Overview

URL imgserve.net/img-54cfe34566122.html
IP104.27.171.91
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-10-17 10:09:26 CEST
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.171.91

Date UQ / IDS / BL URL IP
2018-11-15 04:11:18 +0100
2 - 1 - 1 imgserve.net/img-5312b02a2c55f.html 104.27.171.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af15fe0f.html 104.27.171.91
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-09 02:53:11 +0100
2 - 1 - 2 imgserve.net/img-54b8f7f76f9f2.html 104.27.171.91
2018-11-07 21:06:07 +0100
2 - 0 - 1 imgserve.net/img-531b3b116a506.html 104.27.171.91
2018-11-07 15:11:36 +0100
2 - 0 - 2 imgserve.net/img-51f083d266342.html 104.27.171.91
2018-11-05 18:07:20 +0100
2 - 0 - 2 imgserve.net/img-51ea9c13dbd6c.html 104.27.171.91
2018-11-05 08:10:59 +0100
2 - 0 - 2 imgserve.net/img-54b40e54bb3a9.html 104.27.171.91
2018-11-04 04:56:26 +0100
2 - 0 - 1 imgserve.net/img-54d4ca1f5453f.html 104.27.171.91

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-11-17 04:10:00 +0100
0 - 0 - 0 www.soft222.com/tag/%e3%81%b6%e3%81%84%e3%81% (...) 104.27.153.250
2018-11-17 04:03:40 +0100
0 - 0 - 0 Shnvme.com 104.27.189.200
2018-11-17 04:02:47 +0100
0 - 0 - 2 carapacetattoo.com/wp-admin/moheal/outlookebu.htm 104.24.99.253
2018-11-17 03:53:45 +0100
0 - 0 - 0 https://pastebin.com/ 104.20.209.21
2018-11-17 03:48:56 +0100
0 - 0 - 1 https://www.thephillyegotist.com/member-work/ (...) 104.18.52.22
2018-11-17 03:48:24 +0100
0 - 0 - 0 https://pastebin.com/BrTDgriz 104.20.209.21
2018-11-17 03:48:12 +0100
0 - 1 - 1 https://short1231.top/shortenerlogin.html 104.28.0.252
2018-11-17 03:47:07 +0100
0 - 1 - 0 https://new-applicationsad-phone-dev.pw/5c9f4 (...) 104.24.111.77
2018-11-17 03:41:56 +0100
0 - 1 - 0 https://new-applicationsad-phone-dev.pw/46c09 (...) 104.24.111.77
2018-11-17 03:26:18 +0100
0 - 2 - 0 https://etodoro.ga/mypush1/index-redir3-adult (...) 104.18.41.212

Last 10 reports on domain: imgserve.net

Date UQ / IDS / BL URL IP
2018-11-16 21:25:56 +0100
2 - 1 - 2 imgserve.net/img-54bfbce96f24a.html 104.27.170.91
2018-11-15 10:40:04 +0100
2 - 1 - 2 imgserve.net/img-547565868f825.html 104.27.170.91
2018-11-15 04:11:18 +0100
2 - 1 - 1 imgserve.net/img-5312b02a2c55f.html 104.27.171.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af03b425.html 104.27.170.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af15fe0f.html 104.27.171.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.170.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5197c3755eecd.html 104.27.170.91
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-12 18:26:19 +0100
2 - 1 - 1 imgserve.net/img-536ad1a395425.html 104.27.170.91


JavaScript

Executed Scripts (23)


Executed Evals (0)


Executed Writes (20)

#1 JavaScript::Write (size: 11, repeated: 1) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#2 JavaScript::Write (size: 6, repeated: 16) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 171, repeated: 1) - SHA256: f3e751e06ed7035cc6db569080705e79fa0cb34bc23cc1e47b44fb901288f2b1

                                        < a href = "http://kmylvwo5.com/tracker_clicks.php?a=1142&c=12470&b=36377&_t=1539763734"
id = "ad_link"
target = "_blank" > Check This FREE PORN Site Before It 's BANNED Forever</a>
                                    

#4 JavaScript::Write (size: 531, repeated: 1) - SHA256: abf2102b1a093c61f807fe4bdce60816f205be0e218309d28c4e725305fcd998

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734012" > < /iframe>
                                    

#5 JavaScript::Write (size: 531, repeated: 1) - SHA256: 96a3e478d0eecaeec63d93e016d74c83ee400d28749c4ac566e365c9a6c3f90d

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734146" > < /iframe>
                                    

#6 JavaScript::Write (size: 531, repeated: 1) - SHA256: 9420d813e9015cff4726f39053732c4b59baa3dd829cf6edac4759fffa23fd81

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734192" > < /iframe>
                                    

#7 JavaScript::Write (size: 531, repeated: 1) - SHA256: 9e94decb072c972e7229bd4728ac0d3e9b537e3b2d79f4571f8f3f1fa4af1cda

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734271" > < /iframe>
                                    

#8 JavaScript::Write (size: 531, repeated: 1) - SHA256: 9a7e9a9c0eb5e20c09aa713b13d0ed21a5e8487d265c0c92a817097db6212de0

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734331" > < /iframe>
                                    

#9 JavaScript::Write (size: 531, repeated: 1) - SHA256: caf3c7a5d7ec75c2bd57b253ae7c771f67b17594d574220a44da2c5881c2a453

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734366" > < /iframe>
                                    

#10 JavaScript::Write (size: 531, repeated: 1) - SHA256: 6819cb307e740797650c9282c30d4ae8ea11a3594e2bc18dcbc042f2967c5b92

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734400" > < /iframe>
                                    

#11 JavaScript::Write (size: 531, repeated: 1) - SHA256: fa9f1828ca4a7d330c30711a4e4197b8afcb712c5861079fcf8550272eecb4d8

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734461" > < /iframe>
                                    

#12 JavaScript::Write (size: 531, repeated: 1) - SHA256: 953c9a651d8dee7e40fe2580bd04c2aaaeb7d1b91fa74d471c0ece937d5cdca1

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734497" > < /iframe>
                                    

#13 JavaScript::Write (size: 531, repeated: 1) - SHA256: 1f11c8505065fa59cdebbf6cc9ed474fa3a2c9d74b7fab2ee98b82ee83ca9102

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734553" > < /iframe>
                                    

#14 JavaScript::Write (size: 531, repeated: 1) - SHA256: 527ebc0028d29aa2c3d701ea5d91d70de4231d65f1d1dc1274f5ec1ff34d4077

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734597" > < /iframe>
                                    

#15 JavaScript::Write (size: 531, repeated: 1) - SHA256: e4a90617c5f8a4e7b01944a2222381e70058ccbb00ab5428ee56437893b9d782

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734697" > < /iframe>
                                    

#16 JavaScript::Write (size: 531, repeated: 1) - SHA256: 76e4e05a2c76fab2e6a97e71ff4999098bb2f9b52d23664148054016c68a8f68

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735389" > < /iframe>
                                    

#17 JavaScript::Write (size: 531, repeated: 1) - SHA256: c7fcf736323071ebb133d53e0acda686eb4cb1718ccfbfe5cd89d6952cd90226

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735444" > < /iframe>
                                    

#18 JavaScript::Write (size: 531, repeated: 1) - SHA256: 1158c2b9ed29609b01d7604a3ad26ae9eff014536c114424e3383dd02ce20dbc

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735478" > < /iframe>
                                    

#19 JavaScript::Write (size: 531, repeated: 1) - SHA256: 607554a360a12a5f0196d71b5310854fc9be8442df699da75de7c15e21d1a9a2

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735512" > < /iframe>
                                    

#20 JavaScript::Write (size: 90, repeated: 1) - SHA256: 4de34a1e3c0f624c8494940fedc0c8da7ab1c22e5283e556c7e3461525bc81f9

                                        < script type = 'text/javascript'
src = 'http://5gl1x9qc.com/d/a/1142.php?ext=js&_t=80396710306
                                    


HTTP Transactions (79)


Request Response
                                        
                                            GET /img-54cfe34566122.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; expires=Thu, 17-Oct-19 08:08:52 GMT; path=/; domain=.imgserve.net; HttpOnly refererx=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ PHPSESSID=2066634be7550ae1eb5585fecac6d1af; path=/ viewer=2e5eb7609032d6eb4392da049471b5c4; expires=Wed, 17-Oct-2018 09:08:53 GMT; path=/; domain=.imgserve.net viewerid=54cfe34566122; expires=Wed, 17-Oct-2018 09:08:53 GMT; path=/; domain=.imgserve.net imagen3=1; expires=Thu, 18-Oct-2018 08:08:53 GMT
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: cloudflare
CF-RAY: 46b147a313894261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9554
Md5:    481da5d337af10bed94baee9ee1b6144
Sha1:   81e21da797f45525778d02cc4dd7a131c5dbf002
Sha256: eaebd16616570d61cfb5c862104992570fa5a0b1e5e845e00f639c8205ef64f6
                                        
                                            GET /css/styles.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 13 Jan 2015 07:23:52 GMT
Etag: W/"54b4c808-fceb"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a3b3994261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16363
Md5:    cdae48c2d228c78bcc72c4c0895ad283
Sha1:   a83d7527c3a8f3683094ff25f11ce7d76cfe0841
Sha256: c14d3811da0f79fcd55bc1af6daed9a29cfb6b7622b81f090a230a11ab08a090
                                        
                                            GET /js/jquery-1.7.1.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:20 GMT
Etag: W/"51ae97f4-16eac"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a3e12a4255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33223
Md5:    797e5aeed7a915aa9423119040979407
Sha1:   1287bebc61e72f65aa726faeb9a27485a38b9707
Sha256: 4f74858d849a6a197bbf30d7bdb6003ae954f55c757c95aeaea94071fdff710c
                                        
                                            GET /css/smoothness/jquery-ui-1.8.18.custom.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:43 GMT
Etag: W/"51ae9a27-833b"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a421334255-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7335
Md5:    8c3ae5f2631058b80fb6f6d84342ecd0
Sha1:   888aa2afe402561fe03a98b94b2abd7d48d69efd
Sha256: f9da0fc48c829ebfeb5079da87520156bd8e8f14d2ba4f3bdf4488fc49bba9d1
                                        
                                            GET /js/jquery-ui-1.8.18.custom.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:27 GMT
Etag: W/"51ae97fb-335f7"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a423ab4261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   52155
Md5:    1c8b6494b85c448273f83a2814226e0e
Sha1:   f7713dd0a26d0cfaa051020b2b37d589414c45f1
Sha256: fec6535c94fe5fb5604068322a6a43b16ea598c98415d8fe05fc54e8176021a7
                                        
                                            GET /css/img/logo.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Content-Length: 21186
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:28 GMT
Etag: "52c2-4de5e76c8b600"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a4d1474255-OSL


--- Additional Info ---
Magic:  PNG image, 280 x 80, 8-bit/color RGBA, non-interlaced
Size:   21186
Md5:    0f2ef79913ef0d8ab7b994bb7c5fe9fe
Sha1:   a9f53968b43919d2db7f1ce7033a9f41a6d5ade3
Sha256: 5bf1fff11cc2949712da86d18ed92bef598cbdda2ab57f0d5e98357152e28667
                                        
                                            GET /css/img/pig.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Content-Length: 821
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:30 GMT
Etag: "335-4de5e76e73a80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a4d3c24261-OSL


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   821
Md5:    603b3f482f950ea6ecbe3f02e4527d51
Sha1:   cc218bdf4d001f3db5482e6290e3d2ba13969ca0
Sha256: 4a96458a5a569e653a34eeb335eafe180e28129ac00125392ee5bec392ccbb3d
                                        
                                            GET /css/img/menubutton.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Content-Length: 3494
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:29 GMT
Etag: "da6-4de5e76d7f840"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a4f1b7427f-OSL


--- Additional Info ---
Magic:  PNG image, 150 x 40, 8-bit/color RGBA, non-interlaced
Size:   3494
Md5:    d1394f343c66e133faf085d089c7994b
Sha1:   a4064bd855e37c837ca0071416244e20dea5a1fa
Sha256: ad28f482b6f4e37eeafc726c5d2058da03cf848a3397d09d25773ea6a6fe32ad
                                        
                                            GET /jquery/text.js?_t=Math.floor(Math.random()*99999999999) HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         104.16.198.215
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=daedd82edc19c5ce6f7b0484b997cb68c1539763733; expires=Thu, 17-Oct-19 08:08:53 GMT; path=/; domain=.5gl1x9qc.com; HttpOnly
Last-Modified: Wed, 29 Mar 2017 18:20:04 GMT
Etag: W/"58dbfad4-1c9"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:53 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a4f63642b5-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    ce46a3c0de343339a689c89866261e07
Sha1:   15d7033005f8313d87ee7fc0c01ff04cfbc0408e
Sha256: 046a2434ac8093105cc19850e70be73d6d08b2ec52df39aa9df28e8e9503b606
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 471
Last-Modified: Sun, 14 Oct 2018 01:21:33 GMT
Etag: 5E911FA3F0AB2E44C9C4C034FC9FF70F18C81503
X-OCSP-Responder-ID: rmdccaocsp24
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
Cache-Control: public, no-transform, must-revalidate, max-age=320727
Expires: Sun, 21 Oct 2018 01:14:20 GMT
Date: Wed, 17 Oct 2018 08:08:53 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ee4cbc28a1495826fa71ae4ccbbf9862
Sha1:   5e911fa3f0ab2e44c9c4c034fc9ff70f18c81503
Sha256: 928f4a7dbcee4d73b7d15eb621806ce80e33b5dbcc561609928ece97c70648a3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 424B413FCAD941C040D692B87CDE897F59DB16AA
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=133691
Expires: Thu, 18 Oct 2018 21:17:04 GMT
Date: Wed, 17 Oct 2018 08:08:53 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    83c72f9ab989986ef6becba8e433c7ac
Sha1:   424b413fcad941c040d692b87cde897f59db16aa
Sha256: 88fa386cbec8abadec656da6ae494781daa1a1c8d14dc768376fc7ede025432e
                                        
                                            GET /images/big/2015/02/02/54cfe345660e6.jpg HTTP/1.1 
Host: s11.imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Content-Length: 822520
Connection: keep-alive
Last-Modified: Mon, 02 Feb 2015 20:53:40 GMT
Etag: "54cfe3d4-c8cf8"
Expires: Sat, 14 Oct 2028 08:08:53 GMT
Cache-Control: public, max-age=315360000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a4f09c429d-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   822520
Md5:    6ca15765bde1d5684ca2703125c15ccc
Sha1:   f054a1d6c3077862e50c8c6a7e9cc31564ff90ed
Sha256: ad2e1fb40f1ab67401fa399d10359eb256e1c496e15f84248e852b50cbfaab4c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: E8581583C2803974EDDB983E5584CDB37B4F9E14
X-OCSP-Responder-ID: rmdccaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=133735
Expires: Thu, 18 Oct 2018 21:17:48 GMT
Date: Wed, 17 Oct 2018 08:08:53 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5e712a8f20f0ae131a32a41f82c55b67
Sha1:   e8581583c2803974eddb983e5584cdb37b4f9e14
Sha256: 65e0f33f70b334d388d92507b68dacbf8b7390892e3cb264962501c2836b9e79
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         104.20.208.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Wed, 17 Oct 2018 08:08:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d39f8dd95a4d541b7a8087873487edc781539763733; expires=Thu, 17-Oct-19 08:08:53 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Mon, 15 Oct 2018 11:58:03 GMT
Etag: W/"5bc480cb-423b4"
Expires: Wed, 17 Oct 2018 16:08:53 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a90ef742bb-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   70162
Md5:    b6bb44f95a22a27e8b92d2ccbc591524
Sha1:   b5f4bf87301fb5291d70f392758d9c56ae374cc3
Sha256: e32b7829c99619bfa2c1de9e1ed9e9e515863b2d094e86c629c67c7350e8c96d

Alerts:
  urlquery:
    - Crypto currency mining script
                                        
                                            GET /css/img/bg2.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/styles.css
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Content-Length: 7637
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:23 GMT
Etag: "1dd5-4de5e767c6ac0"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147a991c64255-OSL


--- Additional Info ---
Magic:  PNG image, 2247 x 190, 8-bit colormap, non-interlaced
Size:   7637
Md5:    8388f9f5ebca3dd2c58b44f190687497
Sha1:   44678688ae09eb0b35eaef09f83771165d1104cb
Sha256: de57f5342874c0d1e33353e7e42b61134d2aab7cb52d1929e115b44049d5f525
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734012 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:54 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CK%0A%800%0C%05%EF%92%13X%FB59%8C%94R5%A0Rm%5D%88%F4%EE%8An%DD%0C%CC%3Cx%1E%05%5E%8C%ADv%D2%B8%86%3C%2A%BC%F2%03%98%B8d+FA%AF%16%5E%E2%ABZv%D6H%2B%D5%D3%1D%C2%ECs%F9%DD%84E%08%3E%25%5E%C7%7E%D8%E3v%C45%9C%F0%9D%09%A5%1A%A0Zo%A8%EC%24%19; expires=Thu, 18-Oct-2018 08:08:54 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   626
Md5:    f1af9e9b57e3d9dc7a1e8ca37ead5902
Sha1:   0f297a941e92654021bcb9aa14cb89e9d1166413
Sha256: 3655e6ca51078fc7ec80ecd36834bb2fcc239ff7534522a4096614d8c0b590f2
                                        
                                            GET /imgs-54cfe34566122.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b147a984464261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   393
Md5:    683d975f0afd4979f56ee8c21b4218a3
Sha1:   629952f74abdbbe8094b0640c79206544c7feb7a
Sha256: 844bce032ed8712745d47fd2ae04d63efdeeda3f9451b7249d1e200fe52216bd
                                        
                                            GET /image-54cfe34566122.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b147a99240427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /adserver.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b147a991c74255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /view.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b147a9a4204273-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /z/775519059 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         104.24.121.232
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dcee3618b4b96c63d768f5737ce5324fa1539763734; expires=Thu, 17-Oct-19 08:08:54 GMT; path=/; domain=.tweowhvrim.review; HttpOnly
Location: https://tweowhvrim.review/z/775519059
Server: cloudflare
CF-RAY: 46b147a9a145429d-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   245
Md5:    99f50241a1adc488caddb00e123fcabb
Sha1:   346852cfe4c93389e12aa00c64cd8c5233b33564
Sha256: 0afe4a5777c0cae75c630c160c29869e7c0e38014ca7073557fda8a6925b54a1
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9Cm%8CK%0A%800%0C%05%EF%92%13X%FB59%8C%94R5%A0Rm%5D%88%F4%EE%8An%DD%0C%CC%3Cx%1E%05%5E%8C%ADv%D2%B8%86%3C%2A%BC%F2%03%98%B8d+FA%AF%16%5E%E2%ABZv%D6H%2B%D5%D3%1D%C2%ECs%F9%DD%84E%08%3E%25%5E%C7%7E%D8%E3v%C45%9C%F0%9D%09%A5%1A%A0Zo%A8%EC%24%19

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734146 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9Cm%8CK%0A%800%0C%05%EF%92%13X%FB59%8C%94R5%A0Rm%5D%88%F4%EE%8An%DD%0C%CC%3Cx%1E%05%5E%8C%ADv%D2%B8%86%3C%2A%BC%F2%03%98%B8d+FA%AF%16%5E%E2%ABZv%D6H%2B%D5%D3%1D%C2%ECs%F9%DD%84E%08%3E%25%5E%C7%7E%D8%E3v%C45%9C%F0%9D%09%A5%1A%A0Zo%A8%EC%24%19

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:54 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4; expires=Thu, 18-Oct-2018 08:08:54 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   847
Md5:    2282d3a1aac9c3d9082197ca6026ac9a
Sha1:   e0f031943132f6f44c6e2d1c3e22071cf4d5330b
Sha256: 18e92ac273cff3251d199a802779343da515e1c6be374e01619af657c5e8b34a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 15 Oct 2018 06:17:38 GMT
Etag: 732F14FEBD09ACC614C1D08ABDC9D4FF7186BC36
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 278
Cache-Control: public, no-transform, must-revalidate, max-age=424680
Expires: Mon, 22 Oct 2018 06:06:54 GMT
Date: Wed, 17 Oct 2018 08:08:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   278
Md5:    58279d330a7756734a389b4a2cf552cd
Sha1:   732f14febd09acc614c1d08abdc9d4ff7186bc36
Sha256: 0c45ef8b0b0a8021bc28e51b81788c3c3587b61a6e6a3f4561368cb9889cf664
                                        
                                            GET /library/581670/0b23e18287f56a3fbad40450d12c0cf1ca309488.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734012
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9Cm%8CK%0A%800%0C%05%EF%92%13X%FB59%8C%94R5%A0Rm%5D%88%F4%EE%8An%DD%0C%CC%3Cx%1E%05%5E%8C%ADv%D2%B8%86%3C%2A%BC%F2%03%98%B8d+FA%AF%16%5E%E2%ABZv%D6H%2B%D5%D3%1D%C2%ECs%F9%DD%84E%08%3E%25%5E%C7%7E%D8%E3v%C45%9C%F0%9D%09%A5%1A%A0Zo%A8%EC%24%19

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753184"
Cache-Control: max-age=86400
Content-Length: 236450
Last-Modified: Fri, 05 Oct 2018 15:26:24 GMT
X-HW: 1539763734.dop008.sk1.t,1539763734.cds036.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   236450
Md5:    3d3bae169bcebefae9f037502c7165b3
Sha1:   0b23e18287f56a3fbad40450d12c0cf1ca309488
Sha256: bf7296e106c806aa980df5bc403beaf092cafb87fa9ccad757b740ff1ff126af
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9Cm%8CK%0A%800%0C%05%EF%92%13X%FB59%8C%94R5%A0Rm%5D%88%F4%EE%8An%DD%0C%CC%3Cx%1E%05%5E%8C%ADv%D2%B8%86%3C%2A%BC%F2%03%98%B8d+FA%AF%16%5E%E2%ABZv%D6H%2B%D5%D3%1D%C2%ECs%F9%DD%84E%08%3E%25%5E%C7%7E%D8%E3v%C45%9C%F0%9D%09%A5%1A%A0Zo%A8%EC%24%19

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 81BA3F7F2D06068D6A1DEE440E749D321E073BFD
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 313
Cache-Control: public, no-transform, must-revalidate, max-age=133688
Expires: Thu, 18 Oct 2018 21:17:02 GMT
Date: Wed, 17 Oct 2018 08:08:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   313
Md5:    5b1a178dc2ebf50f750216ca7402f74b
Sha1:   81ba3f7f2d06068d6a1dee440e749d321e073bfd
Sha256: ede2d28fbd261789543608426fdfb751321f4f9cbc7b951a81e7ff3a48c670d8
                                        
                                            GET /library/118525/d4e899076cb57549ea80f8e26925b147fa140cbb.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734146
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1539004788"
Cache-Control: max-age=86400
Content-Length: 68730
Last-Modified: Mon, 08 Oct 2018 13:19:48 GMT
X-HW: 1539763734.dop011.sk1.t,1539763734.cds035.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   68730
Md5:    5ad819b37bfe9b2d4bd34848a4d59cfa
Sha1:   d4e899076cb57549ea80f8e26925b147fa140cbb
Sha256: 8d9964da37049fe2ddf26a8f7962cbcae36e5d38077a70e8cce7c76ea032bfc3
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /d/a/1142.php?ext=js&_t=80396710306 HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=daedd82edc19c5ce6f7b0484b997cb68c1539763733

                                         
                                         104.16.198.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: tr_az=m%255B0%255D%3D10%26m%255B1%255D%3D1142%26d%255B0%255D%3D17%26d%255B1%255D%3D1142; expires=Fri, 19-Oct-2018 08:08:54 GMT; Max-Age=172800 tr_a=m%255B0%255D%3D10%26m%255B1%255D%3D36377%26d%255B0%255D%3D17%26d%255B1%255D%3D36377; expires=Fri, 19-Oct-2018 08:08:54 GMT; Max-Age=172800
Content-Encoding: gzip
Server: cloudflare
CF-RAY: 46b147aa86ed42b5-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   195
Md5:    72725ab7de62a3f12a94898a5e6962f5
Sha1:   97b20e2c0816ff517dd90fa4d85c3b8ab456b85a
Sha256: 0a6800132fa15717eb3989723109db4961cef383009b89115c16f374a4bb03ed
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /z/775519059 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=dcee3618b4b96c63d768f5737ce5324fa1539763734

                                         
                                         104.24.121.232
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Apr 2018 23:09:55 GMT
Etag: W/"26f0-56a4fc9445fbb"
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46b147abcac3428b-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2690
Md5:    11e8d1cb4e37f10e66c40c28833656ac
Sha1:   70f389d5ca18684e72d27a86d7e9fbbd61407053
Sha256: 66b115902ebc0a0136cd5d57816d9d7d7482d828af79d168b19ec7bdcd36149c
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734497 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:54 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DK%0A%840%10D%EF%D2%27H%D2%9D%CFt%0E%23A2%DA%E0%88c%E2B%C4%BB%8Fd%B6%AE%DD%14%BC%2A%A8%97%18%F9%1066%A0%0B%2A%26%26%3E%CA%150J-%10%85ulX%E5%93%1BZ%7Cy%87%1E%E9%EA%03%C3%94J%BD%DD%B4g%E8%D3%B2%C8%3Ct%EF5%7F%B7%3C%F7%3B%FC%CF4%91%82x6%AD%B2%14%1E%D7%1A%AF%1C%99g%B5%E7%0F%7D%F2hF; expires=Thu, 18-Oct-2018 08:08:54 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   685
Md5:    040c6e264a540a2b34c9acbc061c6ae7
Sha1:   baeec6ffca44d36638479f9784d831a1315486d4
Sha256: e6dbcd11c9dd3440e542a0938c7a244b54f57e5cd7a548bba6db41cfa623be2d
                                        
                                            GET /library/530318/a059fb6c8330f74784db9a7c5ad19ccde1f89e07.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734497
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DK%0A%840%10D%EF%D2%27H%D2%9D%CFt%0E%23A2%DA%E0%88c%E2B%C4%BB%8Fd%B6%AE%DD%14%BC%2A%A8%97%18%F9%1066%A0%0B%2A%26%26%3E%CA%150J-%10%85ulX%E5%93%1BZ%7Cy%87%1E%E9%EA%03%C3%94J%BD%DD%B4g%E8%D3%B2%C8%3Ct%EF5%7F%B7%3C%F7%3B%FC%CF4%91%82x6%AD%B2%14%1E%D7%1A%AF%1C%99g%B5%E7%0F%7D%F2hF

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1520955008"
Cache-Control: max-age=86400
Content-Length: 23106
Last-Modified: Tue, 13 Mar 2018 15:30:08 GMT
X-HW: 1539763734.dop008.sk1.t,1539763734.cds040.sk1.c


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23106
Md5:    b068b72a430d8a6518c1b8ad1bf40230
Sha1:   a059fb6c8330f74784db9a7c5ad19ccde1f89e07
Sha256: 3b0ae64bc817e6de50cf1b62811b9d347509d90da967880f8f3e3d3e73eb1639
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /templates/images/background-right.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/servegimg.png
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147ad52374255-OSL


--- Additional Info ---
                                        
                                            GET /templates/images/background-left.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/hostsgimg.png
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147ad54ac4261-OSL


--- Additional Info ---
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734597 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DK%0A%840%10D%EF%D2%27H%D2%9D%CFt%0E%23A2%DA%E0%88c%E2B%C4%BB%8Fd%B6%AE%DD%14%BC%2A%A8%97%18%F9%1066%A0%0B%2A%26%26%3E%CA%150J-%10%85ulX%E5%93%1BZ%7Cy%87%1E%E9%EA%03%C3%94J%BD%DD%B4g%E8%D3%B2%C8%3Ct%EF5%7F%B7%3C%F7%3B%FC%CF4%91%82x6%AD%B2%14%1E%D7%1A%AF%1C%99g%B5%E7%0F%7D%F2hF

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:54 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW; expires=Thu, 18-Oct-2018 08:08:54 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    5d5d2c926d05988aded021f83c251381
Sha1:   213bee51459f30e9401b91915f83cc3e2fa0716d
Sha256: bd85ab63b69602b33b3fb77f3d9d12dfdcee6eca55242dc55fa714f213facf74
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0A%80+%10E%EF2%27%D0%1C%D3%C6%C3%84%88%D5%40E%A5-%22%BA%7Ba%DB%D6m%3E%BC%FF%E1%3FO%15%9DL%95%B6%AA%B6%C2yB%3A%D3%130pN%E0%98%A4%2B%98y%8A%05%B5jL%AD%8C%C2%A7%B7%04%A3O%F9s%93%86+%F8e%E1%B9o%BB-%AE%7B%9C%C3%01%EF%99D%14%E0%AE%A2%15%1A%ED%BF%DA%EB%06%27%7DF4

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /css/smoothness/images/ui-icons_454545_256x240.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Content-Length: 4369
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:06 GMT
Etag: "1111-4de5e790c8b80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147ade2be427f-OSL


--- Additional Info ---
Magic:  PNG image, 256 x 240, 8-bit colormap, non-interlaced
Size:   4369
Md5:    119dd0c2e94ad689de873ef39fd43e6e
Sha1:   1ab19df782d0b8491fc21c1edf7b20941624dd34
Sha256: cb36e80beaf2a527d463da552a5c679a46c4ff8c881318a194bb0ccb61cb2d5c
                                        
                                            GET /css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Content-Length: 178
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:01 GMT
Etag: "b2-4de5e78c04040"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147ade2494255-OSL


--- Additional Info ---
Magic:  PNG image, 40 x 100, 8-bit/color RGBA, non-interlaced
Size:   178
Md5:    8692e6efddf882acbff144c38ea7dfdf
Sha1:   a9bb131c4acff0d07fa7b7f21bef05179c28d13b
Sha256: 39ab7ccd9f4e82579da78a9241265df288d8eb65dbbd7cf48aed2d0129887df5
                                        
                                            GET /css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Content-Length: 105
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:02 GMT
Etag: "69-4de5e78cf8280"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147ade48f4273-OSL


--- Additional Info ---
Magic:  PNG image, 1 x 400, 8-bit/color RGBA, non-interlaced
Size:   105
Md5:    e5a8f32e28fd5c27bf0fed33c8a8b9b5
Sha1:   7e5c99e9f0113ba6b63c2bb408b8347191316cda
Sha256: f0e6cd91b837d5c5644d026e5ffeccd907953317cd5c0f689901733afda260b2
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 17 Oct 2018 07:27:52 GMT
Expires: Wed, 17 Oct 2018 09:27:52 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 2462
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /swidget/servegimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         67.202.94.93
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/35.png


--- Additional Info ---
                                        
                                            GET /swidget/hostsgimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         67.202.94.93
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/47.png


--- Additional Info ---
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1124338745&utmhn=imgserve.net&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x737&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=ImgServe.net%20%7C%20Earn%20Money%20Sharing%20Images&utmhid=2139091627&utmr=-&utmp=%2Fimg-54cfe34566122.html&utmht=1539763735367&utmac=UA-40347884-1&utmcc=__utma%3D120226704.1857366926.1539763735.1539763735.1539763735.1%3B%2B__utmz%3D120226704.1539763735.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1381259038&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Wed, 17 Oct 2018 08:08:55 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /library/530318/7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734597
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:54 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705623"
Cache-Control: max-age=86400
Content-Length: 296015
Last-Modified: Tue, 19 Dec 2017 17:47:03 GMT
X-HW: 1539763734.dop011.sk1.t,1539763734.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   296015
Md5:    3ddb8167820e977615a641bc6a1eb2bd
Sha1:   7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f
Sha256: 3d5072cf06330fd3372e63fb73246718457b179b5cc2fae904f5ec09998d9c03
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /small/00/35.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:55 GMT
Content-Length: 317
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-13d"
Expires: Thu, 18 Oct 2018 08:08:55 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   317
Md5:    ee1fd188f275ce1e162764f958908a59
Sha1:   8681d446ed1c444794bb2d705447c75f84baf120
Sha256: 8a7c3dae73a45ade6baa51bd52c18480b3a27db254bb1999920b6a8e83b735b9
                                        
                                            GET /small/00/47.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:55 GMT
Content-Length: 318
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-13e"
Expires: Thu, 18 Oct 2018 08:08:55 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   318
Md5:    af7ab03ad56bc7c1b1ad8511fb5d72be
Sha1:   1ddc4eb6f8666a3ee330bd026761a7628d715a60
Sha256: 7d3f516894a57e8871a525cbc4fd7aaa6dfa418bd57a42b6575e05a2431a219b
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734192 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    72168013404cb2188932c83b5d4fa2f3
Sha1:   b7ae8eea83a2a04d60aaae9d9a964f4b8c439b00
Sha256: 8e9be1f1d6a88dec2b7e0f4b5771e77ad2bfa277bbee7049538bb1d2ced60666
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734271 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    c005904ac2cbfa4d5c56c87b88932a7c
Sha1:   b29645ac483795c5a0d066ecac4a95d784bfc221
Sha256: 592f474a2efc5aba3a6fd29f4243c3f14353e256f236d0c716d2b0fe7f968f6d
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734331 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%C5%D1%C1%0A%C20%0C%06%E0w%C9%13%A4m%D2%D4%F4a%A4%8C%AA%05%1D%D3%D6%83%8C%BD%BB%A3%5EE%F42%2F%81%3F%81%7C%90%24e%9D%8BZ%0E%CE%07%8CII%E7%BA%168%95V%21%165%B1%C7V.%B9Gv%3B%F1N%1C%AD%FD%A0pN%B5%BD%9D%19Q%18%D24%95%F1%B8%3F%DC%F2%F5%9E%C7%E1%01%AFe%86%08%21.%9DE%A6%B09k%05%3D%D9%CDY%23%8C%C6%FF%E5%C8%F8%CBo%F9%03%CB%DF%B1%CB%13%B0h%ACh; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    9507e2be8868ffafb8144aa2b712d135
Sha1:   616bf0ed2889e131de3f9eb99dfbf95588a289d9
Sha256: 6df9d1b410f9270a6ea365a0b7f48f20c19c49d15362879a34638d78ffc6fc70
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734553 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    b4e2de2dca7755d10bbbd9c74a8e4451
Sha1:   38e2cdeca379724a1a8f9888f32cf988b095dd1e
Sha256: 316d45428acce108484db91df8e17944484bff0f19e623c9430f68209737d2b3
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734697 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8FA%0A%C20%10E%EF2%27%C8%243I%9C%1CFB%89%3A%A0%A5%9A%B8%90%D2%BB%5B%E3%B6%0Bq%D1%CD%C0%FB%1F%FEc%B2%90%CC%2A%96%A3%F3%D1%A4%FC%C1%BA%1E%B8h%AB%90T0ulz%2B%1D%D9%1D%82w%C1%D1%9AG%81k%AEm%B3%C3+0%E4i%D2%F1%7C%3C%3D%CA%FDY%C6%E1%05%DF1%242%90%96%AE5Lqw%AD%0D%C6%93%DD%D0%DA%3F%B4%FC%B3%16%03%1B%F4%FB%7E%BB%BC%01%AD%29%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   685
Md5:    23aa93e043762241fa53c912a2ed0d78
Sha1:   dd6222a3c6e08ca7bbf3d9f42dd68e3725ae96f2
Sha256: c2b01b78486c271a25c8eeb1125d2ac2c2da895bf0e5b1192dcacdfece5a6c81
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734461 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8FA%0A%C20%10E%EF2%27%C8%243I%9C%1CFB%89%3A%A0%A5%9A%B8%90%D2%BB%5B%E3%B6%0Bq%D1%CD%C0%FB%1F%FEc%B2%90%CC%2A%96%A3%F3%D1%A4%FC%C1%BA%1E%B8h%AB%90T0ulz%2B%1D%D9%1D%82w%C1%D1%9AG%81k%AEm%B3%C3+0%E4i%D2%F1%7C%3C%3D%CA%FDY%C6%E1%05%DF1%242%90%96%AE5Lqw%AD%0D%C6%93%DD%D0%DA%3F%B4%FC%B3%16%03%1B%F4%FB%7E%BB%BC%01%AD%29%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   685
Md5:    23aa93e043762241fa53c912a2ed0d78
Sha1:   dd6222a3c6e08ca7bbf3d9f42dd68e3725ae96f2
Sha256: c2b01b78486c271a25c8eeb1125d2ac2c2da895bf0e5b1192dcacdfece5a6c81
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735389 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    72168013404cb2188932c83b5d4fa2f3
Sha1:   b7ae8eea83a2a04d60aaae9d9a964f4b8c439b00
Sha256: 8e9be1f1d6a88dec2b7e0f4b5771e77ad2bfa277bbee7049538bb1d2ced60666
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734366 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    c005904ac2cbfa4d5c56c87b88932a7c
Sha1:   b29645ac483795c5a0d066ecac4a95d784bfc221
Sha256: 592f474a2efc5aba3a6fd29f4243c3f14353e256f236d0c716d2b0fe7f968f6d
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734400 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    c005904ac2cbfa4d5c56c87b88932a7c
Sha1:   b29645ac483795c5a0d066ecac4a95d784bfc221
Sha256: 592f474a2efc5aba3a6fd29f4243c3f14353e256f236d0c716d2b0fe7f968f6d
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735512 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    c005904ac2cbfa4d5c56c87b88932a7c
Sha1:   b29645ac483795c5a0d066ecac4a95d784bfc221
Sha256: 592f474a2efc5aba3a6fd29f4243c3f14353e256f236d0c716d2b0fe7f968f6d
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735444 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%C5%CFA%0A%021%0C%05%D0%BB%E4%04M%9B45%3D%8C%94%A1jA%87%D1%D6%85%0Csw%87%BA%15%D1%CD%B8%09%FC%7C%C8%23IY%E7%A2%96%83%F3%C1%C4%A4%A4s%5D%07%9CJ%AB%10%8Bb%EC%B1%95K%EE%91%DDN%BC%13G%EB%3E%28%9CSmo%3B%14%85%21MS%19%8F%FB%C3-_%EFy%1C%1E%F0%3A%86D%06%E2%D2Y%C3%146g%AD%18Ovs%16%85%0D%FA%3F%7C%8B%F6%27%96%3F%B0%FC%1D%BB%3C%01%B0%C3%ACi; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   668
Md5:    a9fc0ba7fed6aac6b19015ed436cb6c9
Sha1:   3cd2d67df91db79bfad2c301f056759467ca9688
Sha256: fc4942cf0adb222190486e594c41e80205acdeb465da8133b0a91fc46e9210c4
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735478 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54cfe34566122.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%8DA%0E%C2+%10E%EF2%27%60%60%60p8%8C%21%0D%D6I%B4%A9%82%0Bczw%2Bn%BBf%F3%93%F7%7F%F2_%16%92%8F%8A%F5%D1%85hR%FEa%DD%03%AE%DA%2A%24%15L%1D%9B%DEKG%EFN%1C%1C%3B%DA%FB%28p%CB%B5%1Dn%C8%02S%5EW%5D%E6%F3%E5Y%1E%AF%B2Lo%F8%9F%21%91%81%B4u%AD%F1%14%87k-%9B%40v%B8%16%D9%1B%0Cc%B5%DB%17%AB%B7%8AW

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY; expires=Thu, 18-Oct-2018 08:08:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    b4e2de2dca7755d10bbbd9c74a8e4451
Sha1:   38e2cdeca379724a1a8f9888f32cf988b095dd1e
Sha256: 316d45428acce108484db91df8e17944484bff0f19e623c9430f68209737d2b3
                                        
                                            GET /library/581670/b2611c7de7729df502847bcf8be26cbae9730c29.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734331
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%C5%D1%C1%0A%C20%0C%06%E0w%C9%13%A4m%D2%D4%F4a%A4%8C%AA%05%1D%D3%D6%83%8C%BD%BB%A3%5EE%F42%2F%81%3F%81%7C%90%24e%9D%8BZ%0E%CE%07%8CII%E7%BA%168%95V%21%165%B1%C7V.%B9Gv%3B%F1N%1C%AD%FD%A0pN%B5%BD%9D%19Q%18%D24%95%F1%B8%3F%DC%F2%F5%9E%C7%E1%01%AFe%86%08%21.%9DE%A6%B09k%05%3D%D9%CDY%23%8C%C6%FF%E5%C8%F8%CBo%F9%03%CB%DF%B1%CB%13%B0h%ACh

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:55 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1539003620"
Cache-Control: max-age=86400
Content-Length: 283264
Last-Modified: Mon, 08 Oct 2018 13:00:20 GMT
X-HW: 1539763735.dop011.sk1.t,1539763735.cds039.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   283264
Md5:    21097b4140bd1f4391ca2f76ef40452d
Sha1:   b2611c7de7729df502847bcf8be26cbae9730c29
Sha256: aebab23450911e0e0b1640fb4cce8d1a97b4e5ad544863df51559e6c398d6c41
                                        
                                            GET /library/546258/8fc34ca2ff7cbabf952762120722529c02145e52.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763735444
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%C5%CFA%0A%021%0C%05%D0%BB%E4%04M%9B45%3D%8C%94%A1jA%87%D1%D6%85%0Csw%87%BA%15%D1%CD%B8%09%FC%7C%C8%23IY%E7%A2%96%83%F3%C1%C4%A4%A4s%5D%07%9CJ%AB%10%8Bb%EC%B1%95K%EE%91%DDN%BC%13G%EB%3E%28%9CSmo%3B%14%85%21MS%19%8F%FB%C3-_%EFy%1C%1E%F0%3A%86D%06%E2%D2Y%C3%146g%AD%18Ovs%16%85%0D%FA%3F%7C%8B%F6%27%96%3F%B0%FC%1D%BB%3C%01%B0%C3%ACi

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:55 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1521013017"
Cache-Control: max-age=86400
Content-Length: 70715
Last-Modified: Wed, 14 Mar 2018 07:36:57 GMT
X-HW: 1539763735.dop010.sk1.t,1539763735.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   70715
Md5:    3d30f9f55cfb7f5235fccb8f96e7f457
Sha1:   8fc34ca2ff7cbabf952762120722529c02145e52
Sha256: 0a066fc2d9726bc00e2c43d6211f9fb5a52e60c927ed46c00d24d1afc694c182
                                        
                                            GET /library/530318/3205d638d43d508b2c7b8af14ac66485a51374e9.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734553
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:55 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705627"
Cache-Control: max-age=86400
Content-Length: 478744
Last-Modified: Tue, 19 Dec 2017 17:47:07 GMT
X-HW: 1539763735.dop001.sk1.t,1539763735.cds049.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   478744
Md5:    c90eb3444b30f50466b6183e5177ac56
Sha1:   3205d638d43d508b2c7b8af14ac66485a51374e9
Sha256: a375b1a82e66c73244b5e8d5fd1fd77ded12de71eff98fdb766305606707684c
                                        
                                            GET /library/530318/b1b992e28cb2dd59c8af9c880871e5478002ac0e.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54cfe34566122.html&dt=1539763734192
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee160acda0.396579502424590790%22%3B%7D; impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134m%D2%D6%F4a%A4%8C%AA%01%1D%D3%D6%83%8C%BD%BB%B3%5Ew%10%0F%BB%04%FE%04%F2e%21%99U%2CG%E7%A3I%F9%93u%1Dp%D1V%21%A9%60%EA%D9%F4Vz%B2%3B%04%EF%82%A3u%1F%05%AE%B9%B6%CD%1B%06%81%21O%93%8E%E7%E3%E9Q%EE%CF2%0E%2F%F8%3EC%22%03i%E9%ACa%8A%BB%B36%18Ovw%16%03%1B%F4%1B%AC%FD%83%E5%DF%D8%E5%0D%AC%3B%8AY

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:55 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705625"
Cache-Control: max-age=86400
Content-Length: 326567
Last-Modified: Tue, 19 Dec 2017 17:47:05 GMT
X-HW: 1539763735.dop008.sk1.t,1539763735.cds003.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   326567
Md5:    9b7fe1be99cb649d0b893c86ff9ea496
Sha1:   b1b992e28cb2dd59c8af9c880871e5478002ac0e
Sha256: a9064aa832aad0685a0081bc8b6af0e7b188f7a360d9cf0c5114837e5b80b062
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=de2b34afd40d1d8eb422dd937998f957c1539763732; PHPSESSID=2066634be7550ae1eb5585fecac6d1af; viewer=2e5eb7609032d6eb4392da049471b5c4; viewerid=54cfe34566122; imagen3=1; __utma=120226704.1857366926.1539763735.1539763735.1539763735.1; __utmb=120226704.1.10.1539763735; __utmc=120226704; __utmz=120226704.1539763735.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 17 Oct 2018 08:08:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:42:49 GMT
Etag: W/"51ae9799-47c"
CF-Cache-Status: HIT
Expires: Wed, 24 Oct 2018 08:08:56 GMT
Cache-Control: public, max-age=604800
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147b9d40f4255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   921
Md5:    06ee4e4a98828888549e3ed7693dd78c
Sha1:   ef954a19b195cce9f07d6ef1efb08e295aa81baf
Sha256: 281e819159c678c2a170900b0d6d584fab10d46613c3567dd8b5c31ea93b8eb6
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html

                                         
                                         104.24.124.110
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 08:08:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dc39b2f1b619bdc7388e9555777996e311539763736; expires=Thu, 17-Oct-19 08:08:56 GMT; path=/; domain=.popmyads.com; HttpOnly
Location: https://popmyads.com/x/pma
Server: cloudflare
CF-RAY: 46b147b9a2f6426d-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   234
Md5:    f93c41ecf56596dfaff243d71b6315ce
Sha1:   348380cff5f286fd99bf74d71f37bcb0fbf3e95f
Sha256: ab246188c1c38fdd6b1b5e721ef8d14caa305028bc6b79fe314e316d6407323d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 280
Last-Modified: Wed, 17 Oct 2018 00:33:15 GMT
Etag: 606784539D1DA9E4E64876580B05AB24DDBF618C
X-OCSP-Responder-ID: rmdccaocsp28
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
Cache-Control: public, no-transform, must-revalidate, max-age=577055
Expires: Wed, 24 Oct 2018 00:26:31 GMT
Date: Wed, 17 Oct 2018 08:08:56 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   280
Md5:    77de95a16ac267190c7630906eb877fa
Sha1:   606784539d1da9e4e64876580b05ab24ddbf618c
Sha256: aa00a3245795f4401006380e0f696da104cfa723068e808d467ab61f39969a88
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54cfe34566122.html
Cookie: __cfduid=dc39b2f1b619bdc7388e9555777996e311539763736

                                         
                                         104.24.124.110
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.1.16
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46b147baad164255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26897
Md5:    74df32e7c9729cc21ddb00e044c8a808
Sha1:   919daf6d75fd32b4ca59cc29a331cb0078373bce
Sha256: 2e99678de740ec7d0b2f6080245ecc6b0a764a463dd1e858ef1d95b6892ff84a