Overview

URL imgserve.net/img-5513fbbee23b1.html
IP104.27.171.91
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-10-17 10:09:08 CEST
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.171.91

Date UQ / IDS / BL URL IP
2018-11-15 04:11:18 +0100
2 - 1 - 1 imgserve.net/img-5312b02a2c55f.html 104.27.171.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af15fe0f.html 104.27.171.91
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-09 02:53:11 +0100
2 - 1 - 2 imgserve.net/img-54b8f7f76f9f2.html 104.27.171.91
2018-11-07 21:06:07 +0100
2 - 0 - 1 imgserve.net/img-531b3b116a506.html 104.27.171.91
2018-11-07 15:11:36 +0100
2 - 0 - 2 imgserve.net/img-51f083d266342.html 104.27.171.91
2018-11-05 18:07:20 +0100
2 - 0 - 2 imgserve.net/img-51ea9c13dbd6c.html 104.27.171.91
2018-11-05 08:10:59 +0100
2 - 0 - 2 imgserve.net/img-54b40e54bb3a9.html 104.27.171.91
2018-11-04 04:56:26 +0100
2 - 0 - 1 imgserve.net/img-54d4ca1f5453f.html 104.27.171.91

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-11-16 13:23:52 +0100
0 - 0 - 0 www.farmlab.ie 104.27.174.124
2018-11-16 13:18:40 +0100
0 - 0 - 0 https://events-handling-svc.cordial.io/c2/226 (...) 104.18.79.131
2018-11-16 13:14:05 +0100
0 - 0 - 3 audiobookshare.com/play-Milrrnc5GNg/holiday-i (...) 104.27.168.21
2018-11-16 13:07:00 +0100
0 - 0 - 5 audiobookshare.com/play-4Bs0qUB3BHQ/deepak-ch (...) 104.27.168.21
2018-11-16 13:01:18 +0100
0 - 1 - 0 sexwebcamera.com/ 104.27.190.31
2018-11-16 12:53:03 +0100
0 - 0 - 0 https://redbarrelsgames.com/forums/topic/imdb (...) 104.24.120.33
2018-11-16 12:50:01 +0100
0 - 1 - 0 https://new-appsad-cellular-dev.pw/5c9f4840-c (...) 104.28.15.159
2018-11-16 12:47:03 +0100
0 - 0 - 0 https://redbarrelsgames.com/forums/topic/fox% (...) 104.24.121.33
2018-11-16 12:46:19 +0100
0 - 0 - 0 https://mediakit.in.net//M3/?mes1=L 104.27.158.78
2018-11-16 12:45:56 +0100
0 - 0 - 1 situspokermu.com/wp-login.php?redirect_to=htt (...) 104.18.53.234

Last 10 reports on domain: imgserve.net

Date UQ / IDS / BL URL IP
2018-11-15 10:40:04 +0100
2 - 1 - 2 imgserve.net/img-547565868f825.html 104.27.170.91
2018-11-15 04:11:18 +0100
2 - 1 - 1 imgserve.net/img-5312b02a2c55f.html 104.27.171.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af03b425.html 104.27.170.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af15fe0f.html 104.27.171.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.170.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5197c3755eecd.html 104.27.170.91
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-12 18:26:19 +0100
2 - 1 - 1 imgserve.net/img-536ad1a395425.html 104.27.170.91
2018-11-09 02:53:11 +0100
2 - 1 - 2 imgserve.net/img-54b8f7f76f9f2.html 104.27.171.91


JavaScript

Executed Scripts (23)


Executed Evals (0)


Executed Writes (20)

#1 JavaScript::Write (size: 11, repeated: 1) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#2 JavaScript::Write (size: 6, repeated: 16) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 171, repeated: 1) - SHA256: cebe699ce3d0e3c6757898aff3ac8e74f0258faeaec4fe6462d8f4c3eb74080f

                                        < a href = "http://kmylvwo5.com/tracker_clicks.php?a=1142&c=12470&b=36377&_t=1539763715"
id = "ad_link"
target = "_blank" > Check This FREE PORN Site Before It 's BANNED Forever</a>
                                    

#4 JavaScript::Write (size: 531, repeated: 1) - SHA256: 73fff82b742910c1610f9808384aeb93dc82f548633acfe7e63d6b372830d0be

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715154" > < /iframe>
                                    

#5 JavaScript::Write (size: 531, repeated: 1) - SHA256: eb1099627d3b7242bf9b26da84d9093023cd5be22043e3277d1b0c57c9e7ece6

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715384" > < /iframe>
                                    

#6 JavaScript::Write (size: 531, repeated: 1) - SHA256: acc0d7736b010e58ad0fc2749b50297df986b6304c3f74f4d0e266608c50a2cb

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715698" > < /iframe>
                                    

#7 JavaScript::Write (size: 531, repeated: 1) - SHA256: f55eb9caff763c77186a2a3b20d4781d1d9cb8a9c303bb7ded80b6cd801773de

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715783" > < /iframe>
                                    

#8 JavaScript::Write (size: 531, repeated: 1) - SHA256: c200fed84bff926b112f6c5235958c61a66b47d5e97b0900e177da3bd7878031

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715881" > < /iframe>
                                    

#9 JavaScript::Write (size: 531, repeated: 1) - SHA256: a4edf1d5b01ad1e80550dcb0c371fc3d0d81492827dec2ee5f3199ada789a513

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715916" > < /iframe>
                                    

#10 JavaScript::Write (size: 531, repeated: 1) - SHA256: 7a17858447009d9ba89a4d89022ccb30172bd1b1daa93efa00600cd96e77803e

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715952" > < /iframe>
                                    

#11 JavaScript::Write (size: 531, repeated: 1) - SHA256: a8d58d14ed6851f18ce32e10cb8f27bcb90f0ab9cb2ca81fcf745ad519eb4f73

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715986" > < /iframe>
                                    

#12 JavaScript::Write (size: 531, repeated: 1) - SHA256: 79846b7e6de46aee4b427951846d5f4afee10df240a48fe7e0105c90cf71503f

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716021" > < /iframe>
                                    

#13 JavaScript::Write (size: 531, repeated: 1) - SHA256: 1e850a5e22894ad6151db8fdbb49afb5b4b4de0f744bc6b1d7927a9f72b97912

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716077" > < /iframe>
                                    

#14 JavaScript::Write (size: 531, repeated: 1) - SHA256: 2c45ace0b5dbf170ec3760e05e521c290b3b15d74553b015fd3d72d8fee9e785

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716114" > < /iframe>
                                    

#15 JavaScript::Write (size: 531, repeated: 1) - SHA256: b243d454c4388f5ffa258c5b5e7ded0e24273375fceba087606903afff1631f3

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716165" > < /iframe>
                                    

#16 JavaScript::Write (size: 531, repeated: 1) - SHA256: b7260b6aa0464925617feed835a435a09aff122e79d91c2c2283700d4eee02ad

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716203" > < /iframe>
                                    

#17 JavaScript::Write (size: 531, repeated: 1) - SHA256: 50af91a02b26864a3a3eba56918e47b232771681d9dbc71def9a35c92e1e807c

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716350" > < /iframe>
                                    

#18 JavaScript::Write (size: 531, repeated: 1) - SHA256: ef65e7adb4b0a57d0f7da8b3d4b8177082fc3cf1828aaa08a50a828b087e6b2f

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763717264" > < /iframe>
                                    

#19 JavaScript::Write (size: 531, repeated: 1) - SHA256: c1b40130487d504264835662101fb1f2e6a4ed22846a649044c3e964bb9c7000

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763717380" > < /iframe>
                                    

#20 JavaScript::Write (size: 90, repeated: 1) - SHA256: 77a7b16e63c85c1115c251e32d423d0f358ea426ac495d7247883f1e68ae9bee

                                        < script type = 'text/javascript'
src = 'http://5gl1x9qc.com/d/a/1142.php?ext=js&_t=93478054786
                                    


HTTP Transactions (80)


Request Response
                                        
                                            GET /img-5513fbbee23b1.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; expires=Thu, 17-Oct-19 08:08:34 GMT; path=/; domain=.imgserve.net; HttpOnly refererx=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; path=/ viewer=189665127ba131ab5833ccfd4b7e7e00; expires=Wed, 17-Oct-2018 09:08:34 GMT; path=/; domain=.imgserve.net viewerid=5513fbbee23b1; expires=Wed, 17-Oct-2018 09:08:34 GMT; path=/; domain=.imgserve.net imagen3=1; expires=Thu, 18-Oct-2018 08:08:34 GMT
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: cloudflare
CF-RAY: 46b1472dc68342bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9578
Md5:    a259749ff00ba6445c2e0166ae4720a9
Sha1:   d479bf7bb22da81932a9b9c58c21b2926f539e99
Sha256: efae14421407e96ea669393916ded74339c0ba518106aab93a9c5cd4644d11c4
                                        
                                            GET /css/styles.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 13 Jan 2015 07:23:52 GMT
Etag: W/"54b4c808-fceb"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1472eb6a442bb-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16363
Md5:    cdae48c2d228c78bcc72c4c0895ad283
Sha1:   a83d7527c3a8f3683094ff25f11ce7d76cfe0841
Sha256: c14d3811da0f79fcd55bc1af6daed9a29cfb6b7622b81f090a230a11ab08a090
                                        
                                            GET /js/jquery-1.7.1.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:20 GMT
Etag: W/"51ae97f4-16eac"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1472ee1024291-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33223
Md5:    797e5aeed7a915aa9423119040979407
Sha1:   1287bebc61e72f65aa726faeb9a27485a38b9707
Sha256: 4f74858d849a6a197bbf30d7bdb6003ae954f55c757c95aeaea94071fdff710c
                                        
                                            GET /css/smoothness/jquery-ui-1.8.18.custom.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:43 GMT
Etag: W/"51ae9a27-833b"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1472fc1164291-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7335
Md5:    8c3ae5f2631058b80fb6f6d84342ecd0
Sha1:   888aa2afe402561fe03a98b94b2abd7d48d69efd
Sha256: f9da0fc48c829ebfeb5079da87520156bd8e8f14d2ba4f3bdf4488fc49bba9d1
                                        
                                            GET /js/jquery-ui-1.8.18.custom.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:27 GMT
Etag: W/"51ae97fb-335f7"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1472fc6ca42bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   52155
Md5:    1c8b6494b85c448273f83a2814226e0e
Sha1:   f7713dd0a26d0cfaa051020b2b37d589414c45f1
Sha256: fec6535c94fe5fb5604068322a6a43b16ea598c98415d8fe05fc54e8176021a7
                                        
                                            GET /css/img/logo.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Content-Length: 21186
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:28 GMT
Etag: "52c2-4de5e76c8b600"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14731114a4291-OSL


--- Additional Info ---
Magic:  PNG image, 280 x 80, 8-bit/color RGBA, non-interlaced
Size:   21186
Md5:    0f2ef79913ef0d8ab7b994bb7c5fe9fe
Sha1:   a9f53968b43919d2db7f1ce7033a9f41a6d5ade3
Sha256: 5bf1fff11cc2949712da86d18ed92bef598cbdda2ab57f0d5e98357152e28667
                                        
                                            GET /css/img/pig.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Content-Length: 821
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:30 GMT
Etag: "335-4de5e76e73a80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1473116f342bb-OSL


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   821
Md5:    603b3f482f950ea6ecbe3f02e4527d51
Sha1:   cc218bdf4d001f3db5482e6290e3d2ba13969ca0
Sha256: 4a96458a5a569e653a34eeb335eafe180e28129ac00125392ee5bec392ccbb3d
                                        
                                            GET /css/img/menubutton.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Content-Length: 3494
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:29 GMT
Etag: "da6-4de5e76d7f840"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14731e70b42bb-OSL


--- Additional Info ---
Magic:  PNG image, 150 x 40, 8-bit/color RGBA, non-interlaced
Size:   3494
Md5:    d1394f343c66e133faf085d089c7994b
Sha1:   a4064bd855e37c837ca0071416244e20dea5a1fa
Sha256: ad28f482b6f4e37eeafc726c5d2058da03cf848a3397d09d25773ea6a6fe32ad
                                        
                                            GET /jquery/text.js?_t=Math.floor(Math.random()*99999999999) HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         104.16.195.215
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 17 Oct 2018 08:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d112c754b325a77296843c29cd1f7704a1539763714; expires=Thu, 17-Oct-19 08:08:34 GMT; path=/; domain=.5gl1x9qc.com; HttpOnly
Last-Modified: Wed, 29 Mar 2017 18:20:04 GMT
Etag: W/"58dbfad4-1c9"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:34 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14732525e4273-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    ce46a3c0de343339a689c89866261e07
Sha1:   15d7033005f8313d87ee7fc0c01ff04cfbc0408e
Sha256: 046a2434ac8093105cc19850e70be73d6d08b2ec52df39aa9df28e8e9503b606
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 471
Last-Modified: Sun, 14 Oct 2018 01:21:33 GMT
Etag: 5E911FA3F0AB2E44C9C4C034FC9FF70F18C81503
X-OCSP-Responder-ID: rmdccaocsp24
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
Cache-Control: public, no-transform, must-revalidate, max-age=320746
Expires: Sun, 21 Oct 2018 01:14:20 GMT
Date: Wed, 17 Oct 2018 08:08:34 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ee4cbc28a1495826fa71ae4ccbbf9862
Sha1:   5e911fa3f0ab2e44c9c4c034fc9ff70f18c81503
Sha256: 928f4a7dbcee4d73b7d15eb621806ce80e33b5dbcc561609928ece97c70648a3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 424B413FCAD941C040D692B87CDE897F59DB16AA
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=133710
Expires: Thu, 18 Oct 2018 21:17:04 GMT
Date: Wed, 17 Oct 2018 08:08:34 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    83c72f9ab989986ef6becba8e433c7ac
Sha1:   424b413fcad941c040d692b87cde897f59db16aa
Sha256: 88fa386cbec8abadec656da6ae494781daa1a1c8d14dc768376fc7ede025432e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: E8581583C2803974EDDB983E5584CDB37B4F9E14
X-OCSP-Responder-ID: rmdccaocsp26
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=133700
Expires: Thu, 18 Oct 2018 21:16:55 GMT
Date: Wed, 17 Oct 2018 08:08:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5e712a8f20f0ae131a32a41f82c55b67
Sha1:   e8581583c2803974eddb983e5584cdb37b4f9e14
Sha256: 65e0f33f70b334d388d92507b68dacbf8b7390892e3cb264962501c2836b9e79
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         104.20.208.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d070ac72b3b7b286b41460bb07130e3d91539763715; expires=Thu, 17-Oct-19 08:08:35 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Mon, 15 Oct 2018 11:58:03 GMT
Etag: W/"5bc480cb-423b4"
Expires: Wed, 17 Oct 2018 16:08:35 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b147331a5442c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   70162
Md5:    b6bb44f95a22a27e8b92d2ccbc591524
Sha1:   b5f4bf87301fb5291d70f392758d9c56ae374cc3
Sha256: e32b7829c99619bfa2c1de9e1ed9e9e515863b2d094e86c629c67c7350e8c96d

Alerts:
  urlquery:
    - Crypto currency mining script
                                        
                                            GET /css/img/bg2.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/styles.css
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Content-Length: 7637
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:23 GMT
Etag: "1dd5-4de5e767c6ac0"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:35 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14733d1ad4291-OSL


--- Additional Info ---
Magic:  PNG image, 2247 x 190, 8-bit colormap, non-interlaced
Size:   7637
Md5:    8388f9f5ebca3dd2c58b44f190687497
Sha1:   44678688ae09eb0b35eaef09f83771165d1104cb
Sha256: de57f5342874c0d1e33353e7e42b61134d2aab7cb52d1929e115b44049d5f525
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715154 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:35 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pK%D3%D6%C3%84%88%D5B%85%A5%7DDt%F7%C4%7E%FB%19%98y%F0%1C%21%DDL%8D2BIc%1DI%BAS%01%CC%9C%13X%26%B4U3%AF%A1%AAj%7B%DD%B5%1AU%E9%86%60q%29%FFn%A8%09%BC%8B%91%B7i%18%8F%B0%9Fa%F3%17%7Cg%28%A5%00%FB%3C%2F%A8m%24%17; expires=Thu, 18-Oct-2018 08:08:35 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   816
Md5:    da809140c8f58a5b8b7fe470c467781e
Sha1:   99f0c12348c9a77e92fbea3464aaba571aa1dc83
Sha256: 82a7ca032f7f237477568c56b01aa07085c7e181e6d4701d579a1cd0b827f2ae
                                        
                                            GET /imgs-5513fbbee23b1.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b14734076d42bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   393
Md5:    683d975f0afd4979f56ee8c21b4218a3
Sha1:   629952f74abdbbe8094b0640c79206544c7feb7a
Sha256: 844bce032ed8712745d47fd2ae04d63efdeeda3f9451b7249d1e200fe52216bd
                                        
                                            GET /image-5513fbbee23b1.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b14734076e42bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /adserver.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b1473422244255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /view.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b1473422224255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /z/775519059 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         104.24.120.232
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d6bfb6d63ca32a4aabe7b99da163aa3441539763715; expires=Thu, 17-Oct-19 08:08:35 GMT; path=/; domain=.tweowhvrim.review; HttpOnly
Location: https://tweowhvrim.review/z/775519059
Server: cloudflare
CF-RAY: 46b1473407f242c1-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   245
Md5:    99f50241a1adc488caddb00e123fcabb
Sha1:   346852cfe4c93389e12aa00c64cd8c5233b33564
Sha256: 0afe4a5777c0cae75c630c160c29869e7c0e38014ca7073557fda8a6925b54a1
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /images/big/2015/03/26/5513fbbee2373.jpg HTTP/1.1 
Host: s12.imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Content-Length: 737175
Connection: keep-alive
Last-Modified: Thu, 26 Mar 2015 12:32:36 GMT
Etag: "5513fc64-b3f97"
Expires: Sat, 14 Oct 2028 08:08:35 GMT
Cache-Control: public, max-age=315360000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14732569d4279-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   737175
Md5:    2633773fc11f20646d646b5e3a1133f6
Sha1:   8fc67a49063b30561f81627a56bb7c93971032ed
Sha256: 309fb06db18dc69f8fe5e79173b791cf0a8467b52d3166a61e61c76d83c611bd
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715384 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pK%D3%D6%C3%84%88%D5B%85%A5%7DDt%F7%C4%7E%FB%19%98y%F0%1C%21%DDL%8D2BIc%1DI%BAS%01%CC%9C%13X%26%B4U3%AF%A1%AAj%7B%DD%B5%1AU%E9%86%60q%29%FFn%A8%09%BC%8B%91%B7i%18%8F%B0%9Fa%F3%17%7Cg%28%A5%00%FB%3C%2F%A8m%24%17

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:35 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26; expires=Thu, 18-Oct-2018 08:08:35 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   669
Md5:    c7b0a637d74062eacb9535233451a46d
Sha1:   5a84045ccaebbe7cc1fbe87472a3e80249f07cba
Sha256: 0f8ad84f973b59373fee3a40ad6551ddaf4f20e2af7f6ae4c24c0c31acf77e40
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 15 Oct 2018 06:17:38 GMT
Etag: 732F14FEBD09ACC614C1D08ABDC9D4FF7186BC36
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 278
Cache-Control: public, no-transform, must-revalidate, max-age=424699
Expires: Mon, 22 Oct 2018 06:06:54 GMT
Date: Wed, 17 Oct 2018 08:08:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   278
Md5:    58279d330a7756734a389b4a2cf552cd
Sha1:   732f14febd09acc614c1d08abdc9d4ff7186bc36
Sha256: 0c45ef8b0b0a8021bc28e51b81788c3c3587b61a6e6a3f4561368cb9889cf664
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pK%D3%D6%C3%84%88%D5B%85%A5%7DDt%F7%C4%7E%FB%19%98y%F0%1C%21%DDL%8D2BIc%1DI%BAS%01%CC%9C%13X%26%B4U3%AF%A1%AAj%7B%DD%B5%1AU%E9%86%60q%29%FFn%A8%09%BC%8B%91%B7i%18%8F%B0%9Fa%F3%17%7Cg%28%A5%00%FB%3C%2F%A8m%24%17

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/118525/8b8e3adb5aa71d9c7a4712657708db3e90978635.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715154
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pK%D3%D6%C3%84%88%D5B%85%A5%7DDt%F7%C4%7E%FB%19%98y%F0%1C%21%DDL%8D2BIc%1DI%BAS%01%CC%9C%13X%26%B4U3%AF%A1%AAj%7B%DD%B5%1AU%E9%86%60q%29%FFn%A8%09%BC%8B%91%B7i%18%8F%B0%9Fa%F3%17%7Cg%28%A5%00%FB%3C%2F%A8m%24%17

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1539004789"
Cache-Control: max-age=86400
Content-Length: 192493
Last-Modified: Mon, 08 Oct 2018 13:19:49 GMT
X-HW: 1539763715.dop003.sk1.t,1539763715.cds038.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   192493
Md5:    ad4b26e4017742f56a179f29f80343d9
Sha1:   8b8e3adb5aa71d9c7a4712657708db3e90978635
Sha256: 78f9704d0baf00017d3929813942b5ecc3d34c52379d6f3ba77b613782c9dc49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 81BA3F7F2D06068D6A1DEE440E749D321E073BFD
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 313
Cache-Control: public, no-transform, must-revalidate, max-age=133707
Expires: Thu, 18 Oct 2018 21:17:02 GMT
Date: Wed, 17 Oct 2018 08:08:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   313
Md5:    5b1a178dc2ebf50f750216ca7402f74b
Sha1:   81ba3f7f2d06068d6a1dee440e749d321e073bfd
Sha256: ede2d28fbd261789543608426fdfb751321f4f9cbc7b951a81e7ff3a48c670d8
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pK%D3%D6%C3%84%88%D5B%85%A5%7DDt%F7%C4%7E%FB%19%98y%F0%1C%21%DDL%8D2BIc%1DI%BAS%01%CC%9C%13X%26%B4U3%AF%A1%AAj%7B%DD%B5%1AU%E9%86%60q%29%FFn%A8%09%BC%8B%91%B7i%18%8F%B0%9Fa%F3%17%7Cg%28%A5%00%FB%3C%2F%A8m%24%17

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /z/775519059 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d6bfb6d63ca32a4aabe7b99da163aa3441539763715

                                         
                                         104.24.120.232
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Apr 2018 23:09:55 GMT
Etag: W/"26f0-56a4fc9445fbb"
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46b147383a57429d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2690
Md5:    11e8d1cb4e37f10e66c40c28833656ac
Sha1:   70f389d5ca18684e72d27a86d7e9fbbd61407053
Sha256: 66b115902ebc0a0136cd5d57816d9d7d7482d828af79d168b19ec7bdcd36149c
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /d/a/1142.php?ext=js&_t=93478054786 HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d112c754b325a77296843c29cd1f7704a1539763714

                                         
                                         104.16.195.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: tr_az=m%255B0%255D%3D10%26m%255B1%255D%3D1142%26d%255B0%255D%3D17%26d%255B1%255D%3D1142; expires=Fri, 19-Oct-2018 08:08:35 GMT; Max-Age=172800 tr_a=m%255B0%255D%3D10%26m%255B1%255D%3D36377%26d%255B0%255D%3D17%26d%255B1%255D%3D36377; expires=Fri, 19-Oct-2018 08:08:35 GMT; Max-Age=172800
Content-Encoding: gzip
Server: cloudflare
CF-RAY: 46b1473703054273-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   195
Md5:    6a67402fadc2887500e1e3055e339ef4
Sha1:   12807260f9a755ca9e693fd16feaeff865d93fb5
Sha256: 3f4bf95d0e35986338411e99f9f213a5830c5b19af305a3f929f73a7b2db25c2
                                        
                                            GET /library/530318/7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715384
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:35 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705623"
Cache-Control: max-age=86400
Content-Length: 296015
Last-Modified: Tue, 19 Dec 2017 17:47:03 GMT
X-HW: 1539763715.dop014.sk1.t,1539763715.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   296015
Md5:    3ddb8167820e977615a641bc6a1eb2bd
Sha1:   7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f
Sha256: 3d5072cf06330fd3372e63fb73246718457b179b5cc2fae904f5ec09998d9c03
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716114 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:36 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CDA%0A%C20%10%05%D0%BB%CC%092If%26N%0E%23%A1%C46%A0%A5%9A%B8%90%D2%BB%1B%EAVD7n%06%FE%7C%F8%2F%A9%D3%B5%A8%A5%60%C8%87%98%D4%EBZ%FB%81%A9%B4%0A%B1%28%C6%3D%B6r%C9%7B%24w%10v%82%D4%FFA%E1%9Cj%7B%DB%A1%28%0CiY%CA%3C%1EO%B7%7C%BD%E7yx%C0k%0C%BD7%10%B7%CE%A2%90A%FE%3Bk%C5%B0%B7%3F%B0%FC%81%E5%EF%D8%ED%09q%19h8; expires=Thu, 18-Oct-2018 08:08:36 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   688
Md5:    ad99b6f85237f3b1a30d7b78dd2a4944
Sha1:   283fd7006236ce3ed84ae1c1f150b73a1b8515f4
Sha256: 720b5a9303855333c2b3e812338a7a9158602c2d9c33c5448e8f59a3c2615a77
                                        
                                            GET /library/530318/a059fb6c8330f74784db9a7c5ad19ccde1f89e07.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716114
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%CDA%0A%C20%10%05%D0%BB%CC%092If%26N%0E%23%A1%C46%A0%A5%9A%B8%90%D2%BB%1B%EAVD7n%06%FE%7C%F8%2F%A9%D3%B5%A8%A5%60%C8%87%98%D4%EBZ%FB%81%A9%B4%0A%B1%28%C6%3D%B6r%C9%7B%24w%10v%82%D4%FFA%E1%9Cj%7B%DB%A1%28%0CiY%CA%3C%1EO%B7%7C%BD%E7yx%C0k%0C%BD7%10%B7%CE%A2%90A%FE%3Bk%C5%B0%B7%3F%B0%FC%81%E5%EF%D8%ED%09q%19h8

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1520955008"
Cache-Control: max-age=86400
Content-Length: 23106
Last-Modified: Tue, 13 Mar 2018 15:30:08 GMT
X-HW: 1539763716.dop003.sk1.t,1539763716.cds040.sk1.c


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23106
Md5:    b068b72a430d8a6518c1b8ad1bf40230
Sha1:   a059fb6c8330f74784db9a7c5ad19ccde1f89e07
Sha256: 3b0ae64bc817e6de50cf1b62811b9d347509d90da967880f8f3e3d3e73eb1639
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /templates/images/background-left.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/hostsgimg.png
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:36 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1473aa06d42bb-OSL


--- Additional Info ---
                                        
                                            GET /templates/images/background-right.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/servegimg.png
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:36 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1473aa2924291-OSL


--- Additional Info ---
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716203 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%CDA%0A%C20%10%05%D0%BB%CC%092If%26N%0E%23%A1%C46%A0%A5%9A%B8%90%D2%BB%1B%EAVD7n%06%FE%7C%F8%2F%A9%D3%B5%A8%A5%60%C8%87%98%D4%EBZ%FB%81%A9%B4%0A%B1%28%C6%3D%B6r%C9%7B%24w%10v%82%D4%FFA%E1%9Cj%7B%DB%A1%28%0CiY%CA%3C%1EO%B7%7C%BD%E7yx%C0k%0C%BD7%10%B7%CE%A2%90A%FE%3Bk%C5%B0%B7%3F%B0%FC%81%E5%EF%D8%ED%09q%19h8

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:36 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A; expires=Thu, 18-Oct-2018 08:08:36 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   664
Md5:    820d3b328aa6a3e24d453cb77355e96f
Sha1:   e93971cf821d74268e5ac344d1659eee7aa6896c
Sha256: 5ad509d4a7464e1f82d8bf72bccff37154665726be1192021ed3e5789a706254
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%BD%8DA%0A%800%0C%04%FF%92%174%DA%D8%9A%3EF%8AT%0D%A8%A8%AD%07%11%FFn%D1%ABg%2F%0B%B3%0B%3B%9E%0B%3E%85%0B%B2%8A%B4u%9E5%9F1%07%0C%92%228at%0F%26%99%C2%83T%D6%A6%2A%0DR%EE-%C3%E8c%FA%DC%D00%B4%7EYd%EE%9Bn%0B%EB%1E%E6%F6%80%F7%0C%B5V%E0%AE%ACEC%0A%AB%7F%B5%D7%0D%21%2AF%26

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /css/smoothness/images/ui-icons_454545_256x240.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Content-Length: 4369
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:06 GMT
Etag: "1111-4de5e790c8b80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:36 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1473af07742bb-OSL


--- Additional Info ---
Magic:  PNG image, 256 x 240, 8-bit colormap, non-interlaced
Size:   4369
Md5:    119dd0c2e94ad689de873ef39fd43e6e
Sha1:   1ab19df782d0b8491fc21c1edf7b20941624dd34
Sha256: cb36e80beaf2a527d463da552a5c679a46c4ff8c881318a194bb0ccb61cb2d5c
                                        
                                            GET /css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Content-Length: 178
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:01 GMT
Etag: "b2-4de5e78c04040"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:36 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1473af30b4255-OSL


--- Additional Info ---
Magic:  PNG image, 40 x 100, 8-bit/color RGBA, non-interlaced
Size:   178
Md5:    8692e6efddf882acbff144c38ea7dfdf
Sha1:   a9bb131c4acff0d07fa7b7f21bef05179c28d13b
Sha256: 39ab7ccd9f4e82579da78a9241265df288d8eb65dbbd7cf48aed2d0129887df5
                                        
                                            GET /css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Content-Length: 105
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:02 GMT
Etag: "69-4de5e78cf8280"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:08:36 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1473af30c4255-OSL


--- Additional Info ---
Magic:  PNG image, 1 x 400, 8-bit/color RGBA, non-interlaced
Size:   105
Md5:    e5a8f32e28fd5c27bf0fed33c8a8b9b5
Sha1:   7e5c99e9f0113ba6b63c2bb408b8347191316cda
Sha256: f0e6cd91b837d5c5644d026e5ffeccd907953317cd5c0f689901733afda260b2
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 17 Oct 2018 07:27:52 GMT
Expires: Wed, 17 Oct 2018 09:27:52 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 2444
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /swidget/hostsgimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         67.202.94.93
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/44.png


--- Additional Info ---
                                        
                                            GET /swidget/servegimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         67.202.94.93
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/33.png


--- Additional Info ---
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=976951246&utmhn=imgserve.net&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x737&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=ImgServe.net%20%7C%20Earn%20Money%20Sharing%20Images&utmhid=1094044903&utmr=-&utmp=%2Fimg-5513fbbee23b1.html&utmht=1539763717182&utmac=UA-40347884-1&utmcc=__utma%3D120226704.1962614587.1539763716.1539763716.1539763716.1%3B%2B__utmz%3D120226704.1539763716.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1407509825&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Wed, 17 Oct 2018 08:08:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/530318/b1b992e28cb2dd59c8af9c880871e5478002ac0e.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716203
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:36 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705625"
Cache-Control: max-age=86400
Content-Length: 326567
Last-Modified: Tue, 19 Dec 2017 17:47:05 GMT
X-HW: 1539763716.dop014.sk1.t,1539763716.cds003.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   326567
Md5:    9b7fe1be99cb649d0b893c86ff9ea496
Sha1:   b1b992e28cb2dd59c8af9c880871e5478002ac0e
Sha256: a9064aa832aad0685a0081bc8b6af0e7b188f7a360d9cf0c5114837e5b80b062
                                        
                                            GET /small/00/44.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:37 GMT
Content-Length: 315
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-13b"
Expires: Thu, 18 Oct 2018 08:08:37 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   315
Md5:    9cb57c7ac9a0f4175a06a17a4f5a6d9c
Sha1:   98ba6eaaca4005f7d7f90d769382f1ec90bba451
Sha256: a0735174a776637735b04a82727efb18b76d7433ae463a02451cc8ae00239368
                                        
                                            GET /small/00/33.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:08:37 GMT
Content-Length: 312
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-138"
Expires: Thu, 18 Oct 2018 08:08:37 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   312
Md5:    d893e26f382f366efc8a7b7cf09bc82f
Sha1:   43fe0077c8c161d8f9fdcf59117c96d7c89c0585
Sha256: 035df80f0b7608f6b1070e8e5107e824376be35f9ddb1708d025b8120fbfaa16
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715698 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   657
Md5:    9ad17183c8173b54f8d9ea08935cd059
Sha1:   77d461d9060707a7e40f82244a96062e2d22638a
Sha256: f8422226746c2d2bb2b570c3250a467e7936f9cdb62ebb7e0ec10b9da038b494
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715783 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CD%DD%0A%C20%0C%05%E0w%C9%134%FDIj%FA0RF%D5%80%8Ei%EB%85%8C%BD%BBe%DE%0E%99%DE%04N%0E%9C%2F%8B%93Y%C5%86h%82%8F%29%8B%97%B9%F6%03%17m%15%92%0A%A656%BD%955%06w%60r%8C%A1%FF%A3%C05%D7%B6%D9%21%0B%0Cy%9At%3C%1FO%8Fr%7F%96qx%C1g%0C%BD7%90%96%CE%22%07%83%B4%C1%DA%3FX%DA%CDZ6%E4%ED%0F%2C%7Day%1F%BB%BC%01s%0Fh%3C; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   687
Md5:    c15924d163fd59686b67909af6716226
Sha1:   c19f389fed146ea85d98f8ed088be161df90c2c7
Sha256: 18a35aedacc56f729b218545e1e1ce355f683a326596f38638b6797a69b1cc2f
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716021 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   656
Md5:    16dabe461f4261210e06ab0918840cca
Sha1:   35af5e123d10ee40ad84957debe57525432487d5
Sha256: cbdf1450b4654692e51306640755803b8bf6f83905925ff30cc97fcf7a773630
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716077 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%9765%3D%8C%94QgA%C7%B4%F5Adw%B7n%AFU%A6%F8%12%F8%13%C8%C7%1F%84%E4%91D%1B%A7%0C9%1F%5E1%D7%01%C7T2%F8%24%E8%97X%D29.%D1t%3B%B6%1D%A3%A9%7B%27p%0A%B94o%C8%02%7D%98%A64%0E%FB%C35%5Enq%EC%EF%B0%3EC%22%05%7E%AE%2C%B2Qh%1B%AC%FE%81%B5%9BY%CD%CA%92%FE%A2%AD%FD%13%8B%BA%D9%F6%1D%CB%1FX%DE%C6%CEO%9A%B1%8AL; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   672
Md5:    5cd20d560d2bea1d0be76e28911f8d89
Sha1:   d8c2f7cfe7efd45ea8555faeb00a12216049f42b
Sha256: 1f442bb6cfe1445e8d03838fafffbaced3278063de8557b1416d54cc99634445
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715881 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CD%DD%0A%C20%0C%05%E0w%C9%134%FDIj%FA0RF%D5%80%8Ei%EB%85%8C%BD%BBe%DE%0E%99%DE%04N%0E%9C%2F%8B%93Y%C5%86h%82%8F%29%8B%97%B9%F6%03%17m%15%92%0A%A656%BD%955%06w%60r%8C%A1%FF%A3%C05%D7%B6%D9%21%0B%0Cy%9At%3C%1FO%8Fr%7F%96qx%C1g%0C%BD7%90%96%CE%22%07%83%B4%C1%DA%3FX%DA%CDZ6%E4%ED%0F%2C%7Day%1F%BB%BC%01s%0Fh%3C; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   687
Md5:    c15924d163fd59686b67909af6716226
Sha1:   c19f389fed146ea85d98f8ed088be161df90c2c7
Sha256: 18a35aedacc56f729b218545e1e1ce355f683a326596f38638b6797a69b1cc2f
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715916 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CD%DD%0A%C20%0C%05%E0w%C9%134%FDIj%FA0RF%D5%80%8Ei%EB%85%8C%BD%BBe%DE%0E%99%DE%04N%0E%9C%2F%8B%93Y%C5%86h%82%8F%29%8B%97%B9%F6%03%17m%15%92%0A%A656%BD%955%06w%60r%8C%A1%FF%A3%C05%D7%B6%D9%21%0B%0Cy%9At%3C%1FO%8Fr%7F%96qx%C1g%0C%BD7%90%96%CE%22%07%83%B4%C1%DA%3FX%DA%CDZ6%E4%ED%0F%2C%7Day%1F%BB%BC%01s%0Fh%3C; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   687
Md5:    c15924d163fd59686b67909af6716226
Sha1:   c19f389fed146ea85d98f8ed088be161df90c2c7
Sha256: 18a35aedacc56f729b218545e1e1ce355f683a326596f38638b6797a69b1cc2f
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716350 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   734
Md5:    a5294f0ef6aacb44e804a6abec81d677
Sha1:   d06ec68e022b95233798dbecb63e297387bc4919
Sha256: 2388964f9765e3c69fcc0bdbffb66db1f722a5069c1eae1c7ad3a25605034b2e
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716165 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   657
Md5:    a8ba00e3eb662b0302e90deaca34260e
Sha1:   20bfc60454d4b74ecf4e6a8af1410b5de87334e2
Sha256: 309c2625512fdfe23d9eb56e8ecacf58c427399076e6b29eab4d398d88c71284
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763717264 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%9765%3D%8C%94QgA%C7%B4%F5Adw%B7n%AFU%A6%F8%12%F8%13%C8%C7%1F%84%E4%91D%1B%A7%0C9%1F%5E1%D7%01%C7T2%F8%24%E8%97X%D29.%D1t%3B%B6%1D%A3%A9%7B%27p%0A%B94o%C8%02%7D%98%A64%0E%FB%C35%5Enq%EC%EF%B0%3EC%22%05%7E%AE%2C%B2Qh%1B%AC%FE%81%B5%9BY%CD%CA%92%FE%A2%AD%FD%13%8B%BA%D9%F6%1D%CB%1FX%DE%C6%CEO%9A%B1%8AL; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   672
Md5:    5cd20d560d2bea1d0be76e28911f8d89
Sha1:   d8c2f7cfe7efd45ea8555faeb00a12216049f42b
Sha256: 1f442bb6cfe1445e8d03838fafffbaced3278063de8557b1416d54cc99634445
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763717380 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   657
Md5:    9ad17183c8173b54f8d9ea08935cd059
Sha1:   77d461d9060707a7e40f82244a96062e2d22638a
Sha256: f8422226746c2d2bb2b570c3250a467e7936f9cdb62ebb7e0ec10b9da038b494
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715952 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CD%DD%0A%C20%0C%05%E0w%C9%134%FDIj%FA0RF%D5%80%8Ei%EB%85%8C%BD%BBe%DE%0E%99%DE%04N%0E%9C%2F%8B%93Y%C5%86h%82%8F%29%8B%97%B9%F6%03%17m%15%92%0A%A656%BD%955%06w%60r%8C%A1%FF%A3%C05%D7%B6%D9%21%0B%0Cy%9At%3C%1FO%8Fr%7F%96qx%C1g%0C%BD7%90%96%CE%22%07%83%B4%C1%DA%3FX%DA%CDZ6%E4%ED%0F%2C%7Day%1F%BB%BC%01s%0Fh%3C; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   687
Md5:    c15924d163fd59686b67909af6716226
Sha1:   c19f389fed146ea85d98f8ed088be161df90c2c7
Sha256: 18a35aedacc56f729b218545e1e1ce355f683a326596f38638b6797a69b1cc2f
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715986 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5513fbbee23b1.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%A5%CFM%0A%021%0C%05%E0%BB%E4%04M%DB45%3D%8C%94%A1j%40%87%D1%D6%85%0Cs%F7%29%E3v%16%FEl%02%2F%0F%F2%91%2CNf%15K%D1%90%8F%29%8B%97%B9%F6%01%17m%15%92%0A%A6-6%BD%95-%92%3Bpp%8C%D4%F7Q%E0%9Ak%DB%ED%90%05%86%3CM%3A%9E%8F%A7G%B9%3F%CB8%BC%E0%7D%0C%BD7%90%96%CE%22%93%C1%B0%C3%DA%1F%D8%F01k%D9%04o%BF%F86%FC%CF.%2Br%8Bh%3A

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; expires=Fri, 16-Oct-2020 08:08:37 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW; expires=Thu, 18-Oct-2018 08:08:37 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   657
Md5:    9ad17183c8173b54f8d9ea08935cd059
Sha1:   77d461d9060707a7e40f82244a96062e2d22638a
Sha256: f8422226746c2d2bb2b570c3250a467e7936f9cdb62ebb7e0ec10b9da038b494
                                        
                                            GET /library/546258/8fc34ca2ff7cbabf952762120722529c02145e52.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716077
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%9765%3D%8C%94QgA%C7%B4%F5Adw%B7n%AFU%A6%F8%12%F8%13%C8%C7%1F%84%E4%91D%1B%A7%0C9%1F%5E1%D7%01%C7T2%F8%24%E8%97X%D29.%D1t%3B%B6%1D%A3%A9%7B%27p%0A%B94o%C8%02%7D%98%A64%0E%FB%C35%5Enq%EC%EF%B0%3EC%22%05%7E%AE%2C%B2Qh%1B%AC%FE%81%B5%9BY%CD%CA%92%FE%A2%AD%FD%13%8B%BA%D9%F6%1D%CB%1FX%DE%C6%CEO%9A%B1%8AL

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1521013017"
Cache-Control: max-age=86400
Content-Length: 70715
Last-Modified: Wed, 14 Mar 2018 07:36:57 GMT
X-HW: 1539763717.dop009.sk1.t,1539763717.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   70715
Md5:    3d30f9f55cfb7f5235fccb8f96e7f457
Sha1:   8fc34ca2ff7cbabf952762120722529c02145e52
Sha256: 0a066fc2d9726bc00e2c43d6211f9fb5a52e60c927ed46c00d24d1afc694c182
                                        
                                            GET /library/581670/0b23e18287f56a3fbad40450d12c0cf1ca309488.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763715698
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753184"
Cache-Control: max-age=86400
Content-Length: 236450
Last-Modified: Fri, 05 Oct 2018 15:26:24 GMT
X-HW: 1539763717.dop003.sk1.t,1539763717.cds036.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   236450
Md5:    3d3bae169bcebefae9f037502c7165b3
Sha1:   0b23e18287f56a3fbad40450d12c0cf1ca309488
Sha256: bf7296e106c806aa980df5bc403beaf092cafb87fa9ccad757b740ff1ff126af
                                        
                                            GET /library/581670/a40f25695484096dc35e8fabcd5d745efd3caa41.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716165
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753179"
Cache-Control: max-age=86400
Content-Length: 179367
Last-Modified: Fri, 05 Oct 2018 15:26:19 GMT
X-HW: 1539763717.dop008.sk1.t,1539763717.cds008.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   179367
Md5:    639b9b71fe175b9aed0bf8a9ed3014ab
Sha1:   a40f25695484096dc35e8fabcd5d745efd3caa41
Sha256: c28d36d92f0f563634fa16f85ff297db3a55445d46f4fbe5b5fb636afed48d2e
                                        
                                            GET /library/148652/abebc689b3631d40e7a8d6f83fa558a681dbe108.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716350
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%9D%CD%DD%0A%C20%0C%05%E0w%C9%134%FDIj%FA0RF%D5%80%8Ei%EB%85%8C%BD%BBe%DE%0E%99%DE%04N%0E%9C%2F%8B%93Y%C5%86h%82%8F%29%8B%97%B9%F6%03%17m%15%92%0A%A656%BD%955%06w%60r%8C%A1%FF%A3%C05%D7%B6%D9%21%0B%0Cy%9At%3C%1FO%8Fr%7F%96qx%C1g%0C%BD7%90%96%CE%22%07%83%B4%C1%DA%3FX%DA%CDZ6%E4%ED%0F%2C%7Day%1F%BB%BC%01s%0Fh%3C

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1506441177"
Cache-Control: max-age=86400
Content-Length: 704110
Last-Modified: Tue, 26 Sep 2017 15:52:57 GMT
X-HW: 1539763717.dop010.sk1.t,1539763717.cds055.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   704110
Md5:    5e8880da4b02e8ecb41b55b6568b80e5
Sha1:   abebc689b3631d40e7a8d6f83fa558a681dbe108
Sha256: d6daecc67022e42ff2dab79b16b9eca2fb9b032211438367fac8fa55ea344d92
                                        
                                            GET /library/581670/5ab5d85bdc763b0b32b8ff54c03fcf01a7cd2ced.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5513fbbee23b1.html&dt=1539763716021
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6ee03367864.690814942863213523%22%3B%7D; impressions=x%9C%AD%CFQ%0A%C20%0C%06%E0%BB%E4%04M%DB%245%3D%8C%94Q%B5%A0c%DA%F9+%B2%BB%5B%E7%EB%90M%7C%09%FC%F9%21%1FI%EA%F5Y%D4R0%E4CL%EFX%DB%80S%19%2B%C4%A2%18%E78%96K%9E%23%B9%9D%B0%13%A4%B6%0F%0A%E7T%C7%C5%0EE%A1K%C3P%FA%E3%FEp%CB%D7%7B%EE%BB%07%7C%8E%A1%F7%06%E2%D4X%142%C8%0B%AC%FD%81%E5%D5%AC%15%C3%DEn%F8%96%FF%C2Rp%1C%CC%06V%BE%B0%B2%8E%9D%5E%9F%A9%8AW

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:08:38 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538752803"
Cache-Control: max-age=86400
Content-Length: 142860
Last-Modified: Fri, 05 Oct 2018 15:20:03 GMT
X-HW: 1539763717.dop014.sk1.t,1539763717.cds019.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   142860
Md5:    fdeee876d376d6924d748629bbe3142d
Sha1:   5ab5d85bdc763b0b32b8ff54c03fcf01a7cd2ced
Sha256: 23ac226ead1b897e448b16ece9387a7372aa9387edd2588e5d6f9c005f293545
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d0cb5aad9bcd29641182c4590e93645c51539763714; PHPSESSID=425ca2e60cba680c0701b9df44ca27c9; viewer=189665127ba131ab5833ccfd4b7e7e00; viewerid=5513fbbee23b1; imagen3=1; __utma=120226704.1962614587.1539763716.1539763716.1539763716.1; __utmb=120226704.1.10.1539763716; __utmc=120226704; __utmz=120226704.1539763716.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 17 Oct 2018 08:08:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:42:49 GMT
Etag: W/"51ae9799-47c"
CF-Cache-Status: HIT
Expires: Wed, 24 Oct 2018 08:08:38 GMT
Cache-Control: public, max-age=604800
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14747120f42bb-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   921
Md5:    06ee4e4a98828888549e3ed7693dd78c
Sha1:   ef954a19b195cce9f07d6ef1efb08e295aa81baf
Sha256: 281e819159c678c2a170900b0d6d584fab10d46613c3567dd8b5c31ea93b8eb6
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html

                                         
                                         104.24.124.110
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 08:08:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=ddeb79dc0eb2efcc5d19145fade3f100b1539763718; expires=Thu, 17-Oct-19 08:08:38 GMT; path=/; domain=.popmyads.com; HttpOnly
Location: https://popmyads.com/x/pma
Server: cloudflare
CF-RAY: 46b1474802f9429d-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   234
Md5:    f93c41ecf56596dfaff243d71b6315ce
Sha1:   348380cff5f286fd99bf74d71f37bcb0fbf3e95f
Sha256: ab246188c1c38fdd6b1b5e721ef8d14caa305028bc6b79fe314e316d6407323d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 280
Last-Modified: Wed, 17 Oct 2018 00:33:15 GMT
Etag: 606784539D1DA9E4E64876580B05AB24DDBF618C
X-OCSP-Responder-ID: rmdccaocsp28
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
Cache-Control: public, no-transform, must-revalidate, max-age=577073
Expires: Wed, 24 Oct 2018 00:26:31 GMT
Date: Wed, 17 Oct 2018 08:08:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   280
Md5:    77de95a16ac267190c7630906eb877fa
Sha1:   606784539d1da9e4e64876580b05ab24ddbf618c
Sha256: aa00a3245795f4401006380e0f696da104cfa723068e808d467ab61f39969a88
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5513fbbee23b1.html
Cookie: __cfduid=ddeb79dc0eb2efcc5d19145fade3f100b1539763718

                                         
                                         104.24.124.110
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.1.16
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46b1474968684279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26897
Md5:    74df32e7c9729cc21ddb00e044c8a808
Sha1:   919daf6d75fd32b4ca59cc29a331cb0078373bce
Sha256: 2e99678de740ec7d0b2f6080245ecc6b0a764a463dd1e858ef1d95b6892ff84a