Overview

URL technoanswers.blogspot.in
IP216.58.207.225
ASNAS15169 Google Inc.
Location United States
Report completed2018-10-22 19:06:04 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.58.207.225

Date UQ / IDS / BL URL IP
2018-11-14 11:11:09 +0100
0 - 0 - 0 https://alliobzor.blogspot.com/2018/11/blog-p (...) 216.58.207.225
2018-11-14 08:04:26 +0100
0 - 0 - 0 https://kingstoneap.blogspot.com/2018/11/amer (...) 216.58.207.225
2018-11-14 01:26:13 +0100
0 - 0 - 3 adarshbateja.blogspot.in/2014/06/kris-gethin- (...) 216.58.207.225
2018-11-14 01:26:03 +0100
0 - 0 - 2 adarshbateja.blogspot.com/2014/06/kris-gethin (...) 216.58.207.225
2018-11-14 01:21:19 +0100
0 - 0 - 4 allcomics4free.blogspot.hk/search/label/naruto 216.58.207.225
2018-11-14 01:21:15 +0100
0 - 0 - 2 aflam-uk.blogspot.com/2015/03/egamer.html 216.58.207.225
2018-11-14 01:20:56 +0100
0 - 0 - 3 allsexyinbox.blogspot.kr/2012/11/x-art-silvie (...) 216.58.207.225
2018-11-14 01:20:48 +0100
0 - 0 - 3 allcomics4free.blogspot.com/search/label/naruto 216.58.207.225
2018-11-14 01:16:16 +0100
0 - 0 - 1 carsgirlssexy.blogspot.com/2010/01/pastel-ico (...) 216.58.207.225
2018-11-14 01:12:07 +0100
0 - 0 - 3 curiositionline.blogspot.mx/search/label/v%C3 (...) 216.58.207.225

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2018-11-14 12:54:09 +0100
0 - 0 - 3 bradcroftsanantonio.blogspot.com/search/label (...) 216.58.207.193
2018-11-14 12:54:08 +0100
0 - 1 - 2 blogdeizak84.blogspot.com/2011_02_01_archive.html 216.58.207.193
2018-11-14 12:53:28 +0100
0 - 0 - 2 fiberhaber.blogspot.com/2012/02/o-incil-sahte (...) 216.58.207.193
2018-11-14 12:53:27 +0100
0 - 0 - 1 cakomp.blogspot.com/2015/08/cara-memperbaiki- (...) 216.58.207.193
2018-11-14 12:53:15 +0100
0 - 0 - 1 camnangvang.blogspot.com/feeds/posts/default/ (...) 216.58.207.193
2018-11-14 12:52:34 +0100
0 - 0 - 2 bestwebtips.blogspot.com/2011/09/create-one-c (...) 216.58.207.193
2018-11-14 12:51:51 +0100
0 - 2 - 2 caracararido.blogspot.com/2016/03 216.58.207.193
2018-11-14 12:49:31 +0100
0 - 0 - 8 c-uni.blogspot.com.tr/2013/01/ucgensel-saylar (...) 216.58.207.193
2018-11-14 12:49:22 +0100
0 - 1 - 2 c-bloger.blogspot.com/2012/09/harry-potter-ta (...) 216.58.207.193
2018-11-14 12:49:21 +0100
0 - 2 - 2 c-bloger.blogspot.com/2014/01 216.58.207.193

Last 1 reports on domain: technoanswers.blogspot.in

Date UQ / IDS / BL URL IP
2018-10-23 18:11:24 +0200
0 - 0 - 0 technoanswers.blogspot.in 172.217.21.129


JavaScript

Executed Scripts (88)


Executed Evals (82)

#1 JavaScript::Eval (size: 3167, repeated: 1) - SHA256: e7fd276f8303a80c8d50e0482972cb726849cc713c6268bda61c290c450355a6

                                        (function() {
    var U = N("pid");
    try {
        if (U && U == 3005758) {
            _gaq.push(["_trackEvent", "infolinks-script", "start.running.infolinks.main.js", "infolinks-script", 1])
        }
    } catch (K) {
        console.log(K.message)
    }
    try {
        var Z = document.createElement("script");
        Z.src = "https://router.infolinks.com/usync/manage";
        var J = document.getElementsByTagName("head");
        if (J && J.length) {
            J[0].appendChild(Z)
        } else {
            document.body.appendChild(Z)
        }
    } catch (K) {
        console.log(K.message)
    }
    var P = window;
    try {
        if (window.top && window.top.location && window.top.document && window.top.document.body && window.self !== window.top) {
            P = window.top
        }
    } catch (g) {
        console.log("infolinks is embedded in an unfriendly IFRAME which is not supported.")
    }
    var B = window.location.href;
    var S = B.substr(0, B.indexOf("://") + 3);
    var c = navigator.userAgent.toLowerCase(),
        X = function(l) {
            for (var m = 0, e = l.length; m < e; m++) {
                if (c.indexOf(l[m]) != -1) {
                    return true
                }
            }
            return false
        },
        D = X(["mobi", "iphone", "ipad", "android", "windows phone", "opera mini", "ucweb"]) ? "mobile" : "",
        V = "ice" + D + ".js",
        H = window["infolinks_white_label"];

    function N(e) {
        return window[H + "_" + e] || window["infolinks_" + e] || window["infolink_" + e] || null
    }

    function L(o) {
        var n = o.split(/[&]/);
        for (var m = 0; m < n.length; m++) {
            var e = n[m].split("=");
            if (!e || e.length != 2) {
                continue
            }
            var l = decodeURIComponent(e[0]);
            var p = decodeURIComponent(e[1]);
            window["infolinks_" + l] = p
        }
    }
    var h = window["$iceboot"] = {};
    window["INFOLINKS"] = {
        _boot: h
    };
    var O = h.versions = {
        "1624.030-2.024": 50,
        "1628.003-2.024.ab.1624.029-2.024": 50
    };
    var A = h.siteVersions = {
        "366.01.01": ["infolinks.com"]
    };
    var C = 0,
        M, G, Q, T = location.hostname;
    M = location.search.match(/[\?&]il\.sv=([^&]+)/);
    if (M) {
        h.version = M[1]
    } else {
        for (G in O) {
            if (O.hasOwnProperty(G)) {
                Q = O[G];
                O[G] = {
                    weight: Q,
                    from: C,
                    to: C + Q
                };
                C += Q
            }
        }
        h.rand = Math.ceil((Math.random() * C));
        for (G in O) {
            if (O.hasOwnProperty(G)) {
                if (h.rand > O[G].from && h.rand <= O[G].to) {
                    h.version = G;
                    break
                }
            }
        }
    }
    var R = [];
    for (G in A) {
        if (A.hasOwnProperty(G)) {
            for (b = 0, F = A[G].length; b < F; b++) {
                if (T.indexOf(A[G][b]) > -1) {
                    R.push(G);
                    break
                }
            }
        }
    }
    if (R.length) {
        h.version = R[Math.floor(Math.random() * R.length)]
    }
    var k = ["/", h.version, "/", V].join("");
    var d = N("resources");
    M = location.search.match(/[\?&]il\.su=([^&]+)/);
    if (M) {
        h.url = M[1] + k
    } else {
        if (d) {
            h.url = d + k
        } else {
            var W = document.getElementsByTagName("script"),
                I, b, F;
            var Y = /\/infolinks_main\.js(\?.*)?$/;
            for (b = 0, F = W.length; b < F; b++) {
                I = W[b].src;
                if (I && I.match(Y) != null) {
                    h.url = I.replace(Y, k);
                    try {
                        var E = W[b].src.substr(W[b].src.indexOf("?") + 1, W[b].src.length);
                        L(E)
                    } catch (f) {}
                    break
                }
            }
            if (!h.url) {
                h.url = "https://resources.infolinks.com/js" + k
            }
        }
    }

    function a() {
        var e = h.url.substr(0, h.url.indexOf("/js/"));
        if (e && e != "undefined") {
            var i = document.createElement("iframe");
            i.width = "1px";
            i.height = "1px";
            i.style.display = "none";
            i.src = e + "/static/an/usersyncup-an.html";
            if (document.body) {
                document.body.appendChild(i)
            }
        }
    }
    h.tmr_scr = new Date().getTime();
    if (h.url) {
        var j = document.createElement("script");
        j.type = "text/javascript";
        j.charset = "UTF-8";
        j.src = h.url;
        j.async = N("async") || j.async;
        j.defer = N("ddw") || j.defer;
        var J = document.getElementsByTagName("head");
        if (J && J.length) {
            J[0].appendChild(j)
        } else {
            document.body.appendChild(j)
        }
    }
    try {
        if (U && U == 3005758) {
            _gaq.push(["_trackEvent", "infolinks-script", "end.running.infolinks.main.js", "infolinks-script", 1])
        }
    } catch (K) {
        console.log(K.message)
    }
})()
                                    

#2 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 437f4572f637129ef6f9e7875f15e50c40ccaa396af66c1b79358805705a1e77

                                        0,
function(P) {
    F(P, 1);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 14db5be552374816d30b150a7ea12fead6272dd7e6fdad213e7e2255bbd83399

                                        0,
function(P) {
    F(P, 2);
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 8ca42cf2cc113e0ca64a35dd8f1527c88b36a0cb335b6dd6f741520dbad69eb7

                                        0,
function(P) {
    F(P, 4);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 1f6e1e76f6c88b037e3c61f355802de365ec71c0f4f436e4ca30396199e99e35

                                        0,
function(P) {
    P.F(0);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 48fbc8339f359b0ed443d30883a0dd73c8222ff10c32e86933da1be160edd0f1

                                        0,
function(P) {
    P.F(3);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 3c4bf50eeb2bfcd2318c1eb9d642b1535ec86c8e08c8b94d7279e9621ef953d1

                                        0,
function(P) {
    P.F(4);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 1) - SHA256: f2c3e9e297a38de67ce34024611d1b8af46880b978040aad77c8b57c9691c8af

                                        0,
function(P) {
    P.F(7);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: ec0382c47c929e5f82acdd9719d72b44118c002d944838f73ac39549f0781324

                                        0,
function(P) {
    X(P, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 28b97ae4b91468aa57226aa5aac730e2038024cf0603dcfbd3b4c47449b31c8d

                                        0,
function(P) {
    X(P, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 2dea27eca1159e3d00b04738254e7602af8bbf9ca5648f160a0a5ea658d8b82f

                                        0,
function(P) {
    X(P, 4);
}
                                    

#12 JavaScript::Eval (size: 52, repeated: 1) - SHA256: c27ff16f2e5ece8687b11ddb3fa6c15450cc9a27500cd7d4920aeb287ba7ba54

                                        0,
function(P, t) {
    (t = P.v(P.i()), L)(P, t);
}
                                    

#13 JavaScript::Eval (size: 185, repeated: 1) - SHA256: c304426558a9fcb987af616e191b4cb7a73c4bbfbed25c75b2fe605b37ef554c

                                        0,
function(P, t) {
    (t.push(P[0] << 24 | P[1] << 16 | P[2] << 8 | P[3]), t.push(P[4] << 24 | P[5] << 16 | P[6] << 8 | P[7]), t).push(P[8] << 24 | P[9] << 16 | P[10] << 8 | P[11]);
}
                                    

#14 JavaScript::Eval (size: 95, repeated: 1) - SHA256: d889b78d6ec6165114f1337dae23ed211510006c343882582d2db576b4a1aadf

                                        0,
function(P, t) {
    P = (t = P.i(), P).v(t), P[0].removeEventListener(P[1], P[2], false);
}
                                    

#15 JavaScript::Eval (size: 83, repeated: 1) - SHA256: df7fdfb8f67c0fe5fad21652939dbbb53701cf9cf8bb9ac32d5954d6860194ff

                                        0,
function(P, t) {
    S(P, 1, 5) || (t = J(P), w(P, t.C, t.o.apply(t.I, t.L)));
}
                                    

#16 JavaScript::Eval (size: 517, repeated: 1) - SHA256: 3343f979003b76d55a0af83c1c078d33ec17bf8ce43218a0c56ceac72fc71935

                                        0,
function(P, t) {
    if (this.l) {
        return P = P ? this.l().shift() : this.U().shift(), this.l().length ||
            this.U().length || (this.U = this.l = void 0, this.V--), P;
    }
    if (!(P = this.v(238), P in this.w)) {
        throw y(this, 31), this.G;
    }
    return (w(this, 238, ((void 0 == this.b && (this.b = Q(this.w, P - 4), this.m = void 0), this).m != P >> 3 &&
        (this.m = P >> 3, t = [0, 0, 0, this.v(199)], this.S = K(this.b, this.m, t)), P + 1)), this).w[P] ^ this.S[P % 8];
}
                                    

#17 JavaScript::Eval (size: 125, repeated: 1) - SHA256: 5da36cef0e793f48b5aeb9fe52251ecbd478eb53c2a00a6f1ee05f6c5f7b478f

                                        0,
function(P, t) {
    if (void 0 === (t = this.X[P], t)) {
        throw y(this, 30, 0, P), this.G;
    }
    return t();
}
                                    

#18 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 16d80adfd21c7fb899cb3e8a48b0117e468755c98189b10f6758771094e23eaa

                                        0,
function(P, t, h) {
    0 != (h = (t = P.i(), P.i()), P.v(t)) && w(P, 238, P.v(h));
}
                                    

#19 JavaScript::Eval (size: 123, repeated: 1) - SHA256: fa28ba0d43a6c221b3b68aaa75908f5dd95cc155952dd4a0c128ea3d6363c54c

                                        0,
function(P, t, h) {
    S(P, 1, 5) ||
        (t = P.i(), h = P.i(), w(P, h, function(P) {
            return eval(P);
        }(P.v(t))));
}
                                    

#20 JavaScript::Eval (size: 79, repeated: 1) - SHA256: fdc4175f313beb14105c30d71fd96619581c3aeb4692b6ec2e3c7e0c2e26abd9

                                        0,
function(P, t, h) {
    h = (t = P.i(), P).i(), t = P.v(t), w(P, h, O(t));
}
                                    

#21 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 9d86889b827a5c7ad4ff7d64895b702ab2460c704037116b5c0c263ec8d8c284

                                        0,
function(P, t, h) {
    h = (t = P.i(), P.i()), w(P, h, P.v(h) % P.v(t));
}
                                    

#22 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 07c99753ee9e5c2fb591cb61a3b6d17c07bec9fe57b0316adfa23029190f1d45

                                        0,
function(P, t, h) {
    h = (t = P.i(), P.i()), w(P, h, P.v(h) * P.v(t));
}
                                    

#23 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 45c57a21a26602a854e8e04f76f9b2d1a5a076d55e2e589fa380b63fa855d700

                                        0,
function(P, t, h) {
    h = (t = P.i(), P.i()), w(P, h, P.v(h) + P.v(t));
}
                                    

#24 JavaScript::Eval (size: 78, repeated: 1) - SHA256: bbdf0f8f5ed497a798d822a70f15230934dc69c55d71f55ae36fa11471b18ed5

                                        0,
function(P, t, h) {
    h = (t = P.i(), P.i()), w(P, h, P.v(h) - P.v(t));
}
                                    

#25 JavaScript::Eval (size: 244, repeated: 1) - SHA256: 91cf9c29722a8ba1cb3da0ba5513bf2f14321383465a451bf70884388bde6938

                                        0,
function(P, t, h) {
    if (3 == P.length) {
        for (h = 0; 3 > h; h++) {
            t[h] += P[h];
        }
        for (P = [13, 8, 13, 12, 16, 5, 3, 10, (h = 0, 15)]; 9 > h; h++) {
            t[3](t, h % 3, P[h]);
        }
    }
}
                                    

#26 JavaScript::Eval (size: 133, repeated: 1) - SHA256: ce3300edf9adec70f5771dea3a6a7e8b9de0afa4644fc69af1956003a5811df7

                                        0,
function(P, t, h) {
    return t = function() {
        return h();
    }, h = function() {
        return P;
    }, t[this.N] = function(r) {
        P = r;
    }, t;
}
                                    

#27 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 9a0ae5596a3dfd056fe247de5ee45dad2118e531a5404b1e94b1dcb37ef5b3f9

                                        0,
function(P, t, h) {
    w((h = (t = P.i(), P.i()), P), h, "" + P.v(t));
}
                                    

#28 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 94f0cc7e049fc61c4166c7a690af70b4f59a2556575689ce43dadb537ae7d2fe

                                        0,
function(P, t, h) {
    w(P, (t = (t = P.i(), h = P.i(), P).X[t] && P.v(t), h), t);
}
                                    

#29 JavaScript::Eval (size: 294, repeated: 1) - SHA256: 6d899b2f6abb41bcb0448064a86365e720e367924eae9bded4183bc8a70bff2d

                                        0,
function(P, t, h, W, R, e, G) {
    if (W = (t = P.i(), h = N(P), ""), P.X[115]) {
        for (R = P.v(115), e = 0, G = R.length; h--;) {
            e = (e + N(P)) % G, W += m[R[e]];
        }
    } else {
        for (; h--;) {
            W += m[P.i()];
        }
    }
    w(P, t, W);
}
                                    

#30 JavaScript::Eval (size: 93, repeated: 1) - SHA256: ce4f680cc290c17db6372c1f04edd64c3a5d5240f9af2a305c26800596a2583e

                                        0,
function(P, t, h, m) {
    (m = (t = P.i(), h = P.i(), P).i(), P).v(t)[P.v(h)] = P.v(m);
}
                                    

#31 JavaScript::Eval (size: 111, repeated: 1) - SHA256: 39255785df9635b4d48c98b88fcbc8f20bd858c810d8819d3d99af929c5d793b

                                        0,
function(P, t, h, m) {
    (t = (m = (h = (t = P.i(), P.i()), P).i(), h = P.v(h), P).v(t), w)(P, m, t[h]);
}
                                    

#32 JavaScript::Eval (size: 192, repeated: 1) - SHA256: 02a0868cc4e76115b9b785889e9a06892df1af50efc9384b3bd235fdfad9482e

                                        0,
function(P, t, h, m) {
    M(this, (h = (t = P & 4, P &= 3, h = this.i(), m = this.i(), this.v(h)), t && (h = d(("" + h).replace(/\r\n/g, "\n"))), P && M(this, m, I(h.length, 2)), m), h);
}
                                    

#33 JavaScript::Eval (size: 155, repeated: 1) - SHA256: 5389ee72717fdab924d89f14d2bfdde66c26d61d32bdd85eb8e8e75ac38df572

                                        0,
function(P, t, h, m) {
    for (; h--;) {
        238 != h &&
            144 != h && t.X[h] && (t.X[h] = t[m](t[P](h), this));
    }
    t[P] = this;
}
                                    

#34 JavaScript::Eval (size: 245, repeated: 1) - SHA256: c79b9b72333e5e6d9a91384e72540c8d4b6a7a6173faaaa51087cb2e318fc07e

                                        0,
function(P, t, h, m) {
    if ((t = P.K.pop())) {
        for (h = P.i(); 0 < h; h--) {
            m = P.i(), t[m] = P.X[m];
        }
        (t[104] = P.X[104], t)[38] = P.X[38], P.X = t;
    } else {
        w(P, 238, P.w.length);
    }
}
                                    

#35 JavaScript::Eval (size: 170, repeated: 1) - SHA256: ac3bc8add63dcb9f2a1ce7f7552fd6ea87a683bf055558c3d3152d433ac5e111

                                        0,
function(P, t, h, m) {
    try {
        m = P[(t + 2) % 3], P[t] = P[t] - P[(t + 1) % 3] - m ^ (1 == t ? m << h : m >>> h);
    } catch (W) {
        throw W;
    }
}
                                    

#36 JavaScript::Eval (size: 103, repeated: 1) - SHA256: 2367f00d18e9d5a7050fe0840843273277f3a041cab2085e36b75591082ae48d

                                        0,
function(P, t, h, m) {
    w((m = (h = (t = P.i(), P.i()), P).i(), P), m, (P.v(t) in P.v(h)) + 0);
}
                                    

#37 JavaScript::Eval (size: 96, repeated: 1) - SHA256: 04bd6e53567806ac0116c2deccec008c24bfe703a4a29dbbcd3ca7d2d5d5a1f4

                                        0,
function(P, t, h, m) {
    w((m = (h = (t = P.i(), P.i()), P).i(), P), m, P.v(t) | P.v(h));
}
                                    

#38 JavaScript::Eval (size: 97, repeated: 1) - SHA256: f342ba5a5e346f1dcecd311ba3b32fcc8ce0752192dd6669e432fee83ac7d831

                                        0,
function(P, t, h, m) {
    w((m = (h = (t = P.i(), P.i()), P).i(), P), m, P.v(t) || P.v(h));
}
                                    

#39 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 7fe0f3ddb55ed3ace560fb3a325c060649d6dfd6b9953732002a1851834221f4

                                        0,
function(P, t, h, m) {
    w((m = (t = P.i(), h = P.i(), P.i()), P), m, P.v(t) << h);
}
                                    

#40 JavaScript::Eval (size: 90, repeated: 1) - SHA256: b09f38a5a7c45b976eaab30bfa1c2cc853c5c9c7e3563220a1fb60c3cef4fedc

                                        0,
function(P, t, h, m) {
    w((m = (t = P.i(), h = P.i(), P.i()), P), m, P.v(t) >> h);
}
                                    

#41 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 86e8a3ee619643fd88cb2b67f9d9420f0584fccce8a1c1499cb6b6b4e7c741be

                                        0,
function(P, t, h, m) {
    w(P, (m = (h = (t = P.i(), P).i(), P).i(), t = P.v(t) == P.v(h), m), +t);
}
                                    

#42 JavaScript::Eval (size: 105, repeated: 1) - SHA256: 44a0db6a8a5f522a43507fc3a977d6e8d95995f0d28a492c42ded4e0384559de

                                        0,
function(P, t, h, m) {
    w(P, (m = (h = (t = P.i(), P).i(), P).i(), t = P.v(t) > P.v(h), m), +t);
}
                                    

#43 JavaScript::Eval (size: 138, repeated: 1) - SHA256: e7a68ee8d3c08864bee3407a5e81cd2e96d4865db7cea982ac4bc7b082c51a79

                                        0,
function(P, t, h, m, W) {
    for (W = (h = (t = P.i(), N)(P), m = [], 0); W < h; W++) {
        m.push(P.i());
    }
    w(P, t, m);
}
                                    

#44 JavaScript::Eval (size: 221, repeated: 1) - SHA256: 08b8af2d24e299e2a291b226e009b3a8656ef3e2e24da76c82cbfafcee5b8fdd

                                        0,
function(P, t, h, m, W) {
    h = (t = (m = (t = P.i(), h = P.i(), P).i(), P).v(t), W = P.v(P.i()), P).v(h), m = P.v(m), 0 !== t &&
        (m = l(P, m, W, 1, t, h), t.addEventListener(h, m, V), w(P, 78, [t, h, m]));
}
                                    

#45 JavaScript::Eval (size: 130, repeated: 1) - SHA256: 99c2e6d3a802ade9082c537568299c68411e187508fa3427540d46fb4d6e50d6

                                        0,
function(P, t, h, m, W) {
    w(P, (h = (m = (t = P.i(), h = P.i(), P).v(P.i()), W = P.v(P.i()), P.v(h)), t), l(P, h, m, W));
}
                                    

#46 JavaScript::Eval (size: 405, repeated: 1) - SHA256: a0138cf928911605bc4054589419670fe5c5333b935a0e8d0be53e0180a58256

                                        0,
function(P, t, h, m, W, e) {
    if (!S(P, 1, 255)) {
        if ("object" == (P = (m = (h = (t = (W = (t = P.i(), h = P.i(), m = P.i(), P.i()), P).v(t), P.v(h)), P.v(m)), P.v(W)), O)(t)) {
            for (e in W = [], t) {
                W.push(e);
            }
            t = W;
        }
        for (W = (e = t.length, 0); W < e; W += m) {
            h(t.slice(W, W + m), P);
        }
    }
}
                                    

#47 JavaScript::Eval (size: 220, repeated: 1) - SHA256: b8e32e2bf56c238ba76457761f101c68e62e636d155b39952c1abe200f7dcb98

                                        0,
function(P, t, h, m, W, e) {
    return P = (((e = (h = (m = function() {
        return m[h.B + (W[h.h] === t) - !e[h.h]];
    }, W = function() {
        return m();
    }, this), h.s), W)[h.N] = function(P) {
        m[h.H] = P;
    }, W)[h.N](P), W);
}
                                    

#48 JavaScript::Eval (size: 339, repeated: 1) - SHA256: a6a8383885765ee5db47f43d0b93d345fb0f405c29518610b05b91455285d4fa

                                        0,
function(P, t, h, m, W, e, G) {
    S(P, 1, 5) ||
        (t = J(P), W = t.o, h = t.L, m = t.I, G = h.length, 0 == G ? (e = new(m[W])) : 1 == G ? (e = new(m[W])(h[0])) : 2 == G ? (e = new(m[W])(h[0], h[1])) : 3 == G ? (e = new(m[W])(h[0], h[1], h[2])) : 4 == G ? (e = new(m[W])(h[0], h[1], h[2], h[3])) : y(P, 22), w(P, t.C, e));
}
                                    

#49 JavaScript::Eval (size: 782, repeated: 1) - SHA256: ec2ab75f07af2eb5766d8cf789b5982a2e6cac50c773afb5dfc6b73604532681

                                        0,
function(P, t, h, m, W, e, G, T, C, H, E, n, u) {
    for (H = (G = (e = (m = h = (t = P.i(), 0), W = function(t, r) {
            for (; m < t;) {
                h |= P.i() << m, m += 8;
            }
            return r = h & (1 << t) - (m -= t, 1), h >>= t, r;
        }, W(3)) + 1, W(5)), T = [], C = 0); H < G; H++) {
        E = W(1), T.push(E), C += E ? 0 : 1;
    }
    for (C = (n = [], (C - 1).toString(2).length), H = 0; H < G; H++) {
        T[H] || (n[H] = W(C));
    }
    for (H = 0; H < G; H++) {
        T[H] && (n[H] = P.i());
    }
    for (H = (u = [], e); H--;) {
        u.push(P.v(P.i()));
    }
    w(P, t, function(P, t, h, m, r) {
        for (t = (m = 0, h = (P.V++, []), []); m < G; m++) {
            if (r = n[m], !T[m]) {
                for (; r >= t.length;) {
                    t.push(P.i());
                }
                r = t[r];
            }
            h.push(r);
        }
        P.l = P.O(u.slice(), P.i), P.U = P.O(h, P.i);
    });
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 1) - SHA256: f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9

                                        F
                                    

#52 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 5907fae07c4eb0e1a337638078cc1e0bbb8d65d89b03be3dc5c8e153da5df5ae

                                        F = function(P, t, h, m) {
    (m = (h = P.i(), P).i(), M)(P, m, I(P.v(h), t));
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

                                        J
                                    

#54 JavaScript::Eval (size: 267, repeated: 1) - SHA256: 9b910cf73400a88fc719d6736d9a94705f964b4734eea43c8d93b4860765d378

                                        J = function(P, t, h, m, W, r) {
    for (r = (m = (((h = (t = {}, P).i(), t).C = P.i(), t).L = [], P).i() - 1, W = P.i(), 0); r < m; r++) {
        t.L.push(P.i());
    }
    for (t.o = P.v(h), t.I = P.v(W); m--;) {
        t.L[m] = P.v(t.L[m]);
    }
    return t;
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#56 JavaScript::Eval (size: 366, repeated: 1) - SHA256: bdd002d8f75e70814356f485ba4d33cec4ef6d6a8eb64e3d3a0585f48ffed0e6

                                        K = function(P, t, h, m) {
    try {
        for (m = 0; 79669387488 != m;) {
            P += (t << 4 ^ t >>> 5) + t ^ m + h[m & 3], m += 2489668359, t += (P << 4 ^ P >>> 5) + P ^ m + h[m >>> 11 & 3];
        }
        return [P >>> 24, P >> 16 & 255, P >> 8 & 255, P & 255, t >>> 24, t >> 16 & 255, t >> 8 & 255, t & 255];
    } catch (W) {
        throw W;
    }
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#58 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 279e70bafdc6123c25b9b631f25dff0ea214eeee325a290c65d77a46cf83de01

                                        L = function(P, t) {
    w(P, ((P.K.push(P.X.slice()), P).X[238] = void 0, 238), t);
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1

                                        M
                                    

#60 JavaScript::Eval (size: 401, repeated: 1) - SHA256: 7abba4ee3b856acd03b9cf32fdfd7777252b8e0eb2cb19c8f7d01904c8eb0d1d

                                        M = function(P, t, h, m, W, r) {
    for (163 == (W = P.v(t), t) ? (t = function(P, t, h, m) {
            if ((h = (t = W.length, t - 4) >> 3, W.j) != h) {
                m = [0, (W.j = h, h = (h << 3) - 4, 0), 0, r];
                try {
                    W.f = K(Q(W, h), Q(W, h + 4), m);
                } catch (e) {
                    throw e;
                }
            }
            W.push(W.f[t & 7] ^ P);
        }, r = P.v(105)) : (t = function(P) {
            W.push(P);
        }), m && t(m & 255), m = 0, P = h.length; m < P; m++) {
        t(h[m]);
    }
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b

                                        N
                                    

#62 JavaScript::Eval (size: 87, repeated: 1) - SHA256: e2bbd76d54ffe9352fd36423770c777d15c15f69a8f22e9905c4939e99a82dfe

                                        N = function(P, t) {
    return (t = P.i(), t) & 128 && (t = t & 127 | P.i() << 7), t;
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#64 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 992b7b2aa22411f08c9ce3a57d248e87b1eda58979a0d5937727930333a9e866

                                        Q = function(P, t) {
    return P[t] << 24 | P[t + 1] << 16 | P[t + 2] << 8 | P[t + 3];
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#66 JavaScript::Eval (size: 120, repeated: 1) - SHA256: 04ae6094fbb47cce6053299d66c55c2239d63471e5fef16bf79d6f5daf0ab079

                                        X = function(P, t, h, m) {
    for (m = (h = P.i(), 0); 0 < t; t--) {
        m = m << 8 | P.i();
    }
    w(P, h, m);
}
                                    

#67 JavaScript::Eval (size: 2, repeated: 11) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#68 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4

                                        d
                                    

#69 JavaScript::Eval (size: 487, repeated: 1) - SHA256: 61d4c75d877354d8de419f7f1b5306fbbf9eaa77af9731ede823e6d70b4a559d

                                        d = function(P, t, h, m, W) {
    for (m = h = (t = [], 0); m < P.length; m++) {
        W = P.charCodeAt(m), 128 > W ? (t[h++] = W) : (2048 > W ? (t[h++] = W >> 6 | 192) : (55296 == (W & 64512) &&
            m + 1 < P.length && 56320 == (P.charCodeAt(m + 1) & 64512) ? (W = 65536 + ((W & 1023) << 10) + (P.charCodeAt(++m) & 1023), t[h++] = W >> 18 | 240, t[h++] = W >> 12 & 63 | 128) : (t[h++] = W >> 12 | 224), t[h++] = W >> 6 & 63 | 128), t[h++] = W & 63 | 128);
    }
    return t;
}
                                    

#70 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#71 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#72 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#73 JavaScript::Eval (size: 635, repeated: 1) - SHA256: f8cfb203f2225deced75eb797577cda5c8c63e5f86582ad5706efeff7e877490

                                        k = function(P, t, h, m, W, r, b) {
    P.V++;
    try {
        for (h = (r = 0, m = 5001, P).w.length, W = void 0;
            (P.W || --m) && (P.l || (r = P.v(238)) < h);) {
            try {
                P.l ? (W = P.i(true)) : (w(P, 144, r), b = P.i(), W = P.v(b)), W && W.call ? W(P) : y(P, 21, 0, b), P.c = true, S(P, 0, 2);
            } catch (g) {
                g != P.G && (P.v(158) ? y(P, 22, g) : w(P, 158, g));
            }
        }
        m || y(P, 33);
    } catch (g) {
        try {
            y(P, 22, g);
        } catch (Z) {
            A(P, Z);
        }
    }
    return h = P.v(153), t && w(P, 238, t), P.V--, h;
}
                                    

#74 JavaScript::Eval (size: 1, repeated: 1) - SHA256: acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0

                                        l
                                    

#75 JavaScript::Eval (size: 272, repeated: 1) - SHA256: 6990a61ce44c2b7117f147838f62d2b441a18c2ebd70aebcb9dd1ba9aa4cfb3b

                                        l = function(P, t, h, m, W, r) {
    return function() {
        var b = m & 1,
            g = [6, t, h, void 0, W, r, arguments];
        if (m & 2) {
            var Z = U(P, true, (x(P, g), false), false);
        } else {
            b && P.Y.length ? x(P, g) : b ? (x(P, g), U(P, true, false, false)) : (Z = B(P, g));
        }
        return Z;
    };
}
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080

                                        v
                                    

#77 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 9cf029496b1175a53d97dfc2d493e3f3eaff042c20b81672f6403b6733dd085c

                                        v = function(P, t, h) {
    return (h = P.v(238), P.w) && h < P.w.length ? (w(P, 238, P.w.length), L(P, t)) : w(P, 238, t), k(P, h);
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#79 JavaScript::Eval (size: 326, repeated: 1) - SHA256: 014be112b832efe0bfe27e927d5bfb86622325ea9a2a6c3c3d6d6e69732e7b7d

                                        w = function(P, t, h) {
    if (238 == t || 144 == t) {
        if (P.X[t]) {
            P.X[t][P.N](h);
        } else {
            P.X[t] = P.D(h);
        }
    } else if (0 != t && 163 != t && 14 != t && 104 != t || !P.X[t]) {
        P.X[t] = P.O(h, P.v);
    }
    199 == t && (P.b = void 0, w(P, 238, P.v(238) + 4));
}
                                    

#80 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#81 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa

                                        y
                                    

#82 JavaScript::Eval (size: 433, repeated: 1) - SHA256: 2fd28cd9dbb5c0745a517d1767f8bb1b09717a2a228878f03f5922b02985ec18

                                        y = function(P, t, h, m, W) {
    w(P, 38, ((h = (m = ((t = [(W = P.v(144), t), W >> 8 & 255, W & 255], void 0) != m &&
                t.push(m), 0 == P.v(104).length && (P.X[104] = void 0, w(P, 104, t)), ""), h &&
            (h.message && (m += h.message), h.stack && (m += ":" + h.stack)), P.v(38)), 3) < h &&
        (m = m.slice(0, h - 3), h -= m.length + 3, m = d(m.replace(/\r\n/g, "\n")), M(P, 163, I(m.length, 2).concat(m), 12)), h));
}
                                    

Executed Writes (41)

#1 JavaScript::Write (size: 0, repeated: 10) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 419, repeated: 1) - SHA256: d07139aa7b15e8fb15135112a0287dad90eb2c274e1afc0057f0c02dd139bf9b

                                        < !doctype html > < html > < body > < script > google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_0"; < /script><script>window.google_process_slots=function(){window.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_0']});};</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20181015/r20180604/show_ads_impl.js" > < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 419, repeated: 1) - SHA256: 22eb08887cabe5b80a21aa2ef0fb6be30370d3e0adb9d68bef4114fea650a68f

                                        < !doctype html > < html > < body > < script > google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_1"; < /script><script>window.google_process_slots=function(){window.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_1']});};</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20181015/r20180604/show_ads_impl.js" > < /script></body > < /html>
                                    

#4 JavaScript::Write (size: 54, repeated: 1) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#5 JavaScript::Write (size: 378, repeated: 1) - SHA256: 7fdb81d1a4f406b6b718c22d8d5568b8c744565a8c57b60727e46440834b4d02

                                        < iframe frameborder = "0"
allowtransparency = "true"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
width = "0"
hspace = "0"
vspace = "0"
height = "0"
style = "height:0px;width:0px"
src = "https://ads.pubmatic.com/AdServer/js/showad.js#PIX&kdntuid=1&SPug=true&p=156872&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3DPM_UID&userIdMacro=PM_UID&it=0&gdpr=0&np=0" > < /iframe>
                                    

#6 JavaScript::Write (size: 359, repeated: 1) - SHA256: ea8265590ecc0947ea9d154a570e76068347f639caecef685284eb25b7d0d7cf

                                        < iframe frameborder = "0"
allowtransparency = "true"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
width = "0"
hspace = "0"
vspace = "0"
height = "0"
style = "height:0px;width:0px"
src = "https://ads.pubmatic.com/AdServer/js/showad.js#PIX&kdntuid=1&SPug=true&p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D&it=0&gdpr=0&np=0" > < /iframe>
                                    

#7 JavaScript::Write (size: 289, repeated: 1) - SHA256: 30af546d5a5b37d6853d898ea8015667ae1e0dd6820abbfd223ae890815ad6aa

                                        < iframe frameborder = "0"
allowtransparency = "true"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
width = "0"
hspace = "0"
vspace = "0"
height = "0"
style = "height:0px;width:0px;display:none;"
src = "https://router.infolinks.com/dyn/usersync?pmuservalue=A9F792B9-0906-439A-9534-CB4D42BE5769" > < /iframe>
                                    

#8 JavaScript::Write (size: 1340, repeated: 1) - SHA256: f25e113bf012f3b9306790c3bd8a754bc9f61353a2e1ea76473e578ad00e4163

                                        < iframe id = "google_ads_frame19"
name = "google_ads_frame19"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&amp;output=html&amp;adk=1812271804&amp;adf=807048394&amp;lmt=1520323934&amp;plat=1%3A1081352%2C2%3A1082376%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C26%3A32768%2C30%3A34603008&amp;guci=1.2.0.0.2.2.0&amp;format=0x0&amp;url=http%3A%2F%2Fwww.gresk.com%2F&amp;ea=0&amp;flash=10.0.45&amp;pra=5&amp;wgl=0&amp;adsid=NT&amp;dt=1540227934717&amp;bpp=100&amp;fdt=108&amp;idt=442&amp;shv=r20181015&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;nras=1&amp;correlator=3080649655016&amp;frm=20&amp;pv=2&amp;ga_vid=1217336583.1540227931&amp;ga_sid=1540227931&amp;ga_hid=2121983214&amp;ga_fc=1&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1159&amp;bih=737&amp;scr_x=0&amp;scr_y=0&amp;eid=4089042%2C21060853%2C20195143&amp;oid=3&amp;rx=0&amp;eae=6&amp;fc=1808&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cs%7C&amp;abl=NS&amp;ppjl=f&amp;fu=1040&amp;bc=1&amp;ifi=19&amp;dtd=467"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#9 JavaScript::Write (size: 1419, repeated: 1) - SHA256: 4de9bde6bfe990b3625de980be14034bc64ec95b43a8d91389f2183d6c18f655

                                        < iframe id = "google_ads_frame20"
name = "google_ads_frame20"
width = "1040"
height = "520"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&amp;output=html&amp;h=520&amp;slotname=1472028269&amp;adk=2497599132&amp;adf=807048394&amp;w=1040&amp;cr_col=4&amp;cr_row=2&amp;fwrn=2&amp;lmt=1520323934&amp;rafmt=9&amp;guci=1.2.0.0.2.2.0&amp;format=1040x520&amp;url=http%3A%2F%2Fwww.gresk.com%2F&amp;ea=0&amp;flash=10.0.45&amp;crui=image_stacked&amp;fwr=0&amp;wgl=0&amp;adsid=NT&amp;dt=1540227934847&amp;bpp=183&amp;fdt=358&amp;idt=500&amp;shv=r20181015&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=0x0&amp;nras=1&amp;correlator=3080649655016&amp;frm=20&amp;pv=1&amp;ga_vid=1217336583.1540227931&amp;ga_sid=1540227931&amp;ga_hid=2121983214&amp;ga_fc=1&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=80&amp;ady=10378&amp;biw=1159&amp;bih=737&amp;scr_x=0&amp;scr_y=0&amp;eid=4089042%2C21060853%2C20195143&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=1808&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=1168&amp;bc=1&amp;ifi=20&amp;dtd=533"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 359, repeated: 1) - SHA256: 1c50825995bd9d1f26b5b4b91085b1e2828b2acf64f6da14de27e59e5c472478

                                        < iframe src = 'https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#11 JavaScript::Write (size: 207, repeated: 1) - SHA256: 64abb324ec7f433d8ea8d9554db8acf3802c1722c40403a292faaf03df684521

                                        < iframe src = 'https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#12 JavaScript::Write (size: 248, repeated: 1) - SHA256: 83b5620fe5fcaa0e6837db5cf38a51aca704e768cb82e13d45b23463e35540d7

                                        < iframe src = 'https://c1.adform.net/serving/cookie/match?party=14&cid=A9F792B9-0906-439A-9534-CB4D42BE5769'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#13 JavaScript::Write (size: 323, repeated: 1) - SHA256: 62d709f9750de58ed524d8e599fdb3ffe060164c89de1f1ed28ea583fa7e1ad3

                                        < iframe src = 'https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#14 JavaScript::Write (size: 344, repeated: 1) - SHA256: 32af06c763e96bdc59eea14feeaf9e2539ac9f54275d840334208687e0c3527b

                                        < iframe src = 'https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MjAxNjA=&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#15 JavaScript::Write (size: 319, repeated: 1) - SHA256: 6293652a293abd4f6f16d11b03e34125de196aaa25e0ae376c8c93a60a79f576

                                        < iframe src = 'https://match.basebanner.com/match?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMxNjAmdGw9MTI5NjAw&piggybackCookie=uid:$UID&excid=23&cijs=0'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#16 JavaScript::Write (size: 229, repeated: 1) - SHA256: 1a7dd2fbeb71f363466cc599a9ff1591bbd2fe5b38feb9377875221a12576dcf

                                        < iframe src = 'https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#17 JavaScript::Write (size: 218, repeated: 1) - SHA256: 08e45e0e4cab9a52d61354a969552f2ba98fe6e2ff9fa97f95b4e6b8ed0b37a2

                                        < iframe src = 'https://pubmatic2waycm-atl.netmng.com/cm/&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#18 JavaScript::Write (size: 213, repeated: 1) - SHA256: 9e0f956fb32dd79a794e73753d07322a84addd2880a6d8ac023584f0cdd5e0db

                                        < iframe src = 'https://px.adhigh.net/p/cm/pubmatic/&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#19 JavaScript::Write (size: 350, repeated: 1) - SHA256: 132838834cc683b872c6a0acfbc02f72eebce4a1702b2df8a0ed679b6cfb26e2

                                        < iframe src = 'https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxODQmdGw9MTU3NjgwMA==&r=https://pixel.tapad.com/idsync/ex/receive?partner_id=PUBMATIC_RTB&partner_device_id=${PUBMATIC_UID}'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#20 JavaScript::Write (size: 215, repeated: 1) - SHA256: 1c5db0b93b6b2497f386edb552b2570045d4b08a1dc474556173aeda08dcdc1c

                                        < iframe src = 'https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#21 JavaScript::Write (size: 373, repeated: 1) - SHA256: 64b98d9f2c6a13b923a077f24f1b209191d232e0fe74bfb82178db4c95b8cfbf

                                        < iframe src = 'https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#22 JavaScript::Write (size: 391, repeated: 1) - SHA256: b9e1da9a2ae0fa71deb101b196d72fb199383d3a748f6a51a9efbeb0092c61e2

                                        < iframe src = 'https://sync.widespace.com/map/ext/api/trackingcallback/v1?accessToken=pubmatic-user-sync&pmUrl=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MzM1NCZ0bD0xMjk2MDA%3D%26piggybackCookie%3D%24UID'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#23 JavaScript::Write (size: 328, repeated: 1) - SHA256: 6b32122766641e96ec9254801da5ce9064cf8146e66c1b59fa3043194807ed08

                                        < iframe src = 'https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#24 JavaScript::Write (size: 218, repeated: 1) - SHA256: 98fc3af129675514762bf7f1ece6bf21af5cb6792aa517b4c0b5bec159dd2446

                                        < iframe src = 'https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#25 JavaScript::Write (size: 265, repeated: 1) - SHA256: 854ce4982ce59576e0c78c8766e421eab71229725906544fbb5631c658f2ee75

                                        < iframe src = 'https://x.skimresources.com/?provider_id=A9F792B9-0906-439A-9534-CB4D42BE5769&provider=pbin&skim_mapping=true'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#26 JavaScript::Write (size: 257, repeated: 1) - SHA256: 3860c5a05a2aacf070bb75981a93314a539eb078d85b357576c7aa3ab0c14408

                                        < img width = '0'
height = '0'
src = 'https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr=0&gdpr_consent=' / >
                                    

#27 JavaScript::Write (size: 136, repeated: 1) - SHA256: 921ca27bcca18b737515770de02c5678c430250c7940b4cecf4bcf1616a6a948

                                        < img width = '0'
height = '0'
src = 'https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=qfeSuQkGQ5qVNMtNQr5XaQ%3D%3D' / >
                                    

#28 JavaScript::Write (size: 109, repeated: 1) - SHA256: 3e666352f44744bbf9faa7b42fea91dfcd19242e6ee19285f265397bc7762a60

                                        < img width = '0'
height = '0'
src = 'https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc' / >
                                    

#29 JavaScript::Write (size: 192, repeated: 1) - SHA256: 3f73ffac83daeb0525ee025ac65eb00eed382972c31ff9dca3d37547cc52d426

                                        < img width = '0'
height = '0'
src = 'https://ib.adnxs.com/getuid?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent=' / >
                                    

#30 JavaScript::Write (size: 125, repeated: 1) - SHA256: 7759c2340a96c0cb78967af67dba1dde7f389a572201a66abffb0347f8e39219

                                        < img width = '0'
height = '0'
src = 'https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=' / >
                                    

#31 JavaScript::Write (size: 101, repeated: 1) - SHA256: 83cefd6f9f1967647bfb9114c797a614f3469e4d2562d4030d8a2c186f7074c5

                                        < img width = '0'
height = '0'
src = 'https://match.rundsp.com/redirect?ex=pubmatic&gdpr=0&gdpr_consent=' / >
                                    

#32 JavaScript::Write (size: 229, repeated: 1) - SHA256: 38b7c6c63d91a0c1ac045dd93d0b038f043bdf1796ce3dab6437e9b5ed034e3e

                                        < img width = '0'
height = '0'
src = 'https://p.rfihub.com/cm?in=1&pub=224&getuid=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D' / >
                                    

#33 JavaScript::Write (size: 120, repeated: 1) - SHA256: faeac454fedbe6d0a93fab60cf35df927fcf3e4322782f1adea4484692c70577

                                        < img width = '0'
height = '0'
src = 'https://pixel.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=' / >
                                    

#34 JavaScript::Write (size: 229, repeated: 1) - SHA256: 00889120fb6b42191958677079db1e46f47efb5d4328a93843e3979655876f63

                                        < img width = '0'
height = '0'
src = 'https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent=' / >
                                    

#35 JavaScript::Write (size: 178, repeated: 1) - SHA256: c0c4311f0fa775bbca5ffb0072cf67a57c493d1a36ed3e585e9bb8d6e0dc0a92

                                        < img width = '0'
height = '0'
src = 'https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=A9F792B9-0906-439A-9534-CB4D42BE5769&gdpr=0&gdpr_consent=' / >
                                    

#36 JavaScript::Write (size: 220, repeated: 1) - SHA256: 27ce81eae7f51b7f294074913ccfdf173bc67762ed754b5f681e42bd6d28d11c

                                        < img width = '0'
height = '0'
src = 'https://rtb.gumgum.com/getuid/d1ba4609?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzNDImdGw9MTI5NjAw%26piggybackCookie%3D' / >
                                    

#37 JavaScript::Write (size: 260, repeated: 1) - SHA256: b06c8d84b522f2df3b6caf26265a31a5ef1a2f41b2c18397b70ff0b3e521cfab

                                        < img width = '0'
height = '0'
src = 'https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA%3D%26piggybackCookie%3D%24%7BUSER_ID%7D%26gdpr%3D0%26gdpr_consent%3D' / >
                                    

#38 JavaScript::Write (size: 182, repeated: 1) - SHA256: a2cab6c3efa3e144161da1824dbed42f5a078c3a9dc64a01e069094e8dd4b48d

                                        < img width = '0'
height = '0'
src = 'https://sync.mathtag.com/sync/img?mt_exid=3&redir=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D27%26partnerUID%3D%5BMM_UUID%5D' / >
                                    

#39 JavaScript::Write (size: 201, repeated: 1) - SHA256: 387a6c5a29c718506d82c743b5da192c39f59771e2545523f9094ad39d91fee1

                                        < script type = "text/javascript"
src = "https://image6.pubmatic.com/AdServer/PugMaster?rnd=28445567&p=156872&s=0&a=0&ptask=ALL&np=0&fp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&sec=1&kdntuid=1" > < /script>
                                    

#40 JavaScript::Write (size: 200, repeated: 1) - SHA256: 26b7f7423c65dd1e598e3893266e129aab067262c3f7927abd10bda54c420327

                                        < script type = "text/javascript"
src = "https://image6.pubmatic.com/AdServer/PugMaster?rnd=32548728&p=60809&s=0&a=0&ptask=ALL&np=0&fp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&sec=1&kdntuid=1" > < /script>
                                    

#41 JavaScript::Write (size: 598, repeated: 1) - SHA256: 4d12275066e1f49b1d672f84d3c14b69d5b0c0bfe497e87d22c7a284da992af9

                                        < span class = "statcounter" > < a class = "statcounter"
href = "http://www.statcounter.com"
target = "_blank" > < img src = "http://c.statcounter.com/t.php?sc_project=7778842&amp;java=1&amp;security=dc132b9f&amp;u1=B1DC176487A94F5EBE5A138E14625F0E&amp;sc_random=0.8269734822429287&amp;jg=new&amp;rr=1.1.1.1.1.1.1.1.1&amp;resolution=1176&amp;h=885&amp;camefrom=&amp;u=http%3A//www.gresk.com/&amp;t=Technical%20Car%20Experts%20Answers%20everything%20you%20need&amp;rcat=d&amp;rdom=d&amp;rdomg=new&amp;bb=1&amp;sc_snum=1&amp;sess=7a9eb4&amp;p=0"
alt = "StatCounter - Free Web Tracker and Counter"
border = "0" > < /a></span >
                                    


HTTP Transactions (167)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: technoanswers.blogspot.in
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.207.225
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://technoanswers.blogspot.com/
Content-Encoding: gzip
Date: Mon, 22 Oct 2018 17:05:29 GMT
Expires: Mon, 22 Oct 2018 17:05:29 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 180
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   180
Md5:    a2371140bc6e956c4a79e8b385eb2aa1
Sha1:   7a92b3708a04591d86a9895a07a44a99d1070e36
Sha256: 573bcbd2c297adbd4290a905cc6ff6f6c838fd973825da664c51508f2408139a
                                        
                                            GET / HTTP/1.1 
Host: technoanswers.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.207.225
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.gresk.com/
Content-Encoding: gzip
Date: Mon, 22 Oct 2018 17:05:29 GMT
Expires: Mon, 22 Oct 2018 17:05:29 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 171
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   171
Md5:    4cc04fff7abcc96de294e6493080f96d
Sha1:   641d237990ae4f2e0db173f3ac390132cf9d444c
Sha256: 0f52470ec51a74e69fc46ea9a691516ce6ee31c72c17fc77d38cfd5374a87aee
                                        
                                            GET / HTTP/1.1 
Host: www.gresk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.239.32.21
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Mon, 22 Oct 2018 17:05:30 GMT
Date: Mon, 22 Oct 2018 17:05:30 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 06 Mar 2018 08:12:14 GMT
Etag: W/"9794f5255b3c54189c1283a6512d48edf2b904cf81c3ae042924967f0faa60e1"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 22385
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   22385
Md5:    f4da359db89fbc826c7cc13a71ef5887
Sha1:   6dddad1e106b2b526882c8ab937b1ba9667ca298
Sha256: fd11ae41366dbcc6b02e333400fdda37e893e61059b88659f1502a33fbc643c6
                                        
                                            GET /img/icon18_email.gif HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 164
Date: Tue, 16 Oct 2018 16:46:52 GMT
Expires: Tue, 23 Oct 2018 16:46:52 GMT
Last-Modified: Mon, 15 Oct 2018 17:22:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519519


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 13
Size:   164
Md5:    36b9f993db1b953f3b9b08040aaf9af4
Sha1:   18248661b307586dc291fd2dff4bb59cf7579475
Sha256: 1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0e0deb70b28b393cd0c18d733ff1afe0
Sha1:   6b3af04d36f98109aca9824d793788c17aefdffc
Sha256: 12a11ba5836c4e980f9a0d71e649601692fb5b6ea5720002be63bc6f325001c3
                                        
                                            GET /pagead/show_ads.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 22 Oct 2018 17:05:31 GMT
Expires: Mon, 22 Oct 2018 17:05:31 GMT
Cache-Control: private, max-age=3600
Etag: 6243053429390280124
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21083
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21083
Md5:    8be89cd25218945be77a707102ee3063
Sha1:   a30220caca0fb4ef7e99c01519046ddaa72eb610
Sha256: d31b42aec5df332e9c5af284b7c8787626236b44fa60a2448fbbeb16a2d19ee1
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /static/v1/widgets/2727757643-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8674
Date: Tue, 02 Oct 2018 16:46:24 GMT
Expires: Wed, 02 Oct 2019 16:46:24 GMT
Last-Modified: Tue, 02 Oct 2018 11:35:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1729147
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8674
Md5:    043de64904af0a83a4d82cc69257af69
Sha1:   8e162a7dd7c6c28e02d33252328420647db677d5
Sha256: ff59304abef0a84d13a1cd43da3a79a6b713648d572426059c201d0da0122c9a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.gresk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.239.32.21
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Mon, 22 Oct 2018 17:05:31 GMT
Date: Mon, 22 Oct 2018 17:05:31 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 06 Mar 2018 08:12:14 GMT
Etag: W/"9794f5255b3c54189c1283a6512d48edf2b904cf81c3ae042924967f0faa60e1"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 22 Oct 2018 15:29:59 GMT
Expires: Mon, 22 Oct 2018 17:29:59 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 5732
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /-YiDTS2h7ptg/VhfVzcV3-zI/AAAAAAAAAww/HnsiKO5_gN8/s1600-r/bannerfans_16544784.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v30d"
Expires: Wed, 17 Oct 2018 22:19:48 GMT
Content-Disposition: inline;filename="bannerfans_16544784.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:31 GMT
Server: fife
Content-Length: 43302
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 728 x 90, 8-bit/color RGB, non-interlaced
Size:   43302
Md5:    de9bc403011464dfdada6d8b56155d67
Sha1:   3b0b42deaeb3ed821af735b1ed9124ea501bfa5e
Sha256: 87635a98e079cc2ead1cf93a748032f06e21380f2676326af358124c59fb78c0
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    221ea138edd2cf46ac24dd2719f09d22
Sha1:   e19f04696fbe03aeaa12d7ade162d5436e8b179c
Sha256: 8b0b6838e1320eecedfb9b84419dfd862099c39675e9403b5f418edd500310af
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 22 Oct 2018 17:05:31 GMT
Expires: Mon, 22 Oct 2018 17:05:31 GMT
Cache-Control: private, max-age=3600
Etag: 741345610262805402
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 28145
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28145
Md5:    ddcbc60870483428dc2de63050f2025e
Sha1:   c651321c08122e34b1e4e24d55cccc54af580102
Sha256: b7b2510111c69f38a17cf80451f9f7467b01d32f9dcaa000cba0820b0c51e6ca
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: www.gresk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.239.32.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2026
Date: Mon, 22 Oct 2018 17:05:31 GMT
Expires: Mon, 29 Oct 2018 17:05:31 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 22 Oct 2018 14:39:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
                                        
                                            GET /counter/counter_xhtml.js HTTP/1.1 
Host: www.statcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.20.2.47
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d235c057ff4be447f6ebcac7fa142f1221540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.statcounter.com; HttpOnly
Last-Modified: Fri, 28 Apr 2017 13:36:00 GMT
Etag: W/"59034540-7083"
Expires: Tue, 23 Oct 2018 05:05:31 GMT
Cache-Control: public, max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46dd8c9b97e6426d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10411
Md5:    76fd35609823ca67dff9d7be59b45e36
Sha1:   b5d1acf76d05f59c5b237ccd864fe2ac500720ad
Sha256: 0881d77aaf767a2e38bda49eb01953c4a3a18c98b4d794ab74f4acf85352a0fb
                                        
                                            GET /js/infolinks_main.js HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.230.152
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d07dc87e627af7ea5b26e698dd4c5653f1540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.infolinks.com; HttpOnly
Last-Modified: Mon, 22 Oct 2018 13:56:22 GMT
Etag: W/"c46-578d19e4c4fd7"
Cache-Control: max-age=3600
Expires: Mon, 22 Oct 2018 14:56:29 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46dd8c9b96dc4261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1944
Md5:    f344eff813b5187cfda1cad9b0dd1b68
Sha1:   ca452ef4817e81b18e76e52c6cb19d2ed46626f3
Sha256: 63eab43ac19ed6a5c01600a0d0e544709f01bbb4c27cc7acda521f232c085dc4
                                        
                                            GET /-hViPET4bVQE/VhfWm8JkGZI/AAAAAAAAAw8/VQ_mn3OBRXU/s1600-r/bannerfans_16544784.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v310"
Expires: Wed, 17 Oct 2018 22:19:49 GMT
Content-Disposition: inline;filename="bannerfans_16544784.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:31 GMT
Server: fife
Content-Length: 43302
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 728 x 90, 8-bit/color RGB, non-interlaced
Size:   43302
Md5:    de9bc403011464dfdada6d8b56155d67
Sha1:   3b0b42deaeb3ed821af735b1ed9124ea501bfa5e
Sha256: 87635a98e079cc2ead1cf93a748032f06e21380f2676326af358124c59fb78c0
                                        
                                            GET /uploads/drivefast1971/2011-12-04_141919_1.gif HTTP/1.1 
Host: ww2.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.42.9
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Content-Length: 28805
Connection: keep-alive
Set-Cookie: __cfduid=da366afa8ecd0654aa0bce100128586771540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.justanswer.com; HttpOnly
Cache-Control: public, max-age=86400
Cf-Bgj: imgq:85
Cf-Polished: origSize=29834
Etag: "748a-4b344e345e7c0"
Expires: Tue, 23 Oct 2018 17:05:31 GMT
Last-Modified: Sun, 04 Dec 2011 14:19:19 GMT
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46dd8c9bb04f429d-OSL


--- Additional Info ---
Magic:  GIF image data, version 87a, 544 x 672
Size:   28805
Md5:    297ad40e4e98c85136a2ff2f16af89ac
Sha1:   e5a582416b5bcbbf07094af72b50303bbb947816
Sha256: 354e76b1c04c73bbe6a2661ac104f39b3c77efa483dc6ed563f2a1a84c35deb4
                                        
                                            GET /uploads/Joecamel90/2009-04-06_012051_blower_pic.jpg HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=da0fb38d766f5f985804bd6b47008360e1540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.justanswer.com; HttpOnly
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_012051_blower_pic.jpg
CF-Cache-Status: EXPIRED
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:31 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8c9bd3d84267-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   357
Md5:    bbe90f7797f3b768b0a56d799e787175
Sha1:   942a4814491873a95394a15c17a7bc14aa91d0a6
Sha256: 28b57b9a1bddc6164cb4d5896bf9ae01ba88315b9692af858e5f680af0e74bb9
                                        
                                            GET /uploads/Joecamel90/2009-04-06_012915_fuse_11.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d0daf60c46417829b3b53516d0ddb35191540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.justanswer.com; HttpOnly
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_012915_fuse_11.gif
CF-Cache-Status: EXPIRED
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:31 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8c9bd75b4285-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   354
Md5:    3f78d7975544dcd5da0274fc078ebe0c
Sha1:   e72b609f35d8a2eb0963cca2c532c909d64d152b
Sha256: 5487a2a7a2c7d30ee4f36b95a8e048aefef84da355f6415e84edbade43953e5f
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=746834541&utmhn=www.gresk.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1176x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Technical%20Car%20Experts%20Answers%20everything%20you%20need&utmhid=2121983214&utmr=-&utmp=%2F&utmht=1540227931989&utmac=UA-8303908-3&utmcc=__utma%3D225683148.1217336583.1540227931.1540227931.1540227931.1%3B%2B__utmz%3D225683148.1540227931.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1247708002&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Mon, 22 Oct 2018 17:05:32 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Tue, 16 Oct 2018 16:46:37 GMT
Expires: Tue, 23 Oct 2018 16:46:37 GMT
Last-Modified: Mon, 15 Oct 2018 17:22:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519534
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Tue, 16 Oct 2018 16:46:47 GMT
Expires: Tue, 23 Oct 2018 16:46:47 GMT
Last-Modified: Tue, 16 Oct 2018 01:36:34 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519524
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=2504895173252278813&zx=cdf90735-cada-4ad3-ae30-a4f52655cc25 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 22 Oct 2018 17:05:31 GMT
Last-Modified: Mon, 22 Oct 2018 17:05:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /static/v1/widgets/2518973450-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 52040
Date: Thu, 18 Oct 2018 00:04:32 GMT
Expires: Fri, 18 Oct 2019 00:04:32 GMT
Last-Modified: Wed, 17 Oct 2018 22:32:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 406860
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   52040
Md5:    4e8b1374c088f9164e0b3bcb53470a4c
Sha1:   b3b8899bc1e3b96cd261bf20e0d5a3d7e123d3bb
Sha256: 3c4e01c9e667aed7b3155ad7845251724d84f1c27d0983c5642bcbcfdd231094
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "0541b0fd5937a1b869842e04d975484a"
Expires: Mon, 22 Oct 2018 17:05:32 GMT
Date: Mon, 22 Oct 2018 17:05:32 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U;Domain=.google.com;Path=/;Expires=Tue, 23-Apr-2019 17:05:32 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16818
Md5:    47608e3168f4827c7b73f5af9bf212b7
Sha1:   1840d4f73503289161bcbc358857ca64ab9c072d
Sha256: be797ed393b2ececea5337a1e3cec0418024da76ab50a722fe44932710c5424b
                                        
                                            GET /uploads/Joecamel90/2009-04-06_005531_blowerrelaywire.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.justanswer.com; HttpOnly
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_005531_blowerrelaywire.gif
CF-Cache-Status: EXPIRED
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:31 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8c9bb5f14255-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   362
Md5:    1f9277ff68b418ba7009316efe2f5c0e
Sha1:   2577b86a049f07fe86952bfc433f835b80ed97a4
Sha256: a12869390f199b5ce1aa6a174128cdd89f2d578b81b3060fe47163568a419740
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 16 Oct 2018 16:46:23 GMT
Expires: Tue, 30 Oct 2018 16:46:23 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 519549


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.0Pi_1TlQmh4.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46777
Date: Thu, 18 Oct 2018 18:15:58 GMT
Expires: Fri, 18 Oct 2019 18:15:58 GMT
Last-Modified: Wed, 17 Oct 2018 21:44:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 341374
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46777
Md5:    c4bb5fdfe49ef9a5c8cfc6edd84c4297
Sha1:   987749e0a0e5b1085dfc01999c6741decf814db8
Sha256: cff56fac47dea53c2d667845c246912b6815581a138509326785612209f8d550
                                        
                                            GET /1kt/simple/gradients_light.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 403
Date: Tue, 16 Oct 2018 16:48:18 GMT
Expires: Tue, 23 Oct 2018 16:48:18 GMT
Last-Modified: Mon, 15 Oct 2018 19:21:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519434


--- Additional Info ---
Magic:  PNG image, 20 x 1100, 8-bit/color RGBA, non-interlaced
Size:   403
Md5:    4f7de2e6afefb125b1f14fa5cda610ee
Sha1:   57a145f234b504a73f9d55cf39f2231a04719456
Sha256: ecb30886406e3f776ff7bc3834de849944471e626ff148bed2fa389d02866044
                                        
                                            GET /1kt/simple/body_gradient_tile_light.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 95
Date: Tue, 16 Oct 2018 16:54:09 GMT
Expires: Tue, 23 Oct 2018 16:54:09 GMT
Last-Modified: Mon, 15 Oct 2018 19:21:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519083


--- Additional Info ---
Magic:  PNG image, 10 x 10, 1-bit colormap, non-interlaced
Size:   95
Md5:    3b2a20d5b0ba4ca0c5dd90865ad6b9c4
Sha1:   a90928a16d11d21e112b45b60990a9d7d19cc1d5
Sha256: 0fdcb4746995f0d5240e5ec11370cb950722a894f3cff4118aa68ccc92010edd
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.0Pi_1TlQmh4.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18579
Date: Thu, 18 Oct 2018 18:15:58 GMT
Expires: Fri, 18 Oct 2019 18:15:58 GMT
Last-Modified: Wed, 17 Oct 2018 21:44:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 341374
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18579
Md5:    fea9b3c91ce4654c7799f2e52ea9c089
Sha1:   9236d390a87a49135205a722b577b5f4f5daad9a
Sha256: e99a534de52662e076ed6d6b20fc9c17314df9a2fc51ef3690280fd9f097ec78
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4c5ca00550ffbd175c9984a5b2e6cd71
Sha1:   91f664a8d0032a4ff737f4fe8d26276e1a48eecd
Sha256: a5ee11fb613393942a155aee6c99ebe9dc48c677182c517961efea12b624d57a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6dad65b75581fae1167700000d5ac2c2
Sha1:   3286702b88e938806eaac482a182878e6534477d
Sha256: b4cbf51ab0411b2ed125d05f6c314c61ea334805a3e92a3473b6fafcc187b0b0
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  GIF image data, version 87a, 608 x 835
Size:   20394
Md5:    48d66dea869ea64523884d088c36e779
Sha1:   c674f0c27b9f5fed2baa2d93a62b7cf83c2d82f6
Sha256: 7c5089d4a798ea6009202ab915e0a016bbe1efb15507e6e017653cd5fb81bc92
                                        
                                            GET /uploads/Joecamel90/2009-04-06_001422_fanrelay.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d1b2372c2e0bed0a0da4d50206e2b69d61540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.justanswer.com; HttpOnly
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_001422_fanrelay.gif
CF-Cache-Status: EXPIRED
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:32 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8c9bb6e54261-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   355
Md5:    f896647d0833dfb7477aab1a30132a9e
Sha1:   2180431996d035f1fcb6f1752ac0063cfc5113d9
Sha256: e8e7ed3417beb2d90b134abc489d97dcc3e1f78196f85f2aa27fd676eea5faf6
                                        
                                            GET /uploads/joecamel90/2009-04-06_012051_blower_pic.jpg HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=da0fb38d766f5f985804bd6b47008360e1540227931

                                         
                                         104.16.42.9
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Content-Length: 13114
Connection: keep-alive
CF-Cache-Status: REVALIDATED
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
Cf-Bgj: imgq:85
Cf-Polished: status=not_needed
CF-RAY: 46dd8c9f64af4267-OSL
Etag: "1be6-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:32 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  data
Size:   13114
Md5:    33fcbeeb819ef6b90b1c738679ca5e78
Sha1:   ab7b5d5a72f7f590d4c828148635b49b15231c5a
Sha256: 85c2bb97ede4c9161a9a5d5dabe89bb08d0749b18e2e2388f279e47aee6fb844
                                        
                                            GET /pub-config/r20160913/ca-pub-1773328083380569.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Mon, 22 Oct 2018 17:05:32 GMT
Expires: Tue, 23 Oct 2018 05:05:32 GMT
Cache-Control: public, max-age=43200
Last-Modified: Sun, 21 Oct 2018 19:55:28 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    f80120281945bc2ccdaebc64cbad921d
Sha1:   b5c7ef140888ede182fcac94921a4eb502f07a5c
Sha256: 4cb4b9970ec5cedababe29f9a4ab00d00194bbebd2063cb117dec008b8c6982a
                                        
                                            GET /adsid/integrator.js?domain=www.gresk.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Mon, 22 Oct 2018 17:05:32 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /adsid/integrator.js?domain=www.gresk.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Mon, 22 Oct 2018 17:05:32 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /uploads/joecamel90/2009-04-06_005531_blowerrelaywire.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Content-Length: 70034
Connection: keep-alive
CF-Cache-Status: REVALIDATED
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
Cf-Bgj: imgq:85
Cf-Polished: origSize=40249
CF-RAY: 46dd8ca036f44255-OSL
Etag: "9d39-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:32 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 445
Size:   70034
Md5:    a13307cee01e09388cba804b374701c8
Sha1:   4740493880e449e8489228e744dbe7934325e557
Sha256: 82adeaf67bd10862668ffd85626691eae02ae55225c98f66ddf11cc2e020fd2e
                                        
                                            GET /navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 22 Oct 2018 17:05:32 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2645
Md5:    ba3ba61b2af7b77afb57af04c30adec8
Sha1:   608111d7410d5a150176b27ffe774d780635b1ab
Sha256: dc602b5fa8a87ce3d600ca22c3fe00637f4d851cc0dffda24cb260757fbb2871
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/2727757643-css_bundle_v2.css

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Tue, 16 Oct 2018 16:46:30 GMT
Expires: Tue, 23 Oct 2018 16:46:30 GMT
Last-Modified: Mon, 15 Oct 2018 19:21:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519542
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /uploads/Joecamel90/2009-04-06_001631_fans.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d1b2372c2e0bed0a0da4d50206e2b69d61540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.justanswer.com; HttpOnly
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_001631_fans.gif
CF-Cache-Status: EXPIRED
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:32 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8c9bb6e34261-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   351
Md5:    d3b26693a1855e987d56619c05432d49
Sha1:   bd1d96befd8a84af8ddd9b60ff32fdb96a192216
Sha256: 1a5eb4ab9f4f91b0bf71081dbe9c58cfca019cf01b87889170d565c39f483eb8
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "9006d84356117d630b47e6c080bdf28f"
Expires: Mon, 22 Oct 2018 17:05:32 GMT
Date: Mon, 22 Oct 2018 17:05:32 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16833
Md5:    ec0871c5c69b45fa49dc0814dbd4bdbc
Sha1:   4d3b34d4050b3859f5c4a783e9ef27b512104c5e
Sha256: 140576cfe2baef47836edf7a7e6f210193d84b2c1632ad27eaf4904cd340c8dd
                                        
                                            GET /img/navbar/arrows-light.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 117
Date: Tue, 16 Oct 2018 16:47:06 GMT
Expires: Tue, 23 Oct 2018 16:47:06 GMT
Last-Modified: Tue, 16 Oct 2018 03:23:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519507
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 19 x 4, 8-bit/color RGBA, non-interlaced
Size:   117
Md5:    25c2b0cfe0ad4dcda4a0e3727d091d80
Sha1:   b9d16f4311e64648b7970baf00cb9841e3c3351b
Sha256: bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
                                        
                                            GET /img/navbar/icons_peach.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__

                                         
                                         216.58.211.9
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 907
Date: Tue, 16 Oct 2018 16:47:06 GMT
Expires: Tue, 23 Oct 2018 16:47:06 GMT
Last-Modified: Tue, 16 Oct 2018 08:45:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 519507
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 46 x 20, 8-bit colormap, non-interlaced
Size:   907
Md5:    3718077fe5eb689b0ded987a52881d06
Sha1:   f0ce5596ef43f850c400cbbc0556697fb3e7b232
Sha256: 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.0Pi_1TlQmh4.O/m=auth/exm=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 27650
Date: Thu, 18 Oct 2018 19:22:40 GMT
Expires: Fri, 18 Oct 2019 19:22:40 GMT
Last-Modified: Wed, 17 Oct 2018 21:44:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 337373
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   27650
Md5:    29cb7c6c1087612369194f9e7f851a91
Sha1:   a2bc6135e5e860cd5abc683c27efe18bd514e8b1
Sha256: 4be9521039c67fdeecbb9cffeb847aceeaa599a60965fe9839c670294ed37110
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fwww.gresk.com%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:33 GMT
Date: Mon, 22 Oct 2018 17:05:33 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3888
Md5:    ce47bf9d12bc67a06374a3d720a41555
Sha1:   7425ca62adc63ef60314abd78c74dc0757a2c341
Sha256: e2f0a1e3ad09bd767e7c65c2581b2ed5a0b468f44dc1f83152a939d9f9f799fc
                                        
                                            GET /uploads/Joecamel90/2009-04-06_012409_blowerdiagram.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931; expires=Tue, 22-Oct-19 17:05:31 GMT; path=/; domain=.justanswer.com; HttpOnly
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_012409_blowerdiagram.gif
CF-Cache-Status: EXPIRED
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:32 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8c9bb5f24255-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   360
Md5:    466da09d669b466ba82b74b9c3f9daa1
Sha1:   71b7e69723c9f4947a021c3b8b99be64cdb1ce0b
Sha256: 3bfa6631d63819af0113116799b9f840c505b832c3334f6b550db5ef38138214
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.0Pi_1TlQmh4.O/m=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 60731
Date: Thu, 18 Oct 2018 18:39:28 GMT
Expires: Fri, 18 Oct 2019 18:39:28 GMT
Last-Modified: Wed, 17 Oct 2018 21:44:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 339965
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   60731
Md5:    66d0e37f52ebff4c92b6bbd77db36bbd
Sha1:   a70bb253c2cb3f45c571257225f2c45f8d7faa80
Sha256: 9088a87ec57a53eeafbaca97f9b50f2c79fe5a8fde30b28c16970ec783f531e1
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.0Pi_1TlQmh4.O/am=wQ/rt=j/d=1/rs=AGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fwww.gresk.com%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46173
Date: Thu, 18 Oct 2018 18:29:56 GMT
Expires: Fri, 18 Oct 2019 18:29:56 GMT
Last-Modified: Wed, 17 Oct 2018 21:44:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 340537
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46173
Md5:    18c1843037b85b99af538c6caefd4e39
Sha1:   cef6d30396ff76effb8ee259b4ceae35988f7068
Sha256: f40c1b1ab06d0205e7c04fef8289db26cb5a4e1509bce778f9f9a4b2f2afa66f
                                        
                                            GET /uploads/joecamel90/2009-04-06_001422_fanrelay.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d1b2372c2e0bed0a0da4d50206e2b69d61540227931

                                         
                                         104.16.42.9
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:33 GMT
Content-Length: 42585
Connection: keep-alive
CF-Cache-Status: REVALIDATED
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
Cf-Bgj: imgq:85
Cf-Polished: origSize=24248
CF-RAY: 46dd8ca3c0a84261-OSL
Etag: "5eb8-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:33 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 632 x
Size:   42585
Md5:    4e41d6e6493e410c23393964c6f74464
Sha1:   e590e992be4fee8ad6c8cb3430b150add449c66b
Sha256: 5574724d4048e34c0d5aa2f6575d4b6057b396bbd9b7741a285488351621d98f
                                        
                                            GET /uploads/joecamel90/2009-04-06_001631_fans.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d1b2372c2e0bed0a0da4d50206e2b69d61540227931

                                         
                                         104.16.42.9
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:33 GMT
Content-Length: 83148
Connection: keep-alive
CF-Cache-Status: REVALIDATED
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
Cf-Bgj: imgq:85
Cf-Polished: origSize=47627
CF-RAY: 46dd8ca5b5f94267-OSL
Etag: "ba0b-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:33 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 512 x
Size:   83148
Md5:    fa36ec70c8175f5659a0800919a61ef5
Sha1:   379f54627e9929c6c62573ee62f3ff8c431c8e3b
Sha256: d1c898711e540ce5c4dcc694eba1403306411fd1498195496312280c4266bd45
                                        
                                            GET /uploads/Joecamel90/2009-04-06_001422_fanrelay.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_001422_fanrelay.gif
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8caca2824261-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   355
Md5:    f896647d0833dfb7477aab1a30132a9e
Sha1:   2180431996d035f1fcb6f1752ac0063cfc5113d9
Sha256: e8e7ed3417beb2d90b134abc489d97dcc3e1f78196f85f2aa27fd676eea5faf6
                                        
                                            GET /uploads/Joecamel90/2009-04-06_005531_blowerrelaywire.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_005531_blowerrelaywire.gif
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8caca2834261-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   362
Md5:    1f9277ff68b418ba7009316efe2f5c0e
Sha1:   2577b86a049f07fe86952bfc433f835b80ed97a4
Sha256: a12869390f199b5ce1aa6a174128cdd89f2d578b81b3060fe47163568a419740
                                        
                                            GET /uploads/Joecamel90/2009-04-06_012409_blowerdiagram.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_012409_blowerdiagram.gif
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8caca7964267-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   360
Md5:    466da09d669b466ba82b74b9c3f9daa1
Sha1:   71b7e69723c9f4947a021c3b8b99be64cdb1ce0b
Sha256: 3bfa6631d63819af0113116799b9f840c505b832c3334f6b550db5ef38138214
                                        
                                            GET /uploads/Joecamel90/2009-04-06_012915_fuse_11.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_012915_fuse_11.gif
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8cacc28d4261-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   354
Md5:    3f78d7975544dcd5da0274fc078ebe0c
Sha1:   e72b609f35d8a2eb0963cca2c532c909d64d152b
Sha256: 5487a2a7a2c7d30ee4f36b95a8e048aefef84da355f6415e84edbade43953e5f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a56ed17374a9481d78a6d66fdeab5fb2
Sha1:   f387bfb94e4c4b68a7e1fd8d8cd0f8044e27c528
Sha256: 17baa7c87e81d303484b7230ef1ee3890cd6930f3e22ad44108ddee7403d8667
                                        
                                            GET /uploads/Joecamel90/2009-04-06_012051_blower_pic.jpg HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_012051_blower_pic.jpg
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8cacc69542a9-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   357
Md5:    bbe90f7797f3b768b0a56d799e787175
Sha1:   942a4814491873a95394a15c17a7bc14aa91d0a6
Sha256: 28b57b9a1bddc6164cb4d5896bf9ae01ba88315b9692af858e5f680af0e74bb9
                                        
                                            GET /uploads/Joecamel90/2009-04-06_001631_fans.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.justanswer.com/uploads/joecamel90/2009-04-06_001631_fans.gif
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Vary: Accept-Encoding
CF-RAY: 46dd8caca1984255-OSL
Server: cloudflare


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   351
Md5:    d3b26693a1855e987d56619c05432d49
Sha1:   bd1d96befd8a84af8ddd9b60ff32fdb96a192216
Sha256: 1a5eb4ab9f4f91b0bf71081dbe9c58cfca019cf01b87889170d565c39f483eb8
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=2504895173252278813&blogName=Technical+Car+Experts+Answers+everyth...&publishMode=PUBLISH_MODE_HOSTED&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://www.gresk.com/search&blogLocale=en&v=2&homepageUrl=http://www.gresk.com/&vt=-3973825865187376330&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.20.45
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 22 Oct 2018 17:05:34 GMT
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   365
Md5:    013d8676ce6b53b218eee696a98ca0c0
Sha1:   47254dfffe986d8a6f42f5f6c8ab213d8c92b60d
Sha256: ac37bead53bf43022fa170400c190f6440408d88ebeacb389c5ed0e4d72a7781
                                        
                                            GET /uploads/joecamel90/2009-04-06_005531_blowerrelaywire.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931
Range: bytes=0-
If-Range: "9d39-49029ca4dd540"

                                         
                                         104.16.42.9
HTTP/1.1 206 Partial Content
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Content-Length: 70034
Connection: keep-alive
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Cf-Bgj: imgq:85
Cf-Polished: origSize=40249
CF-RAY: 46dd8cad37b34267-OSL
Content-Range: bytes 0-40118/40119
Etag: "9d39-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 445
Size:   70034
Md5:    a13307cee01e09388cba804b374701c8
Sha1:   4740493880e449e8489228e744dbe7934325e557
Sha256: 82adeaf67bd10862668ffd85626691eae02ae55225c98f66ddf11cc2e020fd2e
                                        
                                            GET /uploads/joecamel90/2009-04-06_001631_fans.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931
Range: bytes=0-
If-Range: "ba0b-49029ca4dd540"

                                         
                                         104.16.42.9
HTTP/1.1 206 Partial Content
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Content-Length: 83148
Connection: keep-alive
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Cf-Bgj: imgq:85
Cf-Polished: origSize=47627
CF-RAY: 46dd8cad66ba42a9-OSL
Content-Range: bytes 0-47609/47610
Etag: "ba0b-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 512 x
Size:   83148
Md5:    fa36ec70c8175f5659a0800919a61ef5
Sha1:   379f54627e9929c6c62573ee62f3ff8c431c8e3b
Sha256: d1c898711e540ce5c4dcc694eba1403306411fd1498195496312280c4266bd45
                                        
                                            GET /uploads/joecamel90/2009-04-06_012915_fuse_11.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931
Range: bytes=0-
If-Range: "579d-49029ca4dd540"

                                         
                                         104.16.42.9
HTTP/1.1 206 Partial Content
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Content-Length: 39817
Connection: keep-alive
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Cf-Bgj: imgq:85
Cf-Polished: status=not_needed
CF-RAY: 46dd8cad32a84261-OSL
Content-Range: bytes 0-22428/22429
Etag: "579d-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 608 x 835
Size:   39817
Md5:    18cff5318953b73eb1c9ef039729a2cd
Sha1:   cdd9f76d4d16d79b888664689a18a001f56c5181
Sha256: e46641725e9fb92ae36ae4defa99fce706e6a2fb51126efcb8190134bf581eab
                                        
                                            GET /pagead/js/r20181015/r20180604/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 22 Oct 2018 17:05:34 GMT
Expires: Mon, 22 Oct 2018 17:05:34 GMT
Cache-Control: private, max-age=1209600
Etag: 10567426459337210223
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 75853
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   75853
Md5:    46d848d6c2c872919261c6fded4b6add
Sha1:   767ce306bce6ec53bc2f3110e17433496aec4f7f
Sha256: d6736dc19278cc325dea0a7530fdc40522cba39249e1131de35cdf2a59217767
                                        
                                            GET /uploads/joecamel90/2009-04-06_012409_blowerdiagram.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931

                                         
                                         104.16.42.9
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:34 GMT
Content-Length: 40652
Connection: keep-alive
CF-Cache-Status: REVALIDATED
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
Cf-Bgj: imgq:85
Cf-Polished: origSize=23299
CF-RAY: 46dd8cab114d4255-OSL
Etag: "5b03-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:34 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 568 x 266
Size:   40652
Md5:    794f861d7b3e8f5191a08c9a8a0f0982
Sha1:   72636c31ee9607760c890dbf80f8f70590d4342b
Sha256: 867078de270ffa37119eecc7ccd7490f0e2ba7783f1a7a0c193b6ea8d0d6326b
                                        
                                            GET /uploads/joecamel90/2009-04-06_001422_fanrelay.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931
Range: bytes=0-
If-Range: "5eb8-49029ca4dd540"

                                         
                                         104.16.42.9
HTTP/1.1 206 Partial Content
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:35 GMT
Content-Length: 42585
Connection: keep-alive
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Cf-Bgj: imgq:85
Cf-Polished: origSize=24248
CF-RAY: 46dd8cad42a94261-OSL
Content-Range: bytes 0-24207/24208
Etag: "5eb8-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:35 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 632 x
Size:   42585
Md5:    4e41d6e6493e410c23393964c6f74464
Sha1:   e590e992be4fee8ad6c8cb3430b150add449c66b
Sha256: 5574724d4048e34c0d5aa2f6575d4b6057b396bbd9b7741a285488351621d98f
                                        
                                            GET /accounts/o/2679293615-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3879
Date: Thu, 18 Oct 2018 17:36:30 GMT
Expires: Fri, 18 Oct 2019 17:36:30 GMT
Last-Modified: Wed, 17 Oct 2018 02:31:37 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 343745
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3879
Md5:    239d0fe26ffa25d22520968f9f08e4e9
Sha1:   ee211a473e074785bfdbb465b6aba7ecbc1f4ea1
Sha256: 5219f5b2b655eacbb7b8bf5d7617adb87ea68628f7aaefe69c67c1845565ffd1
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "71648ee8f26e74e92e4d8784dfa9f6bb"
Expires: Mon, 22 Oct 2018 17:05:34 GMT
Date: Mon, 22 Oct 2018 17:05:34 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4680
Md5:    110c8278a535ad108ee5899a4df6c239
Sha1:   073bf4d64c54f0326dd5326eabe7247e94bd1a0b
Sha256: 840ce203dc0837a6761863f340faaa25ff65b674f29cc124d22b4c9ad18709a5
                                        
                                            GET /pagead/js/r20181015/r20180604/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 16 Oct 2018 07:33:20 GMT
Expires: Tue, 30 Oct 2018 07:33:20 GMT
Etag: 13182056233691646820
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 27170
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 552735
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27170
Md5:    e7afa4140f095df2b34404d62377eed0
Sha1:   325dc38802e31baa8f262baab15eb97998d44edd
Sha256: bc5281f82eff69713fd83cfe5b0592baf2d23e3e77f8240ff9a52d30e0bb4a97
                                        
                                            GET /pagead/html/r20181015/r20180604/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 16 Oct 2018 10:41:56 GMT
Expires: Tue, 30 Oct 2018 10:41:56 GMT
Etag: 12810928231326100212
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6940
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 541419
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6940
Md5:    d777326182433d075d044edb2f090fa9
Sha1:   6b39f197a7908fff24360fe81de0d221134a3197
Sha256: c8232f61c75ebbbe71b20c2aca70b70dcb6b65a0d35509a9ada4994a41c1976b
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 22 Oct 2018 16:49:06 GMT
Expires: Mon, 22 Oct 2018 18:49:06 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17301
Age: 989
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17301
Md5:    19b0f85b8b4b117274aff1ad8310ec11
Sha1:   695835c290fa5a0df4179f6939d3f62ab2af07d2
Sha256: 065250fb7caf1c4930fe4b2088d37fe31fc160b9f8c3e5644ded5348ea8e59ec
                                        
                                            GET /uploads/joecamel90/2009-04-06_012409_blowerdiagram.gif HTTP/1.1 
Host: www.justanswer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d67802690e0a2915226c6864f1d0a98981540227931
Range: bytes=0-
If-Range: "5b03-49029ca4dd540"

                                         
                                         104.16.42.9
HTTP/1.1 206 Partial Content
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:35 GMT
Content-Length: 40652
Connection: keep-alive
CF-Cache-Status: HIT
Cache-Control: public, max-age=86400
Cf-Bgj: imgq:85
Cf-Polished: origSize=23299
CF-RAY: 46dd8cb4a34f4255-OSL
Content-Range: bytes 0-23255/23256
Etag: "5b03-49029ca4dd540"
Expires: Tue, 23 Oct 2018 17:05:35 GMT
Last-Modified: Mon, 13 Sep 2010 20:17:49 GMT
Vary: Accept-Encoding
X-Rev2-Worker: rev2-worker-root.json-s5ohuh7sjnes3ylo
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 87a, 568 x 266
Size:   40652
Md5:    794f861d7b3e8f5191a08c9a8a0f0982
Sha1:   72636c31ee9607760c890dbf80f8f70590d4342b
Sha256: 867078de270ffa37119eecc7ccd7490f0e2ba7783f1a7a0c193b6ea8d0d6326b
                                        
                                            GET /r/collect?v=1&_v=j71&a=2121983214&t=pageview&_s=1&dl=http%3A%2F%2Fwww.gresk.com%2F&ul=en-us&de=UTF-8&dt=Technical%20Car%20Experts%20Answers%20everything%20you%20need&sd=24-bit&sr=1176x885&vp=1159x737&je=1&fl=10.0%20r45&_utma=225683148.1217336583.1540227931.1540227931.1540227931.1&_utmz=225683148.1540227931.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1540227935964&_u=IQBCAAQ~&jid=42322371&gjid=1976303548&cid=1217336583.1540227931&tid=UA-8303908-4&_gid=1338602793.1540227936&_r=1&z=170582111 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Mon, 22 Oct 2018 17:05:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /js/1624.030-2.024/ice.js HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d07dc87e627af7ea5b26e698dd4c5653f1540227931

                                         
                                         104.16.230.152
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 22 Oct 2018 17:05:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 16 Oct 2018 17:48:30 GMT
Etag: W/"b18cf-5785c296b291c"
Cache-Control: max-age=2592000
Expires: Wed, 21 Nov 2018 15:39:48 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46dd8cb6d4db4261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   209928
Md5:    913997c98ea4be2b6b28fa42fcba1794
Sha1:   8e6223ba62f7ad3707e85bca459453c1af71c517
Sha256: 1f4a9e683a96f1156706dc620d61040b76f566acdf296f4a05efde5d1faacf45
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.0Pi_1TlQmh4.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16515
Date: Thu, 18 Oct 2018 18:20:12 GMT
Expires: Fri, 18 Oct 2019 18:20:12 GMT
Last-Modified: Wed, 17 Oct 2018 21:44:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 341123
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16515
Md5:    87ac5366ad4b2e81e45c9502f38e40e4
Sha1:   b69743aeac4dea509e1c3a32987a5e4670fc7b99
Sha256: 4607644f5f665276fee9ef7c64c23be1470a35b7dc09e2b2033114bae96fa5a3
                                        
                                            GET /t.php?sc_project=7778842&java=1&security=dc132b9f&u1=B1DC176487A94F5EBE5A138E14625F0E&sc_random=0.8269734822429287&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1176&h=885&camefrom=&u=http%3A//www.gresk.com/&t=Technical%20Car%20Experts%20Answers%20everything%20you%20need&rcat=d&rdom=d&rdomg=new&bb=1&sc_snum=1&sess=7a9eb4&p=0 HTTP/1.1 
Host: c.statcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d235c057ff4be447f6ebcac7fa142f1221540227931

                                         
                                         104.20.2.47
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 22 Oct 2018 17:05:36 GMT
Content-Length: 151
Connection: keep-alive
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Set-Cookie: is_unique=sc7778842.1540227936.0; expires=Sat, 21-Oct-2023 17:05:36 GMT; path=/; domain=.statcounter.com
Server: cloudflare
CF-RAY: 46dd8cb7f2124267-OSL


--- Additional Info ---
Magic:  PNG image, 60 x 14, 1-bit colormap, non-interlaced
Size:   151
Md5:    5831f6fed105e9ec2a69b6d8f7b9c03c
Sha1:   d1c57da94fa4e47ab918878cd6e9c5ae513abad7
Sha256: 880c7fe03e73c978b49fa8d9a5a190a48b1c5cea2a6f360812548ed70fbd5545
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Oct 2018 11:03:05 GMT
Etag: 6EC8D40288FA87B9F899D1D7C6F56C99BD82CEA3
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=236862
Expires: Thu, 25 Oct 2018 10:53:18 GMT
Date: Mon, 22 Oct 2018 17:05:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    2e56d35fb2da9adba18a5d4eb34f93da
Sha1:   6ec8d40288fa87b9f899d1d7c6f56c99bd82cea3
Sha256: a2e8d6d86383f905553ecbf3f19696bc7bde493b9fdca8980e60a0f9524511f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Oct 2018 21:27:34 GMT
Etag: 7509FFCB9AE15209E856BFD45568A32CA86412DF
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=274324
Expires: Thu, 25 Oct 2018 21:17:40 GMT
Date: Mon, 22 Oct 2018 17:05:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    571c88f0e095b262dc178d866ddf5e27
Sha1:   7509ffcb9ae15209e856bfd45568a32ca86412df
Sha256: 4b29b34b24fc3d1ae1e6773ef955defb801916ffe58d7a4400bcf69df1134c05
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Oct 2018 21:27:34 GMT
Etag: 2013329D3F1EF566C3A335A92A1C23C5B023A167
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=274309
Expires: Thu, 25 Oct 2018 21:17:25 GMT
Date: Mon, 22 Oct 2018 17:05:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e73c40b02b54a6bf4f29914aac23f723
Sha1:   2013329d3f1ef566c3a335a92a1c23c5b023a167
Sha256: 42da59eabef38d2d9d7d164c329f165c8fecd5e229bed75f33006b967ec73285
                                        
                                            GET /pagead/ads?client=ca-pub-1773328083380569&output=html&adk=1812271804&adf=807048394&lmt=1520323934&plat=1%3A1081352%2C2%3A1082376%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C26%3A32768%2C30%3A34603008&guci=1.2.0.0.2.2.0&format=0x0&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&pra=5&wgl=0&adsid=NT&dt=1540227934717&bpp=100&fdt=108&idt=442&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&nras=1&correlator=3080649655016&frm=20&pv=2&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=6&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cs%7C&abl=NS&ppjl=f&fu=1040&bc=1&ifi=19&dtd=467 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Mon, 22 Oct 2018 17:05:36 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 22-Oct-2018 17:20:36 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:36 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   64
Md5:    0781e865abae44cf8b10dc725d63f539
Sha1:   c9f5024f2a546880e819749c32e23830fef111cb
Sha256: 24a7e2c0a5b68aec6126a39465b792b761aab892d7060d78fbab1e14a4cf3363
                                        
                                            GET /pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Mon, 22 Oct 2018 17:05:36 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 22-Oct-2018 17:20:36 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:36 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16979
Md5:    b921de63114a423a8ce70f6129931249
Sha1:   3aa85d0a69d171d655d20b4b671869dee2114178
Sha256: 1014c75f10f1cd69cf2bb73fa231de5322830ec504090b3c57494e94cfeb7148
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:36 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4fb83ae6af8a7c321eaa857ddd3ab9b6
Sha1:   e175dcdc550aba6cd9ef9fc0b68ebeb2052cf7c2
Sha256: f7f695a17eb03233baffef6c5cd8f4db22dc057d5a14822c7eff43a2690d5ba6
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Oct 2018 17:05:36 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1cc32007dac2df791b0bb9b94aded9c2
Sha1:   9dfc0abd21c952064fbcfabe75446ee056fc7765
Sha256: fc9d11b2fb22459c1b8a1ae10096922d37db6283db09406b0ec749da976abc9b
                                        
                                            GET /usync/manage HTTP/1.1 
Host: router.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d07dc87e627af7ea5b26e698dd4c5653f1540227931

                                         
                                         104.16.229.152
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Mon, 22 Oct 2018 17:05:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
P3P: CP="NON DSP NID OUR COR"
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46dd8cbc5e3e42b5-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   712
Md5:    a260b5ebd689581b0df58e4982650816
Sha1:   8868dde55a108a1e443e846ab496c80e86b08e11
Sha256: 3f5fd76bc7b5e1939dd334c905a5826e6e01cf7d3c66c347d76cd5ca55f9340c
                                        
                                            GET /pagead/gadgets/suggestion_autolayout_V2/score_plain_no_logo.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 22 Oct 2018 11:27:59 GMT
Expires: Tue, 23 Oct 2018 11:27:59 GMT
Etag: 15091227447931526669
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25476
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 20258
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25476
Md5:    ff2d7fe806506d98d9c5357d5bebd1ca
Sha1:   807fcfc28f3ccec281dd40975141a29acaca2a19
Sha256: af316712d73c7cf841fd03902b29355ebf6fa88b0989f2c84e5c9551689a640b
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 22 Oct 2018 16:46:06 GMT
Expires: Mon, 22 Oct 2018 18:46:06 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17301
Cache-Control: public, max-age=7200
Age: 1171
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17301
Md5:    19b0f85b8b4b117274aff1ad8310ec11
Sha1:   695835c290fa5a0df4179f6939d3f62ab2af07d2
Sha256: 065250fb7caf1c4930fe4b2088d37fe31fc160b9f8c3e5644ded5348ea8e59ec
                                        
                                            GET /pagead/gadgets/suggestion_autolayout_V2/score_plain_no_logo.css HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 22 Oct 2018 04:42:33 GMT
Expires: Tue, 23 Oct 2018 04:42:33 GMT
Etag: 12230671297066499375
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 708
X-XSS-Protection: 1; mode=block
Age: 44584
Cache-Control: public, max-age=86400
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   708
Md5:    ba2e77a9b9688e8c791298ebca222097
Sha1:   f14272f0a38b3d0527d46ce7a895141ce22d6c8e
Sha256: 5cc737672d5844c672f1a98ed8940da7b2fa91a88d458a53230abe6a67ef7a0a
                                        
                                            POST /inputs/c2567968-6d7d-4427-a7bb-eaab4a243135/tag/ice HTTP/1.1 
Host: logs-01.loggly.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: text/plain; charset=UTF-8
Referer: http://www.gresk.com/
Content-Length: 211
Origin: http://www.gresk.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.209.84.18
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.12.1
Date: Mon, 22 Oct 2018 17:05:37 GMT
Content-Length: 19
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Authorization,Host,Content-Type,X-Forwarded-For,X-LOGGLY-TAG,X-Real-IP


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   19
Md5:    b5efa112ce475f8bf73086a68521ea2e
Sha1:   4c4e7a9e8feb3e4595b4baf2db4466df001afa61
Sha256: cdc7a3d8f9ce204e8853c2f7088b9c3fe488432314d1ea6c17cf8fd4ae179261
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=http%3A%2F%2Fwww.gresk.com&url=http%3A%2F%2Fwww.gresk.com%2F2013%2F09%2Ftruck-window-will-not-roll-up.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:37 GMT
Date: Mon, 22 Oct 2018 17:05:37 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3918
Md5:    769926d991c49b50bbdcb3cf85cbdfa8
Sha1:   2c370609e530bc697c237eb6649a935adcf3193d
Sha256: 7ac5cb89a607c6796f80b414f6889bbf5efd2a4616f7badbf64e893252ce3bb0
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=http%3A%2F%2Fwww.gresk.com&url=http%3A%2F%2Fwww.gresk.com%2F2013%2F10%2Fcitroen-saxo-keyfob-resyncing.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:37 GMT
Date: Mon, 22 Oct 2018 17:05:37 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3920
Md5:    15968086f566e7ffc818ad388bf6edcf
Sha1:   9f3d80ced5cc48c12d518a803dd824454c118cfe
Sha256: d7543525f34ad44873719ccec909262b27a145463c6055721869a9fd2a118a8e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=169445
Date: Mon, 22 Oct 2018 17:05:38 GMT
Etag: "5bcdc327-1d7"
Expires: Wed, 24 Oct 2018 16:09:43 GMT
Last-Modified: Mon, 22 Oct 2018 12:31:35 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b06492debfced08c318412de96cd063a
Sha1:   d65bcc33c6e71732389fc41ebc5b82a4aea55c52
Sha256: 739151cd134a56ca3bedc0b0f036e3252db2db7083160560ad287addeb731430
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=144301
Date: Mon, 22 Oct 2018 17:05:38 GMT
Etag: "5bcd6c75-1d7"
Expires: Wed, 24 Oct 2018 09:10:39 GMT
Last-Modified: Mon, 22 Oct 2018 06:21:41 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    429e06769270293577438da05089d11c
Sha1:   fba4fac48ffea1adf64b407408ddce9e2fa83270
Sha256: 811ad26cce4ce68f43092221a14f4244309e87234791186c8a5de7259937d48a
                                        
                                            GET /pagead/adview?ai=CO3FvYAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQBSC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1SMM-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=CAWASkhYrTo&tpd=AGWhJmtCD0Ah6Mz3Uh_y_BSWX36igh98ApVO1SfiwN_AbkRNgQ&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:38 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUlPmJTbudyDPjjuZ2dHvJW2ICkRciEDXFb_qAnlY_Kh7xz6YgyLBmn6gMXp; expires=Wed, 21-Oct-2020 17:05:38 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:38 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=http%3A%2F%2Fwww.gresk.com&url=http%3A%2F%2Fwww.gresk.com%2F2013%2F09%2Ftemperature-gauge-will-go-up-to-hot.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:38 GMT
Date: Mon, 22 Oct 2018 17:05:38 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3926
Md5:    08d5422d2a4d7a1d10c91eeb9fb2a800
Sha1:   a8dc6ff0247d9afdfe33a1662c35ec34c5acc44e
Sha256: ba9fb084eaeb8d2ad4c0a7a991e28cf16ee5c16e99794665a308e7b6751266ec
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=http%3A%2F%2Fwww.gresk.com&url=http%3A%2F%2Fwww.gresk.com%2F2013%2F10%2Fi-hear-rattling-coming-from-drivers.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:38 GMT
Date: Mon, 22 Oct 2018 17:05:38 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3920
Md5:    6fd81f5d2f6eb480af0b192b4c27c8b1
Sha1:   85a94bb85941155b08a9582b22aa2cab6f50ddb3
Sha256: b7febac8d6f2c065c02d289aae5f8230b69c56c984de07a7eab8f09834e20196
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=http%3A%2F%2Fwww.gresk.com&url=http%3A%2F%2Fwww.gresk.com%2F2013%2F09%2Fclimate-control-will-not-turn-off.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:38 GMT
Date: Mon, 22 Oct 2018 17:05:38 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3922
Md5:    3a7bfa88ff0926217e850d3d2b9b71a3
Sha1:   aeb19c84295191950243c44ebe0fd1dd3a1e8d3d
Sha256: bcd793abf779166861ac6fab48a7e207f41b7c277cd9095e25cde72ef1cae297
                                        
                                            GET /pagead/adview?ai=CPxaLYAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQByC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1SsM-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=WuGIuPES_e8&tpd=AGWhJmtr-FGn5PxSB4igVzqH1QqOOy4PY_hSyzePTVpVYV2Lfw&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:38 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUlohqoBEGrn7WosAbQEltQwF500aI0DUovnR-_it1ZecZFGyPnoKKiQmaXp; expires=Wed, 21-Oct-2020 17:05:38 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:38 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=Cxr70YAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQCCC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1RcM-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=Vg7k91Mi42c&tpd=AGWhJmudxe5SCOvFn2Kajpsuov-CZwqJBgSLpa3fcA9v2ClsqA&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:38 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmV4jq6GGmLJAWF0B-ArCwaWlTB0WnpFsfL97bupRIWoCO-JHW81rUDxks8; expires=Wed, 21-Oct-2020 17:05:38 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:38 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/images/adchoices/icon.png HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 22 Oct 2018 16:51:22 GMT
Expires: Tue, 23 Oct 2018 16:51:22 GMT
Etag: 426692510519060060
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 295
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 857
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 15 x 15, 16-bit/color RGBA, non-interlaced
Size:   295
Md5:    d848a2953307aa510bdad31f5bf84671
Sha1:   e9d6d8daa9255f99e4e778ff4c4b47806bdb18c1
Sha256: 7fd59024b6ca83f11f7a3448ec148309a13b705725716df134f699e60a96eb1b
                                        
                                            GET /pagead/js/r20181015/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 16 Oct 2018 00:45:18 GMT
Expires: Tue, 30 Oct 2018 00:45:18 GMT
Etag: 5902380195963981246
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 27570
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 577222
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27570
Md5:    b4d310f94e1af018f907de2eb491b493
Sha1:   96b16ce99214ffcdf0d59b8a432c0e3889110a07
Sha256: 7394c00409948085b7971e02dd7f7264aa6d3928899c1b4eedede090c2ae13b7
                                        
                                            GET /pagead/js/r20181015/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 16 Oct 2018 00:47:01 GMT
Expires: Tue, 30 Oct 2018 00:47:01 GMT
Etag: 5672849149211090809
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1255
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 577119
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1255
Md5:    0f6da22e2865b3d24a33fa7c5fb386c6
Sha1:   9d78f9dbc67e17843c7e2c366a4d1f81b37e14a1
Sha256: ddcce03445d6a7173b8c3c682333314aaf3ca34f6c0c5a523ea677dee7a246ad
                                        
                                            GET /pagead/js/r20181015/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 16 Oct 2018 00:46:58 GMT
Expires: Tue, 30 Oct 2018 00:46:58 GMT
Etag: 17047083013848426997
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3401
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 577121
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3401
Md5:    855472fa5dc539578cd43237ff03eb69
Sha1:   43f622524347b43f47e48ba06f3d751dcec7c858
Sha256: 50c4a6535015ae9ecd9978b214ec838fd7542fffd19c3aaf5a9314b1bbdf494b
                                        
                                            GET /pagead/js/r20181015/r20110914/abg_lite.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 16 Oct 2018 00:46:00 GMT
Expires: Tue, 30 Oct 2018 00:46:00 GMT
Etag: 15071972117115789666
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 12869
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 577180
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12869
Md5:    b38aa4717ffe0ff671a3d2cf315e47da
Sha1:   49ac36dfb9b70177802f3b0db6eaf9e16775e48d
Sha256: cda2404ee2dbe7f1733398a1021d1436acc2675560c9c2e52724266c5c8c8ba1
                                        
                                            GET /AdServer/js/user_sync.html?p=156872&userIdMacro=PM_UID&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3DPM_UID HTTP/1.1 
Host: ads.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         88.221.73.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Last-Modified: Tue, 09 Oct 2018 07:19:23 GMT
Etag: "1300708-2bed-577c68e984ef3"
Server: Apache/2.2.15 (CentOS)
Accept-Ranges: bytes
Content-Encoding: gzip
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Content-Length: 4257
Cache-Control: max-age=107195
Expires: Tue, 23 Oct 2018 22:52:15 GMT
Date: Mon, 22 Oct 2018 17:05:40 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4257
Md5:    1152c6340c175914ea97c0f4df186343
Sha1:   a0a846e7cab2563eadcd7fb993da9f23f04867f5
Sha256: 8d03ffd485e33f2485816edd759f6fdc5b7fac6f26b165d07f2fd41e76ddcc50
                                        
                                            GET /pagead/adview?ai=CngxuYAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQAyC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1TsM-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=cmrvbm_3aIw&tpd=AGWhJmtAihRgyZTBfplpPh3tcPBtE95kBjDhBE4gT9eVXfjPFQ&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:40 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUl7KAIg91ICJLEwDtuMdBPFDA0IUcePMMMtloa0AUfcAWBj4otnQ9FrtHv_; expires=Wed, 21-Oct-2020 17:05:40 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:40 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=Cb4kBYAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQBiC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1S8M-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=BYlzI7hAgJ8&tpd=AGWhJmsiKmCRJyl-q94lCj0Pq00kXagGztFR3PUYg1dNVPdErQ&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:40 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmV73PnsyDSqQm9ZprMx16HKmfQBtLl1s5wsRHjmtQcZgtC9LndNLGdr_0N; expires=Wed, 21-Oct-2020 17:05:40 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:40 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=CuaapYAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQBCC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1ScM-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=s1nHoX1GQD4&tpd=AGWhJmsYKPEaOUwB8moMSDV-LCuXUWXK2w_nDG5C1g1zYymYSw&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:40 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUm95KqNMu4Ac7zoe_3waGVQXPsxyTRbfStInGHdi-hgD9JZUgoCJnGXOYrq; expires=Wed, 21-Oct-2020 17:05:40 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:40 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Oct 2018 23:51:50 GMT
Etag: 6500E232877FF318FF9FAC78D035BAEC84C67699
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=282947
Expires: Thu, 25 Oct 2018 23:41:27 GMT
Date: Mon, 22 Oct 2018 17:05:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    244cdd7c76a9fcd8abb026af738d5ad9
Sha1:   6500e232877ff318ff9fac78d035baec84c67699
Sha256: c8cf441505d84ce622011241b88b0e07e0b4cfc1991c1c99eadfbf1d49efb07c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Oct 2018 21:27:34 GMT
Etag: 5D199A39FAAE980B30D7C123560E3C23A9DEF71D
X-OCSP-Responder-ID: rmdccaocsp21
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=274304
Expires: Thu, 25 Oct 2018 21:17:24 GMT
Date: Mon, 22 Oct 2018 17:05:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    928febc4c88508b533e5ac0b33b81866
Sha1:   5d199a39faae980b30d7c123560e3c23a9def71d
Sha256: b7dfb64a207e129d0c365e9c06bec07203a6f4245b0acbed9321aa4661f212fb
                                        
                                            GET /pagead/adview?ai=ClUVDYAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQAiC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1T8M-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=0NO3eW80d6E&tpd=AGWhJmutrjINF-cxDmNlL-d55vYDSn74xfCupOiktzxckPLXlQ&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:40 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmM7BRh2dgTzcCNACI-UyI9S0aq9bMnlPx-9iANSwGip9WQVh2wuAF3_CVd; expires=Wed, 21-Oct-2020 17:05:40 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:40 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=CHqYnYAPOW-vtD5O27gTdjKrQCaXVnbEFjdzCup8Cpp6tjWsQASC61ZMSKAhgw9ykhZgYyAEBqAMByAPBBKoEigFP0NK1TMM-1rmKoeKBwKNP0TPExThMvao_I-zGp2tDNz1nV6nJL71PsGHMz3H4PjtS7UvhUMHEyZG91VPX6BYOAAUdA2jo05dn_HAS-G14ViU5aI3lmBLBqyW-eNJ1737Z6eztrO0DdKY8gcWjUo8H0lRSZHwWQYmfuCBh8UaMRZtbeVCWehO3wqCSBQQIGhgEoAZFwAYLgAfl9-I1qAeOzhuoB9XJG6gH2csbqAfPzBuoB6a-G9gHAdIICQiA4YAQEAEYAoAKAQ&sigh=gaWaIaDWQE0&tpd=AGWhJmsnuB3G4mOI3DkJ54P5g7Q6qqa2hFEbIJfcz4xj0EUICw&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 22 Oct 2018 17:05:40 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUn8xfsW9Ynkuhr68zLVOwVqLHPd5lfGoSCj-dWjzRvzP-WxKB-xPDLtklZN; expires=Wed, 21-Oct-2020 17:05:40 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Expires: Mon, 22 Oct 2018 17:05:40 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=http%3A%2F%2Fwww.gresk.com&url=http%3A%2F%2Fwww.gresk.com%2F2016%2F01%2Fthis-blog-is-being-updated-for-new-posts.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:40 GMT
Date: Mon, 22 Oct 2018 17:05:40 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3926
Md5:    4473a17753fa71454cc38217a259bb5f
Sha1:   fae70b34d0eaae22aa1b2ec7ab4c17279a2e80a0
Sha256: 4c5f7db27c535803c07f77711e7df982c63e530d4206c0ecfbac020d8ae2f5c0
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.0Pi_1TlQmh4.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 27650
Date: Thu, 18 Oct 2018 19:15:21 GMT
Expires: Fri, 18 Oct 2019 19:15:21 GMT
Last-Modified: Wed, 17 Oct 2018 21:44:49 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 337819
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   27650
Md5:    c7bd627b2cc100e7294a3db8739c822f
Sha1:   89b403d652979e5f5db884ed9da6a9b67a9dfc6b
Sha256: fa7e8da886723b21a04f13c99fab96d527e73b68a87d5aaf52df7e166d0ffe7f
                                        
                                            GET /AdServer/js/showad.js HTTP/1.1 
Host: ads.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156872&userIdMacro=PM_UID&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3DPM_UID

                                         
                                         88.221.73.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Last-Modified: Tue, 09 Oct 2018 07:18:58 GMT
Etag: "13006c6-9ebc-577c68d245522"
Server: Apache/2.2.15 (CentOS)
Accept-Ranges: bytes
Content-Encoding: gzip
Set-Cookie: KTPCACOOKIE=YES; domain=.pubmatic.com; path=/; max-age=7776000;
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Content-Length: 15268
Cache-Control: public, max-age=53215
Expires: Tue, 23 Oct 2018 07:52:35 GMT
Date: Mon, 22 Oct 2018 17:05:40 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15268
Md5:    572df93640526550a380f053c4048535
Sha1:   d8fc93cf5f8747657e64e468d11e7a38c0c0ce86
Sha256: b153072e090099fe3b2851a56c7ab9c47aeff10b343444e1b506169aee9ef9d8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 16 Oct 2018 10:37:18 GMT
Etag: 14C531F51A6589A628701A2254503B12EB0E28FF
X-OCSP-Responder-ID: rmdccaocsp21
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=62469
Expires: Tue, 23 Oct 2018 10:26:50 GMT
Date: Mon, 22 Oct 2018 17:05:41 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    e5b34104077fac0b4bc2b3c37e99bb40
Sha1:   14c531f51a6589a628701a2254503b12eb0e28ff
Sha256: 0890fe468f8a5b43ebb569eca4585b4f148dc57f49b52be738e945b686551a79
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=en&origin=http%3A%2F%2Fwww.gresk.com&url=http%3A%2F%2Fwww.gresk.com%2F2013%2F10%2Fuser-manual-for-casio-illuminator.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Mon, 22 Oct 2018 17:05:41 GMT
Date: Mon, 22 Oct 2018 17:05:41 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3921
Md5:    55611321314625689c2cf545fc3237b6
Sha1:   cd476dd90bbade805d22421f24fd480b1b20a1c7
Sha256: 3a66b3c4e35c3054ab6ae5132b0aa921019d10fe7859433a533f9b71df3f0cb3
                                        
                                            GET /pcs/activeview?xai=AKAOjssrlb1BMSCCbCGp0Pny8nz-l7O1LM769R_JoA3Vl3xY5o9WlaXLvdbyVo2UNjfqt8znT2ouSuTbZGyUjszwNrysfKTf00n-VB4I&sig=Cg0ArKJSzIrEwQ8pX7FvEAE&r=pv&id=osdim&uc=0&tgt=nf&cl=0&v=r20181015 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Mon, 22 Oct 2018 17:05:40 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /AdServer/js/user_sync.html?p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D HTTP/1.1 
Host: ads.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         88.221.73.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Last-Modified: Tue, 09 Oct 2018 07:19:23 GMT
Etag: "1300708-2bed-577c68e984ef3"
Server: Apache/2.2.15 (CentOS)
Accept-Ranges: bytes
Content-Encoding: gzip
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Content-Length: 4257
Cache-Control: max-age=107195
Expires: Tue, 23 Oct 2018 22:52:15 GMT
Date: Mon, 22 Oct 2018 17:05:40 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4257
Md5:    1152c6340c175914ea97c0f4df186343
Sha1:   a0a846e7cab2563eadcd7fb993da9f23f04867f5
Sha256: 8d03ffd485e33f2485816edd759f6fdc5b7fac6f26b165d07f2fd41e76ddcc50
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.gresk.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.0Pi_1TlQmh4.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMY-_SbKz_AbfJ2SxPNkybSQ9L9aA%2Fm%3D__features__ HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: NID=141=TZDukeUNihdZ52gGfUm6gpzUxz85Cvxj-Xp9xN7fQFlXRsqsFkDSk9hpA6MMtIBgagMmTHABQWqR2HpPlothXioEqoNRsieCaZJ74Z-YNPfdByh8Udqqwq2xDDCuwG4U

                                         
                                         172.217.20.45
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 22 Oct 2018 17:05:41 GMT
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   367
Md5:    4fbddef1494204f5a8f8822c8cbe551d
Sha1:   393ee8109d050f5a1f6de32f88b5fba22cd0c822
Sha256: 2a9cdf03b0af9b2add3c7d3182bb9077c143cbbdf7cce53bd3ae6091ed1c699f
                                        
                                            GET /bg/hNJx4Y5fMWhVzGvPhqQrpyvDp5obhxA4fQ-3FHe4E9I.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1773328083380569&output=html&h=520&slotname=1472028269&adk=2497599132&adf=807048394&w=1040&cr_col=4&cr_row=2&fwrn=2&lmt=1520323934&rafmt=9&guci=1.2.0.0.2.2.0&format=1040x520&url=http%3A%2F%2Fwww.gresk.com%2F&ea=0&flash=10.0.45&crui=image_stacked&fwr=0&wgl=0&adsid=NT&dt=1540227934847&bpp=183&fdt=358&idt=500&shv=r20181015&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=0x0&nras=1&correlator=3080649655016&frm=20&pv=1&ga_vid=1217336583.1540227931&ga_sid=1540227931&ga_hid=2121983214&ga_fc=1&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=80&ady=10378&biw=1159&bih=737&scr_x=0&scr_y=0&eid=4089042%2C21060853%2C20195143&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1168&bc=1&ifi=20&dtd=533

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4996
Date: Mon, 15 Oct 2018 21:18:37 GMT
Expires: Tue, 15 Oct 2019 21:18:37 GMT
Last-Modified: Wed, 10 Oct 2018 11:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 589624
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4996
Md5:    2518c0f29ce4fea55d9e886c79ba8e03
Sha1:   63270d791ed0686552f59e4741b1602665f45015
Sha256: b4dff4d0f9f111d6bccc2dc3fe396eb7eec92ba2ed12b1aad1885586a5fb2d7f
                                        
                                            GET /ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X HTTP/1.1 
Host: ssc-cms.33across.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         208.100.17.177
HTTP/1.1 200
Content-Type: image/gif
                                        
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01-Jan-70 00:00:01 GMT
X-33X-Status: 208
Server: 33XP004
Content-Length: 43
Date: Mon, 22 Oct 2018 17:05:40 GMT
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    6d22e4f2d2057c6e8d6fab098e76e80f
Sha1:   b80b11203d97fe01c5597ca3be70406ea48f5709
Sha256: afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
                                        
                                            GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1 
Host: b1sync.zemanta.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         162.210.196.115
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Content-Length: 124
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__&s=2
P3P: CP="We do not support P3P header."
Pragma: no-cache
Set-Cookie: zuid=Vm-l1wQZbkORJpFIRNdB; Path=/; Domain=zemanta.com; Expires=Tue, 22 Oct 2019 17:05:42 GMT; Max-Age=31536000
Date: Mon, 22 Oct 2018 17:05:42 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   124
Md5:    a3959abab3d085b80fe52fa66dd074b8
Sha1:   1697527c5dcc0148ef9697195c49cb1ea82f3766
Sha256: ac841e80bb765085db14f6e073a67bb98957165843052ce44607a02da3e97e29
                                        
                                            GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__&s=2 HTTP/1.1 
Host: b1sync.zemanta.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: zuid=Vm-l1wQZbkORJpFIRNdB

                                         
                                         162.210.196.115
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Content-Length: 90
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://router.infolinks.com/dyn/zmn-usync?uid=Vm-l1wQZbkORJpFIRNdB
P3P: CP="We do not support P3P header."
Pragma: no-cache
Set-Cookie: zuid=Vm-l1wQZbkORJpFIRNdB; Path=/; Domain=zemanta.com; Expires=Tue, 22 Oct 2019 17:05:42 GMT; Max-Age=31536000
Date: Mon, 22 Oct 2018 17:05:42 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   90
Md5:    13d5f7f19fa858b645dad23e90228d47
Sha1:   3942aaf02b9d620ce24d1533d6bd6679711b6561
Sha256: 7f8413890a9334b038209cf0e749417dc2a72a631a290675e4a1a75b8a1de734
                                        
                                            GET /dyn/zmn-usync?uid=Vm-l1wQZbkORJpFIRNdB HTTP/1.1 
Host: router.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/
Cookie: __cfduid=d07dc87e627af7ea5b26e698dd4c5653f1540227931

                                         
                                         104.16.229.152
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 22 Oct 2018 17:05:43 GMT
Content-Length: 35
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Set-Cookie: ZMNUSERCOOKIE=Vm-l1wQZbkORJpFIRNdB; Domain=infolinks.com; Expires=Sun, 20-Jan-2019 17:05:43 GMT; Path=/
Pragma: no-cache
Expires: Sun, 22 Oct 2017 17:05:43 GMT
P3P: CP="NON DSP NID OUR COR"
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46dd8ce19c1542b5-OSL


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   35
Md5:    c0a97b478925284bd94e3271f6197c08
Sha1:   543e1556715b858c654397c62c0894dd6f294703
Sha256: 16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
                                        
                                            GET /AdServer/js/showad.js HTTP/1.1 
Host: ads.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D
Cookie: KTPCACOOKIE=YES; pi=156872:2; repi=1
If-Modified-Since: Tue, 09 Oct 2018 07:18:58 GMT
If-None-Match: "13006c6-9ebc-577c68d245522"
Cache-Control: max-age=0

                                         
                                         88.221.73.109
HTTP/1.1 304 Not Modified
Content-Type: text/html; charset=UTF-8
                                        
Last-Modified: Tue, 09 Oct 2018 07:18:58 GMT
Etag: "13006c6-9ebc-577c68d245522"
Cache-Control: public, max-age=53211
Expires: Tue, 23 Oct 2018 07:52:35 GMT
Date: Mon, 22 Oct 2018 17:05:44 GMT
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 16 Oct 2018 21:25:16 GMT
Etag: 53E36E2D06517E1F8E9506311A19DE06E7833C4E
X-OCSP-Responder-ID: rmdccaocsp25
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=101319
Expires: Tue, 23 Oct 2018 21:14:23 GMT
Date: Mon, 22 Oct 2018 17:05:44 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    695ab4d67ffb51c34696bdda2ffcb18d
Sha1:   53e36e2d06517e1f8e9506311a19de06e7833c4e
Sha256: 604ec2cb36a43cea2a7981ed1f8ad5ed0b176dfec187db2d7475c874aa67f540
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Oct 2018 21:27:34 GMT
Etag: D1010C67251EA42DAC745AE1F94CFF081860DF4D
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=274292
Expires: Thu, 25 Oct 2018 21:17:16 GMT
Date: Mon, 22 Oct 2018 17:05:44 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    6e678f509088b3b90c3f0cf9551e7d13
Sha1:   d1010c67251ea42dac745ae1f94cff081860df4d
Sha256: 252416cd0458948b45eecda59379be909edb168ced77e89d235de0cf78980785
                                        
                                            GET /AdServer/PugMaster?rnd=32548728&p=60809&s=0&a=0&ptask=ALL&np=0&fp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&sec=1&kdntuid=1 HTTP/1.1 
Host: image6.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js
Cookie: KTPCACOOKIE=YES; pi=60809:4

                                         
                                         185.64.189.115
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Set-Cookie: KADUSERCOOKIE=A9F792B9-0906-439A-9534-CB4D42BE5769; domain=pubmatic.com; path=/; max-age=7776000; DPSync2=1541376000%3A201_197%7C1540252800%3A174%7C1542758400%3A198; domain=pubmatic.com; path=/; max-age=7776000; SyncRTB2=1540771200%3A15_2%7C1541030400%3A63%7C1541376000%3A64_21_46_55_194_99_13_176_56_5_161_7_81_3_8_92_22_189_93_170_54_78; domain=pubmatic.com; path=/; max-age=7776000;
Date: Mon, 22 Oct 2018 17:05:44 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   7535
Md5:    808fb9e19f5c5cae3a64b1f1008c9229
Sha1:   b6269f8c4abdf8e7e16ac7200487a75912d16bd1
Sha256: 6e8f3c73ce9893f4d5ce973685680fdbc06b780a3f60c9f3dbd989bc7ee5192a
                                        
                                            GET /cm/&gdpr=0&gdpr_consent= HTTP/1.1 
Host: pubmatic2waycm-atl.netmng.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /match/bounce/current?networkId=17100&version=1&nuid=A9F792B9-0906-439A-9534-CB4D42BE5769&gdpr=0&gdpr_consent= HTTP/1.1 
Host: pubmatic-match.dotomi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /r/cs?pid=1&gdpr=0&gdpr_consent= HTTP/1.1 
Host: ad.turn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /getuid?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gresk.com/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE%20YOUR%20PIGGYBACK%20COOKIES%20HERE]&gdpr=0&gdpr_consent= HTTP/1.1 
Host: c1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /redirect?ex=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 
Host: match.rundsp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /AdServer/SPug?partnerID=60809&gdpr=0&gdpr_consent= HTTP/1.1 
Host: simage4.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js
Cookie: KTPCACOOKIE=YES; pi=60809:4; KADUSERCOOKIE=A9F792B9-0906-439A-9534-CB4D42BE5769; DPSync2=1541376000%3A201_197%7C1540252800%3A174%7C1542758400%3A198; SyncRTB2=1540771200%3A15_2%7C1541030400%3A63%7C1541376000%3A64_21_46_55_194_99_13_176_56_5_161_7_81_3_8_92_22_189_93_170_54_78

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 
Host: pixel-sync.sitescout.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /map/ext/api/trackingcallback/v1?accessToken=pubmatic-user-sync&pmUrl=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MzM1NCZ0bD0xMjk2MDA%3D%26piggybackCookie%3D%24UID HTTP/1.1 
Host: sync.widespace.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=pmeb&google_sc=1&google_hm=qfeSuQkGQ5qVNMtNQr5XaQ%3D%3D HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js
Cookie: IDE=AHWqTUn8xfsW9Ynkuhr68zLVOwVqLHPd5lfGoSCj-dWjzRvzP-WxKB-xPDLtklZN

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /getuid/d1ba4609?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzNDImdGw9MTI5NjAw%26piggybackCookie%3D HTTP/1.1 
Host: rtb.gumgum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxODQmdGw9MTU3NjgwMA==&r=https://pixel.tapad.com/idsync/ex/receive?partner_id=PUBMATIC_RTB&partner_device_id=${PUBMATIC_UID} HTTP/1.1 
Host: simage2.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js
Cookie: KTPCACOOKIE=YES; pi=60809:4; KADUSERCOOKIE=A9F792B9-0906-439A-9534-CB4D42BE5769; DPSync2=1541376000%3A201_197%7C1540252800%3A174%7C1542758400%3A198; SyncRTB2=1540771200%3A15_2%7C1541030400%3A63%7C1541376000%3A64_21_46_55_194_99_13_176_56_5_161_7_81_3_8_92_22_189_93_170_54_78

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 
Host: a.tribalfusion.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /p/cm/pubmatic/&gdpr=0&gdpr_consent= HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=pubmatic&google_cm&google_sc HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js
Cookie: IDE=AHWqTUn8xfsW9Ynkuhr68zLVOwVqLHPd5lfGoSCj-dWjzRvzP-WxKB-xPDLtklZN

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /prod/1/digitrust.min.js HTTP/1.1 
Host: cdn.digitru.st
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 
Host: pm.w55c.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 
Host: um.simpli.fi
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /dyn/usersync?pmuservalue=A9F792B9-0906-439A-9534-CB4D42BE5769 HTTP/1.1 
Host: router.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js
Cookie: __cfduid=d07dc87e627af7ea5b26e698dd4c5653f1540227931; ZMNUSERCOOKIE=Vm-l1wQZbkORJpFIRNdB

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/showad.js

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /getuid?https://s.cpx.to/ca.png?ref=http%253A%252F%252Fwww.gresk.com%252F&pid=12306&adnxs_uid=$UID HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
A