Overview

URL binoria.org.pandastats.net/
IP69.197.159.66
ASNAS32097 WholeSale Internet, Inc.
Location United States
Report completed2018-02-13 00:54:19 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-02-13 2 binoria.org.pandastats.net/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 69.197.159.66

Date UQ / IDS / BL URL IP
2018-11-11 06:30:39 +0100
0 - 0 - 1 armaedfoundation.org.pandastats.net/ 69.197.159.66
2018-07-08 10:51:37 +0200
0 - 0 - 1 unyumc.org.pandastats.net/ 69.197.159.66
2018-07-06 14:48:03 +0200
0 - 0 - 1 tnmed.org.pandastats.net/ 69.197.159.66
2018-07-03 07:35:30 +0200
0 - 0 - 0 69.197.159.66 69.197.159.66
2018-07-02 15:11:32 +0200
0 - 0 - 1 stmarysoakridge.org.pandastats.net/ 69.197.159.66
2018-07-02 13:16:14 +0200
0 - 0 - 1 bainbridgeyouthservices.org.pandastats.net/ 69.197.159.66
2018-06-30 14:04:46 +0200
0 - 0 - 1 pacificfishhabitat.org.pandastats.net/ 69.197.159.66
2018-06-29 10:39:05 +0200
0 - 0 - 1 authenticreflection.org.pandastats.net/ 69.197.159.66
2018-06-26 07:45:56 +0200
0 - 0 - 1 columbuscomp.org.pandastats.net/ 69.197.159.66
2018-06-25 08:20:03 +0200
0 - 0 - 1 19463.us.pandastats.net/ 69.197.159.66

Last 10 reports on ASN: AS32097 WholeSale Internet, Inc.

Date UQ / IDS / BL URL IP
2018-12-19 00:35:13 +0100
0 - 0 - 4 jrjbf.info/to/out.php 173.208.133.69
2018-12-19 00:34:54 +0100
0 - 0 - 4 frgwkt.loan/to/in.php 173.208.133.69
2018-12-19 00:31:53 +0100
0 - 0 - 1 rulae.info/vip/m16.html 173.208.133.68
2018-12-19 00:29:54 +0100
0 - 0 - 3 rgytdw.ltd/video/v5.php 173.208.133.69
2018-12-19 00:24:10 +0100
0 - 0 - 3 ffiih.info/video/v5.php 173.208.133.68
2018-12-19 00:19:40 +0100
0 - 0 - 2 vhnau.info/sitemap.html 173.208.133.67
2018-12-19 00:18:46 +0100
0 - 0 - 2 tknpjj.ltd/ 173.208.133.69
2018-12-19 00:16:49 +0100
0 - 0 - 3 nklian.top/b38.php 173.208.133.66
2018-12-19 00:16:40 +0100
0 - 0 - 2 lgthbz.ltd/ 173.208.133.68
2018-12-19 00:14:58 +0100
0 - 0 - 2 jsjkgx.loan/sitemap.html 173.208.133.68

No other reports on domain: pandastats.net



JavaScript

Executed Scripts (32)


Executed Evals (0)


Executed Writes (9)

#1 JavaScript::Write (size: 2502, repeated: 1) - SHA256: fcda6242798bf65f846326bcf43ee8c82dac0ccd2f1e58046e7d2b0b228638d6

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-3744029866517417"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180207/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_format="326x250";google_ad_client="ca-pub-3744029866517417";google_adsbygoogle_status="done";gfwroml="";gfwromr="";gfwroh="";gfwrow="";gfwroz="";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=2;google_responsive_formats=1;google_ad_width=326;google_ad_height=250;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=3;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["38893302","21061122","191880502"],"loeids":["38893312"]};google_loader_used="aa";google_reactive_tag_first=true;google_ad_unit_key="1970189370";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1518480027266;google_pub_vars="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";google_bpp=42;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180207/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#2 JavaScript::Write (size: 2298, repeated: 1) - SHA256: 07979a5afa780e650048e1dd8b7658c8accdd650c3b821c3e5b522975e74ce4d

                                        < !doctype html > < html > < body > < script > google_ad_format = "300x600";
google_ad_client = "ca-pub-3744029866517417";
google_adsbygoogle_status = "done";
gfwroml = "";
gfwromr = "";
gfwroh = "";
gfwrow = "";
gfwroz = "";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 2;
google_responsive_formats = 4;
google_ad_width = 300;
google_ad_height = 600;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 4;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893302", "21061122", "191880502"],
    "loeids": ["38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_unit_key = "4088835707";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1518480028571;
google_pub_vars = "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";
google_bpp = 89;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#3 JavaScript::Write (size: 86, repeated: 1) - SHA256: be0c0d86345c40de83790ea4461047c1327efd0907b14d2af9f41634ceb6678e

                                        < div id = "+ADFP1x"
style = "width:300px;height:600px;" > < /div><i style="display:none"></i >
                                    

#4 JavaScript::Write (size: 1351, repeated: 1) - SHA256: 29292de280a11e9db33d3e76e134d49cca1d60284cfa8e4ba69074fe19b135e4

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "326"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&amp;output=html&amp;h=250&amp;adk=1970189370&amp;adf=807048394&amp;w=326&amp;fwrn=2&amp;lmt=1518480022&amp;loeid=38893312&amp;rafmt=3&amp;format=326x250&amp;url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=1&amp;wgl=0&amp;adsid=NT&amp;dt=1518480027266&amp;bpp=42&amp;fdt=50&amp;idt=322&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=7090400855676&amp;frm=20&amp;ga_vid=1763431804.1518480028&amp;ga_sid=1518480028&amp;ga_hid=1116013026&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=105&amp;ady=172&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502%2C20040066&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;dtd=866"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#5 JavaScript::Write (size: 1373, repeated: 1) - SHA256: e1fdbf47d1a1ed607a3b4932ad2ce555b04f1f429f6ad111c08f758351973135

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "300"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&amp;output=html&amp;h=600&amp;adk=4088835707&amp;adf=807048394&amp;w=300&amp;fwrn=2&amp;lmt=1518480022&amp;loeid=38893312&amp;rafmt=4&amp;format=300x600&amp;url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=4&amp;wgl=0&amp;adsid=NT&amp;dt=1518480028571&amp;bpp=89&amp;fdt=94&amp;idt=330&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=326x250&amp;correlator=7090400855676&amp;frm=20&amp;ga_vid=1763431804.1518480028&amp;ga_sid=1518480028&amp;ga_hid=1116013026&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=749&amp;ady=147&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502%2C20040066&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=358"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#6 JavaScript::Write (size: 105, repeated: 1) - SHA256: 3254883964d2bf22491ed64b605b062b34ec760710ec1abba3c4b9ca04803428

                                        < script type = "text/javascript"
src = "https://s1.adform.net/stoat/607/s1.adform.net/bootstrap.js" > < /script>
                                    

#7 JavaScript::Write (size: 108, repeated: 1) - SHA256: 60cdf17091050e9d8c0c5fa8705f070d01f8feb6a2a30e14c61e09ab00bc023f

                                        < script type = "text/javascript"
src = "https://ssl.gstatic.com/trends_nrtr/1308_RC02/embed_loader.js" > < /script>
                                    

#8 JavaScript::Write (size: 1026, repeated: 1) - SHA256: ccbc8991e5b37d362b576af48a6dedb721118ebfc840f81f85fba458f7d06dba

                                        < script type = "text/javascript"
src = "https://track.adform.net/adfserve/?CC=1&bn=21409353;rtbwp=WoIqnAAOngUKmoSIAAoAo6dNShItJX75hZfWTw;rtbdata=x-QconeWRJpre3mZYvA0xS6L1NhB5ANV4B9yUDlcByu_q2j3WpEfzQ6lzVbaIVSCOYCrc6WfU8llM0z0Z4Upnbfj8NssUWIavXSuXFD3kZJxm9G6jR5we4oLRLNTApC0TjiFyf8rQ5WXySAEPV1j6G4zKAra8IewBkOZFrEadHp6IzUc6axivHpSoWqcsv8RD5dxNk7BqWu3IcQjAbRQgagep4oDNkoJRZ_tyv8nMBaPwbDz0xfovg2;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=C71ajnCqCWoW8OoiJ6gSjgajoA8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM3NDQwMjk4NjY1MTc0MTfIAQmpAi2dIe1SIoY-qAMBqgSPAU_Q45ssJ7W0lEFpwmrOe4M7wp9nPbLw5JhPReRyayvDUfe2MGYZDCBbD9EL9WWsHBdnnJ3XLJjveU_Nar6WOu6VrikTkWeqfBN4q4tGR10tl_6sWyo_ivVTgfnadzjE4zhG3PB94ALizyPGdmaCstg-3pehPfXRWcv9jNU-iJBHitWF-d9HSCVQEObmo_eDgAbUpJ2etbnkmzCgBiGoB6a-G9gHANIIBQiAYRAB&num=1&sig=AOD64_1SmO1zEuk_MPl3sBjv28qgEGehsQ&client=ca-pub-3744029866517417&adurl=;js=1;adfxid=1x;9855;set=en-US|en-US|1176X885|10.0452|300|600|24|8|3|7|1;fd=0|0&CREFURL=http%3A%2F%2Fbinoria.org.pandastats.net%2F" > < /script>
                                    

#9 JavaScript::Write (size: 141, repeated: 1) - SHA256: 4d29af9a0d61f555e3e52a1a59345ab8560ee85dec51b494079bc8ea7d2d0c82

                                        < script > trends.embed.renderExploreWidgetFromOldParamaters("hl=nl&q=Binoria&content=1&cid=TIMESERIES_GRAPH_0&export=5&w=500&h=200"); < /script>
                                    


HTTP Transactions (61)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: binoria.org.pandastats.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         69.197.159.66
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 00:18:12 GMT
Server: Apache/2.4.10 (Debian)
Expires: Mon, 02 Mar 1970 00:00:00 GMT
Last-Modified: GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8125
Keep-Alive: timeout=3, max=10000
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8125
Md5:    03c89e68bbb72be8ad0f5435da71cead
Sha1:   981aa90fba1b0fabcd8cd23480a062f927c9d56f
Sha256: 233fa7a6f14a5a14575c4dff7db498c53c0685e96cf52168f2acc233d2577d91

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 00:00:22 GMT
Expires: Tue, 13 Feb 2018 00:00:22 GMT
Cache-Control: private, max-age=3600
Etag: 6502682663518856185
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26103
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26103
Md5:    6ef11d0463c07a28cd7cf2803534c33b
Sha1:   22c83cf48df58218feda2b7c44729bbbd3c43fdc
Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
                                        
                                            GET /coop/cse/brand?form=cse-search-box&lang=en HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         74.125.131.99
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://cse.google.com/coop/cse/brand?form=cse-search-box&lang=en
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 00:00:22 GMT
Server: sffe
Content-Length: 266
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text
Size:   266
Md5:    60e7be953e9ea91f15c136a9e16a8ec2
Sha1:   6e209a224e4a45e87ab676b371c280bb7a04ddc0
Sha256: 57849f9e1afb75978a36dbbce48213cfa4f6a374263c91778faa2ad243857ba7
                                        
                                            GET /trends/embed.js?hl=nl&q=Binoria&content=1&cid=TIMESERIES_GRAPH_0&export=5&w=500&h=200 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         74.125.131.99
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://trends.google.com/trends/embed.js?hl=nl&q=Binoria&content=1&cid=TIMESERIES_GRAPH_0&export=5&w=500&h=200
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 00:00:22 GMT
Expires: Thu, 15 Mar 2018 00:00:22 GMT
Cache-Control: public, max-age=2592000
Server: sffe
Content-Length: 332
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text
Size:   332
Md5:    6d7289855e441f3b6d24943d0aa81a4d
Sha1:   e1367aaba849c88fc8e66ee07b051ae1ce6c2a61
Sha256: d7f683efbdcb26a36d133a38b60a545ee5c27ef69c74a1504ff64d4912eb497f
                                        
                                            GET /maps/api/staticmap?center=50.450000762939,30.523300170898&zoom=11&size=500x200&sensor=false HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 00:00:23 GMT
Expires: Wed, 14 Feb 2018 00:00:23 GMT
Cache-Control: public, max-age=86400
Vary: Accept-Language
Access-Control-Allow-Origin: *
Server: staticmap
Content-Length: 38159
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 500 x 200, 8-bit colormap, non-interlaced
Size:   38159
Md5:    83461759e25aaf4e40c39a9741ba805f
Sha1:   a26841634aca5fc3887281803ccdbdcb68846a24
Sha256: f041e0aa9993232135621aae38a1f02b1b3827e5172bec2f5289920d5b1d8adc
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 00:00:23 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6b502ac9c6d00eb73199986bbc77d070
Sha1:   cc71c1350973db9ae38766395755047d9da5cfbc
Sha256: c223252e36130e54631b07088826ea2a712b08fa95b7ac310f71d92c8cc40535
                                        
                                            GET /graph?&w=500&h=200&o=f&c=1&y=t&b=ffffff&r=4m&u=binoria.org& HTTP/1.1 
Host: traffic.alexa.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         52.204.2.216
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 00:00:23 GMT
Server: nginx
Via: 1.1 ip-172-30-49-59 (squid/3.5.20)
X-Cache: MISS from ip-172-30-49-59
X-Cache-Lookup: MISS from ip-172-30-49-59:3128
Content-Length: 6176
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 340 x 150, 8-bit/color RGB, non-interlaced
Size:   6176
Md5:    9deabcecef00b0a428e0a98724b9e360
Sha1:   567d0a0413129e30f0f9b3e9177d5d95994fc5fd
Sha256: a73d859b862f6fff2297b2e0b92edebcebad009e2ebbca15079df98c5bfec677
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=597415, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT
Expires: Mon, 19 Feb 2018 21:56:01 GMT
Date: Tue, 13 Feb 2018 00:00:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    dab664d03e303a7b1deba30189c57d23
Sha1:   1a87b2335fc304a7783b6f7ffdb5ff97367d30de
Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 00:00:23 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c9d4636863a457668041a772672e56fb
Sha1:   e064eb25e438fce99d824096c4827b2a77cfa396
Sha256: d51bb05c2832a30fbafe0bc2f0e397380faf6faf39185413a3dd5bcea6154674
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 00:00:23 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /coop/cse/brand?form=cse-search-box&lang=en HTTP/1.1 
Host: cse.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Mon, 12 Feb 2018 16:44:05 GMT
Expires: Wed, 14 Feb 2018 16:44:05 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: pfe
Content-Length: 1181
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=172800
Age: 26178
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1181
Md5:    0f3a3376db263065017f4f8a95f08342
Sha1:   e4982e1914c6f3f904b22aa073c6ba0e476b0a8a
Sha256: 8baa09a723059017000baca9c4cde1b35f0ca4228a24757b7d37394516a0d1f6
                                        
                                            GET /adsid/integrator.js?domain=binoria.org.pandastats.net HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 00:00:23 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=binoria.org.pandastats.net HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 00:00:23 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /trends/embed.js?hl=nl&q=Binoria&content=1&cid=TIMESERIES_GRAPH_0&export=5&w=500&h=200 HTTP/1.1 
Host: trends.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.20.36
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 13 Feb 2018 00:00:23 GMT
Content-Encoding: gzip
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: NID=123=KFme7E16zmVTqsk_VguRDTb3P9dHx64cZG8789dZg9eo3cfuw_f-dJLFIAWZY-6wR5Za3kIUeTrXG2bZlUfpzjHGJPCEtCTM3AmR4SeP90udoPYjcC-_6qzpmTUv8hFY;Domain=.google.com;Path=/;Expires=Wed, 15-Aug-2018 00:00:23 GMT;HttpOnly
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   258
Md5:    71ccd95f4c927685636530cd422fa480
Sha1:   ff75d7d6db51e6ffd6c6a7887e488d8164cd168f
Sha256: 1ac1330ff1613aa108819bb9af7f906b29510f83e56f4c4e1d4df3afd8328f0c
                                        
                                            GET /theme/css/bootstrap.min.css HTTP/1.1 
Host: pandastats.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         69.197.159.66
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 00:18:20 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Thu, 09 Apr 2015 08:00:32 GMT
Etag: "1abce-513460ab7a800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18141
Keep-Alive: timeout=3, max=10000
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18141
Md5:    75ac9f3aa86995c028c4a700c3b04321
Sha1:   a061911d2cb6f7689ff24a22fcb6b971d16a5f82
Sha256: 742dc055d132ced6c07bc9491dd8dc5627a0d5e427f92728420bc8309d3c8306
                                        
                                            GET /s2/favicons?domain=binoria.org HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         74.125.131.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Tue, 13 Feb 2018 00:00:24 GMT
Date: Tue, 13 Feb 2018 00:00:24 GMT
Cache-Control: private, max-age=28800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V;Domain=.google.com;Path=/;Expires=Wed, 15-Aug-2018 00:00:24 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   492
Md5:    3ca64f83fdcf25135d87e08af65e68c9
Sha1:   b82d0979d555bd137b33c15021129e06cbeea59a
Sha256: 2e30ff33270fd8687b0eb4d12652bfd967f23975f158bf8da93bece2ba4ab947
                                        
                                            GET /theme/css/styles.css HTTP/1.1 
Host: pandastats.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         69.197.159.66
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 00:18:23 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sat, 21 May 2016 09:41:14 GMT
Etag: "1729-53357021a4280-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2000
Keep-Alive: timeout=3, max=10000
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2000
Md5:    9c3d7a0937b9f78eac0431a8c1d2e2e8
Sha1:   6e86916739b3b2bf5a6fad3fc08dfa4da3c0a957
Sha256: dbbc80ad368890d793b146164a88c528fa5dfc17d8e6af9ea2bb0c18f9e6863b
                                        
                                            GET /css?family=Roboto:400 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pandastats.net/theme/css/styles.css

                                         
                                         172.217.20.42
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 13 Feb 2018 00:00:27 GMT
Date: Tue, 13 Feb 2018 00:00:27 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   186
Md5:    bcd67d187f1ccc7f9c338fd228a2ee26
Sha1:   3484ccd0d574e9decc80313b7e979a61ff775ec1
Sha256: 86fe521f1b2016cbb86cb397abe367dcdb814dd5bb4c930582852ed02afd3259
                                        
                                            GET /cse/api/branding.css HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/
Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V

                                         
                                         74.125.131.99
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://cse.google.com/cse/api/branding.css
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 00:00:27 GMT
Server: sffe
Content-Length: 240
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text
Size:   240
Md5:    4a128d1db6f6c93d9f8de03bbd37a1b6
Sha1:   ad396167f79f9eaea536532639ef028a47dc86b1
Sha256: d62b7b4d06bafdb5716d6815ce080ad61557dd481784dbdc45fcc5c3430a11e9
                                        
                                            GET /images/poweredby_transparent/poweredby_FFFFFF.gif HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/
Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V

                                         
                                         74.125.131.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 488
Date: Tue, 13 Feb 2018 00:00:27 GMT
Expires: Tue, 13 Feb 2018 00:00:27 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Mon, 01 May 2017 14:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 56 x 20
Size:   488
Md5:    7759990ff12382cab2e362e8de465c92
Sha1:   bf76285ae03b5544f889580113334d302f055c2b
Sha256: f0e34e6156e006e95579f7fd649583a85175b331452c3cb0aac883c472cee0fe
                                        
                                            GET /cse/api/branding.css HTTP/1.1 
Host: cse.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/
Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Last-Modified: Sat, 17 Nov 2007 23:34:50 GMT
Date: Mon, 12 Feb 2018 16:41:41 GMT
Expires: Wed, 14 Feb 2018 16:41:41 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: pfe
Content-Length: 322
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Age: 26326
Cache-Control: public, max-age=172800
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   322
Md5:    eb44259f9eed170ffd1b7293b57ca0f8
Sha1:   3099cbdc7f7ac67ec5863ae5f1a669163b56c6c4
Sha256: 7ddb01d9a89048ea77b75c1fc966e14c3c6c3bfe5d45b5b372f3d93ccc9670f4
                                        
                                            GET /ajax/libs/jquery/2.0.2/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29456
Date: Thu, 01 Feb 2018 17:32:37 GMT
Expires: Fri, 01 Feb 2019 17:32:37 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 973670


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29456
Md5:    6f742fcb047bb051cee723aba4ed98e4
Sha1:   cf5396bc5cedcbee6af2fbecbaf7ae3c29fc479b
Sha256: a9338df44048ff48e2cde71e168d430933230f5ec81bf89df61f25e0656a5b26
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Roboto:400
Origin: http://binoria.org.pandastats.net

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19824
Date: Thu, 08 Feb 2018 19:00:11 GMT
Expires: Fri, 08 Feb 2019 19:00:11 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 363616


--- Additional Info ---
Magic:  data
Size:   19824
Md5:    bafb105baeb22d965c70fe52ba6b49d9
Sha1:   934014cc9bbe5883542be756b3146c05844b254f
Sha256: 1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
                                        
                                            GET /assets/panda_small.jpg HTTP/1.1 
Host: pandastats.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         69.197.159.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 00:18:23 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sat, 12 Oct 2013 17:54:00 GMT
Etag: "719-4e88eeb729e00"
Accept-Ranges: bytes
Content-Length: 1817
Keep-Alive: timeout=3, max=9999
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1817
Md5:    3917c4a28d351ab997f71283eeb8bc06
Sha1:   314fd0efd316cf822385b07d8fa1510df08d2735
Sha256: 268910a2df539d68c99d538487621256e8ca9eea89274bc43b61f33d97561369
                                        
                                            GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 00:00:27 GMT
Expires: Tue, 13 Feb 2018 00:00:27 GMT
Cache-Control: private, max-age=1209600
Etag: 4433304288936196502
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67646
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67646
Md5:    cce91a88f525640083b0ebe057a30af4
Sha1:   b9cf4be249b5af3dda774dfb75e73d482da706c5
Sha256: dd6dac5265c4b1796715889313e4b9271b4547f66739424357f89dc45eac882b
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 00:00:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e54ea905686f9b26a29ea5a52b4c11f6
Sha1:   53ac424108f97791e18cb3550d355014db4d2d64
Sha256: 456e51b897c47046844d346deb30c33ae442f9cd9b6004af78a1ff207a3027d0
                                        
                                            GET /js/300/addthis_widget.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         104.122.220.14
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Last-Modified: Mon, 05 Feb 2018 17:46:41 GMT
Etag: "5a789881-57b6f"
Cache-Tag: client_dist
Surrogate-Key: client_dist
Timing-Allow-Origin: *
Cache-Control: public, max-age=600
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 00:00:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
X-Distribution: 99
X-Host: s7.addthis.com


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   114498
Md5:    10d880bad1879e7acb100e6bce81ed29
Sha1:   837b74173a703800410309d25621f15c255b3a8e
Sha256: 1bb5342eebb85e269be4f9301d0d09a86438558f3e1cdd8fe4928fb150a461b7
                                        
                                            GET /cse/static/images/1x/googlelogo_lightgrey_46x16dp.png HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/
Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V

                                         
                                         74.125.131.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 551
Date: Tue, 13 Feb 2018 00:00:28 GMT
Expires: Tue, 13 Feb 2018 00:00:28 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Wed, 11 Jan 2017 21:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 46 x 16, 8-bit gray+alpha, non-interlaced
Size:   551
Md5:    9f2dcf82a5c6b3b5cd521c1e2d5393bb
Sha1:   7beb35b6c76ca02feef18834d5091a915d958c60
Sha256: ad9b95dc8aec99a5335567c6f5f6df98de9a73db72d236b20363d94674ec65f8
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 00:00:28 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4ca530e2e64ddacca945d3c002bb44b0
Sha1:   67e9be414e344ee77aa371b072f6e1d1a87092f4
Sha256: 8beea0530790ac3ae2b94d2892c4178fd19076b283e32f1e0e0dc560ef8004a0
                                        
                                            GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:49:54 GMT
Expires: Wed, 21 Feb 2018 14:49:54 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 465034
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6819
Md5:    8caea4ee531aab9f5d9328f80b7b23f3
Sha1:   3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
                                        
                                            GET /pub-config/r20160913/ca-pub-3744029866517417.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Mon, 12 Feb 2018 14:09:47 GMT
Expires: Tue, 13 Feb 2018 02:09:47 GMT
Last-Modified: Sun, 11 Feb 2018 21:16:31 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 35441
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 11:52:19 GMT
Expires: Thu, 22 Feb 2018 11:52:19 GMT
Etag: 14152819666964886147
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29995
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 389289
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29995
Md5:    ca42dee86b721494eb2a8c4f93c4508d
Sha1:   17ee6f68a61be238ce54d20d056a7a5834c52d80
Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
                                        
                                            GET /theme/js/scripts.js HTTP/1.1 
Host: pandastats.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         69.197.159.66
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 00:18:24 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Thu, 09 Apr 2015 08:00:42 GMT
Etag: "15c-513460b503e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 196
Keep-Alive: timeout=3, max=10000
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   196
Md5:    6287931d1c85ff7e26c5971d50100b38
Sha1:   fde4066df485fce051375d2c5caa2045723f78bf
Sha256: 8978943e140979f1353ed36c311e95b714a2d3e6cd36c7e3a6708050147d55d0
                                        
                                            GET /pagead/ads?client=ca-pub-3744029866517417&output=html&h=250&adk=1970189370&adf=807048394&w=326&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=3&format=326x250&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=1&wgl=0&adsid=NT&dt=1518480027266&bpp=42&fdt=50&idt=322&shv=r20180207&cbv=r20170110&saldr=aa&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=105&ady=172&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=866 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 00:00:28 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 00:15:28 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 00:00:28 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   368
Md5:    191c1e87b224e0ef625f03cfed3154ae
Sha1:   72c28cd0c89993dcab80bb745a66b0e398cbc79f
Sha256: db3332a9c18bffecf40a546b3d44d6d4de88f9de7d6c6ff60b3eb2395748dd19
                                        
                                            GET /trends_nrtr/1308_RC02/embed_loader.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3747
Date: Wed, 07 Feb 2018 13:51:57 GMT
Expires: Thu, 07 Feb 2019 13:51:57 GMT
Last-Modified: Mon, 05 Feb 2018 11:10:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 468511
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3747
Md5:    830a484ac34c4a97e9ab9bedc312faf2
Sha1:   2f2e3feb8ca857a276a7e1608e82bcf665662ade
Sha256: 136d8163b16d038012be755daf6bc7a9a05bc17bbdd2a7cf3236a4b9721cce7f
                                        
                                            GET /pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 00:00:29 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmvm8sQpdrFGyoCOXrd-ic7uG0-GvwYN5CmcbVY8b2zLd93Fk16HUYYNfIR; expires=Thu, 13-Feb-2020 00:00:28 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 00:00:29 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6146
Md5:    8748388bef61216d96955c13eb85e738
Sha1:   3197f5ffd096a9ea52dad6404dc1c42cd9446ec7
Sha256: cdb94791b67a4932e2fd1487b56e7d830c38791e07af54ca7d9fd8e3bb1f7640
                                        
                                            GET /pagead/adview?ai=C71ajnCqCWoW8OoiJ6gSjgajoA8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM3NDQwMjk4NjY1MTc0MTfIAQmpAi2dIe1SIoY-qAMBqgSPAU_Q45ssJ7W0lEFpwmrOe4M7wp9nPbLw5JhPReRyayvDUfe2MGYZDCBbD9EL9WWsHBdnnJ3XLJjveU_Nar6WOu6VrikTkWeqfBN4q4tGR10tl_6sWyo_ivVTgfnadzjE4zhG3PB94ALizyPGdmaCstg-3pehPfXRWcv9jNU-iJBHitWF-d9HSCVQEObmo_eDgAbUpJ2etbnkmzCgBiGoB6a-G9gHANIIBQiAYRAB&sigh=nyfWF2yNQk0&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: IDE=AHWqTUmvm8sQpdrFGyoCOXrd-ic7uG0-GvwYN5CmcbVY8b2zLd93Fk16HUYYNfIR

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 00:00:29 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /ads/measurement/l?ebcid=ALh7CaSYg1tvcg0PAJtWdZoLasnOC1EQ4g4algJ4fr2J0u0JtLMO9CQNDVI4tutEvUPogPdvioBqcgUQtVo8zFnenB-xHgteYA HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V

                                         
                                         74.125.131.99
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 00:00:29 GMT
Server: jumble_frontend_server
Content-Length: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=422895, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 21:25:53 GMT
Expires: Sat, 17 Feb 2018 21:25:53 GMT
Date: Tue, 13 Feb 2018 00:00:29 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    3f891a32eed58b6879f292ff7e025afd
Sha1:   ed3c9623210bcd94514c81872dadd71ebddc5a9e
Sha256: ed1f2baca5463feb271751d58638701fc1c8f0205ee271890aa95acd71e0992d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 00:00:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    51359cd6451a38e17b3e782c0f24b8a4
Sha1:   4d0e80cd2082cd7cec99aa621d3f0604fdcca4a8
Sha256: 5feb9f6ba150552880b2734cce6440336c3a995b86bd351dc5cf8eb94a2e3a48
                                        
                                            GET /adfscript/?bn=21409353;rtbwp=WoIqnAAOngUKmoSIAAoAo6dNShItJX75hZfWTw;rtbdata=x-QconeWRJpre3mZYvA0xS6L1NhB5ANV4B9yUDlcByu_q2j3WpEfzQ6lzVbaIVSCOYCrc6WfU8llM0z0Z4Upnbfj8NssUWIavXSuXFD3kZJxm9G6jR5we4oLRLNTApC0TjiFyf8rQ5WXySAEPV1j6G4zKAra8IewBkOZFrEadHp6IzUc6axivHpSoWqcsv8RD5dxNk7BqWu3IcQjAbRQgagep4oDNkoJRZ_tyv8nMBaPwbDz0xfovg2;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=C71ajnCqCWoW8OoiJ6gSjgajoA8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM3NDQwMjk4NjY1MTc0MTfIAQmpAi2dIe1SIoY-qAMBqgSPAU_Q45ssJ7W0lEFpwmrOe4M7wp9nPbLw5JhPReRyayvDUfe2MGYZDCBbD9EL9WWsHBdnnJ3XLJjveU_Nar6WOu6VrikTkWeqfBN4q4tGR10tl_6sWyo_ivVTgfnadzjE4zhG3PB94ALizyPGdmaCstg-3pehPfXRWcv9jNU-iJBHitWF-d9HSCVQEObmo_eDgAbUpJ2etbnkmzCgBiGoB6a-G9gHANIIBQiAYRAB&num=1&sig=AOD64_1SmO1zEuk_MPl3sBjv28qgEGehsQ&client=ca-pub-3744029866517417&adurl= HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358

                                         
                                         37.157.4.23
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:29 GMT
Content-Length: 1527
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: C=1; expires=Tue, 13-Mar-2018 00:00:29 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   1527
Md5:    03b9b2f7906f29cfc8b55016c8eec454
Sha1:   c168b10501fdec5bfc9abb3bb461ba75183e1cea
Sha256: 5bf4e7ec800f959bfb1f4cbe996ff98e9d893a28b9e460efb0eaf1c43eea17ff
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 13:59:35 GMT
Expires: Wed, 21 Feb 2018 13:59:35 GMT
Etag: 18254379283724408787
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3642
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 468054
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3642
Md5:    24d24f1211524aff604a7a982bfb33ed
Sha1:   15c0f03407eb77a3da6a7476c6ffb4b8993eaefb
Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 13:59:35 GMT
Expires: Wed, 21 Feb 2018 13:59:35 GMT
Etag: 2112876643077467119
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1203
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 468054
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1203
Md5:    9a504624fadda2dcec8340bf93b2252c
Sha1:   fa6dbebcf9b5450a1dd2f2371c971e838ff627c0
Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
                                        
                                            GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:02:17 GMT
Expires: Wed, 21 Feb 2018 14:02:17 GMT
Etag: 4319863517479632446
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29527
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 467892
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29527
Md5:    cb7c5d42c8b00cdec8b3bfb65909c20b
Sha1:   df39b61e2fd957f8b9ade02e65c59ec51cec5c46
Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
                                        
                                            GET /stoat/607/s1.adform.net/bootstrap.js HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358

                                         
                                         37.157.2.247
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT
Cache-Control: public, max-age=100000
Expires: Wed, 14 Feb 2018 03:46:15 GMT
X-Cache-Status: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13691
Md5:    7dff8bc845f03fef9414515e1e823030
Sha1:   ad7ce3dac1e6eefe12829d27e4a9d2b1ea8eaa3a
Sha256: fc5f373371abfa589671c2a31ae4d5711c0507b578cef62f7eb12d8c836d0bf9
                                        
                                            GET /adfserve/?CC=1&bn=21409353;rtbwp=WoIqnAAOngUKmoSIAAoAo6dNShItJX75hZfWTw;rtbdata=x-QconeWRJpre3mZYvA0xS6L1NhB5ANV4B9yUDlcByu_q2j3WpEfzQ6lzVbaIVSCOYCrc6WfU8llM0z0Z4Upnbfj8NssUWIavXSuXFD3kZJxm9G6jR5we4oLRLNTApC0TjiFyf8rQ5WXySAEPV1j6G4zKAra8IewBkOZFrEadHp6IzUc6axivHpSoWqcsv8RD5dxNk7BqWu3IcQjAbRQgagep4oDNkoJRZ_tyv8nMBaPwbDz0xfovg2;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=C71ajnCqCWoW8OoiJ6gSjgajoA8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM3NDQwMjk4NjY1MTc0MTfIAQmpAi2dIe1SIoY-qAMBqgSPAU_Q45ssJ7W0lEFpwmrOe4M7wp9nPbLw5JhPReRyayvDUfe2MGYZDCBbD9EL9WWsHBdnnJ3XLJjveU_Nar6WOu6VrikTkWeqfBN4q4tGR10tl_6sWyo_ivVTgfnadzjE4zhG3PB94ALizyPGdmaCstg-3pehPfXRWcv9jNU-iJBHitWF-d9HSCVQEObmo_eDgAbUpJ2etbnkmzCgBiGoB6a-G9gHANIIBQiAYRAB&num=1&sig=AOD64_1SmO1zEuk_MPl3sBjv28qgEGehsQ&client=ca-pub-3744029866517417&adurl=;js=1;adfxid=1x;9855;set=en-US|en-US|1176X885|10.0452|300|600|24|8|3|7|1;fd=0|0&CREFURL=http%3A%2F%2Fbinoria.org.pandastats.net%2F HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1

                                         
                                         37.157.4.23
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:29 GMT
Content-Length: 2549
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: cid=378255793752497094,0,0,0,0; expires=Fri, 13-Apr-2018 23:00:29 GMT; path=/ uid=378255793752497094; domain=adform.net; expires=Fri, 13-Apr-2018 23:00:29 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   2549
Md5:    80e23a9a14413aa5bf86c0723c85e132
Sha1:   11585465d88f33c37fcbe5d1718868bf16b37612
Sha256: 51c399db1fa04e1330654a8ffc32081b83193a4811211b678035ab5a9c95d814
                                        
                                            GET /pagead/s/cookie_push.html HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 23:40:13 GMT
Expires: Tue, 13 Feb 2018 23:40:13 GMT
Etag: 13472698117776506427
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 742
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 1216
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   742
Md5:    e550a33cfee69dfae0dcf3dc9a16b617
Sha1:   db917798fdba57df233396ef0fd93e97745783bb
Sha256: 648c26f5eb64f36e58cb24e08293274a5be34c4aaba8a1578588dad911e7c8a8
                                        
                                            GET /ads/measurement/l?ebcid=ALh7CaSYg1tvcg0PAJtWdZoLasnOC1EQ4g4algJ4fr2J0u0JtLMO9CQNDVI4tutEvUPogPdvioBqcgUQtVo8zFnenB-xHgteYA HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: NID=123=bBvIeOSnGDVKEDR72grWdzxMGGSf0W-HWCwRU1GApNNYekmiyOieAmVL3-P21gkWzq8iRkwF_IFjpq3Qc1kz41mU64eeAua1DaAhoiOJKXYVssOrKyYjqCrBf6sUkY6V

                                         
                                         74.125.131.99
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 00:00:29 GMT
Server: jumble_frontend_server
Content-Length: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /activeview?avi=BR5kWnCqCWoW8OoiJ6gSjgajoAwC-0LiF5QIAABABOAHIAQmgBiHSCAUIgGEQAQ&cid=CAASFeRoV1EjyPt8rzd6UlgcothjYIfV1A&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 00:00:29 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /stoat/607/s1.adform.net/load/v/0.0.146/e/ggCDgAA/i/8IG-iAAAAEAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: uid=378255793752497094

                                         
                                         37.157.2.247
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT
Cache-Control: public, max-age=100000
Expires: Wed, 14 Feb 2018 03:40:44 GMT
X-Cache-Status: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35394
Md5:    0f707c5a525ff34a3bbeddab527f376c
Sha1:   60ca917c766f62347dcf175206ef56f63b204ff4
Sha256: b369f2a24d2a3337dbde0a4390630be73d2a18c17697fd3904ad665e3cedbe20
                                        
                                            GET /Banners/21979645/21979645.jpg?bv=2 HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: uid=378255793752497094

                                         
                                         37.157.2.247
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:29 GMT
Content-Length: 49877
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Mon, 12 Feb 2018 13:17:43 GMT
Etag: "5a8193f7-c2d5"
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=604800
Strict-Transport-Security: max-age=0
X-Cache-Status: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   49877
Md5:    1dddcfa39c45b954c160d559dd656c5c
Sha1:   565e317584092eec36ba3d9c8a8b2c133ede2597
Sha256: 9ae1f0b0404fc37c3b5d561ec3c34352354f184da434b88a14d33d65e06d22dd
                                        
                                            GET /csimpr/?bn=21409353&csi=6Z14dgMrC-ctJUoSsiESjivlkL1ge7WDKUepya0XVeYen4EVIC7hLwO8_7rsP1jj0 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1; cid=378255793752497094,0,0,0,0; uid=378255793752497094

                                         
                                         37.157.4.23
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=544380, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 07:10:41 GMT
Expires: Mon, 19 Feb 2018 07:10:41 GMT
Date: Tue, 13 Feb 2018 00:00:29 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    2964e84d90c0907426e9a6c35ad0341a
Sha1:   2188881358dee90b5eadebdcbe4ed9db6fc1827c
Sha256: e0a0d10fac69823956329db1f53b9a590d53939c5aceb600b25363b7b2254052
                                        
                                            GET /pixel/attr?d=AHNF13L3bBqtr71elRWjC1orstvR2Vi3ZGGs HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUmvm8sQpdrFGyoCOXrd-ic7uG0-GvwYN5CmcbVY8b2zLd93Fk16HUYYNfIR

                                         
                                         216.58.207.194
HTTP/1.1 204 No Content
Content-Type: text/html
                                        
Date: Tue, 13 Feb 2018 00:00:29 GMT
Server: HTTP server (unknown)
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /sync/dds?google_gid=CAESEBWmeWTRRXxOgiIwGCZ8Iz0&google_cver=1&google_push=AHNF13K00E-Osuksc3lBYcpjSMv-Sw8zL5G9VmllYyVkrQ HTTP/1.1 
Host: rtb.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html

                                         
                                         173.241.240.17
HTTP/1.1 302 Found
                                        
Server: Cowboy
Date: Tue, 13 Feb 2018 00:00:29 GMT
Content-Length: 0
Set-Cookie: i=880e9502-d581-42e2-b22c-afa1753ce067|1518480029; path=/; domain=.openx.net; expires=Wed, 13 Feb 2019 00:00:29 GMT; max-age=31536000
Cache-Control: private, max-age=0, no-cache, must-revalidate
x-request-id: e2esgqdm2g0rrtq96b4t36f38m60vi3s
Location: https://rtb.openx.net/sync/dds?google_gid=CAESEBWmeWTRRXxOgiIwGCZ8Iz0&google_cver=1&google_push=AHNF13K00E-Osuksc3lBYcpjSMv-Sw8zL5G9VmllYyVkrQ&ox_sc=1
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"


--- Additional Info ---
                                        
                                            GET /sync/dds?google_gid=CAESEBWmeWTRRXxOgiIwGCZ8Iz0&google_cver=1&google_push=AHNF13K00E-Osuksc3lBYcpjSMv-Sw8zL5G9VmllYyVkrQ&ox_sc=1 HTTP/1.1 
Host: rtb.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: i=880e9502-d581-42e2-b22c-afa1753ce067|1518480029

                                         
                                         173.241.240.17
HTTP/1.1 302 Found
                                        
Server: Cowboy
Date: Tue, 13 Feb 2018 00:00:29 GMT
Content-Length: 0
Cache-Control: private, max-age=0, no-cache, must-revalidate
x-request-id: otgvkilbq4vip14jqr87jr55t92l9jk7
Location: https://cm.g.doubleclick.net/pixel?google_nid=open&google_push=AHNF13K00E-Osuksc3lBYcpjSMv-Sw8zL5G9VmllYyVkrQ&google_hm=hPQgZ9WAxDsOjiv-wgLpIA==
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=open&google_push=AHNF13K00E-Osuksc3lBYcpjSMv-Sw8zL5G9VmllYyVkrQ&google_hm=hPQgZ9WAxDsOjiv-wgLpIA== HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUmvm8sQpdrFGyoCOXrd-ic7uG0-GvwYN5CmcbVY8b2zLd93Fk16HUYYNfIR

                                         
                                         216.58.207.194
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 00:00:29 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 170
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   170
Md5:    e7673c60af825466f83d46da72ca1635
Sha1:   fc0fcbee0835709ba2d28798a612bfd687903fb5
Sha256: 0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
                                        
                                            GET /Serving/Event/?bn=21409353&event=178&time=2&banner=21979645&name=Viewable%20impressions&imprid=8442785653369218522&icid=378255793752497094&rnd=335624320&rtbwp=WoIqnAAOngUKmoSIAAoAo6dNShItJX75hZfWTw&rtbdata=x-QconeWRJpre3mZYvA0xS6L1NhB5ANV4B9yUDlcByu_q2j3WpEfzQ6lzVbaIVSCOYCrc6WfU8llM0z0Z4Upnbfj8NssUWIavXSuXFD3kZJxm9G6jR5we4oLRLNTApC0TjiFyf8rQ5WXySAEPV1j6G4zKAra8IewBkOZFrEadHp6IzUc6axivHpSoWqcsv8RD5dxNk7BqWu3IcQjAbRQgagep4oDNkoJRZ_tyv8nMBaPwbDz0xfovg2 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1; cid=378255793752497094,0,0,0,0; uid=378255793752497094

                                         
                                         37.157.4.23
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /serving/unload/?version=15&unload=378255793752497094@@21409353,8442785653369218522,100|1019|0|0|0|0|0|0|0||182|1|1|5a822a9c000e9e050a9a84883d0a00a3_1|||1|0|0|| HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1; cid=378255793752497094,0,0,0,0; uid=378255793752497094

                                         
                                         37.157.4.23
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /serving/unload/?version=15&unload=378255793752497094@@21409353,8442785653369218522,100|4705|0|0|0|0|0|0|0||842|1|1|5a822a9c000e9e050a9a84883d0a00a3_1|||1|0|0|| HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3744029866517417&output=html&h=600&adk=4088835707&adf=807048394&w=300&fwrn=2&lmt=1518480022&loeid=38893312&rafmt=4&format=300x600&url=http%3A%2F%2Fbinoria.org.pandastats.net%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1518480028571&bpp=89&fdt=94&idt=330&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=326x250&correlator=7090400855676&frm=20&ga_vid=1763431804.1518480028&ga_sid=1518480028&ga_hid=1116013026&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=749&ady=147&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C20040066&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1; cid=378255793752497094,0,0,0,0; uid=378255793752497094

                                         
                                         37.157.4.23
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 00:00:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /theme/js/bootstrap.min.js HTTP/1.1 
Host: pandastats.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://binoria.org.pandastats.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---