836923569&amp;output=html&amp;adk=1812271804&amp;adf=807048394&amp;lmt=1555189528&amp;plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C30%3A1048576&amp;guci=1.2.0.0.2.2.0.0&amp;format=0x0&amp;url=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&amp;ea=0&amp;flash=10.0.45&amp;pra=5&amp;wgl=0&amp;adsid=NT&amp;dt=1555189542497&amp;bpp=12&amp;fdt=19&amp;idt=-M&amp;shv=r20190408&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;nras=1&amp;correlator=3749678089502&amp;frm=20&amp;pv=2&amp;ga_vid=1815846929.1555189543&amp;ga_sid=1555189543&amp;ga_hid=218989087&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=21060853%2C20040080%2C20040010&amp;oid=2&amp;rx=0&amp;eae=6&amp;fc=1936&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cs%7C&amp;abl=NS&amp;ppjl=u&amp;fu=16&amp;bc=1&amp;ifi=0&amp;uci=a!0&amp;dtd=494"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (52)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         80.239.159.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "6D4DD6F29CA8CD962DF61E4EAFB1075B09E02D90C50BA26A3D041EF07E86F071"
Last-Modified: Fri, 12 Apr 2019 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43144
Expires: Sun, 14 Apr 2019 09:04:32 GMT
Date: Sat, 13 Apr 2019 21:05:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    9d7d888731ad6aabefb177fdd10977aa
Sha1:   edb4a24a0189033f2df6e7618ba1e3e98784fbf2
Sha256: 6d4dd6f29ca8cd962df61e4eafb1075b09e02d90c50ba26a3d041ef07e86f071
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Wed, 10 Apr 2019 23:08:06 GMT
Etag: "fe5a38cb171717bad03ef0101a32f2c30048a10b"
Content-Length: 1396
Cache-Control: public, no-transform, must-revalidate, max-age=6162
Expires: Sat, 13 Apr 2019 22:48:10 GMT
Date: Sat, 13 Apr 2019 21:05:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1396
Md5:    3f2d5734d66bf7bc0967a3c95626f9a2
Sha1:   fe5a38cb171717bad03ef0101a32f2c30048a10b
Sha256: e9d3f569a58e37046532222f81a2bad800c1e40f02cc73cf854e9d15f5d8f816
                                        
                                            GET /redirect/ HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4959
Content-Encoding: gzip
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Vary: Accept-Encoding
Server: Hello from Blinnker!
Set-Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; path=/; HttpOnly ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26;Path=/;HttpOnly;Domain=www.blinnker.com
X-Powered-By: PHP/7.2.4, ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   4959
Md5:    6b62616ed5078f1a43f4fdc6c32f8061
Sha1:   2b7179017aed7f619ae65b202d8ad8dd78587bec
Sha256: 900f83e2979dd368237d3cd02167646ca33612482247b8999c00e64bff6e9362
                                        
                                            GET /styles/20180220-142946/cdn.css HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 42595
Content-Encoding: gzip
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Vary: Accept-Encoding
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   42595
Md5:    203f27f09b32d9750dd8a569de03ce7f
Sha1:   b34561ecea86ea8d4cee5c9731845f8f8ca70ad8
Sha256: 4a305233f00b3f5b93252c1e6b4a4e3bba57298dcc5bc5f71fe4d61f67102ed8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.msocsp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         104.18.25.243
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:28 GMT
Content-Length: 1831
Connection: keep-alive
Set-Cookie: __cfduid=d521b1808b6d02483d6df8916f4ff93db1555189528; expires=Sun, 12-Apr-20 21:05:28 GMT; path=/; domain=.msocsp.com; HttpOnly
Expires: Wed, 17 Apr 2019 20:39:35 GMT
X-Powered-By: Undertow/1
Etag: "338cd5e6d54ea902f847001facf634fe4f36dab0"
Last-Modified: Sat, 13 Apr 2019 20:39:35 GMT
X-Cache: HIT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4c7065fc3d4a4291-OSL


--- Additional Info ---
Magic:  data
Size:   1831
Md5:    83c419dfe30a347a171bbaac19480272
Sha1:   338cd5e6d54ea902f847001facf634fe4f36dab0
Sha256: 088fe22a1a46cac343137b67bdb3e43fa48f9320e7b89b8e8908fce36c7ec18c
                                        
                                            GET /styles/img/logo-mini.png HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 2179
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
Magic:  PNG image, 48 x 51, 8-bit/color RGBA, non-interlaced
Size:   2179
Md5:    3bb7ebc6d7a7072ef6c75960e000aa0d
Sha1:   dc3766b9d85e5a6279a9c9fba8c3494a364db6bb
Sha256: abb80716d760529c227005f46390461da0c7f4ffa15018ce7abc44a5f68be423
                                        
                                            GET /styles/20180220-142946/tablet.css HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 2983
Content-Encoding: gzip
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Vary: Accept-Encoding
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   2983
Md5:    04c78b96722182daf43aadbe7ce4ed71
Sha1:   f09949547e2ebebb496196da759016e96942f37f
Sha256: 13454c6c664325a198b1e6a6fd9b0b7f812bce50c74a34eab9c90282b571f961
                                        
                                            GET /styles/img/bg/404_logo.png HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 27526
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
Magic:  PNG image, 348 x 120, 8-bit/color RGB, non-interlaced
Size:   27526
Md5:    820334231b11ac39f379a4ed5a38559a
Sha1:   089d9309263d95bb7b423c3f1a94d8cd2708f864
Sha256: 25a24763b42fe97b290e043d36113962b11175fd97d15087e9af77d8ded936a4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:29 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c0eec1ffb954c0d7f601d6f20d463a36
Sha1:   bd9399d44e2d7c3429ba4d56226ae385b90a5506
Sha256: e3072d7820e55dc7cd0662b07a56f322845eeddac2852540c575a49c8a682124
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:29 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /api/maps/mapcontrol?callback=BlinnkerMapInit HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         13.107.21.200
HTTP/1.1 302
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Content-Length: 148
Content-Encoding: gzip
Location: /maps/sdk/mapcontrol?callback=BlinnkerMapInit
Vary: Accept-Encoding
P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
Set-Cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 07-May-2020 21:05:29 GMT; path=/ SRCHUID=V=2&GUID=955C8E41D29F4F13B4C015A3C02BDBFB&dmnchg=1; domain=.bing.com; expires=Thu, 07-May-2020 21:05:29 GMT; path=/ SRCHUSR=DOB=20190413; domain=.bing.com; expires=Thu, 07-May-2020 21:05:29 GMT; path=/ _SS=SID=3788B2E718C96E05253FBFDA19F46FFB; domain=.bing.com; path=/ _EDGE_S=F=1&SID=3788B2E718C96E05253FBFDA19F46FFB; path=/; httponly; domain=bing.com _EDGE_V=1; path=/; httponly; expires=Thu, 07-May-2020 21:05:29 GMT; domain=bing.com MUID=0A0299E2BC256837322C94DFBD1869C1; path=/; expires=Thu, 07-May-2020 21:05:29 GMT; domain=bing.com MUIDB=0A0299E2BC256837322C94DFBD1869C1; path=/; httponly; expires=Thu, 07-May-2020 21:05:29 GMT
X-MSEdge-Ref: Ref A: D05C2435752B412298E06D63F8EAE57B Ref B: STOEDGE0410 Ref C: 2019-04-13T21:05:29Z
Date: Sat, 13 Apr 2019 21:05:29 GMT


--- Additional Info ---
Magic:  gzip compressed data, from NTFS filesystem (NT)
Size:   148
Md5:    091bd0abbde94dd14b06b60739acdaba
Sha1:   c12ff8641615d8c80e6c1b6e54ddf96e04db2589
Sha256: 37012481a8c7685b1b4f922c0f1d1c2cb1a36ad8b5eb260cd0dc06eb42945f3d
                                        
                                            GET /styles/20180220-142946/mobile.css HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 8141
Content-Encoding: gzip
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Vary: Accept-Encoding
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   8141
Md5:    2d80669b90874a98e66a7a1f608ac60b
Sha1:   60445e9e3c48e665a427ae68d1b87dca0ab5810c
Sha256: 94049d9adbc56dda8c32d99bca4764001132c9387d034e267f071df2f2707ff1
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sat, 13 Apr 2019 21:05:29 GMT
Expires: Sat, 13 Apr 2019 21:05:29 GMT
Cache-Control: private, max-age=3600
Etag: 991046872048095225
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   31914
Md5:    0c8dddf647dcc2ba187da4381ef1b41d
Sha1:   0df2094202722edc8852e49f9099b4de5fa01e1d
Sha256: 33a13e15ec6d32250fb5cd16e94988f7778603184394bf921b5befe4ea6cf49f
                                        
                                            GET /favicon.png HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 667
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:29 GMT


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   667
Md5:    43c1a03ea859d86c18db2dacf00dfe64
Sha1:   e2188c6b92958cc83830a2a3a96519c9568f9f27
Sha256: 3d17359348262ddac82cdcf5f57eae2ce430aa8debcc9e83e5af9151ab5029fd
                                        
                                            GET /maps/sdk/mapcontrol?callback=BlinnkerMapInit HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=955C8E41D29F4F13B4C015A3C02BDBFB&dmnchg=1; SRCHUSR=DOB=20190413; _SS=SID=3788B2E718C96E05253FBFDA19F46FFB; _EDGE_S=F=1&SID=3788B2E718C96E05253FBFDA19F46FFB; _EDGE_V=1; MUID=0A0299E2BC256837322C94DFBD1869C1; MUIDB=0A0299E2BC256837322C94DFBD1869C1

                                         
                                         13.107.21.200
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Cache-Control: private
Content-Length: 26844
Content-Encoding: gzip
Vary: Accept-Encoding
P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
X-MSEdge-Ref: Ref A: 8C2B553003EA416281FCD41A583D488F Ref B: STOEDGE0410 Ref C: 2019-04-13T21:05:29Z
Date: Sat, 13 Apr 2019 21:05:29 GMT


--- Additional Info ---
Magic:  gzip compressed data, from NTFS filesystem (NT)
Size:   26844
Md5:    5cb6f1d392b2ea673e42e2ba87ebbe32
Sha1:   8c5661bd93afede57277027b24487fdcd789826d
Sha256: cced45c49396072385e5a6ffd8e1095ce1c77a1b7e4213d0026573db641d5ce3
                                        
                                            GET /styles/20180220-142946/cdn.js HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Content-Encoding: gzip
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Vary: Accept-Encoding
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   183213
Md5:    e699ad01df5f0ea48fc75f4dc621fe24
Sha1:   1ff067b9e226dce226418d00c20a8b05cc0df815
Sha256: 973dfbd51b0fea6375852a360e78a0a8e77599efbf49761db044164d8ad45ffa
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:41 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3e3b1541224a90ed5dc36f6929308858
Sha1:   d1d323237f147221ca7480e78bb7d241a6eac1d2
Sha256: caaf498ca2e9250b0a6fef054a838455e23544682eeefd0f33c623e67c1cfcb5
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:41 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    de3c4bf8e18b955aed19dbcce608df25
Sha1:   c4c57b37817ad2542cda2a2ef7460e80525587b1
Sha256: f8a48731b4e8c2e4a09af0ee36e708a44a23b5e03becce0643faeccb22b00eb8
                                        
                                            GET /adsid/integrator.js?domain=www.blinnker.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Sat, 13 Apr 2019 21:05:41 GMT
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /adsid/integrator.js?domain=www.blinnker.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Sat, 13 Apr 2019 21:05:41 GMT
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /styles/img/logo-blinnker.svg HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26
Range: bytes=0-
If-Range: "0aeccc43212d41:0"

                                         
                                         52.178.105.179
HTTP/1.1 206 Partial Content
Content-Type: image/svg+xml
                                        
Content-Length: 5413
Content-Range: bytes 0-5412/5413
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:41 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines, with CRLF line terminators
Size:   5413
Md5:    938511d59b82080338db30573cae2c01
Sha1:   8a60f30344a5ae882e9014d00e41080e20a28f8a
Sha256: 78f56a2b0591a5147fa3d95899c165eaf60f43a44c4217421a020c473ab906ec
                                        
                                            GET /pagead/js/r20190408/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sat, 13 Apr 2019 21:05:41 GMT
Expires: Sat, 13 Apr 2019 21:05:41 GMT
Cache-Control: private, max-age=1209600
Etag: 6227663386512672348
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   76985
Md5:    eec3c3a100df652ef02335ce354ddb6a
Sha1:   4178d5b33a54420fc2d68d0be7c090d9134d4ff9
Sha256: 9d3fe538a07498a9ed91ffe4ed7790c1a2f5b6f0c7b35f18de072928ad55fd18
                                        
                                            GET /styles/img/logo-blinnker.png HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 3514
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:41 GMT


--- Additional Info ---
Magic:  PNG image, 177 x 51, 8-bit/color RGBA, non-interlaced
Size:   3514
Md5:    d1d746cd3455f1a9a4b9a5b36d9a80c4
Sha1:   9a533f2d1e2fde0e2a6edb9002fa6a756a34fdfe
Sha256: 7366735f1cc5ae3997c891066816bde246148cc7b063c072b8223e77378d4760
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    30f5af19f2217c64c21d817e47f57aae
Sha1:   b275529c8cdc2f6a4ab0e938fafa1c59a7e18d21
Sha256: 2109fdadace2da98781ef6c2806f182c51b50b2400193a66f23bcf971f96a6bb
                                        
                                            GET /gtm.js?id=GTM-583JSH HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.21.168
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sat, 13 Apr 2019 21:05:43 GMT
Expires: Sat, 13 Apr 2019 21:05:43 GMT
Cache-Control: private, max-age=900
Last-Modified: Thu, 11 Apr 2019 22:27:45 GMT
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   22649
Md5:    11487ca64db41fcefa8c6dd2bfd6fe5f
Sha1:   82a4aab0512d1e3ebb5cef8d0d59ad32e00b1b4b
Sha256: 1437a5eb81ebbf5fc3067dd165db05208f9da336ab8d1b1ce6aea27e1e39fd49
                                        
                                            GET /pub-config/r20160913/ca-pub-1847663836923569.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sat, 13 Apr 2019 21:05:43 GMT
Expires: Sun, 14 Apr 2019 09:05:43 GMT
Cache-Control: public, max-age=43200
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
Content-Length: 88
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   88
Md5:    447300cfe76a026545c27482e7ada077
Sha1:   995fa7efb4f9b8be29ea4c3c69a361e0a1f27ba1
Sha256: 994d8a1f3b94c1b503343b827ffd37a0a2a50015d48a054812591825cc305a40
                                        
                                            GET /api/maps/mapcontrol?callback=BlinnkerMapInit HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=955C8E41D29F4F13B4C015A3C02BDBFB&dmnchg=1; SRCHUSR=DOB=20190413; _SS=SID=3788B2E718C96E05253FBFDA19F46FFB; _EDGE_S=F=1&SID=3788B2E718C96E05253FBFDA19F46FFB; _EDGE_V=1; MUID=0A0299E2BC256837322C94DFBD1869C1; MUIDB=0A0299E2BC256837322C94DFBD1869C1

                                         
                                         13.107.21.200
HTTP/1.1 302
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Content-Length: 148
Content-Encoding: gzip
Location: /maps/sdk/mapcontrol?callback=BlinnkerMapInit
Vary: Accept-Encoding
P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
X-MSEdge-Ref: Ref A: 653D33C4011F425AA696862A8B00FC69 Ref B: STOEDGE0410 Ref C: 2019-04-13T21:05:43Z
Date: Sat, 13 Apr 2019 21:05:43 GMT


--- Additional Info ---
Magic:  gzip compressed data, from NTFS filesystem (NT)
Size:   148
Md5:    091bd0abbde94dd14b06b60739acdaba
Sha1:   c12ff8641615d8c80e6c1b6e54ddf96e04db2589
Sha256: 37012481a8c7685b1b4f922c0f1d1c2cb1a36ad8b5eb260cd0dc06eb42945f3d
                                        
                                            GET /pagead/html/r20190408/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 08 Apr 2019 21:40:11 GMT
Expires: Mon, 22 Apr 2019 21:40:11 GMT
Etag: 3275482936266559025
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6909
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 429932
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6909
Md5:    4435999055d2232342e9ed745246f7e5
Sha1:   381e72a4ba75cf0b05f6883c625a89e50c63d320
Sha256: cf8b15c9acef19819e07c676dcce07a3c96a9a152554b007d8c3478fbf841ff8
                                        
                                            GET /activeview/js/current/osd.js?cb=%2Fr20100101 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 13 Apr 2019 21:05:43 GMT
Expires: Sat, 13 Apr 2019 21:05:43 GMT
Cache-Control: private, max-age=3000
Etag: "1554894788928095"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29096
Md5:    b6ca7fc8a6a41a8c0ecf823403af8b50
Sha1:   f86aa03e5fbdb9b566be523e01873683fa778751
Sha256: f3bf698219e1bf79e3acdb30f361357d2053c2d5dd47a0ca70b85c7c1d68c463
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:43 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    45f1be4e7dab156ff579826536705da1
Sha1:   e94637333ab086538f4f831ffb574dc84c50f9fb
Sha256: 29a3d97a2b200c45a632cafc7dda2f7ebd04c11fbd690a27cd62895c40bcd897
                                        
                                            GET /pagead/ads?client=ca-pub-1847663836923569&output=html&adk=1812271804&adf=807048394&lmt=1555189528&plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C30%3A1048576&guci=1.2.0.0.2.2.0.0&format=0x0&url=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&ea=0&flash=10.0.45&pra=5&wgl=0&adsid=NT&dt=1555189542497&bpp=12&fdt=19&idt=-M&shv=r20190408&cbv=r20190131&saldr=aa&abxe=1&nras=1&correlator=3749678089502&frm=20&pv=2&ga_vid=1815846929.1555189543&ga_sid=1555189543&ga_hid=218989087&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1159&bih=754&scr_x=0&scr_y=0&eid=21060853%2C20040080%2C20040010&oid=2&rx=0&eae=6&fc=1936&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cs%7C&abl=NS&ppjl=u&fu=16&bc=1&ifi=0&uci=a!0&dtd=494 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 13 Apr 2019 21:05:43 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 13-Apr-2019 21:20:43 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Sat, 13 Apr 2019 21:05:43 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   82
Md5:    87b49554493c15fb23b8e5d2f13b1ebf
Sha1:   328cbcb1c58530fd3f554ca7386ef7a85e1e982f
Sha256: 590b4bba70579d67368d97259fc85f56fda4fa5cb82f404fa8ec67a43369db17
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=94768
Date: Sat, 13 Apr 2019 21:05:43 GMT
Etag: "5cb11892-1d7"
Expires: Sun, 14 Apr 2019 23:25:11 GMT
Last-Modified: Fri, 12 Apr 2019 23:00:34 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e89a7d5d8c7e219a10b4b2fa381f6f93
Sha1:   e9811681078693e1a66db80cfe9d02936d830910
Sha256: 48de5369236f8d5f65f256b0cb01ed396e79500937f059be33992040a0e16ed8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=150094
Date: Sat, 13 Apr 2019 21:05:43 GMT
Etag: "5cb1d407-1d7"
Expires: Mon, 15 Apr 2019 14:47:17 GMT
Last-Modified: Sat, 13 Apr 2019 12:20:23 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d0d46145427a5d15881ec7114f5456e4
Sha1:   c1fd52aa613266215f422218dcc22c5d9c5078ab
Sha256: cb70c0322b0e2374f0a59a2fa988e3901c65d364da4c1aa939a6d0588c215339
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sat, 13 Apr 2019 20:17:19 GMT
Expires: Sat, 13 Apr 2019 22:17:19 GMT
Last-Modified: Tue, 19 Feb 2019 19:44:11 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17543
Cache-Control: public, max-age=7200
Age: 2904
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17543
Md5:    a6ce90b9145f18e7a721eb3819daaaab
Sha1:   1c422016bd20a08535d2cc37448c498cf4a0f829
Sha256: 94fe45c14a2ce4fd5f1401c835e5d63111ebf89ff58e03d6b780592f02abf778
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Methods: OPTIONS
Access-Control-Allow-Origin: https://connect.facebook.net
Cache-Control: public, max-age=1200
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-Frame-Options: DENY
Pragma: public
X-XSS-Protection: 0
Vary: Origin, Accept-Encoding
Content-Security-Policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: EH10xBlakutbEB4m6D9veGVco04lRom94pJYQDmJhH40F4JYuvPgYC/hTBTAgqcWhOQeMts5Kmmnwb2vg2MPDA==
Date: Sat, 13 Apr 2019 21:05:43 GMT
Connection: keep-alive
Content-Length: 15397


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15397
Md5:    1a48ce52e4516ffadee2350d20e1b2bf
Sha1:   826ba7c8b7fc93a7f17df169ab88a25c93ec7dbb
Sha256: b77556f590f7c47d18d24dbb4366abadfc67376f3424e97b396575bf837c84aa
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         216.58.207.194
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sat, 13 Apr 2019 21:05:43 GMT
Expires: Sat, 13 Apr 2019 21:05:43 GMT
Cache-Control: private, max-age=3600
Etag: 16103572366717130859
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8844
Md5:    e82f4bc62d6f584df994450d624beeaa
Sha1:   4d0cc1fd0cb42714e961a60e79f2cf720d39bf98
Sha256: cc53560aa8af1d4032ce2fa0330a95a06c4c232e0f9f4ff2b450d1b9235ed8bc
                                        
                                            GET /styles/img/bg/404_footer.png HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 37892
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:43 GMT


--- Additional Info ---
Magic:  PNG image, 1620 x 239, 8-bit/color RGB, non-interlaced
Size:   37892
Md5:    f740736fda2ea2a54ddabebf8cac35a7
Sha1:   b36bb51c9e6bc2c949ae3fa585670dd9b44f55ae
Sha256: 00eb17f69269a161982fe03d1b9aede8500fd375c0cbe13c442988a0c732a4ca
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:43 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    58ff446a6a75dbe8c4e3cc1e0f86bf14
Sha1:   c0153b66626c98a777c992411620249a5f2559bc
Sha256: cf28ee59a9a0501ebe07fb31028dbddd7c3b594cd5275b8597b1d7b76f3dbb80
                                        
                                            GET /collect?v=1&_v=j73&a=218989087&t=pageview&_s=1&dl=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&ul=en-us&de=UTF-8&dt=BLINNKER%20-%20dopravn%C3%AD%20informace%2C%20autobazar%2C%20autof%C3%B3rum%2C%20soci%C3%A1ln%C3%AD%20s%C3%AD%C5%A5%20pro%20motoristy&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=YChAgAQ~&jid=1790202499&gjid=1937290438&cid=1815846929.1555189543&tid=UA-66869792-1&_gid=1505938705.1555189544&gtm=2wg430583JSH&z=456019461 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 08 Mar 2019 05:55:05 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 3165038
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pagead/viewthroughconversion/939659799/?random=1555189543608&cv=9&fst=1555189543608&num=1&fmt=3&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg430&frm=0&url=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&tiba=BLINNKER%20-%20dopravn%C3%AD%20informace%2C%20autobazar%2C%20autof%C3%B3rum%2C%20soci%C3%A1ln%C3%AD%20s%C3%AD%C5%A5%20pro%20motoristy&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 13 Apr 2019 21:05:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/pagead/1p-user-list/939659799/?random=1555189543608&cv=9&fst=1555189200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg430&frm=0&url=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&tiba=BLINNKER%20-%20dopravn%C3%AD%20informace%2C%20autobazar%2C%20autof%C3%B3rum%2C%20soci%C3%A1ln%C3%AD%20s%C3%AD%C5%A5%20pro%20motoristy&async=1&cdct=2&is_vtc=1&random=818551583&resp=GooglemKTybQhCsO
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlqiW_SH6BbviKLY2r5e19PPod4-_ampHSGlMeLbAHyzECY-kMJTMRfMdf0; expires=Mon, 12-Apr-2021 21:05:43 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /maps/sdk/mapcontrol?callback=BlinnkerMapInit HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=955C8E41D29F4F13B4C015A3C02BDBFB&dmnchg=1; SRCHUSR=DOB=20190413; _SS=SID=3788B2E718C96E05253FBFDA19F46FFB; _EDGE_S=F=1&SID=3788B2E718C96E05253FBFDA19F46FFB; _EDGE_V=1; MUID=0A0299E2BC256837322C94DFBD1869C1; MUIDB=0A0299E2BC256837322C94DFBD1869C1

                                         
                                         13.107.21.200
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Cache-Control: private
Content-Length: 26844
Content-Encoding: gzip
Vary: Accept-Encoding
P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
X-MSEdge-Ref: Ref A: 48360DC7974F4ECE9F29F99BC8374EE4 Ref B: STOEDGE0409 Ref C: 2019-04-13T21:05:43Z
Date: Sat, 13 Apr 2019 21:05:43 GMT


--- Additional Info ---
Magic:  gzip compressed data, from NTFS filesystem (NT)
Size:   26844
Md5:    5fa357ec30a9926e36f5449ee2a6da79
Sha1:   68cfe7e91c771565ef3dc0b087af474ed52d679f
Sha256: 0cbf5c996e7edc292ec0af026acc1c9898656eb8fd82c09d106fc6160f12ea51
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j73&tid=UA-66869792-1&cid=1815846929.1555189543&jid=1790202499&gjid=1937290438&_gid=1505938705.1555189544&_u=YChAgAQ~&z=1013556110 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: test_cookie=CheckForPermission

                                         
                                         173.194.222.155
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-66869792-1&cid=1815846929.1555189543&jid=1790202499&_v=j73&z=1013556110
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sat, 13 Apr 2019 21:05:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 367
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   367
Md5:    626b41cb0f8170e708fe5e5697b774ad
Sha1:   3bc72778f80a14091abba0143ab906ffcc1b8550
Sha256: f8ab5b596680d256518574492180b897cd532f1ef0161f854217c275bd758521
                                        
                                            GET /cs_CZ/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: ce9169a36f7ef1e485269737865995fa
Etag: "239da5bd0b418055d5541302b2d2d25f"
Content-Encoding: gzip
Timing-Allow-Origin: *
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Sat, 13 Apr 2019 21:17:07 GMT
Content-MD5: Z06S8Kc7wDNzmH/fjqCT1g==
X-FB-Debug: rIzf9nen9v5Rrb5TEcHjN/0lCexlA3A8tcw7vq41nBvCh8XqhSvljh4NPo3yLFFqGDkxpxU4rjEToXtHU7kfDw==
Date: Sat, 13 Apr 2019 21:05:43 GMT
Connection: keep-alive
Content-Length: 1781


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1781
Md5:    674e92f0a73bc03373987fdf8ea093d6
Sha1:   78d3991b22403f730e238a4e0318952a72c9802b
Sha256: c0205fd4e25a198d5fc048e14f508c51d0108a16513a5767f49dc657555721f1
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Apr 2019 21:05:43 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a091058e4d60e347eea1463559f3a250
Sha1:   0a6802e73df8c6a4c964ff255f12a70169f41cfb
Sha256: 60b1f5c8adf7324511fb56b29263181c9f38c3f7b17ce76c31442e2ed20c7ed2
                                        
                                            GET /pagead/1p-user-list/939659799/?random=1555189543608&cv=9&fst=1555189200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg430&frm=0&url=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&tiba=BLINNKER%20-%20dopravn%C3%AD%20informace%2C%20autobazar%2C%20autof%C3%B3rum%2C%20soci%C3%A1ln%C3%AD%20s%C3%AD%C5%A5%20pro%20motoristy&async=1&cdct=2&is_vtc=1&random=818551583&resp=GooglemKTybQhCsO HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         216.58.207.196
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 13 Apr 2019 21:05:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/pagead/1p-user-list/939659799/?random=1555189543608&cv=9&fst=1555189200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg430&frm=0&url=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&tiba=BLINNKER%20-%20dopravn%C3%AD%20informace%2C%20autobazar%2C%20autof%C3%B3rum%2C%20soci%C3%A1ln%C3%AD%20s%C3%AD%C5%A5%20pro%20motoristy&async=1&cdct=2&is_vtc=1&random=818551583&resp=GooglemKTybQhCsO&ipr=y
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cs_CZ/sdk.js?hash=d75abe6053193961efd593612d66a8c4 HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 29abe875b3253abfa2cd2488a9758e69
Etag: "df7e709a75f60bfb034ffd257ee91168"
Content-Encoding: gzip
Timing-Allow-Origin: *
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable
Expires: Sun, 12 Apr 2020 20:13:02 GMT
Content-MD5: h57RSZOVQ8V8m1g/hig1hA==
X-FB-Debug: X2whOT/ZEgbWShnuY6DYK8e7/Ejvv8lfogw1N5MHf1HBf5iLCUlTW4DvdnD2uofcMvUzb23sfhE/AxedOXC6zQ==
Date: Sat, 13 Apr 2019 21:05:43 GMT
Connection: keep-alive
Content-Length: 60414


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   60414
Md5:    879ed149939543c57c9b583f86283584
Sha1:   10dc0b92afc037f19e8f8ec1576621a6fd2c2448
Sha256: 94d342fa8fd8a8e00ec4bb5e4ae1dae724e8d5218183694f32f3d4db6c514fbd
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-66869792-1&cid=1815846929.1555189543&jid=1790202499&_v=j73&z=1013556110 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         216.58.207.196
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 13 Apr 2019 21:05:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-66869792-1&cid=1815846929.1555189543&jid=1790202499&_v=j73&z=1013556110&slf_rd=1&random=2145177040
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
                                        
                                            GET /pagead/1p-user-list/939659799/?random=1555189543608&cv=9&fst=1555189200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg430&frm=0&url=https%3A%2F%2Fwww.blinnker.com%2Fredirect%2F&tiba=BLINNKER%20-%20dopravn%C3%AD%20informace%2C%20autobazar%2C%20autof%C3%B3rum%2C%20soci%C3%A1ln%C3%AD%20s%C3%AD%C5%A5%20pro%20motoristy&async=1&cdct=2&is_vtc=1&random=818551583&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 13 Apr 2019 21:05:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-66869792-1&cid=1815846929.1555189543&jid=1790202499&_v=j73&z=1013556110&slf_rd=1&random=2145177040 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 13 Apr 2019 21:05:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /styles/img/logo-blinnker.svg HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26

                                         
                                         52.178.105.179
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Content-Length: 5413
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:28 GMT


--- Additional Info ---
                                        
                                            GET /gtm.js?id=GTM-583JSH HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /styles/img/logo-blinnker.svg HTTP/1.1 
Host: www.blinnker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blinnker.com/redirect/
Cookie: PHPSESSID=5b9ba955c9cfb7c48663df07acad5195; ARRAffinity=7a1db6e34919d328a6b342958b148ee6050587aa891006760e2f1856efac5f26
Range: bytes=0-
If-Range: "0aeccc43212d41:0"

                                         
                                         52.178.105.179
HTTP/1.1 206 Partial Content
Content-Type: image/svg+xml
                                        
Content-Length: 5413
Content-Range: bytes 0-5412/5413
Expires: Sun, 29 Mar 2020 00:00:00 GMT
Last-Modified: Mon, 02 Jul 2018 18:30:36 GMT
Accept-Ranges: bytes
Etag: "0aeccc43212d41:0"
Server: Hello from Blinnker!
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Content-Security-Policy: default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:;
Date: Sat, 13 Apr 2019 21:05:42 GMT


--- Additional Info ---