Overview

URL ww38.marketwallpapers.com/wallpapers/16/wallpaper-94877.jpg
IP185.53.179.29
ASNAS61969 Team Internet AG
Location Germany
Report completed2019-06-20 03:34:14 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Refererhttps://matome.naver.jp/odai/2133704160973627101/2133704415573895103
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 185.53.179.29

Date UQ / IDS / BL URL IP
2019-06-27 10:14:39 +0200
0 - 0 - 0 parkingcrew.net/jsparkcaf.php?regcn=243142&_v (...) 185.53.179.29
2019-06-26 07:21:31 +0200
0 - 0 - 0 parkingcrew.net 185.53.179.29
2019-06-25 04:04:20 +0200
0 - 0 - 0 ww38.chanicut.com/ 185.53.179.29
2019-06-20 03:56:09 +0200
0 - 0 - 0 parkingcrew.net/assets/scripts/js3.js 185.53.179.29
2019-06-20 03:39:28 +0200
0 - 0 - 0 ww38.marketwallpapers.com/wallpapers/16/wallp (...) 185.53.179.29
2019-06-14 22:58:15 +0200
0 - 0 - 0 www.xskirt.com 185.53.179.29
2019-06-14 09:54:21 +0200
0 - 0 - 0 ww38.higaitaisaku.com/safemode.html 185.53.179.29
2019-06-14 09:54:20 +0200
0 - 0 - 0 ww38.higaitaisaku.com/safemode.html 185.53.179.29
2019-06-12 16:33:02 +0200
0 - 0 - 0 ww38.watin.org 185.53.179.29
2019-06-12 01:00:21 +0200
0 - 0 - 0 ww12.exploit-exercises.com/ 185.53.179.29

Last 10 reports on ASN: AS61969 Team Internet AG

Date UQ / IDS / BL URL IP
2019-06-30 09:58:31 +0200
0 - 0 - 0 144chan.info 185.53.177.29
2019-06-30 00:52:32 +0200
0 - 0 - 0 GOOLE.PT 185.53.178.8
2019-06-27 13:11:56 +0200
0 - 0 - 0 www.inkedin.de 185.53.178.27
2019-06-27 10:14:39 +0200
0 - 0 - 0 parkingcrew.net/jsparkcaf.php?regcn=243142&_v (...) 185.53.179.29
2019-06-26 18:35:48 +0200
0 - 0 - 0 www.ispeed.club/welcome.php?utm_source=mm&utm (...) 185.53.178.7
2019-06-26 16:07:53 +0200
0 - 0 - 0 goofgle.com 185.53.179.22
2019-06-26 14:55:17 +0200
0 - 0 - 0 www.inetria.pl 185.53.179.6
2019-06-26 12:16:26 +0200
0 - 0 - 0 peako24.pl 185.53.179.7
2019-06-26 07:21:31 +0200
0 - 0 - 0 parkingcrew.net 185.53.179.29
2019-06-25 21:07:16 +0200
0 - 1 - 0 Cutealbum.tk 185.53.177.31

No other reports on domain: marketwallpapers.com



JavaScript

Executed Scripts (25)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 993, repeated: 1) - SHA256: 3efcec35ef6b8e8b2e232d666b0ed0a0f734a34d0cdd0e6ac127ddd4b594b11a

                                        < img height = "1"
width = "1"
border = "0"
alt = ""
src = "https://www.googleadservices.com/pagead/conversion/1038302480/?random=1560994426057&cv=9&fst=1560994426057&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef"
style = "display:none" / >
                                    


HTTP Transactions (41)


Request Response
                                        
                                            GET /wallpapers/16/wallpaper-94877.jpg HTTP/1.1 
Host: ww38.marketwallpapers.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://matome.naver.jp/odai/2133704160973627101/2133704415573895103

                                         
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 20 Jun 2019 01:33:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Check: 3c12dc4d54f8e22d666785b733b0052100c53444
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1062
Md5:    7ff7c5f396b980e975bb3529c31070b1
Sha1:   7e5f6a71dbd0839ce2651dd5aff7e5d34919f43c
Sha256: a901c79d9dfdede137bf57a2deb2829b71ee7574a15e93355ffc36c73f2ba607
                                        
                                            GET /assets/scripts/js3.js HTTP/1.1 
Host: parkingcrew.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww38.marketwallpapers.com/wallpapers/16/wallpaper-94877.jpg

                                         
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 20 Jun 2019 01:33:39 GMT
Content-Length: 17915
Connection: keep-alive
Last-Modified: Mon, 07 Jan 2019 10:07:22 GMT
Etag: "5c3324da-45fb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   17915
Md5:    db3cacfb57ba35d3fcfdbbcf7d46bd42
Sha1:   64034a7b579d0fb46cc71417ff038da23886d6c8
Sha256: a606134e35db97024d04789609660c94f87f660dc259d91db5180e32787d4dad
                                        
                                            GET /track.php?domain=marketwallpapers.com&toggle=browserjs&uid=MTU2MDk5NDQyMi45ODYyOmY5NjEyMWJmMDNjYjJkZThhMWRjZGZmNDBkYmExODVlZTMxNDA4YTZmNjU2ZjZmNjgyNTQ5Y2EyODQyNjVkNjY6NWQwYWUyNzZmMGNhMw%3D%3D HTTP/1.1 
Host: ww38.marketwallpapers.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww38.marketwallpapers.com/wallpapers/16/wallpaper-94877.jpg

                                         
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 20 Jun 2019 01:33:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /track.php?click=1f674acfc827153533d83fec8788fe1cc6d67099&domain=marketwallpapers.com&uid=MTU2MDk5NDQyMi45ODYyOmY5NjEyMWJmMDNjYjJkZThhMWRjZGZmNDBkYmExODVlZTMxNDA4YTZmNjU2ZjZmNjgyNTQ5Y2EyODQyNjVkNjY6NWQwYWUyNzZmMGNhMw%3D%3D&ts=fHx8ZDQxZDh8fHxidWNrZXQwNDh8fHx8NWQwYWUyNzZmMDcxNHx8fDE1NjA5OTQ0MjMuMjU0fDJjNzMxZDQzZGY5MWRhNzVkNDExMjMyYmM4MDBjYjliZWQ1NGQ2NTJ8fHx8fDF8fHwwfDVkMGFlMjc3YTgzYjBiYzY3MjhiNThjMHx8fDB8fHx8fDB8MHx8fHx8fHx8fHwwfDF8NWQwYWUyNzdhODNiMGJjNjcyOGI1OGMwfDB8MHwxfDB8MHxXMTA9fHwx&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off HTTP/1.1 
Host: ww38.marketwallpapers.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww38.marketwallpapers.com/wallpapers/16/wallpaper-94877.jpg

                                         
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 20 Jun 2019 01:33:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ww38.marketwallpapers.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Thu, 20 Jun 2019 01:33:39 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Mon, 07 Jan 2019 10:07:22 GMT
Etag: "5c3324da-0"
Accept-Ranges: bytes


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.201
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=110894
Date: Thu, 20 Jun 2019 01:33:43 GMT
Etag: "5d09d8ce-1d7"
Expires: Fri, 21 Jun 2019 08:21:57 GMT
Last-Modified: Wed, 19 Jun 2019 06:40:14 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 4f48f90c7cc5834331dc3e65cd576297.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jykNIOPHsxvJgdeYuamaVP9Im9JpKGXQS92kkL5XW54dwFoSlwQpsA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fa103ca7b7247397a385531a47606883
Sha1:   5e2440bf32e7d03aefd40887ed0a105d0893860b
Sha256: 66aac076d43e14226a1fd4564eea162d930290f3c508ad477cec515b595cfdf8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.72
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Thu, 20 Jun 2019 01:33:44 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.8/2018-10-18)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b91.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QSeT-XKylhDuRf-xUxk3LeLHAzl9ha8rSIKO3f81kUrxCnw5PPggOg==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    5cd5dd5cd27cda336b0a218f0f99e2b7
Sha1:   a310545c4d38d6f5745748fb0c567f089864881f
Sha256: 3d6876f1ad51fd2a6b6f0642ca39b98d16f8110f1673ab42964df355218e62c0
                                        
                                            GET /tr?id=019cebc21a88fea2af2da1cf33119691094b417fa6.r&tk=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwdWIiOiI1MDVjNmI4MTcxMzIwNDAyNTc1YjFkNmUiLCJ0cyI6IjA2MjAwMTMzIiwiZCI6Im1hcmtldHdhbGxwYXBlcnMuY29tIn0.bUQc4Y6b6TLby0Re1fVAXljA3DB4lWgT0wAmw0GVJ_Q HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww38.marketwallpapers.com/wallpapers/16/wallpaper-94877.jpg

                                         
                                         35.169.145.234
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 20 Jun 2019 01:33:44 GMT
Content-Length: 2233
Connection: keep-alive
P3P: CP="CUR NOI NID STA STP"
X-Robots-Tag: noindex, nofollow
Set-Cookie: checkme=f83267515587ba183ea97b293ebd860ab789; Path=/


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   2233
Md5:    8958f216d1c222f7f80e309668f38932
Sha1:   6f7714f32e53c3f683da21635bd45cc598bfc0bb
Sha256: 41adcb0636d786f28075b8f4a5211f5586043051245754d1a48adf0608eb6e68
                                        
                                            GET /trx?id=019cebc21a88fea2af2da1cf33119691094b417fa6.r&confirm=f83267515587ba183ea97b293ebd860a&size=886704&noframe=1&tnc_ref=http%3A%2F%2Fww38.marketwallpapers.com%2Fwallpapers%2F16%2Fwallpaper-94877.jpg&reftaken=feed&refEqual=true HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://katie.runtnc.net/tr?id=019cebc21a88fea2af2da1cf33119691094b417fa6.r&tk=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwdWIiOiI1MDVjNmI4MTcxMzIwNDAyNTc1YjFkNmUiLCJ0cyI6IjA2MjAwMTMzIiwiZCI6Im1hcmtldHdhbGxwYXBlcnMuY29tIn0.bUQc4Y6b6TLby0Re1fVAXljA3DB4lWgT0wAmw0GVJ_Q
Cookie: checkme=f83267515587ba183ea97b293ebd860ab789

                                         
                                         35.169.145.234
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 20 Jun 2019 01:33:44 GMT
Content-Length: 233
Connection: keep-alive
P3P: CP="CUR NOI NID STA STP"
X-Robots-Tag: noindex, nofollow
Referrer-Policy: no-referrer


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   233
Md5:    454892d2ed0865f2b0f8670231f0c34b
Sha1:   6cd3107aa7065bdc392d4210be99dbffb4223c2e
Sha256: 7fd4817c8ee2cbdf09cb41bf979bbc75b26ca6eb5b8ee24ef9278023e0b87127
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: checkme=f83267515587ba183ea97b293ebd860ab789

                                         
                                         35.169.145.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 20 Jun 2019 01:33:44 GMT
Content-Length: 150
Connection: keep-alive
Content-Security-Policy: default-src 'self'
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   150
Md5:    84241342d84ac29592a5d9516f8edf7f
Sha1:   03c53980e18e17625f439c20e7d438f066202428
Sha256: 6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c
                                        
                                            GET /includes/router_land.php?tracking=Ton&banner=RON-NO-DESKTOP-Zero_tef&keyword=53211a66dcf603761a0b7808&lpx=tef&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate
Content-Encoding: gzip
Date: Thu, 20 Jun 2019 01:33:45 GMT
Location: http://www.reimageplus.com/lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; expires=Mon, 19-Aug-2019 01:33:45 GMT; path=/ _testcookie=test; expires=Thu, 20-Jun-2019 01:39:45 GMT; path=/ rmo=true; expires=Sun, 04-Aug-2019 01:33:45 GMT; path=/; domain=reimageplus.com marketnetwork_subid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com
Content-Length: 22


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    a0501a98ab1b294fd669c2ecd1b8c027
Sha1:   ecd8ceda437c617578af895ce922b9497f20938b
Sha256: cada81a8faf83daa504d843d0795ec58a6f77bd94a28345385cdb54cef383832
                                        
                                            GET /lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; _testcookie=test; rmo=true

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
Date: Thu, 20 Jun 2019 01:33:45 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _testcookie=test; expires=Thu, 20-Jun-2019 01:39:45 GMT; path=/
Content-Length: 2555


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2555
Md5:    262fe363079ee87c09ab7e6d77b1718c
Sha1:   32008916385fbc41a3aa6f34caf65eac303142fe
Sha256: c47d01fa88a38fac54cf5d6d9f8b874e99eb28e7eed1fc5ba23170c8264a9345
                                        
                                            GET /ajax/libs/jquery/1.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29839
Date: Thu, 06 Jun 2019 23:57:03 GMT
Expires: Fri, 05 Jun 2020 23:57:03 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1129002


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29839
Md5:    9a9b2acb8c0cf46985e07996f688b43d
Sha1:   341c927be8f8344f30afb46d49ce6b5e3da62c7d
Sha256: 0b1e12a7712d7b092fd5e1b2724d6e248670ff82620ec75e24105b6b127e3ca8
                                        
                                            GET /lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; _testcookie=test; rmo=true; PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
Date: Thu, 20 Jun 2019 01:33:45 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef; expires=Mon, 19-Aug-2019 01:33:45 GMT; path=/ _testcookie=test; expires=Thu, 20-Jun-2019 01:39:45 GMT; path=/
Content-Length: 9457


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9457
Md5:    6ead5827a3e1798cca43e982b7422436
Sha1:   470055549c722ed10718b9b892a700935821de8f
Sha256: cfa15d6f92142ae1fd3fc9a378ba9ea996bf29612882ffaa85e763b81c421684
                                        
                                            GET /meter/www.reimageplus.com/23.gif HTTP/1.1 
Host: images.scanalert.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         143.204.47.109
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Content-Length: 3005
Connection: keep-alive
Date: Thu, 20 Jun 2019 00:35:20 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: public
Expires: Thu, 20 Jun 2019 01:35:20 GMT
Content-Encoding: gzip
Age: 3505
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8ead.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FMwS6fPwAzZRwztb9fSt7rVsug6VKfD4V5_dtpeXpWm1cKfSzcc8TQ==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3005
Md5:    102539419ea49058a5fd78365f742469
Sha1:   e4e891e5dc0d2c41eabf5dd8b497c191c287560a
Sha256: 7d59d63d95e75cf20757455fb4c3cc5333a2aacbf0424fc92a7a01ad3b694370
                                        
                                            GET /lp/teg/css/style.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; _testcookie=test; rmo=true; PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 20 Jun 2019 01:33:45 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Connection: Keep-Alive
Content-Length: 2238


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2238
Md5:    2df0a84a55ce5bfdae54508a20665ea2
Sha1:   dc663bae0287ca12367121b3aee6589b41bc6120
Sha256: 9c11c77c765b2f2ad8c795671b85e80274a4da7a4463dfb76bbbbfef8776d5c6
                                        
                                            GET /website/newwebsite/lp/tef/WinXP.gif HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 20 Jun 2019 01:33:45 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501928"
Cache-Control: max-age=86400
Content-Length: 2630
Last-Modified: Thu, 14 Jul 2016 13:12:08 GMT
Access-Control-Allow-Origin: *
X-HW: 1560994425.dop005.sk1.t,1560994425.cds015.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 60 x 90
Size:   2630
Md5:    da8d17db9e7fef6166c64335ce263ff6
Sha1:   dc465f409fee43d9b268af58ddf1e4561467782b
Sha256: 55caff635dc1b9f3124910baf5ea4322f741216bad7533eaa9484c7564719824
                                        
                                            GET /website/newwebsite/lp/2019/global/appesteem.jpg HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 20 Jun 2019 01:33:45 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1558342854"
Cache-Control: max-age=86400
Content-Length: 15735
Last-Modified: Mon, 20 May 2019 09:00:54 GMT
Access-Control-Allow-Origin: *
X-HW: 1560994425.dop017.sk1.t,1560994425.cds032.sk1.c


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   15735
Md5:    b411d9f9f3475554364b3ffcd2ea5801
Sha1:   a5c816938efff362959c37cac5ecc0b39b5616dd
Sha256: b7997317cdd517e4f8c534474e63571dede1ba62f75a325502d2644f5c444b64
                                        
                                            GET /pagead/conversion.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 20 Jun 2019 01:33:45 GMT
Expires: Thu, 20 Jun 2019 01:33:45 GMT
Cache-Control: private, max-age=3600
Etag: 11690690496941220196
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 9306
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9306
Md5:    703432a0eab78eefa720ead92e6b1576
Sha1:   45ddea244724cfa2a06dd5fa9d00357b9e85911c
Sha256: 5f3e78fabbc653c6e5f5194b2e65f1905352073e31fbeb671853b690613ce55a
                                        
                                            GET /website/newwebsite/lp/tef/plus.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/css/style.css
Cookie: rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 20 Jun 2019 01:33:45 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501922"
Cache-Control: max-age=86400
Content-Length: 624
Last-Modified: Thu, 14 Jul 2016 13:12:02 GMT
Access-Control-Allow-Origin: *
X-HW: 1560994425.dop005.sk1.t,1560994425.cds024.sk1.c


--- Additional Info ---
Magic:  PNG image, 25 x 25, 8-bit/color RGB, non-interlaced
Size:   624
Md5:    47c1d3ee311e193de0cdd6e5b1a2eb4d
Sha1:   7f9d1d0cc1ffb72d64a75a088e8e9a1f105065c0
Sha256: 8c075719560b586b0c32318f5e963c3fea585c32a88cb874495c931e28f77ef9
                                        
                                            GET /website/newwebsite/lp/tef/download.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/css/style.css
Cookie: rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 20 Jun 2019 01:33:45 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501926"
Cache-Control: max-age=86400
Content-Length: 368
Last-Modified: Thu, 14 Jul 2016 13:12:06 GMT
Access-Control-Allow-Origin: *
X-HW: 1560994425.dop017.sk1.t,1560994425.cds025.sk1.c


--- Additional Info ---
Magic:  PNG image, 21 x 20, 8-bit/color RGB, non-interlaced
Size:   368
Md5:    3158e13e8184dbb60eada6725e897a95
Sha1:   9ee305bdd713bde36a49f580962cc83658b71f55
Sha256: da30e4140b53e29b452d18fdbe53efa3068e586f9d00f68da0ed2a68cbfab310
                                        
                                            GET /assets/styles/jquery.fancybox/jquery.fancybox-2.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; _testcookie=test; rmo=true; PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 20 Jun 2019 01:33:45 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Connection: Keep-Alive
Content-Length: 1606


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1606
Md5:    39c87544233ef0fafef3816c7dc083d1
Sha1:   b5a214c16e29bb922d7dd247c8cd4ab32a48ec15
Sha256: e39857dbe26db2b9569d4ee2d3246135a51f76684c0caa76a4b7ba1d63f0b8ea
                                        
                                            GET /assets/scripts/cookie-note.js HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; _testcookie=test; rmo=true; PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache/2.2.15 (CentOS)
Date: Thu, 20 Jun 2019 01:33:45 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Thu, 11 Oct 2018 10:09:19 GMT
Content-Length: 684


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   684
Md5:    31a26a241ed14defc5417202d0ec5362
Sha1:   4071ec8b0f05942d1debfc17f04e14a24c890c76
Sha256: 6348d80a177746d0a346fb0c8aba8b73d2ddee827506a31abc054a60b77b6168
                                        
                                            GET /dc.js HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         64.233.165.154
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 20 Jun 2019 00:19:48 GMT
Expires: Thu, 20 Jun 2019 02:19:48 GMT
Last-Modified: Tue, 21 May 2019 23:53:44 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17093
Cache-Control: public, max-age=7200
Age: 4438


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17093
Md5:    5f65521f6c6223e1e18cb161832bea2a
Sha1:   f03800023e7bbe2579cd24e122cdf8c6ecf8b4c6
Sha256: 787b69b93681cf41784dfa8655cbdafe8a56ecc62f0112a6ea2241a284a0e3c9
                                        
                                            GET /assets/scripts/jquery.fancybox/jquery.fancybox-2.js HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; _testcookie=test; rmo=true; PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache/2.2.15 (CentOS)
Date: Thu, 20 Jun 2019 01:33:46 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Sun, 07 Jun 2015 06:06:18 GMT
Content-Length: 48716


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   48716
Md5:    932c065e6c0658681ca19a34d45981f4
Sha1:   7e10f6aba5d7bc1b21e0c62ba107ac5593c039d8
Sha256: 1a2da275a2f66503da340a4b38a064c5329d8b3f03eb057dee553786482c4874
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2dc&utms=1&utmn=864428044&utmhn=www.reimageplus.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmhid=1142676512&utmr=0&utmp=%2Flp%2Fteg%2Findex_src.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&utmht=1560994426709&utmac=UA-24411584-1&utmcc=__utma%3D141870001.622039875.1560994427.1560994427.1560994427.1%3B%2B__utmz%3D141870001.1560994427.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=180441972&utmredir=3&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         64.233.165.154
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 20 Jun 2019 01:33:46 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /website/newwebsite/lp/tef/minus.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/css/style.css
Cookie: rmo=true; __utma=141870001.622039875.1560994427.1560994427.1560994427.1; __utmb=141870001.1.10.1560994427; __utmc=141870001; __utmz=141870001.1560994427.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 20 Jun 2019 01:33:46 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501925"
Cache-Control: max-age=86400
Content-Length: 580
Last-Modified: Thu, 14 Jul 2016 13:12:05 GMT
Access-Control-Allow-Origin: *
X-HW: 1560994426.dop005.sk1.t,1560994426.cds022.sk1.c


--- Additional Info ---
Magic:  PNG image, 25 x 25, 8-bit/color RGB, non-interlaced
Size:   580
Md5:    27e624f58dfbc7e0b9d4d475181fc2dd
Sha1:   844b10905ee3fe43aa080ed9c48e379e82cca94b
Sha256: c5edda2dd802c5d9d437729d83c888306918e94262111bd24e3dc78560b7c6bd
                                        
                                            GET /js/1.js HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         143.204.47.39
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 3566
Connection: keep-alive
Date: Thu, 20 Jun 2019 01:33:34 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Expires: Thu, 20 Jun 2019 02:33:34 GMT
Content-Encoding: gzip
Age: 12
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 90nNqX8YrymeCmHBDL9uB4Ast54ndDYWNK2rqQFc_UmKMMtLJKa0UA==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3566
Md5:    e9763e58705438b29f1b1d3fb5d66f0a
Sha1:   e41a77ade77f3706fbb2f88a323544f2440b6e27
Sha256: ddf6d82d7f5077074a282d9b5f3fa6b16a2d218930029e4eb479320696951f32
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 20 Jun 2019 01:33:46 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    83b08065a31c0ae07c7b9136758923c4
Sha1:   e68c95d835cdd3f82513b1eb4d3d24d415661bf5
Sha256: afd097cf8f0c27b4779ff31f4c53d16332579e0e7a04246a077dc8ed16a2586f
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 20 Jun 2019 01:33:46 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /pagead/conversion/1038302480/?random=1560994426057&cv=9&fst=1560994426057&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         216.58.207.226
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 20 Jun 2019 01:33:46 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1038302480/?random=520346859&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=euIKXbbWOJ2IygXF6ougCQ&crd=&gtd=
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 20 Jun 2019 01:33:47 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    32eb571e1a7bc01f52a221ee5e131599
Sha1:   6a2313ac9459fd5c7f16772979fbe493057edc73
Sha256: 97b45bb22186e52e28f7c9bac767d31e4c593998faa9615bf4d9d4e8fca41ba7
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: checkme=f83267515587ba183ea97b293ebd860ab789

                                         
                                         35.169.145.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 20 Jun 2019 01:33:46 GMT
Content-Length: 150
Connection: keep-alive
Content-Security-Policy: default-src 'self'
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   150
Md5:    84241342d84ac29592a5d9516f8edf7f
Sha1:   03c53980e18e17625f439c20e7d438f066202428
Sha256: 6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c
                                        
                                            GET /pagead/viewthroughconversion/1038302480/?random=520346859&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=euIKXbbWOJ2IygXF6ougCQ&crd=&gtd= HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         172.217.20.34
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 20 Jun 2019 01:33:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/pagead/1p-user-list/1038302480/?random=520346859&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2368604144&resp=GooglemKTybQhCsO
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 20-Jun-2019 01:48:47 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 20 Jun 2019 01:33:47 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e300281c1a3761b8d275990a127cc95a
Sha1:   a0b434b94e283cf64d80ba002b69f23a867171b3
Sha256: 92fda4c233e1272c97c72c0ed216065f00d9abfbfefa7755958221ced18edd33
                                        
                                            GET /pagead/1p-user-list/1038302480/?random=520346859&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2368604144&resp=GooglemKTybQhCsO HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         216.58.207.196
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 20 Jun 2019 01:33:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/pagead/1p-user-list/1038302480/?random=520346859&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2368604144&resp=GooglemKTybQhCsO&ipr=y
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 20 Jun 2019 01:33:47 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c2dec73eacbab20f31267517746f133d
Sha1:   00145534507102a36ef64bf46b57216b5190c47c
Sha256: 10944ad04fff711d135d0e93978b37c44c6419d9b29d3ece7f981eb422b6f70c
                                        
                                            GET /pagead/1p-user-list/1038302480/?random=520346859&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2368604144&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 20 Jun 2019 01:33:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /atp/pfa.php?&channel=Ton&campaign=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&lpx=tef HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D53211a66dcf603761a0b7808%26lpx%3Dtef%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de; _testcookie=test; rmo=true; PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D53211a66dcf603761a0b7808%26context%3D019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
P3P: CP="CAO DSP AND SO ON" policyref="/w3c/p3p.xml"
Date: Thu, 20 Jun 2019 01:33:45 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _trackid=6487410327; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _trackid_6487410327=6487410327; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _tracking=Ton; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _tracking_Ton=Ton; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _campaign=RON-NO-DESKTOP-Zero_tef; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _adgroup=direct; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _adgroup_direct=direct; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _keyword=53211a66dcf603761a0b7808; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _keyword_53211a66dcf603761a0b7808=53211a66dcf603761a0b7808; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _ads=direct; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _ads_direct=direct; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _browser=IE; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _browser_IE=IE; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _country=Norway; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com _country_Norway=Norway; expires=Mon, 19-Aug-2019 01:33:51 GMT; path=/; domain=reimageplus.com
Content-Length: 20


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=213FB6D870FA8CE65539BF1065C0BEA1; _testcookie=test; rmo=true; PHPSESSID=27polg5u1g4iqfvau8pd5qs5m5; __utma=141870001.622039875.1560994427.1560994427.1560994427.1; __utmb=141870001.1.10.1560994427; __utmc=141870001; __utmz=141870001.1560994427.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _trackid=6487410327; _trackid_6487410327=6487410327; _tracking=Ton; _tracking_Ton=Ton; _campaign=RON-NO-DESKTOP-Zero_tef; _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; _adgroup=direct; _adgroup_direct=direct; _keyword=53211a66dcf603761a0b7808; _keyword_53211a66dcf603761a0b7808=53211a66dcf603761a0b7808; _ads=direct; _ads_direct=direct; _browser=IE; _browser_IE=IE; _country=Norway; _country_Norway=Norway

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: Apache/2.2.15 (CentOS)
Date: Thu, 20 Jun 2019 01:33:51 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Fri, 24 Apr 2015 13:01:28 GMT
Content-Length: 894


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   894
Md5:    d0c2bd29933d303826e58db070e10832
Sha1:   1a6f18c55c3cd9ea9ff9485afc30c213a6aeefef
Sha256: 3af4842e79f2e783c9a73e19493a10164df5cf27e7e2fb67fb51b2f99d3b4d84
                                        
                                            GET /getseal?host_name=www.reimageplus.com&size=XS&use_flash=NO&use_transparent=YES&lang=en HTTP/1.1 
Host: seal.websecurity.norton.com
                                        
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=53211a66dcf603761a0b7808&context=019cebc21a88fea2af2da1cf33119691094b417fa6.r.1560994423.81df650e27664892b8b0a6c13a7041de&nms=1&lpx=tef

                                         
                                         0.0.0.0
                                        


--- Additional Info ---