Overview

URL mir3.me/images/s.exe
IP216.239.36.21
ASNAS15169 Google Inc.
Location United States
Report completed2019-05-10 18:06:06 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-05-10 18:05:31 CEST 1 Client IP  216.58.211.19 ET TROJAN Single char EXE direct download likely trojan (multiple families)


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.239.36.21

Date UQ / IDS / BL URL IP
2019-07-01 04:37:34 +0200
0 - 0 - 0 ifconfig.me 216.239.36.21
2019-06-26 22:06:42 +0200
0 - 0 - 0 fullstory.com 216.239.36.21
2019-06-25 14:38:33 +0200
0 - 0 - 2 serverpainfoadmin.com/ 216.239.36.21
2019-06-20 15:19:57 +0200
0 - 0 - 0 216.239.36.21 216.239.36.21
2019-06-17 09:12:52 +0200
0 - 0 - 0 216.239.36.21/ 216.239.36.21
2019-06-13 19:14:05 +0200
0 - 0 - 0 babel.innertrends.com 216.239.36.21
2019-06-12 19:50:09 +0200
0 - 0 - 0 216.239.36.21 216.239.36.21
2019-06-12 12:16:34 +0200
0 - 0 - 0 alicoinsurance.com 216.239.36.21
2019-06-11 13:38:27 +0200
0 - 0 - 0 davidvarner.com 216.239.36.21
2019-06-10 20:54:47 +0200
0 - 0 - 4 coursuniversel.net/2015/07/banque-des-concour (...) 216.239.36.21

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2019-07-01 11:14:59 +0200
0 - 0 - 0 https://docs.google.com/forms/d/e/1FAIpQLSfZp (...) 216.58.207.206
2019-07-01 09:39:24 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt 216.58.211.1
2019-07-01 09:33:26 +0200
0 - 0 - 0 https://movieok4k.blogspot.com/2019/06/articl (...) 216.58.211.1
2019-07-01 09:28:48 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt/ 216.58.211.1
2019-07-01 09:19:18 +0200
0 - 0 - 1 https://bartuatenbe1974.blogspot.pt/ 216.58.207.193
2019-07-01 08:47:18 +0200
0 - 0 - 1 https://elmulrapan1981.blogspot.ca/ 216.58.207.225
2019-07-01 08:24:54 +0200
0 - 0 - 1 pacarama1983.blogspot.com 216.58.207.193
2019-07-01 08:19:22 +0200
0 - 1 - 0 mycricketlive.live 172.217.22.179
2019-07-01 07:21:49 +0200
0 - 0 - 0 fijisharkdiving.blogspot.com/2018/10/my-fiji- (...) 216.58.207.193
2019-07-01 06:37:59 +0200
0 - 0 - 0 ta.wow-auto-forms.appspot.com/bower_component (...) 216.58.211.148

Last 3 reports on domain: mir3.me

Date UQ / IDS / BL URL IP
2019-06-03 08:28:00 +0200
0 - 1 - 0 mir3.me/images/s.exe 216.239.32.21
2019-05-26 08:03:28 +0200
0 - 1 - 0 mir3.me/images/s.exe 216.239.34.21
2018-12-11 07:15:32 +0100
0 - 2 - 0 mir3.me/images/s.exe 216.239.38.21


JavaScript

Executed Scripts (60)


Executed Evals (0)


Executed Writes (11)

#1 JavaScript::Write (size: 306, repeated: 1) - SHA256: 264161db8a220a93a331aed7110937b464b8718881278a8ebc31384bd1cfc1bc

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_0"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_0']});</script > < /body></html >
                                    

#2 JavaScript::Write (size: 306, repeated: 1) - SHA256: 5efcb9fc2a44ea42dca7f3a6201c413bf996957c8642429d6bfa6d151206a13e

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_1"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_1']});</script > < /body></html >
                                    

#3 JavaScript::Write (size: 306, repeated: 2) - SHA256: ceb1ece9d4cb4964ccd9219016b1b547d99a604ffb0173c99f882e88f578ed73

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_2"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_2']});</script > < /body></html >
                                    

#4 JavaScript::Write (size: 306, repeated: 1) - SHA256: 541c1027668e45b8bed71056a9f7fd353fe9f838e61fc680b505186d01614944

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_3"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_3']});</script > < /body></html >
                                    

#5 JavaScript::Write (size: 306, repeated: 1) - SHA256: d3e2705b97cf99dc54128332a5a61286c6a737079c28ca6c5f98bc91cabe1901

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_4"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_4']});</script > < /body></html >
                                    

#6 JavaScript::Write (size: 1302, repeated: 1) - SHA256: 17964be4d011f4c1bdc07f28b5090de1868f15097561bc2b97986c6c5c0bbc9c

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "336"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8361282487473612&amp;output=html&amp;h=280&amp;slotname=9452377054&amp;adk=1526967335&amp;adf=807048394&amp;w=336&amp;lmt=1557504331&amp;guci=1.2.0.0.2.2.0.0&amp;format=336x280&amp;url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1557504333835&amp;bpp=53&amp;fdt=440&amp;idt=431&amp;shv=r20190506&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;correlator=1053267298106&amp;frm=20&amp;pv=2&amp;ga_vid=850621547.1557504335&amp;ga_sid=1557504335&amp;ga_hid=1080272861&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=352&amp;ady=103&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=410075103%2C423550201&amp;oid=3&amp;pg_h=8056&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;uci=a!1&amp;dtd=985"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#7 JavaScript::Write (size: 1325, repeated: 1) - SHA256: f8d68248904fa9ba2318f1eb716ebf308be8feda6de600b7145b71ca0fee131e

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "250"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8361282487473612&amp;output=html&amp;h=250&amp;slotname=9982983801&amp;adk=2239951807&amp;adf=807048394&amp;w=250&amp;lmt=1557504331&amp;guci=1.2.0.0.2.2.0.0&amp;format=250x250&amp;url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1557504333889&amp;bpp=48&amp;fdt=1108&amp;idt=377&amp;shv=r20190506&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=336x280&amp;correlator=1053267298106&amp;frm=20&amp;pv=1&amp;ga_vid=850621547.1557504335&amp;ga_sid=1557504335&amp;ga_hid=1080272861&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=95&amp;ady=471&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=410075103%2C423550201&amp;oid=3&amp;pg_h=8056&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;uci=a!2&amp;dtd=1173"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#8 JavaScript::Write (size: 1374, repeated: 1) - SHA256: 3a0164fdb679d7839a4d42c9720b75798df21486ad83db6a776a74ff76cdcf45

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8361282487473612&amp;output=html&amp;h=250&amp;slotname=5887115686&amp;adk=2965241917&amp;adf=807048394&amp;w=300&amp;fwrn=4&amp;lmt=1557504331&amp;rafmt=11&amp;guci=1.2.0.0.2.2.0.0&amp;format=300x250&amp;url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1557504333938&amp;bpp=7&amp;fdt=1137&amp;idt=328&amp;shv=r20190506&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=336x280%2C250x250&amp;correlator=1053267298106&amp;frm=20&amp;pv=1&amp;ga_vid=850621547.1557504335&amp;ga_sid=1557504335&amp;ga_hid=1080272861&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;rplot=4&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=780&amp;ady=757&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=410075103%2C423550201&amp;oid=3&amp;pg_h=8056&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=3&amp;uci=a!3&amp;dtd=1150"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#9 JavaScript::Write (size: 1454, repeated: 1) - SHA256: ced565209d1f41247308ea2182ed95e3b4fa460e7d80f6812a8974e0887e1ff7

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8361282487473612&amp;output=html&amp;h=250&amp;slotname=5887115686&amp;adk=2965241917&amp;adf=807048394&amp;w=300&amp;fwrn=4&amp;lmt=1557504331&amp;rafmt=11&amp;guci=1.2.0.0.2.2.0.0&amp;format=300x250&amp;url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1557504333952&amp;bpp=7&amp;fdt=2473&amp;idt=314&amp;shv=r20190506&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=336x280%2C250x250%2C300x250%2C300x250%2C300x250&amp;correlator=1053267298106&amp;frm=20&amp;pv=1&amp;ga_vid=850621547.1557504335&amp;ga_sid=1557504335&amp;ga_hid=1080272861&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;rplot=4&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=780&amp;ady=820&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=410075103%2C423550201&amp;oid=3&amp;pg_h=2373&amp;loc=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&amp;rx=0&amp;eae=5&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=3&amp;uci=a!3&amp;dtd=2487"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 1383, repeated: 1) - SHA256: 1675d380319b3f2f6267e9f895e64a67f230d0701ee0872296d191692c90b0a6

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8361282487473612&amp;output=html&amp;h=250&amp;slotname=1536807134&amp;adk=72909811&amp;adf=807048394&amp;w=300&amp;fwrn=4&amp;lmt=1557504331&amp;rafmt=11&amp;guci=1.2.0.0.2.2.0.0&amp;format=300x250&amp;url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1557504333945&amp;bpp=7&amp;fdt=1213&amp;idt=321&amp;shv=r20190506&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=336x280%2C250x250%2C300x250&amp;correlator=1053267298106&amp;frm=20&amp;pv=1&amp;ga_vid=850621547.1557504335&amp;ga_sid=1557504335&amp;ga_hid=1080272861&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;rplot=4&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=780&amp;ady=7349&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=410075103%2C423550201&amp;oid=3&amp;pg_h=8056&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=4&amp;uci=a!4&amp;dtd=1226"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#11 JavaScript::Write (size: 1373, repeated: 1) - SHA256: ad2ad14ff30ad528f82aab0788d82be440af46e29f7867f1e2bbf9fdffed5e61

                                        < iframe id = "google_ads_frame5"
name = "google_ads_frame5"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8361282487473612&amp;output=html&amp;h=250&amp;slotname=9204965048&amp;adk=3179406742&amp;adf=807048394&amp;w=300&amp;lmt=1557504331&amp;guci=1.2.0.0.2.2.0.0&amp;format=300x250&amp;url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&amp;ea=0&amp;flash=10.0.45&amp;avail_w=315&amp;wgl=0&amp;dt=1557504333952&amp;bpp=6&amp;fdt=1241&amp;idt=314&amp;shv=r20190506&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=336x280%2C250x250%2C300x250%2C300x250&amp;correlator=1053267298106&amp;frm=20&amp;pv=1&amp;ga_vid=850621547.1557504335&amp;ga_sid=1557504335&amp;ga_hid=1080272861&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=95&amp;ady=7650&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=410075103%2C423550201&amp;oid=3&amp;pg_h=8056&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=5&amp;uci=a!5&amp;dtd=1254"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (56)


Request Response
                                        
                                            GET /images/s.exe HTTP/1.1 
Host: mir3.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.239.34.21
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.mir3.me/images/s.exe
Date: Fri, 10 May 2019 16:05:31 GMT
Server: ghs
Content-Length: 228
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  HTML document text
Size:   228
Md5:    64853b2313ded85e5491353353022d51
Sha1:   3161baf1a0ab44856b58bed278e2aea65fe1be08
Sha256: 7fe4b1f4c81fcff420dba783ac363688daf248c8eda18542ef6c39798f21d334
                                        
                                            GET /images/s.exe HTTP/1.1 
Host: www.mir3.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.19
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 10 May 2019 16:05:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 28632
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   28632
Md5:    65cc51fcfee1a6b16c0f917411bcae5c
Sha1:   4bd4c059d3a04802150c603c3ef6d8dfb8f71087
Sha256: 34ebdc1a7ecceea10ab8a82e9dcf3f95f43669b47ad16f592ca6d4409ea4e117

Alerts:
  IDS:
    - ET TROJAN Single char EXE direct download likely trojan (multiple families)
                                        
                                            GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Date: Fri, 10 May 2019 16:05:31 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1544639719"
Content-Encoding: gzip
Content-Length: 4292
Last-Modified: Wed, 12 Dec 2018 18:35:19 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT
timing-allow-origin: *
Cache-Control: public, max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4292
Md5:    18902a41533d4e631e65a8d0c1f61282
Sha1:   c956a0dc434b90d06c2528b76c4e5273a30f9ac0
Sha256: 09b434cbaea55c0879a0598d4e3ae8b7ecd3a3a1edd8a995e600f4064ceb5454
                                        
                                            GET /css?family=Fjalla+One HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
timing-allow-origin: *
Expires: Fri, 10 May 2019 16:05:31 GMT
Date: Fri, 10 May 2019 16:05:31 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   198
Md5:    4e04e013a82f077fe1a81ca0676cfd46
Sha1:   ae041204e1987112a69c0e0f40d67e05392d8827
Sha256: 6822195f800fe007923c014c8ee538cdd6cde2412da66166d171d99b59660a2d
                                        
                                            GET /ajax/libs/jquery/1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.234
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
timing-allow-origin: *
Content-Length: 33434
Date: Fri, 19 Apr 2019 15:17:20 GMT
Expires: Sat, 18 Apr 2020 15:17:20 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1817292


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33434
Md5:    e4bb941e9945e6b8fc2c91584e0545e2
Sha1:   8ac8f5fbba79ab93ff34041cf41ed30b0487354d
Sha256: d5aef23e26c649450ee31e6d65fe05937d337e1e91efdc884893e9f2b1e89971
                                        
                                            GET /svn/trunk/js/highlight.pack.js HTTP/1.1 
Host: bloggertut.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1591
Date: Fri, 10 May 2019 16:05:32 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1591
Md5:    78aef4ef6c838ecde300e5ed6fcc602d
Sha1:   7078fcc783df22bdabae15eabfbb44dc4ac17545
Sha256: ad7720d87f0e065c67b22cfb00f92bb077a41578a1ef0a90da47ccc80e13ae7a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 10 May 2019 16:05:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d1d2ffdbbc2602bca19d3a1650b642a8
Sha1:   408c2a69e2e20a3546968067abda9116e20a1fe6
Sha256: ecb34282f82a90a7af0a812403045cc183124bb199ee593a6549df60a538e46e
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 10 May 2019 16:05:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /js/pinit.js HTTP/1.1 
Host: assets.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         104.123.116.35
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Etag: "931070e36fce60f2d86c78abe608ca38"
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Length: 286
Cache-Control: max-age=292
Connection: keep-alive
Vary: Accept-Encoding, Origin
X-CDN: akamai


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   286
Md5:    931070e36fce60f2d86c78abe608ca38
Sha1:   18688d495cb0af4e1ab42c5e36d8a932f74d664d
Sha256: 01e4a21280f97654db979111c842bd0654bc7668104e6c18b22ff268ffa8dba4
                                        
                                            GET /static/v1/widgets/2549344219-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6822
Date: Fri, 19 Apr 2019 15:31:28 GMT
Expires: Sat, 18 Apr 2020 15:31:28 GMT
Last-Modified: Fri, 19 Apr 2019 11:17:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1816444
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6822
Md5:    50061c169ab8f46a9cc382f148f2dce5
Sha1:   ff4829f3d28740af078781271a61091d8a13c300
Sha256: a8b7114ca2883702b99c0521528cbcce9a0b64cf8283df063cab50372c2e4144
                                        
                                            GET /static/v1/widgets/1535467126-widget_css_2_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7452
Date: Fri, 19 Apr 2019 15:27:53 GMT
Expires: Sat, 18 Apr 2020 15:27:53 GMT
Last-Modified: Tue, 25 Nov 2014 14:03:24 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1816659
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data
Size:   7452
Md5:    f3167132833424a781f5270b052f9952
Sha1:   39916f5321955446feb471b2c6e5167cf65c8cac
Sha256: 78e311131a88573cc85996e817039c6d361730a065cd3332bed576e00657a482
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.mir3.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.19
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Fri, 10 May 2019 16:05:32 GMT
Date: Fri, 10 May 2019 16:05:32 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 13 Apr 2019 04:50:46 GMT
Etag: W/"f8dae2a902194009dc1ab5067ceaa6e059e58ffd48f7eabdcf8d327b3d6e76b9"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 933
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   933
Md5:    073f35b647d0bd70cd1780fcbfd1a482
Sha1:   006bce9af752851d246dd1d3f136a8468edd92a8
Sha256: 3d85fb44be02e0b6a32254f205777a4ff17741ae648c7af589fd5727d0ee6ed9
                                        
                                            GET /svn/trunk/js/highlight.pack.js HTTP/1.1 
Host: bloggertut.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1591
Date: Fri, 10 May 2019 16:05:32 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1591
Md5:    78aef4ef6c838ecde300e5ed6fcc602d
Sha1:   7078fcc783df22bdabae15eabfbb44dc4ac17545
Sha256: ad7720d87f0e065c67b22cfb00f92bb077a41578a1ef0a90da47ccc80e13ae7a
                                        
                                            GET /-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v8b5"
Expires: Fri, 10 May 2019 03:01:34 GMT
Content-Disposition: inline;filename="PhoXo2.png"
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 15:26:45 GMT
Server: fife
Content-Length: 1610
X-XSS-Protection: 0
Age: 2327
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 100 x 20, 8-bit/color RGBA, non-interlaced
Size:   1610
Md5:    fdb7528e7ccebcfe1daea52aa0195bd6
Sha1:   caa9b43d3056743538e12cb11a7320f9216712ea
Sha256: 08ee145d75eed8be290285f1a8b9fd40b9b8dc029ad10cc6283945b536270506
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: www.mir3.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.211.19
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2026
Date: Fri, 10 May 2019 16:05:32 GMT
Expires: Fri, 17 May 2019 16:05:32 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 10 May 2019 14:21:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
                                        
                                            GET /static/v1/widgets/2905083093-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 53421
Date: Fri, 03 May 2019 08:10:56 GMT
Expires: Sat, 02 May 2020 08:10:56 GMT
Last-Modified: Thu, 02 May 2019 20:22:11 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 633276
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   53421
Md5:    66d6c7f5b5e08d1a09cafba7661d411b
Sha1:   ecd43ac94ec8dd4791b73104c917b91f16947dc5
Sha256: 65883bdcc4552788707f51a314d34f685074d17dec653e5ddc1e93f4329be044
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
Vary: Accept-Encoding
Date: Fri, 10 May 2019 16:05:32 GMT
Expires: Fri, 10 May 2019 16:05:32 GMT
Cache-Control: private, max-age=3600
Etag: 12295793406718901977
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 32972
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32972
Md5:    20df0f2a044485037510bf17ca2063da
Sha1:   842a0c18b96ca9a769bfed800fb4185b4bb43e8f
Sha256: ce954d1194c4decc2ebd77dabe3797385f18c377be2043f460d94d6e88830860
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=2536384285010130402&zx=05d43486-811a-4185-a54a-21717729c0ec HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 10 May 2019 16:05:32 GMT
Last-Modified: Fri, 10 May 2019 16:05:32 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 10 May 2019 16:05:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    51e025a25839973ae126867778e2f74c
Sha1:   0f8228757c3ae872d22c5565835e84bdce7efce5
Sha256: e9f0a6d5ad56fe7e81ce8565df73ba8e5793e23ffd90a9e0dde3e43198ad52f5
                                        
                                            GET /en_US/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 45f930c5d116b8f848e2de60305f2105
Etag: "c58518682fc02c02dbdc8b3f5aa394f9"
Content-Encoding: gzip
timing-allow-origin: *
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Fri, 10 May 2019 16:15:47 GMT
Content-MD5: XH8xn7xx9lHbT/nKDxSf8Q==
X-FB-Debug: Mf8f0Awui7nLSKQrOXDta03KnMzG+5YdSH0jn7UlY85XVjLbbK/VQTQC7vyspRbI1+xduNGph5IOUt7kMGNcYw==
Date: Fri, 10 May 2019 16:05:32 GMT
Connection: keep-alive
Content-Length: 1779


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1779
Md5:    5c7f319fbc71f651db4ff9ca0f149ff1
Sha1:   5c97f5e72bc2c866db2e745d616a2e24868e6ca3
Sha256: a10ef91e19ff2974cfed34ca2306c343b9396e41015572c9de4327a1e5dcdf93
                                        
                                            GET /-GPCAz_baHzA/XKALzxO69rI/AAAAAAAAJM8/WNhxHgz0asMFxFCCyS-TZRWmDHgJXz2pQCLcBGAs/s72-c/Lemon%2BPudding%2BCake.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v24d0"
Expires: Fri, 10 May 2019 20:33:33 GMT
Content-Disposition: inline;filename="Lemon Pudding Cake.png"
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 16:05:32 GMT
Server: fife
Content-Length: 11800
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGB, non-interlaced
Size:   11800
Md5:    bc60838e768dec64996f8e83754370cd
Sha1:   be20051b2d46ff92142143d7661d15d6fb870bc2
Sha256: 1606b21455b47936bc6c72d48054f098604ca0b1611f5dbd9a2cadbfcb20063e
                                        
                                            GET /-fWthLNjqhWY/XKAI5DsxuMI/AAAAAAAAJMk/uYDZauE2qzgupqwZBlf5SrQOHsAW56YJwCLcBGAs/s72-c/CHOCOLATE%2BSPONGE%2BCAKE.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v24ca"
Expires: Fri, 10 May 2019 20:33:33 GMT
Content-Disposition: inline;filename="CHOCOLATE SPONGE CAKE.png"
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 16:05:32 GMT
Server: fife
Content-Length: 8690
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGB, non-interlaced
Size:   8690
Md5:    7eb01b707005fe0c51d51748cb5d52db
Sha1:   5b2eb1f733f61495ad65093f0032d42f81cf12f7
Sha256: bd01952f60633ba0989704ece0ecc2d6714eef6adcd4adaa72321c07ba557932
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=118193
Date: Fri, 10 May 2019 16:05:32 GMT
Etag: "5cd4b114-1d7"
Expires: Sun, 12 May 2019 00:55:25 GMT
Last-Modified: Thu, 09 May 2019 23:00:36 GMT
Server: ECS (lcy/1D22)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4f4e159c60f2d238bc51bf03ea86cce6
Sha1:   4d500cbc77d11077190428a95adff736604ea78e
Sha256: 7068f0c6cc52eedb3a513248d1734565bdf762e6d1cd224c9effbb3a77c90916
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=169741
Date: Fri, 10 May 2019 16:05:32 GMT
Etag: "5cd56c88-1d7"
Expires: Sun, 12 May 2019 15:14:33 GMT
Last-Modified: Fri, 10 May 2019 12:20:24 GMT
Server: ECS (lcy/1D69)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9c165286cb99777dad2e09f9ffe6a39d
Sha1:   19c03ef9755d0a769db29034f975c07418430c7f
Sha256: 795009670178def4ed92afc55a3f9ac13746dbd300f5cd44af458ab03290befc
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 10 May 2019 16:05:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9aa630786a58f4daede26621986d99a8
Sha1:   b051e38e0921d23964b1d93d98b5d3fc9baa3d82
Sha256: e0acda694c1f4ecbd6b9ad1fbd5996bbce5e5f8c574c82ebc9b674c1741a4395
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Fri, 03 May 2019 18:01:44 GMT
Expires: Fri, 10 May 2019 18:01:44 GMT
Last-Modified: Thu, 02 May 2019 20:22:11 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 597828
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /en_US/all.js?hash=adebb4572d163067d569a844b68159f1 HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: afac18eb50f141462ca167c4e28a259c
Etag: "24d0fdc94815d1716733a438b86c2d45"
Content-Encoding: gzip
timing-allow-origin: *
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable
Expires: Sat, 09 May 2020 13:53:51 GMT
Content-MD5: OFTaofwNaMqhuzIgSPUQ+g==
X-FB-Debug: Nd6hNSnidAVwgjdCGKMjEj/gjZNhMZSE3h5TH4eRuhW4Of4kfXRyx5BV0R6Y+smFX0LHQt7sUw/GOKRkJxHPBQ==
Date: Fri, 10 May 2019 16:05:32 GMT
Connection: keep-alive
Content-Length: 57959


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57959
Md5:    3854daa1fc0d68caa1bb322048f510fa
Sha1:   c2aab82206c181c4fc79dd93bdfdc5901ff77405
Sha256: 23c04ffa174cb81ca8729ee3c09242ab25af908e2585d8c3da98ee9c38d89993
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
timing-allow-origin: *
Etag: "18a7e7a65325dfe3ae617da294e74f73"
Expires: Fri, 10 May 2019 16:05:32 GMT
Date: Fri, 10 May 2019 16:05:32 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=183=turAtoMxQIlUJ3cdEx__3ZmoJXx-KAqSUgg3imcBKbUcqsLDAvuKgvUr5vc1R5CjEFU8SxGDPojUR2fx6ffw0OVI634VHV6KyjnUJjBHDLL4SAt_-N3VAa6H75fd9IkCEWf13buThGcIP8beC0j3oot1yKgWxmqXOSYTSto4h80;Domain=.google.com;Path=/;Expires=Sat, 09-Nov-2019 16:05:32 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17042
Md5:    fdf4663b726554c2fd6184e77d514907
Sha1:   5c4286af12f43b436b6c86b4f547e33e06abec36
Sha256: 694bfba8cec94383932efcc0dc384b6aa553389018a198cf20ab94e7945ebfab
                                        
                                            GET /-FXCcLfYFU0c/XHM2kYcIQCI/AAAAAAAAHuE/yTDbN9uey2gZvY63kbT6Rq3BihS4qXcdwCLcBGAs/s72-c/Low-Carb-Zucchini-Boats.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1ee2"
Expires: Sat, 11 May 2019 16:05:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Low-Carb-Zucchini-Boats.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 16:05:32 GMT
Server: fife
Content-Length: 5940
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5940
Md5:    ef3fe2a6886bcef2e7b269cd3f512540
Sha1:   81693e6a323e072d18432c6c1e91d8eb2c6bd161
Sha256: b7448b5ef6fdaf81376a97412edfeb4416a0b740576b8b9b454af08dc4d8e891
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
Vary: Accept-Encoding
Date: Fri, 03 May 2019 15:21:59 GMT
Expires: Fri, 17 May 2019 15:21:59 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Age: 607414
Cache-Control: public, max-age=1209600


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /--2oF0xK-27w/W2k6PSKEc5I/AAAAAAAAD8k/XNj07W4Q_3MiUC0IPdfBrdbRCcpxRH2_QCLcBGAs/s72-c/Ch%25C3%25ADcken%2BRanch%2BWraps.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vfca"
Expires: Sat, 11 May 2019 16:05:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Ch_cken Ranch Wraps.png";filename*=UTF-8''Ch%C3%ADcken%20Ranch%20Wraps.png
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 16:05:33 GMT
Server: fife
Content-Length: 12498
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGB, non-interlaced
Size:   12498
Md5:    42601fabc0ad646a1e40f4b937c5fd0a
Sha1:   83f11b8a929c4f5d64fc3322dab742c1ce725a78
Sha256: 518cd349c209c4c3a5663520cc037a48fa19d269f2d667efdcbdc17cf15d60fb
                                        
                                            GET /js/pinit_main.js?0.47848245178009696 HTTP/1.1 
Host: assets.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         104.123.116.35
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Etag: "8e815b2e3dab60eb301e4080345e1bb3"
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Length: 23756
Cache-Control: max-age=300
Connection: keep-alive
Vary: Accept-Encoding, Origin
X-CDN: akamai


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   23756
Md5:    8e815b2e3dab60eb301e4080345e1bb3
Sha1:   aadf7b60e3e6e812526b34a22944877976ead136
Sha256: 204a517398be61ed9294322010d48556efeff5b3c38ce1dafa1146c83b014555
                                        
                                            GET /-v3sfVt9tGz4/XKMcg6qGfaI/AAAAAAAAJUk/jhnrbw4lG6MmgzCQpp4WpQUMrHwqEt0mgCLcBGAs/s72-c/POTATO%252C%2BBROCCOLI%2B%2526%2BEGG%2BCASSEROLE.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v254a"
Expires: Fri, 10 May 2019 20:33:33 GMT
Content-Disposition: inline;filename="POTATO, BROCCOLI & EGG CASSEROLE.png"
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 16:05:32 GMT
Server: fife
Content-Length: 11068
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGB, non-interlaced
Size:   11068
Md5:    ad0e08ea5de651c0b33b597f49491620
Sha1:   177739025212d400a6dadf826a5b472585d2f366
Sha256: 694c646f1cdf1ae905c7986a69b767a88baca23e9f6b159439f9ec1eebe60348
                                        
                                            GET /font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css
Origin: http://www.mir3.me

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Date: Fri, 10 May 2019 16:05:33 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1544639743"
Content-Encoding: gzip
Content-Length: 44433
Last-Modified: Wed, 12 Dec 2018 18:35:43 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT
timing-allow-origin: *
Cache-Control: public, max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   44433
Md5:    122359bdfee05a5b4ce0f19b244e85bb
Sha1:   35d57f1553391ddfdb1525ffd37ca902f79d2d7e
Sha256: 3e8f404d881f687fdcc53a1a7f8c59d3bdfa201c14e3d8470fb55eb99c4fdc4a
                                        
                                            GET /s/fjallaone/v6/Yq6R-LCAWCX3-6Ky7FAFrOF6lA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Fjalla+One
Origin: http://www.mir3.me

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
timing-allow-origin: *
Content-Length: 19976
Date: Fri, 19 Apr 2019 15:31:30 GMT
Expires: Sat, 18 Apr 2020 15:31:30 GMT
Last-Modified: Tue, 19 Feb 2019 22:34:07 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1816443


--- Additional Info ---
Magic:  data
Size:   19976
Md5:    7710e53ee1e24055dd9ba499766cbf2a
Sha1:   84b6d697b33ebfbdc7e7892d1b51fec3cc3af64b
Sha256: da9b29cad35666ad35df54fc721ff8d0838660640456185a86521e6c506b81cd
                                        
                                            GET /-yNE4A_H3C2o/U1E6RPYNEpI/AAAAAAAADRQ/UOP1mUKaxGE/s1600/line.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vd15"
Expires: Thu, 09 May 2019 13:32:59 GMT
Content-Disposition: inline;filename="line.png"
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 14:02:12 GMT
Server: fife
Content-Length: 735
X-XSS-Protection: 0
Age: 7401
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 371 x 5, 8-bit/color RGBA, non-interlaced
Size:   735
Md5:    15ded568eb1e378aa000ab4fc9622c7e
Sha1:   71889b7db45f87fd62dae699575cc2d1dc1aec35
Sha256: 92dc3b64537e4a7710d452daaba3ed22fda5e21df2db4ccfbd81c129df9d5116
                                        
                                            GET /pagead/js/r20190506/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
Vary: Accept-Encoding
Date: Fri, 10 May 2019 16:05:33 GMT
Expires: Fri, 10 May 2019 16:05:33 GMT
Cache-Control: private, max-age=1209600
Etag: 5034822892437673395
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 77593
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   77593
Md5:    1882313af3cb22427fafa7984b57051f
Sha1:   8013935ac6b75c0f6ec47727edcb429f90b3d8ca
Sha256: 161053f4c2f9419d697f918427e3d5e51a20e883b9893f751cbf31c9c61b2c2c
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.xCP6yo-De6g.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCMdLAHx_g396AranGZoQn_CVLIZbA/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe
Cookie: NID=183=turAtoMxQIlUJ3cdEx__3ZmoJXx-KAqSUgg3imcBKbUcqsLDAvuKgvUr5vc1R5CjEFU8SxGDPojUR2fx6ffw0OVI634VHV6KyjnUJjBHDLL4SAt_-N3VAa6H75fd9IkCEWf13buThGcIP8beC0j3oot1yKgWxmqXOSYTSto4h80

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17609
Date: Wed, 08 May 2019 19:36:48 GMT
Expires: Thu, 07 May 2020 19:36:48 GMT
Last-Modified: Wed, 08 May 2019 03:41:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 160126
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   17609
Md5:    4c7b8c6885877d2bd3b9b1aa57cf4f39
Sha1:   3e48c9a9f422954474766239fe0d144102ed323f
Sha256: 00e99f479d9c797a8d6f847dc9928c0e39e2e1a81be54a0c123d2249527ac0a4
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.xCP6yo-De6g.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCMdLAHx_g396AranGZoQn_CVLIZbA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe
Cookie: NID=183=turAtoMxQIlUJ3cdEx__3ZmoJXx-KAqSUgg3imcBKbUcqsLDAvuKgvUr5vc1R5CjEFU8SxGDPojUR2fx6ffw0OVI634VHV6KyjnUJjBHDLL4SAt_-N3VAa6H75fd9IkCEWf13buThGcIP8beC0j3oot1yKgWxmqXOSYTSto4h80

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 49518
Date: Wed, 08 May 2019 17:53:23 GMT
Expires: Thu, 07 May 2020 17:53:23 GMT
Last-Modified: Wed, 08 May 2019 03:41:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 166330
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   49518
Md5:    6876359279bcd9469f882473f2771173
Sha1:   d6d0ccc4c67b98a1cf9dd2a791bec84a993e0e08
Sha256: 45da022f50f40cc64b879029b9b633f0030985753387570e1ef9df57a7481e2d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=133987
Date: Fri, 10 May 2019 16:05:35 GMT
Etag: "5cd4fe72-1d7"
Expires: Sun, 12 May 2019 05:18:42 GMT
Last-Modified: Fri, 10 May 2019 04:30:42 GMT
Server: ECS (lcy/1D24)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ce958a769570e454641f4e87026dd70f
Sha1:   c11b78870fc5eb567b2f01b1e0544015ecc1c7b4
Sha256: 5fd44f79692ecbf41d12fd5fcb4d6640dcbe486b586b1f091fa187ac49a0ea1c
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 10 May 2019 16:05:35 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    66d839969ee606a684ab4eafa2bafff0
Sha1:   5de6078d505b435bdc9a4cc840cd08be70d97d6f
Sha256: c1daa1446771c6a41389f863902dbffaf9fafbed880d586c5d3f0bba0cfa7533
                                        
                                            GET /pagead/html/r20190506/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
Vary: Accept-Encoding
Date: Mon, 06 May 2019 14:57:02 GMT
Expires: Mon, 20 May 2019 14:57:02 GMT
Etag: 1357556803790654411
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6990
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 349713
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6990
Md5:    32b280685915310ced46b336d83b3e62
Sha1:   566e8ccf61cdc8752683d8f4f85c52e8eae5cef3
Sha256: 1ddff007042bd6214ed47d12cbd9ef10631ebcb1f3397954ee73a717d1f8a2d0
                                        
                                            GET /pub-config/r20160913/ca-pub-8361282487473612.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Fri, 10 May 2019 16:05:35 GMT
Expires: Sat, 11 May 2019 04:05:35 GMT
Cache-Control: public, max-age=43200
Last-Modified: Tue, 07 May 2019 19:14:00 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /?type=pidget&guid=Eps2fh5e8AJP&tv=2019040401&event=init&sub=www&button_count=1&follow_count=0&pin_count=0&button_hover=1&profile_count=0&board_count=0&section_count=0&lang=en&nvl=en-US&via=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&callback=PIN_1557504333162.f.callback[0] HTTP/1.1 
Host: log.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         151.101.0.84
HTTP/1.1 200 OK
                                        
Set-Cookie: _pinterest_cm=TWc9PSYwV0RraUZGSnczeThaa0N5TjcwVDczL050TEZaaGh3L2xiN3pWcUpCbDVLVzJoVnh6NFErQ3N0VGpVNVpFRmt1SncrajlSdVBnY1BOZ2s5a1NvZ0NxREhDZFo2M00zTUliMWxjTy8ybmZBdnV0SExSQ2JkR0Y3ZGorSFhQQ1ducSZ6aUJ1Tjc1MXBDblFpUDVEYkc3MmVUQ09KZDQ9; Expires=Sat, 09 May 2020 16:05:35 GMT; Domain=.pinterest.com
x-envoy-upstream-service-time: 6
x-pinterest-host: widgets.pinterest.com
x-pinterest-rid: 3042260634487119
Server: envoy
Content-Length: 0
Accept-Ranges: bytes
Date: Fri, 10 May 2019 16:05:35 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-cph20644-CPH
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1557504335.234749,VS0,VE102


--- Additional Info ---
                                        
                                            GET /-ciOXUNujRow/XHskFcWhW-I/AAAAAAAAIg4/bXiIM7-oNX8xkp8xmqzPr28hN_aVn8EvACLcBGAs/s1600/MIR3.ME.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.207.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v220f"
Expires: Sat, 11 May 2019 16:05:35 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="MIR3.ME.png"
Vary: Origin
Access-Control-Allow-Origin: *
timing-allow-origin: *
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2019 16:05:35 GMT
Server: fife
Content-Length: 18472
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 100 x 100, 8-bit/color RGB, non-interlaced
Size:   18472
Md5:    f8f580fd00907eee16a0c9db6380de4c
Sha1:   634124d50ce2fef890f1f51d605302ac7a7413ee
Sha256: b7d413bbc4590ebbdc407549c783b73781704361443531e0af74bd79460105d6
                                        
                                            GET /navbar.g?targetBlogID=2536384285010130402&blogName=mir3.me&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.mir3.me/search&blogLocale=en&v=2&homepageUrl=http://www.mir3.me/&vt=4168018376631044168&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.xCP6yo-De6g.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCMdLAHx_g396AranGZoQn_CVLIZbA%2Fm%3D__features__ HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 10 May 2019 16:05:35 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2567
Md5:    af73ff4737245751e69219dba13213af
Sha1:   93f65f41befcba993068fc73d51ecafb7052f35e
Sha256: b28962e285e9702e2f741771e7dc604cd1cb023e22f0d8b61f799018ed1f3e0b
                                        
                                            GET /activeview/js/current/osd.js?cb=%2Fr20100101 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 10 May 2019 16:05:35 GMT
Expires: Fri, 10 May 2019 16:05:35 GMT
Cache-Control: private, max-age=3000
Etag: "1557327549562739"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28709
Md5:    37af44f6e210c14818f2690007d00c4a
Sha1:   84c8066274b7a97e8f475b252971c20cb36643ae
Sha256: 679954465333457016d9f076536b7ad8cf8a47126ff077863f4b510271e4b373
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2536384285010130402&blogName=mir3.me&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.mir3.me/search&blogLocale=en&v=2&homepageUrl=http://www.mir3.me/&vt=4168018376631044168&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.xCP6yo-De6g.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCMdLAHx_g396AranGZoQn_CVLIZbA%2Fm%3D__features__
Cookie: NID=183=turAtoMxQIlUJ3cdEx__3ZmoJXx-KAqSUgg3imcBKbUcqsLDAvuKgvUr5vc1R5CjEFU8SxGDPojUR2fx6ffw0OVI634VHV6KyjnUJjBHDLL4SAt_-N3VAa6H75fd9IkCEWf13buThGcIP8beC0j3oot1yKgWxmqXOSYTSto4h80

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
timing-allow-origin: *
Etag: "5fce3e792fd8cfda14ba7de94ea0ae67"
Expires: Fri, 10 May 2019 16:05:35 GMT
Date: Fri, 10 May 2019 16:05:35 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17055
Md5:    8fdcaf86c8b7ff81dcb6fdb0557e104a
Sha1:   06d790c05a39b840a99473e00dad53655bb39927
Sha256: e7b5858f02f8e60ca99b663bf125de56e0d66c4d1a991bfe86639c06494d03da
                                        
                                            GET /pagead/ads?client=ca-pub-8361282487473612&output=html&h=250&slotname=9982983801&adk=2239951807&adf=807048394&w=250&lmt=1557504331&guci=1.2.0.0.2.2.0.0&format=250x250&url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&ea=0&flash=10.0.45&wgl=0&dt=1557504333889&bpp=48&fdt=1108&idt=377&shv=r20190506&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=336x280&correlator=1053267298106&frm=20&pv=1&ga_vid=850621547.1557504335&ga_sid=1557504335&ga_hid=1080272861&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=95&ady=471&biw=1159&bih=754&scr_x=0&scr_y=0&eid=410075103%2C423550201&oid=3&pg_h=8056&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=2&uci=a!2&dtd=1173 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 10 May 2019 16:05:35 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2019 16:20:35 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 10 May 2019 16:05:35 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   386
Md5:    4bd3eb72702e09465370d2a773c3d0c0
Sha1:   fc2de33bf3f27fe04ce68c0f158047bb171a875e
Sha256: fd46b7f05e1c22214ceddf7412b7b4ddb307a92f233392eb9d8c294fd7605915
                                        
                                            GET /pagead/ads?client=ca-pub-8361282487473612&output=html&h=250&slotname=5887115686&adk=2965241917&adf=807048394&w=300&fwrn=4&lmt=1557504331&rafmt=11&guci=1.2.0.0.2.2.0.0&format=300x250&url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&ea=0&flash=10.0.45&wgl=0&dt=1557504333938&bpp=7&fdt=1137&idt=328&shv=r20190506&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=336x280%2C250x250&correlator=1053267298106&frm=20&pv=1&ga_vid=850621547.1557504335&ga_sid=1557504335&ga_hid=1080272861&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&rplot=4&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=757&biw=1159&bih=754&scr_x=0&scr_y=0&eid=410075103%2C423550201&oid=3&pg_h=8056&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=3&uci=a!3&dtd=1150 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 10 May 2019 16:05:35 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2019 16:20:35 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 10 May 2019 16:05:35 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   385
Md5:    97f53027ce8e19881ac4d27c7cdac538
Sha1:   8e20751034ed126bd41d22875daf2791292540c5
Sha256: c51fad90ec756cca1d1c8b783a70ca178cea088aaaebc1fd459a56477d367329
                                        
                                            GET /pagead/ads?client=ca-pub-8361282487473612&output=html&h=280&slotname=9452377054&adk=1526967335&adf=807048394&w=336&lmt=1557504331&guci=1.2.0.0.2.2.0.0&format=336x280&url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&ea=0&flash=10.0.45&wgl=0&dt=1557504333835&bpp=53&fdt=440&idt=431&shv=r20190506&cbv=r20190131&saldr=aa&abxe=1&correlator=1053267298106&frm=20&pv=2&ga_vid=850621547.1557504335&ga_sid=1557504335&ga_hid=1080272861&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=352&ady=103&biw=1159&bih=754&scr_x=0&scr_y=0&eid=410075103%2C423550201&oid=3&pg_h=8056&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=985 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 10 May 2019 16:05:35 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2019 16:20:35 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 10 May 2019 16:05:35 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   388
Md5:    2bf8125467c657648fc026bb4e212d11
Sha1:   d44a481ecdb70848a25c7ec781d744b09367dacb
Sha256: c225e69c4567806bd6c075115d7754a84134354ae0685294e99b7222c55294a4
                                        
                                            GET /pagead/ads?client=ca-pub-8361282487473612&output=html&h=250&slotname=9204965048&adk=3179406742&adf=807048394&w=300&lmt=1557504331&guci=1.2.0.0.2.2.0.0&format=300x250&url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&ea=0&flash=10.0.45&avail_w=315&wgl=0&dt=1557504333952&bpp=6&fdt=1241&idt=314&shv=r20190506&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=336x280%2C250x250%2C300x250%2C300x250&correlator=1053267298106&frm=20&pv=1&ga_vid=850621547.1557504335&ga_sid=1557504335&ga_hid=1080272861&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=95&ady=7650&biw=1159&bih=754&scr_x=0&scr_y=0&eid=410075103%2C423550201&oid=3&pg_h=8056&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=5&uci=a!5&dtd=1254 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 10 May 2019 16:05:35 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2019 16:20:35 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 10 May 2019 16:05:35 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   386
Md5:    5a95205bb87d843abf09f9a3a0190175
Sha1:   b1410bf8024b1f942a8720bf9aedef02ecad0b2d
Sha256: 23755be0fa609fa745e3ba2c8e6027072aa8da0f62d519c4e0459914fc3608af
                                        
                                            GET /pagead/ads?client=ca-pub-8361282487473612&output=html&h=250&slotname=1536807134&adk=72909811&adf=807048394&w=300&fwrn=4&lmt=1557504331&rafmt=11&guci=1.2.0.0.2.2.0.0&format=300x250&url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&ea=0&flash=10.0.45&wgl=0&dt=1557504333945&bpp=7&fdt=1213&idt=321&shv=r20190506&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=336x280%2C250x250%2C300x250&correlator=1053267298106&frm=20&pv=1&ga_vid=850621547.1557504335&ga_sid=1557504335&ga_hid=1080272861&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&rplot=4&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=7349&biw=1159&bih=754&scr_x=0&scr_y=0&eid=410075103%2C423550201&oid=3&pg_h=8056&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=4&uci=a!4&dtd=1226 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 10 May 2019 16:05:35 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2019 16:20:35 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 10 May 2019 16:05:35 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   387
Md5:    c31961c5a8f1715a8424434da211b7cc
Sha1:   67e09baa672bb2a80cf71ab84c3ba9e23c21c866
Sha256: 60f9dc2aaa86f2eb6388558f0d96be3a181a935d52c077d247aaaa88efb78a1b
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.xCP6yo-De6g.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCMdLAHx_g396AranGZoQn_CVLIZbA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2536384285010130402&blogName=mir3.me&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.mir3.me/search&blogLocale=en&v=2&homepageUrl=http://www.mir3.me/&vt=4168018376631044168&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.xCP6yo-De6g.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCMdLAHx_g396AranGZoQn_CVLIZbA%2Fm%3D__features__
Cookie: NID=183=turAtoMxQIlUJ3cdEx__3ZmoJXx-KAqSUgg3imcBKbUcqsLDAvuKgvUr5vc1R5CjEFU8SxGDPojUR2fx6ffw0OVI634VHV6KyjnUJjBHDLL4SAt_-N3VAa6H75fd9IkCEWf13buThGcIP8beC0j3oot1yKgWxmqXOSYTSto4h80

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 41308
Date: Wed, 08 May 2019 19:36:49 GMT
Expires: Thu, 07 May 2020 19:36:49 GMT
Last-Modified: Wed, 08 May 2019 03:41:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 160126
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   41308
Md5:    f3171070828d96998143afc1a4ba2da7
Sha1:   fbc75372c8de4a72371d71d2cad7048fcedf4a4c
Sha256: 8ed3a00e8d258f8f953890b38423533b2d102e3165ad8691bfff1af0ea584122
                                        
                                            GET /pagead/gen_204?id=jserror&context=168&msg=TypeError%3A%20this.l.dataset%20is%20undefined%0A(%5Bobject%20Object%5D%2C%5Bobject%20MessageEvent%5D)%40http%3A%2F%2Fpagead2.googlesyndication.com%2Fpagead%2Fjs%2Fr20190506%2Fr20190131%2Fshow_ads_impl.js%3A17%0A(%5Bobject%20Object%5D%2C%5Bobject%20MessageEvent%5D)%40show_ads_impl.js%3A1%0A(%5Bobject%20Object%5D%2C%5Bobject%20MessageEvent%5D)%40show_ads_impl.js%3A1%0A()%40show_ads_impl.js%3A1%0Afk(%5Bobject%20Object%5D%2C168%2C(function%20()%20%7Breturn%20c.apply(d%2C%20g)%3B%7D)%2C(void%200))%40show_ads_impl.js%3A1%0A(%5Bobject%20Object%5D%2C%5Bobject%20MessageEvent%5D)%40show_ads_impl.js%3A1%0Ae(%5Bobject%20MessageEvent%5D)%40show_ads_impl.js%3A1%0A&shv=r20190506&eid=410075103%2C423550201&url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe

                                         
                                         216.58.207.226
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
Date: Fri, 10 May 2019 16:05:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0


--- Additional Info ---
                                        
                                            GET /pagead/ads?client=ca-pub-8361282487473612&output=html&h=250&slotname=5887115686&adk=2965241917&adf=807048394&w=300&fwrn=4&lmt=1557504331&rafmt=11&guci=1.2.0.0.2.2.0.0&format=300x250&url=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&ea=0&flash=10.0.45&wgl=0&dt=1557504333952&bpp=7&fdt=2473&idt=314&shv=r20190506&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=336x280%2C250x250%2C300x250%2C300x250%2C300x250&correlator=1053267298106&frm=20&pv=1&ga_vid=850621547.1557504335&ga_sid=1557504335&ga_hid=1080272861&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&rplot=4&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=820&biw=1159&bih=754&scr_x=0&scr_y=0&eid=410075103%2C423550201&oid=3&pg_h=2373&loc=http%3A%2F%2Fwww.mir3.me%2Fimages%2Fs.exe&rx=0&eae=5&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&pfx=0&fu=144&bc=1&ifi=3&uci=a!3&dtd=2487 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mir3.me/images/s.exe
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 10 May 2019 16:05:36 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: IDE=AHWqTUmdLPj7sAOLVdEtCixAoEsN9BE283CVpz8nuj_1miKDmZzaiVmcmaNwZ5dd; expires=Sun, 09-May-2021 16:05:36 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Fri, 10 May 2019 16:05:36 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   388
Md5:    771f2187e284289c4f8b018f8d2b9b6c
Sha1:   e27fc6bdaa0e50221defe1047b73e029dfd83ce6
Sha256: 0aff16e17bfe003ea8eb1384e5108d96d719c67374c3b0c181040c4ee135066c