Overview

URL www.statshow.com/www/http://rizetours.blogspot.com/
IP158.69.84.99
ASNAS16276 OVH SAS
Location United States
Report completed2019-06-15 17:11:34 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 1 reports on IP: 158.69.84.99

Date UQ / IDS / BL URL IP
2018-08-10 23:22:04 +0200
0 - 0 - 0 www.statshow.com/www/nodomain.ctbc.com.br 158.69.84.99

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2019-07-01 07:47:12 +0200
0 - 0 - 0 https://www.munplanet.com/articles/arlo-camer (...) 158.69.39.233
2019-07-01 04:15:44 +0200
0 - 3 - 0 www.asind.ae/wp-content/uploads/2019/seconder (...) 5.39.72.197
2019-07-01 03:56:20 +0200
0 - 0 - 0 webcamsteen.com/16y4[CUSTOM_AFF 192.99.67.89
2019-07-01 02:43:31 +0200
0 - 0 - 0 167.114.144.169/Android/ 167.114.144.169
2019-06-30 21:34:01 +0200
0 - 0 - 0 streams.tvxweb.org 158.69.54.221
2019-06-30 21:30:47 +0200
0 - 0 - 0 source.magikserv.com 37.187.171.206
2019-06-30 20:09:51 +0200
0 - 0 - 0 www.kweeper.com/popcorn2kg/sentence/6382508 91.121.242.21
2019-06-30 18:49:10 +0200
0 - 0 - 0 www.ovh.com 198.27.92.1
2019-06-30 18:18:47 +0200
0 - 0 - 0 liczniki.org/hit.php?l=alltube&o=1 94.23.92.123
2019-06-30 18:11:40 +0200
0 - 0 - 0 hardrock.blogdns.org/ 91.121.69.126

No other reports on domain: statshow.com



JavaScript

Executed Scripts (63)


Executed Evals (7)

#1 JavaScript::Eval (size: 105, repeated: 1) - SHA256: 7b3615f7573d410de516c2d2a5bdf92370ede21a6d533daa42e1e5882786a7ba

                                        (function() {
    var a = Application.getConfig().memberAppletConfig.memberAppletFlashvars.usertype;
    return a
})();
                                    

#2 JavaScript::Eval (size: 134, repeated: 1) - SHA256: 5d64485168fbfe66c26ac9d8a6a516dbd615a75687f5bd18226c8a686f6fc378

                                        (function() {
    var a = google_tag_manager["GTM-TV3674Q"].macro(12);
    return B = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
                                    

#3 JavaScript::Eval (size: 133, repeated: 1) - SHA256: f8b6c916e2adc26075bcb10e551cea94d9fd2f517c14df3de8d88147d6edd802

                                        (function() {
    var a = google_tag_manager["GTM-TV3674Q"].macro(2);
    return B = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
                                    

#4 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 8eb59fd92c006b3db43f9b666e000bbed9921d4d5d61a879e63c5d75d536fb70

                                        (function() {
    var a = google_tag_manager["GTM-TV3674Q"].macro(3);
    return B = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
                                    

#5 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 4bd96aae707895199599fdda8d50e77e79c090e9e2a6bd0a0ac47ef965717e87

                                        (function() {
    var a = google_tag_manager["GTM-TV3674Q"].macro(6);
    return B = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
                                    

#6 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 661f0f00d1498b966ce191ec8064216c2a7f05b69310eb4972d5b9e9cbcda04b

                                        (function() {
    var a = google_tag_manager["GTM-TV3674Q"].macro(9);
    return B = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
                                    

#7 JavaScript::Eval (size: 84, repeated: 4) - SHA256: b363fddb559a29c54f4cb2a236e7a01c3d4153d995dcbfe3009de3c8660a0daf

                                        (function() {
    var b = 11;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
                                    

Executed Writes (13)

#1 JavaScript::Write (size: 306, repeated: 1) - SHA256: 264161db8a220a93a331aed7110937b464b8718881278a8ebc31384bd1cfc1bc

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_0"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_0']});</script > < /body></html >
                                    

#2 JavaScript::Write (size: 306, repeated: 1) - SHA256: 5efcb9fc2a44ea42dca7f3a6201c413bf996957c8642429d6bfa6d151206a13e

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_1"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_1']});</script > < /body></html >
                                    

#3 JavaScript::Write (size: 306, repeated: 1) - SHA256: ceb1ece9d4cb4964ccd9219016b1b547d99a604ffb0173c99f882e88f578ed73

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_2"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_2']});</script > < /body></html >
                                    

#4 JavaScript::Write (size: 306, repeated: 1) - SHA256: 541c1027668e45b8bed71056a9f7fd353fe9f838e61fc680b505186d01614944

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_3"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_3']});</script > < /body></html >
                                    

#5 JavaScript::Write (size: 306, repeated: 1) - SHA256: d3e2705b97cf99dc54128332a5a61286c6a737079c28ca6c5f98bc91cabe1901

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_4"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_4']});</script > < /body></html >
                                    

#6 JavaScript::Write (size: 306, repeated: 1) - SHA256: 8f6a741b88ab52048d389b8648b7f7b4d59516b8bade65dd67c3ae155e8e801d

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_5"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_5']});</script > < /body></html >
                                    

#7 JavaScript::Write (size: 60, repeated: 1) - SHA256: 07e0cf6771e21c7e509b76d09eba0869fd1cacbf8415ad5d0f0924e86fd28871

                                        < div id = "histats_counter_5827"
style = "display: none;" > < /div>
                                    

#8 JavaScript::Write (size: 1270, repeated: 1) - SHA256: 2f8a80215b966d1ec135d487827d9c8a10877c4626d178dbe8c09b6d26b1b69d

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "728"
height = "15"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&amp;output=html&amp;h=15&amp;slotname=8808388117&amp;adk=915088578&amp;adf=807048394&amp;w=728&amp;lmt=1560611461&amp;guci=1.2.0.0.2.2.0.0&amp;url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1560611462685&amp;bpp=67&amp;fdt=388&amp;idt=388&amp;shv=r20190612&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;correlator=273257467024&amp;frm=20&amp;pv=2&amp;ga_vid=1428523002.1560611464&amp;ga_sid=1560611464&amp;ga_hid=786938725&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=151&amp;ady=131&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;uci=a!1&amp;dtd=901"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#9 JavaScript::Write (size: 1319, repeated: 1) - SHA256: b0f12a7c1a307d43baedc7d48bce553af13044ec544e2f45b53f91590576ed5c

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&amp;output=html&amp;h=90&amp;slotname=3070290120&amp;adk=3024896145&amp;adf=807048394&amp;w=728&amp;lmt=1560611461&amp;guci=1.2.0.0.2.2.0.0&amp;format=728x90&amp;url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1560611462753&amp;bpp=15&amp;fdt=873&amp;idt=873&amp;shv=r20190612&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_slotnames=8808388117&amp;correlator=273257467024&amp;frm=20&amp;pv=1&amp;ga_vid=1428523002.1560611464&amp;ga_sid=1560611464&amp;ga_hid=786938725&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=216&amp;ady=154&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;uci=a!2&amp;dtd=887"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 1341, repeated: 1) - SHA256: 208c80868af81f444adb08de354aadb5f596a138fc7731d743e422b401528c80

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "336"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&amp;output=html&amp;h=280&amp;slotname=6840466659&amp;adk=3119329098&amp;adf=807048394&amp;w=336&amp;lmt=1560611461&amp;guci=1.2.0.0.2.2.0.0&amp;format=336x280&amp;url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1560611462769&amp;bpp=8&amp;fdt=879&amp;idt=879&amp;shv=r20190612&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=728x90&amp;prev_slotnames=8808388117&amp;correlator=273257467024&amp;frm=20&amp;pv=1&amp;ga_vid=1428523002.1560611464&amp;ga_sid=1560611464&amp;ga_hid=786938725&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=94&amp;ady=460&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=3&amp;uci=a!3&amp;dtd=888"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#11 JavaScript::Write (size: 1352, repeated: 1) - SHA256: f7c13391ec20ee0f6000fba74edfc2cc33e051231f7dde0cbaa3d0a8ac2d503f

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
width = "300"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&amp;output=html&amp;h=600&amp;slotname=6150653317&amp;adk=4110190612&amp;adf=807048394&amp;w=300&amp;lmt=1560611461&amp;guci=1.2.0.0.2.2.0.0&amp;format=300x600&amp;url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1560611462778&amp;bpp=7&amp;fdt=934&amp;idt=935&amp;shv=r20190612&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=728x90%2C336x280&amp;prev_slotnames=8808388117&amp;correlator=273257467024&amp;frm=20&amp;pv=1&amp;ga_vid=1428523002.1560611464&amp;ga_sid=1560611464&amp;ga_hid=786938725&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=777&amp;ady=266&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=4&amp;uci=a!4&amp;dtd=944"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#12 JavaScript::Write (size: 1390, repeated: 1) - SHA256: 3f4e81884bca9f3aab72432efc2f741dcf862e33a9caa6e3aa02d00a798bf892

                                        < iframe id = "google_ads_frame5"
name = "google_ads_frame5"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&amp;output=html&amp;adk=1812271804&amp;adf=807048394&amp;lmt=1560611461&amp;plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C30%3A1048576&amp;guci=1.2.0.0.2.2.0.0&amp;format=0x0&amp;url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;pra=7&amp;wgl=0&amp;dt=1560611466193&amp;bpp=2&amp;fdt=5&amp;idt=5&amp;shv=r20190612&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=728x90%2C336x280%2C300x600%2C728x90&amp;prev_slotnames=8808388117&amp;nras=1&amp;correlator=273257467024&amp;frm=20&amp;pv=1&amp;ga_vid=1428523002.1560611464&amp;ga_sid=1560611464&amp;ga_hid=786938725&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=6&amp;fc=912&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cs%7C&amp;abl=NS&amp;fu=16&amp;bc=1&amp;ifi=5&amp;uci=a!5&amp;dtd=15"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#13 JavaScript::Write (size: 1361, repeated: 1) - SHA256: 25a30d217999e5675735e0003f04b60b293667036d39faf376473d1e97d91a4b

                                        < iframe id = "google_ads_frame5"
name = "google_ads_frame5"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&amp;output=html&amp;h=90&amp;slotname=3070290120&amp;adk=1453754423&amp;adf=807048394&amp;w=728&amp;lmt=1560611461&amp;guci=1.2.0.0.2.2.0.0&amp;format=728x90&amp;url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;dt=1560611462785&amp;bpp=6&amp;fdt=946&amp;idt=946&amp;shv=r20190612&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=728x90%2C336x280%2C300x600&amp;prev_slotnames=8808388117&amp;correlator=273257467024&amp;frm=20&amp;pv=1&amp;ga_vid=1428523002.1560611464&amp;ga_sid=1560611464&amp;ga_hid=786938725&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=82&amp;ady=4423&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=5&amp;uci=a!5&amp;dtd=953"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (149)


Request Response
                                        
                                            GET /www/http://rizetours.blogspot.com/ HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33, PleskLin
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; path=/; domain=.statshow.com user_country=NO; expires=Sat, 22-Jun-2019 15:11:42 GMT; Max-Age=604800; path=/ user_country_name=Norway; expires=Sat, 22-Jun-2019 15:11:42 GMT; Max-Age=604800; path=/
MS-Author-Via: DAV
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14709
Md5:    324017bf541daeae96cc1677bb4706e2
Sha1:   a263afb7086887fcd5a8fa94326e2278f0a48649
Sha256: 4bb508720cdee211138f3a0397854b2c13b08108e4a8134d7f2f743911d7abe9
                                        
                                            GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30028
Date: Sun, 02 Jun 2019 21:37:23 GMT
Expires: Mon, 01 Jun 2020 21:37:23 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1100018


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30028
Md5:    543b05db46ecc6a1312a23e7e7a8820e
Sha1:   aff453218f0b6c281ed53da6997d4b1b9e990007
Sha256: 31c0d9866a5018d56375949c0222370a5b48d6ea6442d04b0c689217a68dffac
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sat, 15 Jun 2019 15:11:01 GMT
Expires: Sat, 15 Jun 2019 15:11:01 GMT
Cache-Control: private, max-age=3600
Etag: 5206887035370836332
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 34056
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   34056
Md5:    a78c41bf215d1ffeb5853c822c6aaf1f
Sha1:   d7a45797985c004d53cb0c5b0724b126c1d086b0
Sha256: d7792644c97fc030cf7f6443a9efe5dc4fdaab166613dfd279d9afca81101071
                                        
                                            GET /v2/thumbs.php?size=s&url=rizetours.blogspot.com HTTP/1.1 
Host: free.pagepeeker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         176.9.106.58
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.4.6
Date: Sat, 15 Jun 2019 15:11:02 GMT
Content-Length: 3924
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-PP-Final-URL: http://rizetours.blogspot.com/
X-PP-Capture-Time: 6.64
X-PP-Capture-Method: webkit
X-PP-Hash: 0e1c246d3d3d6daf3b48b47a406516f1
X-PP-Server: 1004
X-Robots-Tag: noindex, nofollow
Set-Cookie: PagePeeker=PagePeeker_NS41; path=/


--- Additional Info ---
Magic:  JPEG image data
Size:   3924
Md5:    b585bb2050607b44a701687a48e0aec9
Sha1:   413234334ccf49ba58f44f4b043511d0b44ddc49
Sha256: 10660599100b209a72d675aa5ff71c1f971d2b21f27c71d09a39e0877d2c1a05
                                        
                                            GET /images/statman_head.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1586
Last-Modified: Tue, 06 Dec 2016 15:59:01 GMT
Connection: keep-alive
Etag: "5846e045-632"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 21 x 19
Size:   1586
Md5:    815ec610ed672adb007cc858ef51eab4
Sha1:   a036359544990b38419d77fd173286c5b8513395
Sha256: bcd3966ae4a14296c400cd6428929762967110c9eac613be22d78c822a0afa89
                                        
                                            GET /css/style.min.css?v=6 HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Last-Modified: Tue, 06 Dec 2016 15:38:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5846db62-70f2"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7425
Md5:    2a0c090d817e97cea87a3cc5dbdd3600
Sha1:   71d26095fbb91e33726d54b83f140f7547ecddd9
Sha256: 5a20a095159ed4cf7497f2a1364892ab2dff771f9dfe67837d2a83896c8644bb
                                        
                                            GET /images/favicon.ico HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 318
Last-Modified: Tue, 06 Dec 2016 15:58:49 GMT
Connection: keep-alive
Etag: "5846e039-13e"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   318
Md5:    b81929740a469d5563f89085833a8d6a
Sha1:   af897f4631048ec772e04ef51cf17a42d9faaccc
Sha256: 78874b61145c5513bd0727059ec99436bad8bae408801fd8ccb0deda5dbf6953
                                        
                                            GET /javascript/main.min.js?v=1 HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1645
Last-Modified: Tue, 06 Dec 2016 15:38:20 GMT
Connection: keep-alive
Etag: "5846db6c-66d"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1645
Md5:    db5439278798d14afc50ac3fb601d6f8
Sha1:   e74e0ac26c3126aecabb41b195d18d8357e9b208
Sha256: 9fb258ea903921046c835c80186adf2116a649d9fe0731bc1006ad574fa00800
                                        
                                            GET /javascript/check_url.min.js?v=1 HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 6849
Last-Modified: Wed, 14 Dec 2016 11:54:21 GMT
Connection: keep-alive
Etag: "585132ed-1ac1"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   6849
Md5:    3ac312baa13878d7cf4a4f64cac5eb47
Sha1:   367c97a8ef5e33dc442c8d14b3a6bd20051337f5
Sha256: 592d78bbfec0d539aeac91684c8ee9d25add27b82ab83bc57039b37f06d8fd3f
                                        
                                            GET /javascript/jexpand.min.js HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1904
Last-Modified: Tue, 06 Dec 2016 15:38:17 GMT
Connection: keep-alive
Etag: "5846db69-770"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1904
Md5:    b409c5bbaac1f1916e07b6baf7cc7b0e
Sha1:   b748e7b72ba880ca3fd2896351f18870e25c1bee
Sha256: 914927766ba1fe36ed4cde803b3a64b396b476c853129c9b05f1b39c6278019d
                                        
                                            GET /images/loading.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1842
Last-Modified: Tue, 06 Dec 2016 15:58:52 GMT
Connection: keep-alive
Etag: "5846e03c-732"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 175 x 8
Size:   1842
Md5:    29dc83928ac37031508004afa8747b1d
Sha1:   18a1c606d755cfe3c237c06175d395d0753ca275
Sha256: 178c6df908276cff375f8192c62588a0e2f76d4e0e67bad2352365a80ff1798c
                                        
                                            GET /images/arrow_down.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 95
Last-Modified: Tue, 06 Dec 2016 15:58:45 GMT
Connection: keep-alive
Etag: "5846e035-5f"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 10 x 9
Size:   95
Md5:    27c067f971ccf5031596997d1a17e261
Sha1:   4b149b707c236daad5a8371676718f64777fd3e6
Sha256: d249b98da66480dc9b09f948f5610a51550e4e046a920b6ec28d7669bd8bb887
                                        
                                            GET /images/mini_loading.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1553
Last-Modified: Tue, 06 Dec 2016 15:58:54 GMT
Connection: keep-alive
Etag: "5846e03e-611"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   1553
Md5:    03ce3dcc84af110e9da8699a841e5200
Sha1:   d2b7e4e31fe8e1c6b720e33448674102879e4246
Sha256: d3e3944d4649450dee66a55c69eeced2d825b6ca1a349f72c75fd3780ae3f006
                                        
                                            GET /images/niches/arrow_up.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 220
Last-Modified: Tue, 06 Dec 2016 16:00:04 GMT
Connection: keep-alive
Etag: "5846e084-dc"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   220
Md5:    d0e7e40b805a741d706600493cb9fce1
Sha1:   52951134c0631718ce3932748aa03d8ad968c628
Sha256: 119967eba33f76a4e149ad0a6c64e5fc5f7f441b68130f06758ac817c660480d
                                        
                                            GET /kda/image_verification.php HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33, PleskLin
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Sat, 15 Jun 2019 15:11:43 GMT
MS-Author-Via: DAV


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   1228
Md5:    b275f45f8766b0ffe4b9d842eb101fd0
Sha1:   62baef0a30d9e281c6dac0332ff838f2bcd982a0
Sha256: a12eb5ffcd470d9c04c0f0329e4c59e0d7a28a86ee1b859e9e96b70056d0757b
                                        
                                            GET /images/qmark.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 296
Last-Modified: Tue, 06 Dec 2016 15:58:56 GMT
Connection: keep-alive
Etag: "5846e040-128"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 9 x 9
Size:   296
Md5:    841bfa8fbfa9ec665a5fa60e9815821f
Sha1:   b981d75c27a93d11c7f93a46566856249c639951
Sha256: 48088b883c093876cef51202fa2d5aa9c9a286d655bb2d4166a53443b28f7a5a
                                        
                                            GET /images/niches/car.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 610
Last-Modified: Tue, 06 Dec 2016 16:00:06 GMT
Connection: keep-alive
Etag: "5846e086-262"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   610
Md5:    d197345b382d2c930a319b646c4e3604
Sha1:   ff161610d2228f644fa46d6b7db56bfac550e35c
Sha256: 77fac62ccf1c37a76838423c46bde5634c21e11a99ab71393d8df05bfb07d114
                                        
                                            GET /images/niches/arrow_down.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 219
Last-Modified: Tue, 06 Dec 2016 16:00:04 GMT
Connection: keep-alive
Etag: "5846e084-db"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   219
Md5:    631aba850829dafeaa3608b60918c73e
Sha1:   c5dd4e28be5664fdff00827042ce0b2909cd39b1
Sha256: af90a8028d4306c018be9f74c53db7312d2bed042828368607ec78a157cadbf7
                                        
                                            GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FStatShow%2F&locale=en_US&send=false&layout=button_count&width=80&show_faces=false&action=like&colorscheme=light&font&height=21 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FStatShow%2F&locale=en_US&send=false&layout=button_count&width=80&show_faces=false&action=like&colorscheme=light&font&height=21
X-FB-Debug: ln2kVSOFfxXOX4DXYBj+CTqpfMOnGKCyDoEm/vsgo67Px7OCX+86YJzkUndXIQpImRm3rtLQC2hgyOuwkocdvA==
Date: Sat, 15 Jun 2019 15:11:02 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /images/niches/building.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 556
Last-Modified: Tue, 06 Dec 2016 16:00:05 GMT
Connection: keep-alive
Etag: "5846e085-22c"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   556
Md5:    41f999bfcfa48f3f25fc5dc81e6ac089
Sha1:   b9971ce8300f4cb94328c3e4fec015e4a1be5465
Sha256: 5b5231dff4a872619ccf2656a4143d0fb7021079148620f49a54397bb30af7d1
                                        
                                            GET /images/niches/heart.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 749
Last-Modified: Tue, 06 Dec 2016 16:00:07 GMT
Connection: keep-alive
Etag: "5846e087-2ed"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   749
Md5:    83ceb675d61ca1fdee0f84c2f5fe5daa
Sha1:   848e83e25afda1a86c1328d1a5284cc0d6175f8f
Sha256: f36478fffeeb2579529680ebdde8e0607ed0d00b3bc70d91cf11d0fe56145bae
                                        
                                            GET /images/niches/money.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 738
Last-Modified: Tue, 06 Dec 2016 16:00:09 GMT
Connection: keep-alive
Etag: "5846e089-2e2"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   738
Md5:    9095b4c0e705f5dd0e42317ed586346a
Sha1:   969d87b5f1cbefdd6791f5a673545b0ab42ec1d5
Sha256: 5dc17abaca2cdf55115f59eeabb44594fe3eeb0d07b6ad743a998b85ec93d99c
                                        
                                            GET /images/niches/book_open.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 622
Last-Modified: Tue, 06 Dec 2016 16:00:05 GMT
Connection: keep-alive
Etag: "5846e085-26e"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   622
Md5:    0ba89b9fbe7e88d4c6896ed0a1f495aa
Sha1:   e1f2645ef808a01f6b022c272eeb360d85d96dbc
Sha256: 8bd44dedf43b1a576fbf32a97934a92a703b2d19c4ace265b8c9d8512e9d300b
                                        
                                            GET /images/niches/iron.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 533
Last-Modified: Tue, 06 Dec 2016 16:00:08 GMT
Connection: keep-alive
Etag: "5846e088-215"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   533
Md5:    065fc74cd42ea8ce1eb241d9021b289e
Sha1:   d197d45a9b41ef8afa79bc162bdd19f031c1e84f
Sha256: 9ed15ae65664082f8862e3e29681557ad7058efae54445221066d376b356d9d1
                                        
                                            GET /images/niches/pencil.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 450
Last-Modified: Tue, 06 Dec 2016 16:00:10 GMT
Connection: keep-alive
Etag: "5846e08a-1c2"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   450
Md5:    a34e71ab08a6d1162b948d26321dea50
Sha1:   62a1b41ac5eefbf3d0ad578a19572d4096d88146
Sha256: 858a4033d92f654e344243bbc75a968c39c298bd7fa87b5b3c9fe6eca4161386
                                        
                                            GET /images/niches/tv.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 658
Last-Modified: Tue, 06 Dec 2016 16:00:12 GMT
Connection: keep-alive
Etag: "5846e08c-292"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   658
Md5:    93f1eb4e8f0b2999bd389f092c584d90
Sha1:   c9dfe7f923e0dd00a8ee9a134bd9468cb9f0efc2
Sha256: 6b539497a6d22d8d43c37f96706ee78f7642d61e1b0177c665681515f5bf8ba2
                                        
                                            GET /js15.js HTTP/1.1 
Host: s10.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         46.105.201.240
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sat, 15 Jun 2019 15:09:38 GMT
Etag: "335776370"
Last-Modified: Thu, 06 Dec 2018 14:12:12 GMT
Content-Length: 4381
Content-Encoding: gzip
Vary: Accept-Encoding
X-CDN-Pop: sbg
X-CDN-Pop-IP: 137.74.120.0/27
X-Cacheable: Matched cache
Accept-Ranges: bytes
X-IPLB-Instance: 4761


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4381
Md5:    cdb80411230af9cc59c4b89efed6c3e0
Sha1:   f52a0a77724295c09c68cb3bf7c7ba828707a6f3
Sha256: 80895f9ddc8692ecbdfaefe634b54b202bdbfe72c5dffcfcedf501cb8dcb801f
                                        
                                            GET /images/empty.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 43
Last-Modified: Tue, 06 Dec 2016 15:58:48 GMT
Connection: keep-alive
Etag: "5846e038-2b"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /images/globe.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1019
Last-Modified: Tue, 06 Dec 2016 15:58:50 GMT
Connection: keep-alive
Etag: "5846e03a-3fb"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   1019
Md5:    562cfa7e48a523ae21a3b0fe40219005
Sha1:   b3a63a42ab8ac3934221d2f66f02df7c9d1db674
Sha256: 35a8f55a9cd9b89db9116d81ef55fc78a796e702dbc247b27a27e924c1df4d92
                                        
                                            GET /images/social_twitter.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1231
Last-Modified: Tue, 06 Dec 2016 15:59:00 GMT
Connection: keep-alive
Etag: "5846e044-4cf"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   1231
Md5:    30b65c6d84c50f320e5d0c46405d1791
Sha1:   c1c860e1411e88900645cf8fffb5ae412eef0ea9
Sha256: 29c2aa26983afdbf34146cfc2c5d0a7f5e9ecc7486c6690d8032e0f1ece624b0
                                        
                                            GET /images/accept.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1226
Last-Modified: Tue, 06 Dec 2016 15:58:45 GMT
Connection: keep-alive
Etag: "5846e035-4ca"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   1226
Md5:    eca5ae4f661bca4345cf9faed5dae045
Sha1:   8f0078e6779aba362109cd01e6ac08043750dcbc
Sha256: 984771f4e12e8b6309c510b8a3d55c753ed1d92e695690e68a492e2d601d2441
                                        
                                            GET /images/social_facebook.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1201
Last-Modified: Tue, 06 Dec 2016 15:58:59 GMT
Connection: keep-alive
Etag: "5846e043-4b1"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   1201
Md5:    c43e131c9d31d142a3d8fd1b5ae2c6f7
Sha1:   08c5e9ae4fde218f721dad73c531ff8765724f77
Sha256: f226636988d44a409b495e25b59575b7b173f386b8d2037e2426d36422011d76
                                        
                                            GET /images/reliabity_new.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1219
Last-Modified: Tue, 06 Dec 2016 15:58:57 GMT
Connection: keep-alive
Etag: "5846e041-4c3"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   1219
Md5:    efc94509d51164eabceb16b6374b9196
Sha1:   3875d545cd32a83a65a0e61a9ea33650dee3a617
Sha256: d9f641e2c689a1feb2e68380ba27a35f9574acb93e7aff2e09612cbcb3b4db89
                                        
                                            GET /images/safety.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1207
Last-Modified: Tue, 06 Dec 2016 15:58:58 GMT
Connection: keep-alive
Etag: "5846e042-4b7"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   1207
Md5:    6744826c96ea4c5ca63fcf7e5ecc5c92
Sha1:   d1cdf489d56e28e7fabf2cf964b1e94d5bb0c027
Sha256: 6e0b0d05047a148cc789bda18ff5d8b5d78c25c58f70306fe6da38d2bbb785a5
                                        
                                            GET /images/shield.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 1214
Last-Modified: Tue, 06 Dec 2016 15:58:59 GMT
Connection: keep-alive
Etag: "5846e043-4be"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   1214
Md5:    7c36c84a0afe6817b93bf740898b8d8b
Sha1:   efdb56c1f2f43285c1e473e9e24383f4cd83463d
Sha256: 006392c4972ad3892b47998c5f34175e6b41f1a704bd3ccc8f8e33683c6722e9
                                        
                                            GET /images/dialog.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 355
Last-Modified: Tue, 06 Dec 2016 15:58:48 GMT
Connection: keep-alive
Etag: "5846e038-163"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   355
Md5:    32d7411659f06b0659715ae82dfa18d9
Sha1:   138cca7e0b6f55d37401198d4bcf86b0f11a380e
Sha256: c98865b54f7f63395d5b50fbab774c60fdf67edae60ea7217118e0f307e1dfa6
                                        
                                            GET /images/icon_email.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 341
Last-Modified: Tue, 06 Dec 2016 15:58:51 GMT
Connection: keep-alive
Etag: "5846e03b-155"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 11, 8-bit colormap, non-interlaced
Size:   341
Md5:    efa9c0a7ceab9f681c7361afab1e73e1
Sha1:   c711a192ff0e0018ccd084e089cd87db0ba3260f
Sha256: 6884cc54548de55b9acf6a37bdeb5677ec3100776b8676b417a31cdc54a55585
                                        
                                            GET /images/niches/fashion.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 623
Last-Modified: Tue, 06 Dec 2016 16:00:06 GMT
Connection: keep-alive
Etag: "5846e086-26f"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   623
Md5:    fe45a36647421b4c9cf5194eff24c0bd
Sha1:   37575d4a17075c2af190d8bf5b015413f80fee69
Sha256: fd224bfd85c3c90bf6da8a7f404b773787ce77115f48023aa5fbc14acf5621b4
                                        
                                            GET /images/niches/bike.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 783
Last-Modified: Tue, 06 Dec 2016 16:00:04 GMT
Connection: keep-alive
Etag: "5846e084-30f"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   783
Md5:    a48531fafc5d5f2c606bca4c50e7e1e6
Sha1:   2b90062933e05c24599550eb917588bf097345b5
Sha256: 07a36bd0cd0e9828e9e5b6fc639f667cbb5d4389dc083fa511915c56fc4eaaf6
                                        
                                            GET /images/niches/food.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 865
Last-Modified: Tue, 06 Dec 2016 16:00:06 GMT
Connection: keep-alive
Etag: "5846e086-361"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   865
Md5:    7d4fd8b6727cc552161369f16a094851
Sha1:   a24b208078174b175f4c5f35ad9b7a2d1c7e59e3
Sha256: 7eba7376d76ac55acac20a46756cd0209067ad931200c9f8a0b771ddcffadeb2
                                        
                                            GET /images/niches/joystick.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 666
Last-Modified: Tue, 06 Dec 2016 16:00:09 GMT
Connection: keep-alive
Etag: "5846e089-29a"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   666
Md5:    db0eea75aedac59f3491d0aed7580bd2
Sha1:   2e2b34758d67aeb19b454bf5fbb43f4e9e3ebe62
Sha256: d97d6995f47a5a090bb52c986467826282bddef90ffd40582f0953d16a7c1a69
                                        
                                            GET /images/niches/general.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 778
Last-Modified: Tue, 06 Dec 2016 16:00:06 GMT
Connection: keep-alive
Etag: "5846e086-30a"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   778
Md5:    3750c701d2ec35a45d289b9b9c1a0667
Sha1:   04b482344d75d0732275727bd73cceb9b049d276
Sha256: ff9c48d8c2d063932c7aadd5e15ddfdc76b7111bf0715f3a192bba26df2c531c
                                        
                                            GET /images/niches/hotel.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 460
Last-Modified: Tue, 06 Dec 2016 16:00:07 GMT
Connection: keep-alive
Etag: "5846e087-1cc"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   460
Md5:    a636d891d9b72510fd5d31a8d6d61957
Sha1:   06b75d3aecfb892f151160cd5ff0727a0b7dff28
Sha256: 25751ece7d7a70bdc2a6f7c794b143c952a84f7973fce48cd70e70483764cf3a
                                        
                                            GET /images/niches/server.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 530
Last-Modified: Tue, 06 Dec 2016 16:00:11 GMT
Connection: keep-alive
Etag: "5846e08b-212"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   530
Md5:    92ce271e1b892a0ccbe8a8a4e5d4a632
Sha1:   1aed30d2b777a46cf2ffde662445068474e92a6a
Sha256: ff6e8e00ceb0da39cd1811eab4e171e1c7566f41a8ffda96e602ac840444c477
                                        
                                            GET /images/niches/briefcase.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:43 GMT
Content-Length: 488
Last-Modified: Tue, 06 Dec 2016 16:00:05 GMT
Connection: keep-alive
Etag: "5846e085-1e8"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   488
Md5:    8e0af9ccc4685b8250181e797e38a24f
Sha1:   04d00feec974bd2b13e8211148dbc8f4ed86bddc
Sha256: 71d25bccf3fd012a4a02113cfd4e9c72ad3e9cab002df6398752ee8916e098f8
                                        
                                            GET /pagead/js/r20190612/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sat, 15 Jun 2019 15:11:02 GMT
Expires: Sat, 15 Jun 2019 15:11:02 GMT
Cache-Control: private, max-age=1209600
Etag: 10751475977521847640
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 79883
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   79883
Md5:    bb19fedc311295c0148434633f63dc8c
Sha1:   6f748ed918aa9372e3a4d6b8ca323c8ebaf5e7f1
Sha256: f7b807d5786f5a41ecf9287d6ac5e2b9650e2262d717e1ad573511459d2000ea
                                        
                                            GET /images/niches/lawyer.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 706
Last-Modified: Tue, 06 Dec 2016 16:00:09 GMT
Connection: keep-alive
Etag: "5846e089-2c2"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   706
Md5:    cac109a5658accb74c8216f247949c85
Sha1:   e8bd7deb9088b5d14c935152ec282711f460361b
Sha256: 92443b5d601efbbbfc148d67312a47d93324186807aacc47970fec8d1ca20fa8
                                        
                                            GET /images/niches/truck.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 582
Last-Modified: Tue, 06 Dec 2016 16:00:12 GMT
Connection: keep-alive
Etag: "5846e08c-246"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   582
Md5:    2cf6d6d15a5da8b88147cf5a1094be24
Sha1:   204d0a04cd9c22934c0e07c8d37a80047220daf1
Sha256: de27000a870f17c4b1455b4e9875738bb966250a24eb5fde48d46fad4b54506b
                                        
                                            GET /images/niches/medic.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 733
Last-Modified: Tue, 06 Dec 2016 16:00:09 GMT
Connection: keep-alive
Etag: "5846e089-2dd"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   733
Md5:    1c78c060a59fa397e263bd59e5dcc21f
Sha1:   6564e87bc0c2eb5109f7ad5d311ecd5981634a28
Sha256: b634b752fac73d8a085b37276da3be937b166dcd2d750427cb6721dd478949f6
                                        
                                            GET /images/niches/herb.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 760
Last-Modified: Tue, 06 Dec 2016 16:00:07 GMT
Connection: keep-alive
Etag: "5846e087-2f8"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   760
Md5:    98d0b9208d2410e284d8a341f4cf72ec
Sha1:   c375de2220ed48bb2f69d98c476b66f734238ff1
Sha256: 54ae67a8f3bbd06a6713245065d8e30292e5063346a2c5a0ba2315b8a65839b5
                                        
                                            GET /images/niches/pill.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 719
Last-Modified: Tue, 06 Dec 2016 16:00:10 GMT
Connection: keep-alive
Etag: "5846e08a-2cf"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   719
Md5:    f2204332e83fa054bfe8265da940bfba
Sha1:   8745e2e819b9aa04b1d8f1a4273fa5bd207f7f3e
Sha256: 9309856be0672bcb37fb8565a2b3d47163e327276c6dc2b09473c23dc84cfd39
                                        
                                            GET /images/niches/music.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 416
Last-Modified: Tue, 06 Dec 2016 16:00:10 GMT
Connection: keep-alive
Etag: "5846e08a-1a0"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   416
Md5:    8a05e01925a99155d6d4a89e191fbf60
Sha1:   c0930ed380fd1bc196296579f6f4960c29448272
Sha256: b7c1b5f56d253917105f85a468665addab6a73a4f7950782b6e14f435baaa438
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:03 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    391e8544d4dfe3e394c87b285b6556b5
Sha1:   bffcd0ffae1d2f56dd35aed1fe454c5d9759e8d9
Sha256: e4d1a633da6bbbf4691e6b744ceb61a1761f0fb6edf1fbb27b2f740de8b652ae
                                        
                                            GET /images/niches/religion.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 162
Last-Modified: Tue, 06 Dec 2016 16:00:11 GMT
Connection: keep-alive
Etag: "5846e08b-a2"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   162
Md5:    6c688c705035a580ad944f7c56f0ad26
Sha1:   8288197d28e1d5f27e57c6b25156fbbd7b0eac13
Sha256: bf673b96b2814485afa5aee8da28f31c459c0f73e30407a9deac694236488aa4
                                        
                                            GET /images/niches/text.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 209
Last-Modified: Tue, 06 Dec 2016 16:00:12 GMT
Connection: keep-alive
Etag: "5846e08c-d1"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit gray+alpha, non-interlaced
Size:   209
Md5:    f4e8f006e259bc6c26255b0c8136bc32
Sha1:   d38185704d6f86286a8b28e4a8a8131ff6a49b96
Sha256: 1f462ad78bf0258500f65aafa539ba3e536e84d636699e570e8dfeba29156abc
                                        
                                            GET /images/niches/basket.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 669
Last-Modified: Tue, 06 Dec 2016 16:00:04 GMT
Connection: keep-alive
Etag: "5846e084-29d"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   669
Md5:    a37ce15bef144fedee01c93550193ff2
Sha1:   33753b5cf540e31540a755d9228db83af97a29f3
Sha256: 3fbf8ef9981958975f9c374b8ae8b566fadee73abd3da8b87a79f0d842533139
                                        
                                            GET /images/niches/newspaper.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 658
Last-Modified: Tue, 06 Dec 2016 16:00:10 GMT
Connection: keep-alive
Etag: "5846e08a-292"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   658
Md5:    a9f5563fb90eeeac3c619c0f00761b91
Sha1:   8b7f753ba1c3cc5551dd6100e408bc8898414f2f
Sha256: 9ba7151a9f0262778f4fc5696df43cce92470bf7ab5f80dd259744dbc440581a
                                        
                                            GET /images/niches/house.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 806
Last-Modified: Tue, 06 Dec 2016 16:00:07 GMT
Connection: keep-alive
Etag: "5846e087-326"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   806
Md5:    99bea32e1990e011e870f6c562e87a6a
Sha1:   e11cf7d34a74b2639bd351484ee891dbd76b4d76
Sha256: c862e0744036f4638b09366ff125edaf47944529867c8f36866e8fc0771729cd
                                        
                                            GET /images/niches/science.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 526
Last-Modified: Tue, 06 Dec 2016 16:00:11 GMT
Connection: keep-alive
Etag: "5846e08b-20e"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   526
Md5:    61f7ee1d30fadfd9652468e6d6ddb05b
Sha1:   d1cea238486aeeba9215d56bf71efc243754fe48
Sha256: f5412754ee01e07d904246efe73b0a11b81cd1e098f3e3a2282fdf2d4d6f3396
                                        
                                            GET /images/niches/group.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 753
Last-Modified: Tue, 06 Dec 2016 16:00:07 GMT
Connection: keep-alive
Etag: "5846e087-2f1"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   753
Md5:    3afbbb77c13a366898f9088f7ae086a0
Sha1:   fc729cc6d3b5f029d751cd7e934e97e8e286ac0b
Sha256: 41d6484deb80501dd6ba9dd26cb7d54cc8a6d20a03c9c86f15edc632a44ad552
                                        
                                            GET /images/niches/sports.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 940
Last-Modified: Tue, 06 Dec 2016 16:00:11 GMT
Connection: keep-alive
Etag: "5846e08b-3ac"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   940
Md5:    2112d59f07fb1eb2b9d93d902fddaa4e
Sha1:   9cc8df91ef63068c138b82afd030d03af13b2ec1
Sha256: ff1f5819cc6e7b150bb0377972bff0a5d0dd4a26fd17690b15b9a8451cbbe0f7
                                        
                                            GET /images/niches/computer.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 667
Last-Modified: Tue, 06 Dec 2016 16:00:06 GMT
Connection: keep-alive
Etag: "5846e086-29b"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   667
Md5:    43b3a7333f4577be2b5799fdc8b42624
Sha1:   88866f2ea6ba29a97528ace506bea9e67100ae2c
Sha256: e98a48c1a5362b16903a1e97790bf044510bcc12a1e77416c4b2c570583d3f8d
                                        
                                            GET /images/niches/html.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 578
Last-Modified: Tue, 06 Dec 2016 16:00:08 GMT
Connection: keep-alive
Etag: "5846e088-242"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   578
Md5:    97d0ea08bfa5531671fe6e17ee9d1c09
Sha1:   35ba36a3dbc2a35f42b9a8b91f36fd7315446593
Sha256: 39120ed2f129bb1fc5c8140e6f60c01e8692fc7be7d3fc5ee13d2bce47275b65
                                        
                                            GET /images/info.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 778
Last-Modified: Tue, 06 Dec 2016 15:58:52 GMT
Connection: keep-alive
Etag: "5846e03c-30a"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   778
Md5:    3750c701d2ec35a45d289b9b9c1a0667
Sha1:   04b482344d75d0732275727bd73cceb9b049d276
Sha256: ff9c48d8c2d063932c7aadd5e15ddfdc76b7111bf0715f3a192bba26df2c531c
                                        
                                            GET /images/bg.jpg HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 1748
Last-Modified: Tue, 06 Dec 2016 15:58:46 GMT
Connection: keep-alive
Etag: "5846e036-6d4"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1748
Md5:    cbfe19c5ae39a1a5f884313937c1d23b
Sha1:   b15eb119cf5209794c112094da96fb2f7378205b
Sha256: 029241de3474f5032d3c237287ef675189b76f5c3653f57786554b74e56e7578
                                        
                                            GET /images/logo.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 4096
Last-Modified: Tue, 06 Dec 2016 15:58:53 GMT
Connection: keep-alive
Etag: "5846e03d-1000"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 146 x 88, 8-bit colormap, non-interlaced
Size:   4096
Md5:    458847717bd3e263f1a28a931bf628be
Sha1:   99b6cf919ac8b98c3af2927245c7c319ac6d2c04
Sha256: 4327fba0407a85d97a23f262df30720576301e441a4443d32e7ba8934fd1d94d
                                        
                                            GET /images/header_bottom_border_line.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 1137
Last-Modified: Tue, 06 Dec 2016 15:58:51 GMT
Connection: keep-alive
Etag: "5846e03b-471"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 2 x 179
Size:   1137
Md5:    3251c70b5c875256f8ea52f26ce4c7d0
Sha1:   3a171aecc67275b469052b8396066553952de151
Sha256: 6c1d37f71acd3e543edf0c033f38964358eee60a496f4c479dfab9c635058826
                                        
                                            GET /images/search_bar.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 3535
Last-Modified: Tue, 06 Dec 2016 15:58:58 GMT
Connection: keep-alive
Etag: "5846e042-dcf"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 473 x 28
Size:   3535
Md5:    6ececcd2c6bbb457a8c4aae358f968fe
Sha1:   55c3fd5c97148b7aa393741f4deab9a6e82535b6
Sha256: 1063535f63561cc9c824ef22a7de91622acb0f07f7a3f6d145d9d5ddd3c3a6f1
                                        
                                            GET /images/header_bottom_border.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 1243
Last-Modified: Tue, 06 Dec 2016 15:58:50 GMT
Connection: keep-alive
Etag: "5846e03a-4db"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 995 x 6
Size:   1243
Md5:    8876dbf9184cbdf7ffdc8bfb99752775
Sha1:   6f588d96d81cdef92bc1988c711223bf3425e936
Sha256: 6e4df4d14703c4e1e9867e56e908ec3b9c17ad7bcaf710c66bdb38c891b90fdd
                                        
                                            GET /images/search_bar_ani.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 4682
Last-Modified: Tue, 06 Dec 2016 15:58:58 GMT
Connection: keep-alive
Etag: "5846e042-124a"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 473 x 56
Size:   4682
Md5:    d0dc45f475b72ba26a2e3290725d3058
Sha1:   9333b3862738d757b8dd58313d07e95c25057680
Sha256: 4a0dfdc2471b89dd9cf8cff9c5aebae87204138a5d04226cf661efcaa0a797da
                                        
                                            GET /images/qmenu_back.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 213
Last-Modified: Tue, 06 Dec 2016 15:58:57 GMT
Connection: keep-alive
Etag: "5846e041-d5"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 5 x 34, 8-bit colormap, non-interlaced
Size:   213
Md5:    6ac8c1596d6fd3edd49625742b4e9750
Sha1:   60714a94e87552b1a90b43d4d52e305a0a43af06
Sha256: 88b3889de21aa3bf0cc5d5ea2938e38b8e79cb30b71a1c514435b05025fa9395
                                        
                                            GET /images/menu_bullet.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 1101
Last-Modified: Tue, 06 Dec 2016 15:58:54 GMT
Connection: keep-alive
Etag: "5846e03e-44d"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 7 x 7
Size:   1101
Md5:    402608eb1410a5070790ebc2523cee28
Sha1:   ac4547505d5de2cabdc8f89f7e84dc8352f2268b
Sha256: 24b263533f6d116b9b225110e9a4172aa137e3ff04ea0d7ea7dac7fd73cff81c
                                        
                                            GET /images/title_sub.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 1220
Last-Modified: Tue, 06 Dec 2016 15:59:03 GMT
Connection: keep-alive
Etag: "5846e047-4c4"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 1000 x 38, 8-bit colormap, non-interlaced
Size:   1220
Md5:    8652738f6e950c8ba6c373727b1ab9c8
Sha1:   fffcc0502c44d371da1b334a9e0ddb3cd89fcfd9
Sha256: ba6877ed28b503efbbf7d277501ac51fb6c23b4e65c018577edb8ddeb6869a0e
                                        
                                            GET /images/bt_update.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 3295
Last-Modified: Tue, 06 Dec 2016 15:58:48 GMT
Connection: keep-alive
Etag: "5846e038-cdf"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 100 x 78, 8-bit colormap, non-interlaced
Size:   3295
Md5:    71daa94eeb6f3636e230fe569afd4379
Sha1:   c230eb0a52c5921630f72549ac1f75ef91fd5e2a
Sha256: bad72cfe9a3e7b944087bd4b2cc093c9a2d8d44070f3b9bbc9e608d639be29ea
                                        
                                            GET /images/bottom_back.jpg HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 1670
Last-Modified: Tue, 06 Dec 2016 15:58:47 GMT
Connection: keep-alive
Etag: "5846e037-686"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1670
Md5:    abe4aec963805e828b9ae52becbbd2e5
Sha1:   154a4805b309b5afae7e18172cb29e3b7706b731
Sha256: ebf56055a130346af0a0f33efc103a93edab4172fa1e7c3b9a21473c36ebd4a5
                                        
                                            GET /images/logo_bottom.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 4994
Last-Modified: Tue, 06 Dec 2016 15:58:53 GMT
Connection: keep-alive
Etag: "5846e03d-1382"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 152 x 92, 8-bit colormap, non-interlaced
Size:   4994
Md5:    b7012cd13333ab09b6ff5a8ccfe75f1b
Sha1:   0971652cda11b42db77984bff4c0acb99e4dca90
Sha256: 37a8279ec3440afe279d370a168023078fbd1f8ee62f8841ead93efb65a31fb2
                                        
                                            GET /images/world_bottom.png HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 5845
Last-Modified: Tue, 06 Dec 2016 15:59:04 GMT
Connection: keep-alive
Etag: "5846e048-16d5"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 152 x 70, 8-bit colormap, non-interlaced
Size:   5845
Md5:    ae4938955b448a4b2000d640a3bcb7df
Sha1:   e426bc6414a69bbb2aa22f38ac5003b04da22c79
Sha256: 4f4df946e7ae920044ac1571d2045a8e3dd29e4e4459db421c956c06a1d12bc1
                                        
                                            GET /images/ibm_logo.gif HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/css/style.min.css?v=6
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:44 GMT
Content-Length: 1250
Last-Modified: Tue, 06 Dec 2016 15:58:51 GMT
Connection: keep-alive
Etag: "5846e03b-4e2"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 41 x 30
Size:   1250
Md5:    4c088561f57f35371d52473fbb632c95
Sha1:   9b3ea3cdcb1fff336af2b5931002df05bc3ce713
Sha256: 97995c987a5a9b158486d0934fdf83c570134bc672baa5b83737c3c344856d06
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:03 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=114289
Date: Sat, 15 Jun 2019 15:11:03 GMT
Etag: "5d03fcd7-1d7"
Expires: Sun, 16 Jun 2019 22:55:52 GMT
Last-Modified: Fri, 14 Jun 2019 20:00:23 GMT
Server: ECS (lcy/1D24)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c38fbfe4973842236c76567815a477bf
Sha1:   601ccf181b457a0476e42a5a8f35ef8d41569b49
Sha256: 21f4ada88eafed775b00da2e23eab25cf65a2f643b83b607a248a6afd60702b4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=86438
Date: Sat, 15 Jun 2019 15:11:03 GMT
Etag: "5d03910a-1d7"
Expires: Sun, 16 Jun 2019 15:11:41 GMT
Last-Modified: Fri, 14 Jun 2019 12:20:26 GMT
Server: ECS (lcy/1D6F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    39ce32e1b19f28ff5c7263afa5362a2d
Sha1:   32e9b2a7cc070bf563f8b6c2d68bbe2c2742198b
Sha256: c40dd8878f4dedf64dc4530a4c7dc17137298c49c1bf1707072e41c356315336
                                        
                                            GET /?ie=UTF8&f=q&t=m&q=,&hl=en-US&output=embed&z=3 HTTP/1.1 
Host: maps.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         172.217.21.142
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 15 Jun 2019 15:11:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1s,!5e0!6i3!3m1!1sen-US!5m1!1sen-US
Server: mafe
Content-Length: 293
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Server-Timing: gfet4t7; dur=2
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   293
Md5:    8942a6ac013d509d04ee9bc376a546d3
Sha1:   39ebd6c3f40ce7571f90012a69c4c59988b784c1
Sha256: 6dbac947a1287cf1f4bc40791e8196c26c6c31e02e39b84b483cadab6bbfdb01
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:03 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d8bf0d123d0e9f3f571fd6a76a5b1a64
Sha1:   f86e82b1a1d345005f54ae1649b38db55ca1517c
Sha256: e565cdf83a4f2038f27df84e3b58a8c0f0c005b42477d4ce60d0bc72f6603112
                                        
                                            GET /images/icons/gplus-16.png HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 737
Date: Mon, 03 Jun 2019 09:55:17 GMT
Expires: Tue, 02 Jun 2020 09:55:17 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1055746
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   737
Md5:    b0f4eb2fd6b1ff3da593c2f45cf947fd
Sha1:   324ba38e4c698495fc911c6e9e8bcf849a5cbbf1
Sha256: dcd07bf4ffba2d11c6d69171634486c68daa0d87587a55b9a06cf22170cbf28f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:04 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0fe0b7136b31197dbc3bf029bffe58fc
Sha1:   3adce44647be7414cc24c5827c4a7c852423e17d
Sha256: 869e9b52722d3744c6baecf5327e4c0a44861f28e8888f6d9c55c5612c390ec1
                                        
                                            GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FStatShow%2F&locale=en_US&send=false&layout=button_count&width=80&show_faces=false&action=like&colorscheme=light&font&height=21 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Content-Encoding: gzip
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: mJoiRlVL13MYndfgNO5Pr0iIW9qIN3mI+15g7ELTPHyKm0sHWZhh8M6pv7uqO+faCFF6dHEaWwWb7u/MHiUlmw==
Date: Sat, 15 Jun 2019 15:11:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13681
Md5:    b0f27ff75e08a078034b2e5e65ef6a7d
Sha1:   439e8c71efe9934a4691f48f46c158aa16c91af5
Sha256: 837ac3a6836cb7bcec4153113fa24f1c3d84574e1be6cbb53af6b83d317d64ea
                                        
                                            GET /pagead/ads?client=ca-pub-6072412641931604&output=html&h=90&slotname=3070290120&adk=1453754423&adf=807048394&w=728&lmt=1560611461&guci=1.2.0.0.2.2.0.0&format=728x90&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462785&bpp=6&fdt=946&idt=946&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=728x90%2C336x280%2C300x600&prev_slotnames=8808388117&correlator=273257467024&frm=20&pv=1&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=82&ady=4423&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=5&uci=a!5&dtd=953 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Location: http://www.statshow.com/ads/ad7.html
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 15 Jun 2019 15:11:04 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 15-Jun-2019 15:26:04 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   82
Md5:    87b49554493c15fb23b8e5d2f13b1ebf
Sha1:   328cbcb1c58530fd3f554ca7386ef7a85e1e982f
Sha256: 590b4bba70579d67368d97259fc85f56fda4fa5cb82f404fa8ec67a43369db17
                                        
                                            GET /pagead/html/r20190612/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 13 Jun 2019 04:11:47 GMT
Expires: Thu, 27 Jun 2019 04:11:47 GMT
Etag: 9107516332936589630
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 7041
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 212357
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7041
Md5:    4d5b08eb17ce9abbc47ca66d331012ad
Sha1:   e299b1ee08219ed5b423a4f35df11773a7bed487
Sha256: addfd42cc39ee41cebeaa6d619ed68860c60babc98e2ed32b9895590b829d386
                                        
                                            GET /ads/ad7.html HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:45 GMT
Content-Length: 201
Last-Modified: Fri, 13 Apr 2018 23:37:59 GMT
Connection: keep-alive
Etag: "5ad13f57-c9"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   201
Md5:    6da31fb8bd20770599a62a64b0744a38
Sha1:   e7c0107aa6bd3cd56eef54ddd6a0488daeb0d558
Sha256: 1da6289918745126cf07b5acf9f82af56ee3e0913da03a7b0a756367918ba36a
                                        
                                            GET /banners/1/led-Uncertain_about_life_decisions1_728x90.jpg?s=1&p=7&w=103652&t=0&c=19236&cs=0 HTTP/1.1 
Host: affiliates.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad7.html

                                         
                                         93.93.53.206
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 15 Jun 2019 15:11:04 GMT
Server: Apache
Location: https://affiliates.oranum.com/banners/1/led-Uncertain_about_life_decisions1_728x90.jpg?s=1&p=7&w=103652&t=0&c=19236&cs=0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 277
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   277
Md5:    365c9ac9831974767126cbdb92f501cd
Sha1:   7e5aec09fcf27191a5fd9340e585bf914100dad8
Sha256: 354f3440e1aefb754a2fd0a6c2463840505f525a43ae7fc2e2b0be041f60669d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:13:43 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=82333, public, no-transform, must-revalidate
Last-Modified: Sat, 15 Jun 2019 03:18:10 GMT
Expires: Sun, 16 Jun 2019 15:18:10 GMT
Etag: "7ebd47856e86f60b42c3edd69dbbf6ea9ef504a1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    52cc85b0807046ac1dcb74b49c23ef2e
Sha1:   7ebd47856e86f60b42c3edd69dbbf6ea9ef504a1
Sha256: dc92b6da3297492658a4fa0d494c90f88f6e479ce1a8b1ee2ad50ca604f1c608
                                        
                                            GET /ads/ad8.html HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:45 GMT
Content-Length: 193
Last-Modified: Fri, 13 Apr 2018 23:38:00 GMT
Connection: keep-alive
Etag: "5ad13f58-c1"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   193
Md5:    f6933cbd8677377ef605d327c5249a42
Sha1:   81f1a1400783740a4aac27292083cd5d2bf1127b
Sha256: 84c104aa361e719b36286c9df5910d8dc159f9161c50974d11d0b59aa65c913e
                                        
                                            GET /ads/ad9.html HTTP/1.1 
Host: www.statshow.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: PHPSESSID=q3gq4fqij9cj2jflfksm0m99u6; user_country=NO; user_country_name=Norway

                                         
                                         158.69.84.99
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 15 Jun 2019 15:11:45 GMT
Content-Length: 213
Last-Modified: Fri, 13 Apr 2018 23:38:00 GMT
Connection: keep-alive
Etag: "5ad13f58-d5"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   295
Md5:    e6a8d2905e4fa1ae4f8bf7c7be921d15
Sha1:   778cd19b12f138368364588e03e974e5c76d0a04
Sha256: 6ad4e0e4ced650ef3eb40a95dfcf073bb3a2d53b07272c80db4a7a0e0139d402
                                        
                                            GET /maps/embed?origin=mfe&pb=!1m4!2m1!1s,!5e0!6i3!3m1!1sen-US!5m1!1sen-US HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         172.217.21.164
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 15 Jun 2019 15:11:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Vary: Accept-Language
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: mafe
X-XSS-Protection: 0
Server-Timing: gfet4t7; dur=160
Set-Cookie: NID=185=O-lMW4XID31NVUvBjF1-1H_szoA6Mo3wY9dKYPnoHPQ02KKsAYgaO0RrTEozc7cw6MXPHe8XiBZJhkE8o5hu-HgEZUms-hDUDwVXtirSibuTiOlsbEDBSEau79hB_fR-Yn30kcxmYHe-av-kMOXVO92QmUeCkgxLXuh7oOyxmJo; expires=Sun, 15-Dec-2019 15:11:04 GMT; path=/; domain=.google.com; HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   534
Md5:    bf298d7d8386575dcfc765685078b91e
Sha1:   e924280b9206ad13ac7b39f1ddb6a6d8fe843480
Sha256: a362b774cdde4b11d360ffc2547beca5d4e39a43392e53442d7ae0c60c5f150d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Accept-Ranges: bytes
Last-Modified: Wed, 12 Jun 2019 11:15:41 GMT
Server: Apache
Etag: 5BD89FFEC28E1E5467BBEAE77C5BF979D142CFEE
Cache-Control: max-age=603257,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp4
X-HW: 1560611465.cds017.sk1.h2,1560611465.cds030.sk1.c
Connection: keep-alive
Content-Length: 472


--- Additional Info ---
Magic:  data
Size:   472
Md5:    35d3b0b37f1b83eed31cf8ebf8f7e7d4
Sha1:   5bd89ffec28e1e5467bbeae77c5bf979d142cfee
Sha256: 33cb9fd910adbf17cfb8e1edbb2f97c2ba33aef81f2dc22cb78bc4ef5e5c195a
                                        
                                            GET /banners/1/hab-en_300x600_livefeed_lifecoach_blue_are_you_tired.jpg?s=1&p=7&w=103652&t=216&c=19236&cs=0 HTTP/1.1 
Host: affiliates.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad9.html

                                         
                                         93.93.53.206
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Server: Apache
Location: https://affiliates.oranum.com/banners/1/hab-en_300x600_livefeed_lifecoach_blue_are_you_tired.jpg?s=1&p=7&w=103652&t=216&c=19236&cs=0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 282
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   282
Md5:    91cc0576f5b79cc5a170a456f40dbe15
Sha1:   5b0a1671eb9fbe1fe8d774f5934b38836f2f31eb
Sha256: 6dc7602cc6c3fdd6c428359e5729a053848ceca660d3bb0812e292b386a953a3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 10 Jun 2019 00:14:19 GMT
Server: Apache
Etag: 339EE174BC34BD08A53B8217987BA7E14415A3D1
Cache-Control: max-age=302399,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp2
X-HW: 1560611465.cds017.sk1.h2,1560611465.cds017.sk1.c
Connection: keep-alive
Content-Length: 727


--- Additional Info ---
Magic:  data
Size:   727
Md5:    f4ba8ce4115be74bae0bb9599662eeeb
Sha1:   339ee174bc34bd08a53b8217987ba7e14415a3d1
Sha256: 55416d18b7023713b3ef0ea78c0519e570c1ebc7427f54044a72e88438229cc6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 10 Jun 2019 00:14:19 GMT
Server: Apache
Etag: A0CB7333F2ECAFF7F54633E9D99DC644EAD73BDA
Cache-Control: max-age=302399,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp5
X-HW: 1560611465.cds043.sk1.h2,1560611465.cds047.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0277ceecdd540381203dd59aa8b0c4d9
Sha1:   a0cb7333f2ecaff7f54633e9d99dc644ead73bda
Sha256: bf9975da3388dc9b6c6f4f35f20b8f3cd826cb940ae56465a21cf17c7aec2531
                                        
                                            GET /v0.0.1/br/livefeed/embed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0 HTTP/1.1 
Host: pr.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad8.html

                                         
                                         216.172.0.198
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: unknown
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Date: Sat, 15 Jun 2019 15:11:05 GMT
Access-Control-Allow-Origin: *
X-Real-Source: -


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   1294
Md5:    4a811910016af443359593e5889c6689
Sha1:   c650e51e75ca7ad578876e5867d517904d5e3fd2
Sha256: c21ff7a3a0df47dcbec69abaa379b475ddc5a3518b7c35e98bbbd779a47c041e
                                        
                                            GET /rsrc.php/v3iEpO4/yf/l/en_US/nBV3-PuKHAH.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FStatShow%2F&locale=en_US&send=false&layout=button_count&width=80&show_faces=false&action=like&colorscheme=light&font&height=21
Origin: https://www.facebook.com

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Sun, 14 Jun 2020 13:13:55 GMT
Content-MD5: C+g87bEt/eQvVuuVAB7I1g==
X-FB-Debug: vNelC8HQLq9a4QCHHVXM9iGteyo4xCTagXQbq2F7Pd67+XSt6e/dEJNQWkN6bzAIdSTLJbBtQC4z//ygvgHQpQ==
Date: Sat, 15 Jun 2019 15:11:05 GMT
Connection: keep-alive
Content-Length: 144011


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   144011
Md5:    0be83cedb12dfde42f56eb95001ec8d6
Sha1:   3379c8bb3e1db736d5cddda36a112c6531d292d0
Sha256: 2ed74fe70b0f26f2d26db178efd9ab541221736cbf9812fe299bac3092d28ba9
                                        
                                            GET /pagead/ads?client=ca-pub-6072412641931604&output=html&h=90&slotname=3070290120&adk=3024896145&adf=807048394&w=728&lmt=1560611461&guci=1.2.0.0.2.2.0.0&format=728x90&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462753&bpp=15&fdt=873&idt=873&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&prev_slotnames=8808388117&correlator=273257467024&frm=20&pv=1&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=154&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=2&uci=a!2&dtd=887 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Location: http://www.statshow.com/ads/ad7.html
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 15 Jun 2019 15:11:05 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 15-Jun-2019 15:26:05 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   82
Md5:    87b49554493c15fb23b8e5d2f13b1ebf
Sha1:   328cbcb1c58530fd3f554ca7386ef7a85e1e982f
Sha256: 590b4bba70579d67368d97259fc85f56fda4fa5cb82f404fa8ec67a43369db17
                                        
                                            GET /pub-config/r20160913/ca-pub-6072412641931604.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 118
Date: Sat, 15 Jun 2019 06:38:22 GMT
Expires: Sat, 15 Jun 2019 18:38:22 GMT
Last-Modified: Thu, 13 Jun 2019 20:26:10 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 0
Age: 30763
Cache-Control: public, max-age=43200
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   118
Md5:    6f5e216d6b559d8c625c16d9cf3aea0d
Sha1:   67c7c642c603aee5bd2bac15ebfb279807a8a74e
Sha256: 84a4c2774af94b013729bc5934fbf0fa87d5f4e2b001bd1cd0a7bce5ba41d7eb
                                        
                                            GET /counter/counter.js HTTP/1.1 
Host: www.statcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         104.20.3.47
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d4e6c357547f2d1c91dd0b733165c3e3f1560611465; expires=Sun, 14-Jun-20 15:11:05 GMT; path=/; domain=.statcounter.com; HttpOnly
Last-Modified: Thu, 13 Jun 2019 12:49:21 GMT
Etag: W/"5d024651-723a"
Expires: Sun, 16 Jun 2019 03:11:05 GMT
Cache-Control: public, max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4e757978ebe475ec-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10572
Md5:    fed75e1ff6e6166dc0c4e4e492eb9135
Sha1:   692a983e52b49d1f77036ba0ba6f26aca634c476
Sha256: 36fcbc2f504300a47fe4189eb849c4f80cc1be10a18712b5c0d3eaef81c8f26d
                                        
                                            GET /br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0 HTTP/1.1 
Host: pr.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad8.html

                                         
                                         216.172.0.198
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: unknown
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Cache-Control: no-cache
Date: Sat, 15 Jun 2019 15:11:05 GMT
Access-Control-Allow-Origin: *
X-Real-Source: -
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3889
Md5:    7c5f08f2c098e828ed5b715a944f5268
Sha1:   28fe97d09f1e05bc4166065e77d52626784afc44
Sha256: 3dfbb5e367b95e1d79ca480c2f202b5ffb2bd04d4d713aa82ba3061e9368bb67
                                        
                                            GET /banners/1/led-Uncertain_about_life_decisions1_728x90.jpg?s=1&p=7&w=103652&t=0&c=19236&cs=0 HTTP/1.1 
Host: affiliates.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad7.html

                                         
                                         93.93.53.206
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Server: Apache
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   58310
Md5:    2aca309f5881637b435a0a9037a97205
Sha1:   ff86abd03d74a4acbf09ac1afc8d9374f3a20706
Sha256: a2267c82e079109bd13c9007bf791b8ca19edebb014507198988df64ff0295da
                                        
                                            GET /banners/1/led-Uncertain_about_life_decisions1_728x90.jpg?s=1&p=7&w=103652&t=0&c=19236&cs=0 HTTP/1.1 
Host: affiliates.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad7.html

                                         
                                         93.93.53.206
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Server: Apache
Location: https://affiliates.oranum.com/banners/1/led-Uncertain_about_life_decisions1_728x90.jpg?s=1&p=7&w=103652&t=0&c=19236&cs=0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 277
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   277
Md5:    365c9ac9831974767126cbdb92f501cd
Sha1:   7e5aec09fcf27191a5fd9340e585bf914100dad8
Sha256: 354f3440e1aefb754a2fd0a6c2463840505f525a43ae7fc2e2b0be041f60669d
                                        
                                            GET /rsrc.php/v3/y5/r/OqOE21UvWe3.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FStatShow%2F&locale=en_US&send=false&layout=button_count&width=80&show_faces=false&action=like&colorscheme=light&font&height=21

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-MD5: uF0RL4E+h23ClLQmPOTTMw==
Cache-Control: public,max-age=31536000,immutable
Expires: Fri, 12 Jun 2020 00:11:05 GMT
X-FB-Debug: LRNX7zpqfESORhaX9GusMXc2VcDpWFv/ve3meaJCFXI5qiMWGUMEjRA5o0HcCY3j64CQySd21EyIROvyl+hFdA==
Date: Sat, 15 Jun 2019 15:11:05 GMT
Connection: keep-alive
Content-Length: 400


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit gray+alpha, non-interlaced
Size:   400
Md5:    b85d112f813e876dc294b4263ce4d333
Sha1:   ca55b0c604d89034ee0249024983f7570ea2f8bb
Sha256: ed91fbb0cd9308f91f8e1fd93942c94ee850fc4161ed788b16f801b743c70b9b
                                        
                                            GET /maps-api-v3/embed/js/37/4/init_embed.js HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1s,!5e0!6i3!3m1!1sen-US!5m1!1sen-US

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 62338
Date: Tue, 04 Jun 2019 18:56:30 GMT
Expires: Wed, 03 Jun 2020 18:56:30 GMT
Last-Modified: Mon, 03 Jun 2019 18:37:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 936875
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   62338
Md5:    dc7f17ab36630646cb8c333e7d79606c
Sha1:   1df55e7290bbac50cf1d52584026ed5a90b90c92
Sha256: 8aa08d052d4320302a7b94290b4fb772b11cccbf5c4343497ca7446ad77feedf
                                        
                                            GET /pr/oranum/banners/css/livefeed_140-v937571.css HTTP/1.1 
Host: static0.doclercdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         104.20.34.238
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d58b1b7628e99dad66cf28fbc0c4fab091560611465; expires=Sun, 14-Jun-20 15:11:05 GMT; path=/; domain=.doclercdn.com; HttpOnly
Last-Modified: Wed, 15 May 2019 09:16:35 GMT
Vary: Accept-Encoding
X-Real-Source: static0.doclercdn.com
Expires: Sat, 29 Jun 2019 15:11:05 GMT
Cache-Control: public, max-age=1209600
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Server: cloudflare
CF-RAY: 4e75797aa8fb75c8-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2933
Md5:    31650f9d04f50c7a5c8998c61721c5d1
Sha1:   f1714fb802d1cc58f4b716b0f581a6033fb53cf8
Sha256: e0e77d3fcf5a607123ebe59165390e565a08073f0b997f6bb877037bacd743c6
                                        
                                            GET /activeview/js/current/osd.js?cb=%2Fr20100101 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 15 Jun 2019 15:11:05 GMT
Expires: Sat, 15 Jun 2019 15:11:05 GMT
Cache-Control: private, max-age=3000
Etag: "1560510989559007"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28264
Md5:    06023f4a698c82a73654072701ab7680
Sha1:   e5a671638f7522ab6aa740560fe51aca729e83d2
Sha256: c6fb5304b2853d2036183970f2305291e4fa1e9da270c43d261356445f331973
                                        
                                            GET /pr/_common/scripts/livefeed-v937571.js HTTP/1.1 
Host: static0.doclercdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0
Cookie: __cfduid=d58b1b7628e99dad66cf28fbc0c4fab091560611465

                                         
                                         104.20.34.238
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 15 May 2019 09:16:35 GMT
Vary: Accept-Encoding
X-Real-Source: static0.doclercdn.com
Expires: Sat, 29 Jun 2019 15:11:05 GMT
Cache-Control: public, max-age=1209600
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Server: cloudflare
CF-RAY: 4e75797af94f75c8-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   54872
Md5:    8cb78ffbc0fa3dd80f174124662fa1f1
Sha1:   35816eb966e70cdc87d04d305664cbcb4c854ce1
Sha256: 3101255af06875856b6aa689809a8f86726f6cc062dc37c8cf91b7480dd85635
                                        
                                            GET /pr/oranum/banners/images/br_bg_300xx250_type140_cover-v937571.jpg HTTP/1.1 
Host: static1.doclercdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static0.doclercdn.com/pr/oranum/banners/css/livefeed_140-v937571.css
Cookie: __cfduid=d58b1b7628e99dad66cf28fbc0c4fab091560611465

                                         
                                         104.20.33.238
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Content-Length: 19341
Connection: keep-alive
Last-Modified: Wed, 15 May 2019 09:16:35 GMT
Etag: "5cdbd8f3-4b8d"
X-Real-Source: static1.doclercdn.com
Expires: Sat, 29 Jun 2019 15:11:05 GMT
Cache-Control: public, max-age=1209600
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4e75797b8e988725-ARN


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   19341
Md5:    f8c4d29ae4688325125a7b1ddf0e73d8
Sha1:   3ed9fa470f8a036b4c9824018402bb18964add35
Sha256: 29ae54075c919c962b0f5e028ab41dea05d294300fb85b1ef7fd8bb698ce1b4b
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 14:12:46 GMT
Expires: Sat, 15 Jun 2019 16:12:46 GMT
Last-Modified: Tue, 21 May 2019 23:53:44 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17595
Age: 3499
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17595
Md5:    585dd98ad9bada516652979df577ade8
Sha1:   b81e0ee5e2648994c7c92e4becb6a8420113e462
Sha256: e88dfebceadff72fc5bb3ab4a4dfa71d835acbb4d183091d66e72e762fb306d5
                                        
                                            GET /stats/0.php?1445863&@f16&@g1&@h1&@i1&@j1560611465294&@k0&@l1&@mrizetours.blogspot.com%20-%20Worth%20and%20traffic%20estimation%20%7C%20Rize%20G%C3%BCn%C3%BCbirlik%20Turlar&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1176&@b1:-27471867&@b3:1560611465&@b4:js15.js&@b5:120&@a-_0.2.1&@vhttp%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&@w HTTP/1.1 
Host: s4.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         198.27.69.19
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Content-Length: 47
Connection: close
Set-Cookie: CountUid=d3bf105f-d6wc-435e-8e15-0b111ab0d467; domain=.histats.com; Max-Age=31536000; Expires=Sun, 14-Jun-2020 15:11:05 GMT


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   47
Md5:    06b05ae9614bafae9b0b09cfbeed559e
Sha1:   9b087683529b7b89a117b2d5cbb35a93e7dcbaca
Sha256: a60692031ce09be66be89784e8b0214c0f8b6f52cd8fd6a36129a635ffe41ad2
                                        
                                            GET /pagead/ads?client=ca-pub-6072412641931604&output=html&h=15&slotname=8808388117&adk=915088578&adf=807048394&w=728&lmt=1560611461&guci=1.2.0.0.2.2.0.0&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462685&bpp=67&fdt=388&idt=388&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&correlator=273257467024&frm=20&pv=2&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=151&ady=131&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=901 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 15 Jun 2019 15:11:05 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 15-Jun-2019 15:26:05 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Sat, 15 Jun 2019 15:11:05 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3304
Md5:    3d43e891a5af8d7a650bf3eed73e1ad3
Sha1:   108228d6394a36b345c014d3b21cdcfa2f9bbfc0
Sha256: de80bc7108965173206b1b4e0461253d797a913008f6e6386102a6914cab2ade
                                        
                                            GET /r/collect?v=1&_v=j76&a=786938725&t=pageview&_s=1&dl=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ul=en-us&de=UTF-8&dt=rizetours.blogspot.com%20-%20Worth%20and%20traffic%20estimation%20%7C%20Rize%20G%C3%BCn%C3%BCbirlik%20Turlar&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAEQ~&jid=1214925665&gjid=750559587&cid=1428523002.1560611464&tid=UA-31082176-1&_gid=1815686625.1560611466&_r=1&z=613492167 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         172.217.21.174
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-31082176-1&cid=1428523002.1560611464&jid=1214925665&_gid=1815686625.1560611466&gjid=750559587&_v=j76&z=613492167
Access-Control-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:05 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 418


--- Additional Info ---
Magic:  HTML document text
Size:   418
Md5:    0f54d0c745fc9fa43463a78057ed8dfa
Sha1:   0fd9c946b5361b769eaaf33502ac4929c4b1b43a
Sha256: 30d8e6309e9c5342ff8af045d9fdb31fae7b5c7111ea51b5537144ce80db0e6c
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    2f8650842c2809dee49d8b90628121ba
Sha1:   81eb3bb3fab8af6fa3307e451be3d6373d2f70f6
Sha256: c094fb225f84b325973e1653f85648f922c2487a1b00d82ca12004518dc7bc12
                                        
                                            GET /pagead/images/adchoices/icon.png HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&output=html&h=15&slotname=8808388117&adk=915088578&adf=807048394&w=728&lmt=1560611461&guci=1.2.0.0.2.2.0.0&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462685&bpp=67&fdt=388&idt=388&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&correlator=273257467024&frm=20&pv=2&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=151&ady=131&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=901
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Fri, 14 Jun 2019 21:23:35 GMT
Expires: Sat, 15 Jun 2019 21:23:35 GMT
Etag: 426692510519060060
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 295
X-XSS-Protection: 0
Cache-Control: public, max-age=86400
Age: 64050
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 15 x 15, 16-bit/color RGBA, non-interlaced
Size:   295
Md5:    d848a2953307aa510bdad31f5bf84671
Sha1:   e9d6d8daa9255f99e4e778ff4c4b47806bdb18c1
Sha256: 7fd59024b6ca83f11f7a3448ec148309a13b705725716df134f699e60a96eb1b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    665162d69c086e1017b39f65de245bc1
Sha1:   e807edadf97f9cdaae6ba16d2ec76bd1ee10060f
Sha256: 00bd02f94c515feedfb4b32e156e350247ad42f6fab64a001255c5b1ba347bce
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    60c29bff42face91b9be845779d07fbf
Sha1:   9a135351b5688eecf99d640d9d3d1f3aab7b0515
Sha256: e53dcb4da4e1a01a7a2de4051a89653c73a91bbdf1d4a81c7736849552a76a9c
                                        
                                            GET /banners/1/hab-en_300x600_livefeed_lifecoach_blue_are_you_tired.jpg?s=1&p=7&w=103652&t=216&c=19236&cs=0 HTTP/1.1 
Host: affiliates.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad9.html

                                         
                                         93.93.53.206
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 15 Jun 2019 15:11:05 GMT
Server: Apache
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JPEG image data
Size:   117578
Md5:    819fc10bd2700ba04bd05e1036aa1ade
Sha1:   b3c908ac5a5ba03e2228a1b2344214553ed3967d
Sha256: 9646fdfd562e62fadb2a5032a6e69d1cbd310b83c952c3f2e8acf6872c1651ba
                                        
                                            GET /gtm.js?id=GTM-TV3674Q HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.20.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sat, 15 Jun 2019 15:11:05 GMT
Expires: Sat, 15 Jun 2019 15:11:05 GMT
Cache-Control: private, max-age=900
Last-Modified: Thu, 13 Jun 2019 17:57:39 GMT
Server: Google Tag Manager
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28866
Md5:    5b2351c3261cd6e531219bc49aab9e37
Sha1:   2f6ecff1b62f54bce8e07e66461d99361754801e
Sha256: 3ac2f1f165d305283690dcd289d1ff68781c6141bb317c159f99133580f0afc9
                                        
                                            GET /pagead/js/r20190612/r20110914/abg_lite.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&output=html&h=15&slotname=8808388117&adk=915088578&adf=807048394&w=728&lmt=1560611461&guci=1.2.0.0.2.2.0.0&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462685&bpp=67&fdt=388&idt=388&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&correlator=273257467024&frm=20&pv=2&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=151&ady=131&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=901

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Wed, 12 Jun 2019 19:22:14 GMT
Expires: Wed, 26 Jun 2019 19:22:14 GMT
Etag: 12524661438965131630
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 11290
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 244131
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11290
Md5:    4bfb1890c286b8ddd3d547b973740cc2
Sha1:   9bcef9d373c3c6c023fb30ba6eda720b01d7736d
Sha256: da2b14cf8929c882876d5960ff29d853a40e78978fdaab65e832b8966cb711b0
                                        
                                            GET /t.php?sc_project=11711665&java=1&security=5d1f966a&u1=A4342664C2D54FCEFCAAC172EA989A08&sc_random=0.8224319720654192&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1176&h=885&camefrom=&u=http%3A//www.statshow.com/www/http%3A//rizetours.blogspot.com/&t=rizetours.blogspot.com%20-%20Worth%20and%20traffic%20estimation%20%7C%20Rize%20G%C3%BCn%C3%BCbirlik%20Turlar&rcat=d&rdom=d&rdomg=new&bb=1&sc_snum=1&sess=cfa820&p=0&invisible=1 HTTP/1.1 
Host: c.statcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: __cfduid=d4e6c357547f2d1c91dd0b733165c3e3f1560611465

                                         
                                         104.20.2.47
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 15 Jun 2019 15:11:06 GMT
Content-Length: 49
Connection: keep-alive
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Set-Cookie: is_unique=sc11711665.1560611465.0; expires=Thu, 13-Jun-2024 15:11:05 GMT; path=/; domain=.statcounter.com is_visitor_unique=1560611465305736896; expires=Mon, 14-Jun-2021 15:11:05 GMT; path=/; domain=.statcounter.com
Server: cloudflare
CF-RAY: 4e75797cce7ccb00-ARN


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    56398e76be6355ad5999b262208a17c9
Sha1:   a1fdee122b95748d81cee426d717c05b5174fe96
Sha256: 2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
Date: Sat, 15 Jun 2019 15:11:06 GMT
Etag: "c0ccc06d58626dbfe4c4102bca9dfe9c+gzip"
Last-Modified: Wed, 05 Jun 2019 16:50:27 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (lcy/1D68)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 28050


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Wed Jun 05 18:50:27 2019
Size:   28050
Md5:    fd3a2a74c5bf78132229235955cad937
Sha1:   b73bf8cc68751b649140f7f99931885712b6893f
Sha256: 44c881248311455e7846826dd9382878f6803d935d8162043c05fbfda161c266
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sat, 15 Jun 2019 15:11:06 GMT
Expires: Sat, 15 Jun 2019 15:11:06 GMT
Cache-Control: private, max-age=3600
Etag: 11386026576561889187
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 8912
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8912
Md5:    d699db4337f36a0938f603b99b58974f
Sha1:   bf14793cef8f24958457556b6e5e369b8f006093
Sha256: 66112fde584d20c52f316e3554d5a5a4991ce71018195c557f9113524f0e7742
                                        
                                            GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1s,!5e0!6i3!3m1!1sen-US!5m1!1sen-US

                                         
                                         172.217.20.42
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Sat, 15 Jun 2019 14:55:05 GMT
Expires: Sat, 15 Jun 2019 15:25:05 GMT
Content-Encoding: gzip
Server: mafe
Content-Length: 35117
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Server-Timing: gfet4t7; dur=13
Cache-Control: public, max-age=1800
Age: 961
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   35117
Md5:    8b3461af8741968886ba3dcb2f0847e7
Sha1:   39e5361bbb772f0998d7cd60f62b10d42fea827c
Sha256: 5e2dc3d4aa1b37d5e6048b585b0bcc4cc1dc3f8ff24165024ed72d84f4f04c87
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-31082176-1&cid=1428523002.1560611464&jid=1214925665&_gid=1815686625.1560611466&gjid=750559587&_v=j76&z=613492167 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: test_cookie=CheckForPermission

                                         
                                         173.194.73.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pagead/ads?client=ca-pub-6072412641931604&output=html&adk=1812271804&adf=807048394&lmt=1560611461&plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C30%3A1048576&guci=1.2.0.0.2.2.0.0&format=0x0&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&pra=7&wgl=0&dt=1560611466193&bpp=2&fdt=5&idt=5&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=728x90%2C336x280%2C300x600%2C728x90&prev_slotnames=8808388117&nras=1&correlator=273257467024&frm=20&pv=1&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=6&fc=912&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cs%7C&abl=NS&fu=16&bc=1&ifi=5&uci=a!5&dtd=15 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 15 Jun 2019 15:11:06 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlYbrmuBf2PQRUN40ogRV3T1HnwUfelCz3oMNYjqVMyc1By18rUwkMCz8FT; expires=Mon, 14-Jun-2021 15:11:06 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Sat, 15 Jun 2019 15:11:06 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /activeview/js/current/osd_listener.js?cache=r20110914 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&output=html&h=15&slotname=8808388117&adk=915088578&adf=807048394&w=728&lmt=1560611461&guci=1.2.0.0.2.2.0.0&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462685&bpp=67&fdt=388&idt=388&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&correlator=273257467024&frm=20&pv=2&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=151&ady=131&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=901

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 15 Jun 2019 15:11:06 GMT
Expires: Sat, 15 Jun 2019 15:11:06 GMT
Cache-Control: private, max-age=3000
Etag: "1560510989559007"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28166
Md5:    145f381544504899fea1cdb2def6528e
Sha1:   40278d84c341443dae3a0ef4eecd747f09cbeed7
Sha256: c881e3bc8dd5a0517709806ad0d09f33f6db81c96540453d9a178f5961eea3c0
                                        
                                            GET /pagead/viewthroughconversion/1007793848/?random=1560611466186&cv=9&fst=1560611466186&num=1&fmt=3&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg651&frm=2&url=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ref=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/pagead/1p-user-list/1007793848/?random=1560611466186&cv=9&fst=1560610800000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg651&frm=2&url=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ref=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&async=1&cdct=2&is_vtc=1&random=1416470895&resp=GooglemKTybQhCsO
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUmqKtL6atlD4eoEIg0Zutu6hbEgBZO8iqlXNpT55BjGTL4ch7D_Gv1WCXhh; expires=Mon, 14-Jun-2021 15:11:06 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 13:40:50 GMT
Expires: Sat, 15 Jun 2019 15:40:50 GMT
Last-Modified: Tue, 21 May 2019 23:53:44 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17595
Cache-Control: public, max-age=7200
Age: 5416
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17595
Md5:    585dd98ad9bada516652979df577ade8
Sha1:   b81e0ee5e2648994c7c92e4becb6a8420113e462
Sha256: e88dfebceadff72fc5bb3ab4a4dfa71d835acbb4d183091d66e72e762fb306d5
                                        
                                            GET /pcs/activeview?xai=AKAOjssR-XmHQ1uylU3zU4ZCNnn0bg6_HBgUCaMajsfM2rY2jqxAUuPOdTX_vGvu1wM0FbOD4tFymjgEWVmKqDjLSYuAXtXpzsV8nh_aCIRB&sai=AMfl-YRJWYFcA5V6M4hhbV8w7eilgAB080jOJOoD1mouypLuRUiS0C7MoP-3xS8NpqrlFmKjkJ1AYDEO7Cam&sig=Cg0ArKJSzEzzBXOHcbAjEAE&r=pv&xdi=0&id=osdim&vs=2&uc=0&upc=0&tgt=nf&cl=0&v=20190614 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6072412641931604&output=html&h=15&slotname=8808388117&adk=915088578&adf=807048394&w=728&lmt=1560611461&guci=1.2.0.0.2.2.0.0&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462685&bpp=67&fdt=388&idt=388&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&correlator=273257467024&frm=20&pv=2&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=151&ady=131&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=901

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /banners/1/led-Uncertain_about_life_decisions1_728x90.jpg?s=1&p=7&w=103652&t=0&c=19236&cs=0 HTTP/1.1 
Host: affiliates.oranum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/ads/ad7.html

                                         
                                         93.93.53.206
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 15 Jun 2019 15:11:06 GMT
Server: Apache
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   58310
Md5:    2aca309f5881637b435a0a9037a97205
Sha1:   ff86abd03d74a4acbf09ac1afc8d9374f3a20706
Sha256: a2267c82e079109bd13c9007bf791b8ca19edebb014507198988df64ff0295da
                                        
                                            GET /pagead/1p-user-list/1007793848/?random=1560611466186&cv=9&fst=1560610800000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg651&frm=2&url=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ref=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&async=1&cdct=2&is_vtc=1&random=1416470895&resp=GooglemKTybQhCsO HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0
Cookie: NID=185=O-lMW4XID31NVUvBjF1-1H_szoA6Mo3wY9dKYPnoHPQ02KKsAYgaO0RrTEozc7cw6MXPHe8XiBZJhkE8o5hu-HgEZUms-hDUDwVXtirSibuTiOlsbEDBSEau79hB_fR-Yn30kcxmYHe-av-kMOXVO92QmUeCkgxLXuh7oOyxmJo

                                         
                                         172.217.21.164
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/pagead/1p-user-list/1007793848/?random=1560611466186&cv=9&fst=1560610800000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg651&frm=2&url=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ref=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&async=1&cdct=2&is_vtc=1&random=1416470895&resp=GooglemKTybQhCsO&ipr=y
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j76&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1400180712&gjid=1672451004&_gid=369261513.1560611467&_u=YGBAgEQ~&z=1758541238 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0
Cookie: IDE=AHWqTUmqKtL6atlD4eoEIg0Zutu6hbEgBZO8iqlXNpT55BjGTL4ch7D_Gv1WCXhh

                                         
                                         173.194.73.157
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1400180712&_v=j76&z=1758541238
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 368
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   368
Md5:    4ea9e6e0746d38d3b82cf521b591a6fb
Sha1:   1269ed4d98deb81bf4bef27e15b85a45301269c5
Sha256: 615ba6e7b98dc18c35c2fb86ec1fb560fa3da6cd7db137e3725af11d02067290
                                        
                                            GET /collect?v=1&_v=j76&a=18326843&t=pageview&_s=1&dl=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&dr=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&dp=%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ul=en-us&de=UTF-8&sd=24-bit&sr=1176x885&vp=300x250&je=1&fl=10.0%20r45&_u=YGBAgEQ~&jid=1400180712&gjid=1672451004&cid=1741356892.1560611467&tid=UA-18695209-13&_gid=369261513.1560611467&gtm=2wg651TV3674Q&cd6=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&cd7=www.statshow.com&cd11=1741356892.1560611467&z=1697380093 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Sun, 02 Jun 2019 23:41:51 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 1092555
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /collect?v=1&_v=j76&a=18326843&t=event&ni=1&_s=1&dl=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&dr=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&dp=%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ul=en-us&de=UTF-8&sd=24-bit&sr=1176x885&vp=300x250&je=1&fl=10.0%20r45&ec=technical%20events&ea=frontend%20error&el=message%3Auncaught%20exception%3A%20%5BException...%20%22Not%20enough%20arguments%22%20%20nsresult%3A%20%220x80570001%20(NS_ERROR_XPC_NOT_ENOUGH_ARGS)%22%20%20location%3A%20%22JS%20frame%20%3A%3A%20http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0%20%3A%3A%20anonymous%20%3A%3A%20line%20193%22%20%20data%3A%20no%5D%20-%20source%3A%20-%20line%3Aundefined%20-%20error%3Aundefined&ev=0&_u=YGDAAEQ~&jid=&gjid=&cid=1741356892.1560611467&tid=UA-18695209-13&_gid=369261513.1560611467&gtm=2wg651TV3674Q&cd6=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&cd7=www.statshow.com&cd11=1741356892.1560611467&z=894520855 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Sat, 01 Jun 2019 23:42:22 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 1178924
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /r/collect?v=1&_v=j76&a=18326843&t=event&ni=1&_s=1&dl=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&dr=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&dp=%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ul=en-us&de=UTF-8&sd=24-bit&sr=1176x885&vp=300x250&je=1&fl=10.0%20r45&ec=technical%20events&ea=frontend%20error&el=isSupportedVideo%3Atrue%20-%20isChrome%3Afalse&ev=0&_u=YGDAAEQ~&jid=1015344431&gjid=784839448&cid=1741356892.1560611467&tid=UA-18695209-13&_gid=369261513.1560611467&_r=1&gtm=2wg651TV3674Q&cd6=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&cd7=www.statshow.com&cd11=1741356892.1560611467&z=2078235907 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.21.174
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1015344431&_gid=369261513.1560611467&gjid=784839448&_v=j76&z=2078235907
Access-Control-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 419
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   419
Md5:    b20ac9de2d3479d35e456f0441435b83
Sha1:   3e5e79987521ba7784c94d84f6126585fbf8712a
Sha256: 4cd822e70b963f721188b07ec7b4ba88b8b0af3987e8ab8b3eed751ece4b63a1
                                        
                                            GET /collect?v=1&_v=j76&a=18326843&t=event&ni=1&_s=1&dl=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&dr=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&dp=%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ul=en-us&de=UTF-8&sd=24-bit&sr=1176x885&vp=300x250&je=1&fl=10.0%20r45&ec=technical%20events&ea=frontend%20error&el=message%3AScript%20error.%20-%20source%3A%20-%20line%3Aundefined%20-%20error%3Aundefined&ev=0&_u=YGDAAEQ~&jid=&gjid=&cid=1741356892.1560611467&tid=UA-18695209-13&_gid=369261513.1560611467&gtm=2wg651TV3674Q&cd6=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&cd7=www.statshow.com&cd11=1741356892.1560611467&z=1866763920 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Sat, 01 Jun 2019 21:59:10 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 1185116
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1400180712&_v=j76&z=1758541238 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0
Cookie: NID=185=O-lMW4XID31NVUvBjF1-1H_szoA6Mo3wY9dKYPnoHPQ02KKsAYgaO0RrTEozc7cw6MXPHe8XiBZJhkE8o5hu-HgEZUms-hDUDwVXtirSibuTiOlsbEDBSEau79hB_fR-Yn30kcxmYHe-av-kMOXVO92QmUeCkgxLXuh7oOyxmJo

                                         
                                         172.217.21.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1400180712&_v=j76&z=1758541238&slf_rd=1&random=4109530415
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1015344431&_gid=369261513.1560611467&gjid=784839448&_v=j76&z=2078235907 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0
Cookie: IDE=AHWqTUmqKtL6atlD4eoEIg0Zutu6hbEgBZO8iqlXNpT55BjGTL4ch7D_Gv1WCXhh

                                         
                                         173.194.73.157
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1015344431&_v=j76&z=2078235907
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 368
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   368
Md5:    db2423c8748fc7a15eeb64f65736ac9d
Sha1:   fbe806c7c87c1f15375b26958ec5008a29e527ce
Sha256: 9a7eb2a9810588349a0bb7ea302a60f167021fd50c2481a5e2cab0932a998ea2
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 15 Jun 2019 15:11:06 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b769333b69e083a5a80d096543417de0
Sha1:   1d75fff37f02d6451037c236810c63c0c7aa212e
Sha256: 861e6ec629cdbf5155f51e730d710288874d11b3713ff553a29ff31a6e12bb4a
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1015344431&_v=j76&z=2078235907 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0
Cookie: NID=185=O-lMW4XID31NVUvBjF1-1H_szoA6Mo3wY9dKYPnoHPQ02KKsAYgaO0RrTEozc7cw6MXPHe8XiBZJhkE8o5hu-HgEZUms-hDUDwVXtirSibuTiOlsbEDBSEau79hB_fR-Yn30kcxmYHe-av-kMOXVO92QmUeCkgxLXuh7oOyxmJo

                                         
                                         172.217.21.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1015344431&_v=j76&z=2078235907&slf_rd=1&random=2409960629
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
                                        
                                            GET /pagead/1p-user-list/1007793848/?random=1560611466186&cv=9&fst=1560610800000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&gtm=2wg651&frm=2&url=http%3A%2F%2Fpr.oranum.com%2Fbr%2Flivefeed%3Ftype%3Dlivefeed_140%26s%3D1%26p%3D7%26w%3D103652%26t%3D216%26c%3D19236%26only_adblock%3D0&ref=http%3A%2F%2Fwww.statshow.com%2Fads%2Fad8.html&async=1&cdct=2&is_vtc=1&random=1416470895&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1400180712&_v=j76&z=1758541238&slf_rd=1&random=4109530415 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-18695209-13&cid=1741356892.1560611467&jid=1015344431&_v=j76&z=2078235907&slf_rd=1&random=2409960629 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 15 Jun 2019 15:11:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/ads?client=ca-pub-6072412641931604&output=html&h=600&slotname=6150653317&adk=4110190612&adf=807048394&w=300&lmt=1560611461&guci=1.2.0.0.2.2.0.0&format=300x600&url=http%3A%2F%2Fwww.statshow.com%2Fwww%2Fhttp%3A%2F%2Frizetours.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&dt=1560611462778&bpp=7&fdt=934&idt=935&shv=r20190612&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=728x90%2C336x280&prev_slotnames=8808388117&correlator=273257467024&frm=20&pv=1&ga_vid=1428523002.1560611464&ga_sid=1560611464&ga_hid=786938725&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=777&ady=266&biw=1159&bih=754&scr_x=0&scr_y=0&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&pfx=0&fu=16&bc=1&ifi=4&uci=a!4&dtd=944 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statshow.com/www/http://rizetours.blogspot.com/

                                         
                                         216.58.211.2
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Location: http://www.statshow.com/ads/ad9.html
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 15 Jun 2019 15:11:04 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 15-Jun-2019 15:26:04 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
                                        
                                            GET /event?a=54664&rt=gif&v=4.5.6&p0=e%3Dvp%26p%3D1%26&p1=e%3Ddis&adce=1&gtmcb=160632405 HTTP/1.1 
Host: sslwidget.criteo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pr.oranum.com/br/livefeed?type=livefeed_140&s=1&p=7&w=103652&t=216&c=19236&only_adblock=0

                                         
                                         0.0.0.0
                                        


--- Additional Info ---