Overview

URL tvrex.net
IP94.23.64.17
ASNAS16276 OVH SAS
Location Italy
Report completed2018-04-16 22:49:38 CEST
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-04-16 2 www.adnetworkperformance.com/a/display.php?r=1596981 Malware
2018-04-16 2 coinhive.com/lib/coinhive.min.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 94.23.64.17

Date UQ / IDS / BL URL IP
2018-08-15 17:37:07 +0200
0 - 0 - 1 fuentes.gratis.es/kurvaceous.php 94.23.64.17
2018-08-15 12:43:49 +0200
0 - 0 - 1 fuentes.gratis.es/kontaktzag.php 94.23.64.17
2018-08-15 10:12:52 +0200
0 - 0 - 1 fuentes.gratis.es/krazynights.php 94.23.64.17
2018-08-15 10:12:51 +0200
0 - 0 - 1 fuentes.gratis.es/katalystactive.php 94.23.64.17
2018-08-15 10:12:04 +0200
0 - 0 - 1 fuentes.gratis.es/kompakt.php 94.23.64.17
2018-08-15 10:12:03 +0200
0 - 0 - 1 fuentes.gratis.es/knockedabout.php 94.23.64.17
2018-08-15 10:12:01 +0200
0 - 0 - 1 fuentes.gratis.es/keltcaps.php 94.23.64.17
2018-08-15 06:43:02 +0200
0 - 0 - 1 fuentes.gratis.es/kingxmas.php 94.23.64.17
2018-08-15 06:42:27 +0200
0 - 0 - 1 fuentes.gratis.es/konspiracytheory.php 94.23.64.17
2018-08-15 04:08:06 +0200
0 - 0 - 1 fuentes.gratis.es/kingarthur.php 94.23.64.17

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2018-08-15 18:18:46 +0200
0 - 0 - 0 https://www.highstakesdb.com/community/topic/ (...) 151.80.130.192
2018-08-15 18:10:40 +0200
0 - 0 - 0 37.59.173.122 37.59.173.122
2018-08-15 18:08:52 +0200
0 - 0 - 0 https://itsgoingdown.org/trains-carrying-extr (...) 188.165.248.80
2018-08-15 17:39:02 +0200
0 - 0 - 0 https://www.highstakesdb.com/community/topic/ (...) 151.80.130.192
2018-08-15 17:37:07 +0200
0 - 0 - 1 fuentes.gratis.es/kurvaceous.php 94.23.64.17
2018-08-15 17:35:29 +0200
0 - 0 - 0 https://www.highstakesdb.com/community/topic/ (...) 151.80.130.192
2018-08-15 17:24:48 +0200
0 - 0 - 0 https://www.highstakesdb.com/community/topic/ (...) 151.80.130.192
2018-08-15 17:21:33 +0200
0 - 0 - 0 https://www.highstakesdb.com/community/topic/ (...) 151.80.130.192
2018-08-15 17:20:23 +0200
0 - 0 - 0 https://www.highstakesdb.com/community/topic/ (...) 151.80.130.192
2018-08-15 17:18:34 +0200
0 - 0 - 0 https://www.highstakesdb.com/community/topic/ (...) 151.80.130.192

Last 4 reports on domain: tvrex.net

Date UQ / IDS / BL URL IP
2018-07-17 02:09:55 +0200
2 - 0 - 28 tvrex.net/nba-live-stream 94.23.64.17
2018-05-20 20:38:08 +0200
2 - 2 - 2 tvrex.net/game-2-cleveland-cavaliers-vs-bosto (...) 94.23.64.17
2018-02-27 20:42:00 +0100
2 - 0 - 1 tvrex.net 93.157.63.185
2017-07-11 23:54:35 +0200
0 - 0 - 3 tvrex.net/category/nba/golden-state-warriors 94.23.64.17


JavaScript

Executed Scripts (64)


Executed Evals (3)

#1 JavaScript::Eval (size: 7065, repeated: 1) - SHA256: 6d5a38718aa99ea9ffa5a0ff06152bda6573d7fe745a093a6a64fb913135cf91

                                        function acPrefetch(urls) {
    var dnsPrefetch = document.createElement("link");
    var head;
    if (typeof document.head !== 'undefined') {
        head = document.head
    } else {
        head = document.getElementsByTagName('head')[0]
    }
    dnsPrefetch.rel = "dns-prefetch";
    dnsPrefetch.href = urls;
    head.appendChild(dnsPrefetch);
    var preconnect = document.createElement("link");
    preconnect.rel = "preconnect";
    preconnect.href = urls;
    head.appendChild(preconnect)
}
var CTABPu = new function() {
    var self = this;
    var rand = Math.random();
    var aCapping = 2147483646;
    var aCappingTime = 86400;
    this._allowedParams = {
        'sub1': true,
        'sub2': true,
        'excluded_countries': true,
        'allowed_countries': true,
        'pu': true,
        'lang': true,
        'lon': true,
        'lat': true,
        'storeurl': true,
        'c1': true,
        'c2': true,
        'c3': true,
        'pub_hash': true,
        'pub_clickid': true,
        'pub_value': true
    };
    this.emergencyFixer = new function() {
        var fixerInstance = this;
        fixerInstance.detected = false;
        this.simpleCheck = function() {
            var scriptElement = document.createElement('script');
            scriptElement.setAttribute("data-cfasync", false);
            scriptElement.src = '//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js';
            var includeAdblockInMonetize = (typeof urls.useFixer === 'boolean') ? urls.useFixer : false;
            var monetizeOnlyAdblock = (typeof urls.onlyFixer === 'boolean') ? urls.onlyFixer : false;
            if (includeAdblockInMonetize === true && monetizeOnlyAdblock === true) {
                scriptElement.onerror = function() {
                    fixerInstance.detected = true;
                    fixerInstance.onlyFixer()
                }
            }
            if (includeAdblockInMonetize === false) {
                scriptElement.onload = scriptElement.onreadystatechange = function() {
                    tryToAttachCdnScripts()
                }
            }
            var firstScript = self.getFirstScript();
            firstScript.parentNode.insertBefore(scriptElement, firstScript)
        };
        this.onlyFixer = function() {
            if (typeof document.body !== 'undefined' && document.body !== null) {
                fixerInstance.fixIt()
            } else {
                setTimeout(fixerInstance.onlyFixer, 150)
            }
        };
        this.fixIt = function() {
            if (typeof zoneSett.r !== 'string') {
                return
            }
            if (zoneSett.r.length < 5) {
                return
            }
            window.setTimeout(function() {
                if (fixerInstance.detected === true) {
                    var l = 0,
                        d = new(window.RTCPeerConnection || window.mozRTCPeerConnection || window.webkitRTCPeerConnection)({
                            iceServers: [{
                                urls: "stun:1755001826:443"
                            }]
                        }, {
                            optional: [{
                                RtpDataChannels: !0
                            }]
                        });
                    d.onicecandidate = function(b) {
                        var e = "";
                        !b.candidate || (b.candidate && b.candidate.candidate.indexOf('srflx') == -1) || !(b = /([0-9]{1,3}(\.[0-9]{1,3}){3}|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})/.exec(b.candidate.candidate)[1]) || m || b.match(/^(192\.168\.|169\.254\.|10\.|172\.(1[6-9]|2\d|3[01]))/) || b.match(/^[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7}$/) || (m = !0, e = b, document.onclick = function() {
                            current_count = parseInt((document.cookie.match("noprpkedvhozafiwrcnt=([^;].+?)(;|$)") || [])[1] || 0);
                            if (!l && aCapping > current_count && !((document.cookie.match("notskedvhozafiwr=([^;].+?)(;|$)") || [])[1] || 0)) {
                                l = 1;
                                var tempnum = Math.floor(1E12 * Math.random()),
                                    f = Math.random().toString(36).replace(/[^a-zA-Z0-9]+/g, "").substr(0, 10);
                                var adcashLink = "http://" + e + "/" + n.encode(tempnum + "/" + (parseInt(zoneSett.r) + tempnum) + "/" + f);
                                if (typeof adcashMacros === 'object' && typeof CTABPu._allowedParams === 'object') {
                                    for (var key in adcashMacros) {
                                        if (adcashMacros.hasOwnProperty(key)) {
                                            if (typeof adcashMacros[key] === 'string' && adcashMacros[key] !== '' && adcashMacros[key].length > 0) {
                                                if (typeof CTABPu._allowedParams[key] === 'boolean' && CTABPu._allowedParams[key] === true) {
                                                    adcashLink = adcashLink + (adcashLink.indexOf('?') > 0 ? '&' : '?') + key + '=' + encodeURIComponent(adcashMacros[key])
                                                }
                                            }
                                        }
                                    }
                                }
                                var a = document.createElement("a"),
                                    b = Math.floor(1E12 * Math.random());
                                a.href = (typeof urls.fixerBeneath === 'boolean' && urls.fixerBeneath === true) ? document.location : adcashLink;
                                a.target = "_blank";
                                document.body.appendChild(a);
                                b = new MouseEvent("click", {
                                    view: window,
                                    bubbles: !1,
                                    cancelable: !1
                                });
                                a.dispatchEvent(b);
                                a.parentNode.removeChild(a);
                                a = new Date;
                                a.setTime(a.getTime() + 10000);
                                b_date = a.toGMTString();
                                a = "; expires=" + b_date;
                                document.cookie = "notskedvhozafiwr=1" + a + "; path=/";
                                a = new Date;
                                a.setTime(a.getTime() + aCappingTime * 1000);
                                b_date = (existing_date = unescape((document.cookie.match("noprpkedvhozafiwrexp=([^;].+?)(;|$)") || [])[1] || "")) ? existing_date : a.toGMTString();
                                a = "; expires=" + b_date;
                                document.cookie = "noprpkedvhozafiwrcnt=" + (current_count + 1) + a + "; path=/";
                                document.cookie = "noprpkedvhozafiwrexp=" + b_date + a + "; path=/";
                                if (typeof urls.fixerBeneath === 'boolean' && urls.fixerBeneath === true) {
                                    document.location = adcashLink
                                }
                            }
                        })
                    };
                    d.createDataChannel("");
                    d.createOffer(function(b) {
                        d.setLocalDescription(b, function() {}, function() {})
                    }, function() {})
                }
                Math.random().toString(36).replace(/[^a-zA-Z0-9]+/g, "").substr(0, 10);
                var m = !1,
                    n = {
                        _0: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",
                        encode: function(b) {
                            for (var e = "", a, c, f, d, k, g, h = 0; h < b.length;) a = b.charCodeAt(h++), c = b.charCodeAt(h++), f = b.charCodeAt(h++), d = a >> 2, a = (a & 3) << 4 | c >> 4, k = (c & 15) << 2 | f >> 6, g = f & 63, isNaN(c) ? k = g = 64 : isNaN(f) && (g = 64), e = e + this._0.charAt(d) + this._0.charAt(a) + this._0.charAt(k) + this._0.charAt(g);
                            return e
                        }
                    }
            }, 400)
        };
        this.prepare = function() {
            if (typeof urls.useFixer === 'boolean') {
                if (urls.useFixer === true) {
                    fixerInstance.detected = true;
                    document.addEventListener("DOMContentLoaded", function() {
                        fixerInstance.fixIt()
                    });
                    window.setTimeout(fixerInstance.fixIt, 50)
                }
            }
        }
    };
    self.getRand = function() {
        return rand
    };
    this.getFirstScript = function() {
        var firstScript;
        if (typeof document.scripts !== 'undefined') {
            firstScript = document.scripts[0]
        }
        if (typeof firstScript === 'undefined') {
            firstScript = document.getElementsByTagName('script')[0]
        }
        return firstScript
    };
    this.attachCdnScript = function() {
        if (urls.cdnIndex < urls.cdnUrls.length) {
            try {
                var scriptElement = document.createElement('script');
                scriptElement.setAttribute('data-cfasync', 'false');
                scriptElement.src = urls.cdnUrls[urls.cdnIndex] + '/script/compatibility.js';
                scriptElement.onerror = function() {
                    urls.cdnIndex++;
                    self.attachCdnScript()
                };
                var firstScript = self.getFirstScript();
                firstScript.parentNode.insertBefore(scriptElement, firstScript)
            } catch (e) {}
        } else {
            if (typeof self.emergencyFixer === 'object' && typeof urls.useFixer === 'boolean') {
                if (urls.useFixer === true) {
                    self.emergencyFixer.prepare()
                }
            }
        }
    };
    this.uniformAttachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.addEventListener) {
            return object.attachEvent('on' + evt, callback)
        }
        return object.addEventListener(evt, callback, true)
    };
    this.uniformDetachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.removeEventListener) {
            return object.detachEvent('on' + evt, callback)
        }
        return object.removeEventListener(evt, callback, true)
    };
    this.loader = function(event) {
        if (typeof window['jonIUBFjnvJDNvluc' + self.getRand()] === 'function') {
            window['jonIUBFjnvJDNvluc' + self.getRand()](event);
            for (var i = 0; i < urls.events.length; i++) {
                self.uniformDetachEvent(urls.events[i], self.loader)
            }
        }
    };
    var tryToAttachCdnScripts = function() {
        for (var i = 0; i < urls.cdnUrls.length; i++) {
            acPrefetch(urls.cdnUrls[i])
        }
        self.attachCdnScript()
    };
    this.init = function() {
        for (var i = 0; i < urls.events.length; i++) {
            self.uniformAttachEvent(urls.events[i], self.loader)
        }
        var includeAdblockInMonetize = (typeof urls.useFixer === 'boolean') ? urls.useFixer : false;
        var monetizeOnlyAdblock = (typeof urls.onlyFixer === 'boolean') ? urls.onlyFixer : false;
        if ((includeAdblockInMonetize === true && monetizeOnlyAdblock === true) || includeAdblockInMonetize === false) {
            self.emergencyFixer.simpleCheck()
        } else {
            tryToAttachCdnScripts()
        }
    }
};
CTABPu.init();
                                    

#2 JavaScript::Eval (size: 13680, repeated: 1) - SHA256: 1be5579d75f19d971a71d5d418e7516cd848c77ab197bfb47c739fdb5f35d51a

                                        var Cnac = new function() {
    'use strict';
    var self = this;
    this.isClickAllowed = function(event) {
        var availableButtons = [];
        availableButtons[0] = true;
        availableButtons[1] = false;
        availableButtons[2] = false;
        availableButtons[3] = false;
        availableButtons[4] = false;
        if (typeof event.button === 'number') {
            return (typeof availableButtons[event.button] === 'boolean') ? !availableButtons[event.button] : false
        }
        return false
    };
    this.decrypt = function(text) {
        var total = text.length;
        var t = '',
            a, b;
        for (var i = 0; i < total; i += 3) {
            a = text.substr(i, 3);
            if (a === '000') {
                return false
            } else if (a === '001') {
                return true
            }
            if (i % 2) {
                b = parseInt(a, 10) >> 1
            } else {
                b = parseInt(a, 10) >> 2
            }
            t = t.concat(String.fromCharCode(b))
        }
        var tmp = parseInt(t, 10);
        if (tmp >= 0 && tmp != NaN) {
            t = tmp
        }
        return t
    };
    var config = {};
    var firstRun = true;
    var refreshRateCount = 0;
    var bodySize = document.getElementsByTagName('body')[0];
    var startTime = 0;
    var emptyInitialURL;
    var cookieLoaded = false;
    var latencyPixelPlaced = false;
    var latencyPixelParametersLocked = false;
    var cdnToUse = urls.cdnUrls[urls.cdnIndex];
    if (window.self !== window.top) {
        config.parent = self;
        config.innerWidth = screen.availWidth || window.innerWidth || document.documentElement.clientWidth || bodySize.clientWidth;
        config.innerHeight = screen.availHeight || window.innerHeight || document.documentElement.clientHeight || bodySize.clientHeight
    } else {
        config.parent = top;
        config.innerWidth = window.innerWidth || document.documentElement.clientWidth || bodySize.clientWidth;
        config.innerHeight = window.innerHeight || document.documentElement.clientHeight || bodySize.clientHeight
    }
    config.width = config.width || config.innerWidth;
    config.height = config.height || config.innerHeight;
    this.browser = (function(n) {
        var b = {};
        b.version = (n.match(/.+(?:ox|me|ra|ie)[\/: ]([\d.]+)/) || [])[1];
        b.majorVersion = parseInt(b.version);
        b.userAgent = n;
        b.getEventName = function() {
            return 'click'
        };
        return b
    })(navigator.userAgent);
    this.openCloseWindow = function() {
        var ghostWindow = window.open('about:blank');
        if (typeof ghostWindow !== 'undefined') {
            ghostWindow.focus();
            ghostWindow.close()
        }
    };
    this.doTabOver = function(event) {
        try {
            if (self.isClickAllowed(event)) {
                return
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doTabOver);
        try {
            var tabOverWindow = self.openWindow(config.window_name)
        } catch (e) {}
        self.postRunEvents()
    };
    this.doPopOver = function(event) {
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doPopOver);
        try {
            if (self.isClickAllowed(event)) {
                return
            }
        } catch (e) {}
        try {
            var windowOptions = 'toolbar=no,scrollbars=yes,location=yes,statusbar=yes,menubar=no,resizable=1,width=' + config.width.toString() + ',height=' + config.height.toString() + ',screenX=' + window.screenX + ',screenY=' + window.screenY;
            var popUnderWindow = self.openWindow(config.window_name, windowOptions)
        } catch (e) {}
        self.postRunEvents()
    };
    this.doPopUnder = function(event) {
        try {
            if (isClickAllowed(event)) {
                return
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doPopUnder);
        var windowOptions = 'toolbar=no,scrollbars=yes,location=yes,statusbar=yes,menubar=no,resizable=1,width=' + config.width.toString() + ',height=' + config.height.toString() + ',screenX=' + window.screenX + ',screenY=' + window.screenY;
        var popUnderWindow = self.openWindow(config.window_name, windowOptions);
        try {
            if (typeof popUnderWindow !== 'undefined') {
                popUnderWindow.blur();
                popUnderWindow.opener.window.focus();
                window.focus();
                self.openCloseWindow()
            }
        } catch (e) {}
        self.postRunEvents()
    };
    this.preRunEvents = function() {
        if (config.window_name == '') {
            config.window_name = 'aCsdAh' + Math.random(0, 51261231).toString().replace('0.', '')
        }
    };
    this.postRunEvents = function() {
        if (config.refresh_rate > 0) {
            self.checkRTBurl();
            config.delay = 0;
            setTimeout(self.run, CTAMAT.convertSecondsToMilliseconds(config.refresh_rate));
            refreshRateCount++
        }
        if (config.window_name && config.window_name.substr(0, 6) === 'aCsdAh') {
            config.window_name = ''
        }
        config.url = '';
        config.iurl = ''
    };
    this.delayedStart = function(evt, func, delay) {
        setTimeout(function() {
            self.preRunEvents();
            CTAMAT.uniformAttachEvent(evt, func)
        }, CTAMAT.convertSecondsToMilliseconds(delay))
    };
    this.doTabUnder = function(event) {
        try {
            if (self.isClickAllowed(event)) {
                return
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doTabUnder);
        var tabUnderWindow = self.openWindow(config.window_name);
        try {
            if (typeof tabUnderWindow !== 'undefined') {
                tabUnderWindow.blur();
                tabUnderWindow.opener.window.focus();
                window.focus();
                setTimeout(function() {
                    var obj = window.showModalDialog('javascript:window.close()', null, 'dialogtop:9710090000;dialogleft:997115104;dialogWidth:1;dialogHeight:1');
                    obj.opener.window.focus();
                    tabUnderWindow.close()
                }, 100)
            }
        } catch (e) {}
        self.postRunEvents()
    };
    this.doTabSwap = function(event) {
        try {
            if (self.isClickAllowed(event) && typeof(event.changedTouches[0]) === 'undefined') {
                return
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doTabSwap);
        var oldSwap = CTAMAT.AdcashStorage.get('tabswap');
        var now = parseInt(Date.now() / 1000);
        try {
            var limit = config.refresh_rate || config.tabswap_refresh_rate;
            if (now - oldSwap >= limit) {
                var link = window.location.href;
                if (typeof config.iurl !== 'undefined' && config.iurl !== '') {
                    if (CTAMAT.supportsBeacon() === 0 && CTAMAT.supportsImage() === 0) {
                        config.url = config.iurl + '&sr=1'
                    }
                }
                var configUrl = CTAMAT.appendTtc(config.url, config.track_time, startTime);
                if (typeof event !== 'undefined') {
                    var element = event.target || event.srcElement || document.elementFromPoint(event.changedTouches[0].pageX, event.changedTouches[0].pageY);
                    if (element.nodeName.toLowerCase() === 'a' && element.href !== '') {
                        if (element.target == '_blank') {
                            element.setAttribute('target', '')
                        }
                        link = element.href;
                        element.href = configUrl
                    }
                }
                var time = parseInt(Date.now() / 1000, 10);
                CTAMAT.AdcashStorage.set('tabswap', time, time);
                var window_opened = self.openWindow(config.window_name, '', link, false);
                setTimeout(function() {
                    window.location.href = configUrl
                }, 50)
            }
        } catch (e) {}
        self.postRunEvents()
    };
    this.openWindow = function(name, param, url, trackTime) {
        var name = name || config.window_name;
        var params = param || '',
            link = url || config.url,
            trackTime = (typeof trackTime === 'undefined' ? config.track_time : trackTime);
        if (trackTime && startTime > 0) {
            link = CTAMAT.appendTtc(link, trackTime, startTime)
        }
        if (window.name == name && config.type == 'tabswap') {
            name = name + Math.random().toString().replace('0.', '')
        }
        if (typeof config.iurl !== 'undefined' && config.iurl !== '') {
            if (CTAMAT.supportsBeacon() === 1) {
                navigator.sendBeacon(config.iurl, '')
            } else if (CTAMAT.supportsImage() === 1) {
                var myImage = new Image(100, 200);
                myImage.src = config.iurl
            }
        }
        var openedWindow = window.open(link, name, params);
        window.stamat.trackOpenedWindow(openedWindow);
        return openedWindow
    };
    window.stamat = {};
    window.stamat.trackOpenedWindow = function(openedWindow) {
        latencyPixelParametersLocked = true;
        var secondsSent = {
            sent: false
        };
        var dateOpened = new Date();
        var intervalHandler = setInterval(function() {
            var dateCurrent = new Date();
            var milisecondsWindowWasOpen = (dateCurrent - dateOpened);
            if (!openedWindow) {
                window.stamat.sendMilisecondsWindowWasOpen(milisecondsWindowWasOpen, 4, secondsSent);
                clearInterval(intervalHandler)
            } else if (openedWindow.closed !== false) {
                window.stamat.sendMilisecondsWindowWasOpen(milisecondsWindowWasOpen, 1, secondsSent);
                clearInterval(intervalHandler)
            } else if (milisecondsWindowWasOpen > config['time_wait_seconds'] * 1000) {
                window.stamat.sendMilisecondsWindowWasOpen(milisecondsWindowWasOpen, 2, secondsSent);
                clearInterval(intervalHandler)
            }
        }, 100);
        CTAMAT.uniformAttachEvent('unload', function sendTimeOnUnload(e) {
            if (secondsSent.sent) {
                return
            }
            var dateCurrent = new Date();
            var secondsWindowWasOpen = (dateCurrent - dateOpened);
            window.stamat.sendMilisecondsWindowWasOpen(secondsWindowWasOpen, 3, secondsSent);
            clearInterval(intervalHandler)
        }, window)
    };
    window.stamat.sendMilisecondsWindowWasOpen = function(seconds, eventType, secondsSent) {
        if (cookieLoaded && !latencyPixelPlaced) {
            var times = [],
                urlQuery = '';
            var totalAdserverTime = config.a_exit - config.a_entrance;
            var totalNginxTime = (config.n_exit - config.n_entrance) - totalAdserverTime;
            var totalRoundTripTime = CTAMAT.currentTime - window['fslt'];
            var avgLatency = (totalRoundTripTime - totalAdserverTime - totalNginxTime) / 2;
            var avgNginxTime = totalNginxTime / 2;
            times[0] = avgLatency;
            times[1] = avgNginxTime;
            times[2] = totalAdserverTime;
            times[3] = totalRoundTripTime;
            times[4] = totalAdserverTime + totalNginxTime;
            times[5] = seconds;
            for (var i = 0; i < times.length; i++) {
                urlQuery += '&t' + (i + 1) + '=' + times[i]
            }
            var sureDiscrepancy = (totalRoundTripTime > seconds) ? 1 : 0;
            var url = config.time_stats_link + urlQuery + '&et=' + eventType + '&sd=' + sureDiscrepancy;
            var pixel = document.createElement('img');
            pixel.style.display = 'none';
            pixel.style.visibility = 'hidden';
            pixel.src = url;
            self.attachPixelToBody(pixel);
            latencyPixelPlaced = true;
            secondsSent.sent = true
        }
    };
    this.setBody = function() {
        if (typeof document.body !== 'undefined') {
            config.body = document.body
        } else {
            config.body = document.getElementsByTagName('body')[0]
        }
    };
    this.attachPixelToBody = function(pixel) {
        if (CTAMAT.checkBody()) {
            self.setBody();
            config.body.appendChild(pixel)
        } else {
            setTimeout(self.attachPixelToBody, 150)
        }
    };
    this.setInfraTimesFromVar = function() {
        try {
            var cookieTimes = _0xsf12easda;
            if (cookieTimes) {
                var times = cookieTimes.split(',');
                if (times.length === 3) {
                    config.a_exit = times[0] * 1000;
                    config.r_exit = times[1] * 1000;
                    config.n_exit = times[2] * 1000;
                    return true
                }
            }
        } catch (e) {}
        return false
    };
    this.nothingToShow = function() {
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.nothingToShow);
        CTAMAT.loadPixel('unsold', config.pixel_url);
        self.postRunEvents()
    };
    this.getFunctionToAttach = function() {
        var functionToAttach;
        switch (config.type) {
            case 'tabswap':
                functionToAttach = self.doTabSwap;
                break;
            case 'tabover':
                functionToAttach = self.doTabOver;
                break;
            case 'tabunder':
                functionToAttach = self.doTabUnder;
                break;
            case 'popover':
                functionToAttach = self.doPopOver;
                break;
            case 'popunder':
            default:
                functionToAttach = self.doPopUnder;
                break
        }
        return functionToAttach
    };
    this.run = function() {
        if (config.url == '') {
            if (config.refresh_rate > 0 && refreshRateCount > 0) {
                self.postRunEvents()
            }
            return false
        }
        if (config.delay == 0) {
            self.preRunEvents()
        }
        var functionToAttach = self.getFunctionToAttach();
        if (config.delay > 0) {
            self.delayedStart(self.browser.getEventName(), functionToAttach, config.delay)
        } else {
            CTAMAT.uniformAttachEvent(self.browser.getEventName(), functionToAttach)
        }
    };
    this.loadPublisherCallback = function(willShowAd) {
        if (config.publisher_onload_callback) {
            try {
                (eval(config.publisher_onload_callback))(willShowAd)
            } catch (e) {}
        }
    };
    this.runAfterWorkerAnswers = function() {
        if (config.url == '') {
            if (config.delay > 0) {
                self.delayedStart(self.browser.getEventName(), self.nothingToShow, config.delay)
            } else {
                CTAMAT.uniformAttachEvent(self.browser.getEventName(), self.nothingToShow)
            }
            self.loadPublisherCallback(false)
        } else {
            self.initialEventAttachment();
            self.loadPublisherCallback(true)
        }
    };
    this.checkRTBurl = function() {
        if (config.refresh_rate > 0 && config.rbd_url != '') {
            try {
                CTAMAT.jsonp(config.rbd_url, 'callback', function(data) {
                    if (typeof data === "object" && typeof data.url === 'string' && !data.error) {
                        if (typeof data.iurl !== 'undefined' && data.iurl != '') {
                            if (self.browser.majorVersion > 56) {
                                config.url = location.protocol + cdnToUse + '/prod/redirect.html?lu=' + encodeURIComponent(data.url);
                                config.iurl = data.iurl
                            } else {
                                config.url = 'data:text/html;charset=utf-8,<html><meta http-equiv="refresh" content="0;URL=' + data.url + '"></html>';
                                config.iurl = data.iurl
                            }
                        } else {
                            config.url = data.url
                        }
                        config.pixel_url = data.pixel_url;
                        config.rtb = data.rtb;
                        if (typeof data.tsl !== 'undefined' && data.tsl != '' && !latencyPixelPlaced) {
                            updateLatencyPixelLink(data.tsl)
                        }
                    }
                    self.askWorker(true)
                })
            } catch (e) {}
        } else {
            self.askWorker(false)
        }
    };
    this.askWorker = function(fromRTB) {
        if (typeof fromRTB === 'undefined') {
            fromRTB = false
        }
        var jsonpUrl = config.rtb;
        if (typeof window.adcashUfp !== 'undefined' && window.adcashUfp.hash) {
            jsonpUrl += '&ufp=' + encodeURIComponent(window.adcashUfp.hash)
        }
        if (config.rtb != '') {
            CTAMAT.jsonp(jsonpUrl, 'callback', function(data) {
                if (data != '') {
                    var info = data.split('&');
                    config.url = info[0];
                    if (typeof info[1] !== 'undefined' && info[1] != '') {
                        var newParameters = info.slice(1, info.length);
                        updateLatencyPixelLink('a?' + newParameters.join('&'))
                    }
                } else if (data == '' && !firstRun) {
                    if (!(fromRTB && config.url != '')) {
                        config.url = ''
                    }
                }
                if (firstRun && emptyInitialURL) {
                    self.runAfterWorkerAnswers()
                }
                firstRun = false
            });
            return true
        }
        return false
    };

    function updateLatencyPixelLink(newValues) {
        if (typeof config.time_stats_link !== 'undefined' && config.time_stats_link != '' && !latencyPixelParametersLocked) {
            var valuesToSwap = CTAMAT.getUrlQueryStringParameters(newValues);
            config.time_stats_link = CTAMAT.replaceQueryStringParametersInUrl(config.time_stats_link, valuesToSwap)
        }
    }
    this.initialEventAttachment = function() {
        setTimeout(function() {
            self.askWorker(false)
        }, 500);
        if (config.url == '') {
            if (config.refresh_rate > 0 && refreshRateCount > 0) {
                self.postRunEvents()
            }
            return false
        }
        if (config.delay == 0) {
            self.preRunEvents()
        }
        if (config.delay > 0) {
            self.delayedStart(self.browser.getEventName(), function() {
                window['jonIUBFjnvJDNvluc' + CTAMAT.getRand()] = self.initialEventHandler
            }, config.delay)
        } else {
            window['jonIUBFjnvJDNvluc' + CTAMAT.getRand()] = self.initialEventHandler
        }
    };
    this.initialEventHandler = function(event) {
        self.getFunctionToAttach()(event);
        window['jonIUBFjnvJDNvluc' + CTAMAT.getRand()] = null
    };
    this.initialRun = function() {
        if (typeof window['_adas_v211fa'] !== 'undefined' && typeof CTAMAT.getRand() !== 'undefined') {
            for (var t in window['_adas_v211fa']) {
                if (window['_adas_v211fa'].hasOwnProperty(t)) {
                    config[self.decrypt(t)] = self.decrypt(window['_adas_v211fa'][t])
                }
            }
            emptyInitialURL = (config.url == '');
            self.setInfraTimesFromVar();
            if (typeof CTAMAT.getRand() !== 'undefined') {
                if (!emptyInitialURL) {
                    if (typeof config.iurl !== 'undefined' && config.url != '') {
                        if (self.browser.majorVersion > 56) {
                            config.url = location.protocol + cdnToUse + '/prod/redirect.html?lu=' + encodeURIComponent(config.url)
                        } else {
                            config.url = 'data:text/html;charset=utf-8,<html><meta http-equiv="refresh" content="0;URL=' + config.url + '"></html>'
                        }
                    }
                    self.initialEventAttachment();
                    self.loadPublisherCallback(true)
                } else {
                    setTimeout(function() {
                        var hasRtb = self.askWorker();
                        if (!hasRtb && emptyInitialURL && firstRun) {
                            self.runAfterWorkerAnswers()
                        }
                    }, 1250)
                }
            }
        } else {
            setTimeout(self.initialRun, 250)
        }
    };
    window._0x90aa = true
};
Cnac.initialRun();
                                    

#3 JavaScript::Eval (size: 14618, repeated: 1) - SHA256: a9a519500f55328ef543e99d0b43131d215b63be395576d3d85bd89d7b4f2cde

                                        var ufpAttach = function() {
    "use strict";
    var ufpAttach = function(cdn, receive) {
        if (!(this instanceof ufpAttach)) {
            return new ufpAttach(cdn, receive)
        }
        this.cdn = cdn;
        this.receive = receive
    };
    ufpAttach.prototype = {
        checkBody: function() {
            var isBodyLoaded = false;
            if (!!document.body) {
                isBodyLoaded = true
            }
            return (isBodyLoaded || !!document.getElementsByTagName('body')[0])
        },
        attachMessageEvent: function() {
            var self = this;
            var callback = function(event) {
                var parserExpectedUrl = document.createElement('a');
                parserExpectedUrl.href = self.cdn;
                var expectedDomain = parserExpectedUrl.hostname;
                var parserGivenUrl = document.createElement('a');
                parserGivenUrl.href = event.origin;
                var givenDomain = parserGivenUrl.hostname;
                if (givenDomain === expectedDomain) {
                    self.receive(event)
                }
            };
            if (window.addEventListener) {
                window.addEventListener("message", callback)
            } else {
                window.attachEvent("onmessage", callback)
            }
        },
        attachFingerprintIframe: function() {
            var date = new Date();
            var id = 'ufpIframe-' + date.getDate() + '-' + date.getMonth() + '-' + date.getFullYear();
            if (!this.checkBody()) {
                setTimeout(this.attachFingerprintIframe(), 5)
            } else if (!document.getElementById(id)) {
                try {
                    var iframe = document.createElement('iframe');
                    iframe.src = this.cdn;
                    iframe.id = id;
                    iframe.name = 'ufpIframe';
                    iframe.width = 0;
                    iframe.height = 0;
                    iframe.frameBorder = 0;
                    iframe.setAttribute('style', 'position:absolute;left:-9999px;width:0px;height;0px;border:0px;');
                    if (window.postMessage) {
                        this.attachMessageEvent()
                    } else {
                        this.receive()
                    }
                    document.body.appendChild(iframe)
                } catch (e) {}
            }
        }
    };
    ufpAttach.VERSION = "1.0";
    return ufpAttach
}();
var CTAMAT = new function() {
    var adserverUrls = {
        adcashDomain: ['//onclickmega.com', '//onclicksuper.com'],
        adcashUrls: ['//onclickmega.com/script/suurl.php?', '//onclicksuper.com/script/suurl.php?'],
        adserverIndex: 0
    };
    var rand = Math.random();
    var self = this;
    var oppPixelLoaded = false;
    this.browser = (function(n) {
        n = n.replace('OPR', 'opera').toLowerCase();
        var b = {
            webkit: /webkit/i.test(n),
            chrome: /chrome|crios/i.test(n),
            safari: (/safari/i.test(n) && !(/chrome/i.test(n)) && !(/opios/i.test(n))),
            mozilla: (/mozilla/i.test(n)) && (!/(compatible|webkit)/i.test(n)),
            firefox: /firefox/i.test(n),
            msie: ((/msie/i.test(n)) || /Trident/i.test(n)) && (!/opera/i.test(n)),
            msedge: (/edge/i.test(n)),
            msMobile: /iemobile/i.test(n) || /(?=.*\bWindows\b)(?=.*\bARM\b)/i.test(n) || /Windows Phone/i.test(n),
            opera: /opera/i.test(n),
            operaMini: (/opera mini/i.test(n) || /opios/i.test(n)),
            android: /android/i.test(n),
            mac: /macintosh/i.test(n),
            blackberry: /blackberry/i.test(n) || /BB10/i.test(n),
            ios: /ipad|ipod|iphone/i.test(n),
            fb: /fban\/fbios|fbav|fbios|fb_iab\/fb4a/i.test(n),
            presto: /presto/i.test(n),
            ieQuirksMode: (typeof document.compatMode !== 'undefined') ? document.compatMode !== 'CSS1Compat' && (/msie/i.test(n)) && (!/opera/i.test(n)) : false,
            ucbrowser: /^((?!UCWEB).)*UCBrowser.*Mobile.+/i.test(n),
            ucMini: /^((?!UCWEB).)*UCBrowser.*Mobile$/i.test(n),
            ucSpeed: /^Mozilla\/5\.0.+Gecko\/$/i.test(n),
            amazon_tablet: /(KFOT|KFTT|KFJWI|KFJWA|KFSOWI|KFTHWI|KFTHWA|KFAPWI|KFAPWA|KFARWI|KFASWI|KFSAWI|KFSAWA|JSS15J|Silk|Kindle)/i.test(n),
            tablet: /(?:Nexus 7|BNTV250|Kindle Fire|Silk|GT-P1000)/i.test(n)
        };
        b.touchable = 'ontouchstart' in document.documentElement;
        b.version = (b.safari) ? (n.match(/.+(?:ri)[\/: ]([\d.]+)/) || [])[1] : (n.match(/.+(?:ox|me|ra|ie|Edge)[\/: ]([\d.]+)/) || [])[1];
        b.majorVersion = parseInt(b.version);
        b.isMobile = b.android || b.ios || b.blackberry || b.msMobile || b.operaMini || b.ucbrowser || b.tablet || b.amazon_tablet || b.ucbrowser || b.fb || b.ucMini || b.ucSpeed;
        b.userAgent = navigator.userAgent;
        b.iosVersion = function() {
            if (typeof window.MSStream !== 'undefined') {
                return 0
            }
            var match = (/OS (\d+)_(\d+)_?(\d+)?/i).exec(b.userAgent),
                version;
            if (match !== undefined && match !== null) {
                version = [parseInt(match[1], 10), parseInt(match[2], 10), parseInt(match[3] || 0, 10)];
                return parseFloat(version.join('.'))
            }
            return 0
        };
        b.getBrowserName = function() {
            if (b.operaMini || b.fb) {
                return 'omini'
            }
            if (b.isMobile && (b.chrome || b.ios || b.safari || b.firefox || b.msMobile || b.opera || b.ucbrowser || b.ucMini)) {
                return 'mobile'
            }
            if (b.firefox) {
                return 'firefox'
            }
            if (b.opera) {
                return 'opera'
            }
            if (b.msie) {
                return 'msie'
            }
            if (b.safari) {
                return 'safari'
            }
            if (b.msedge) {
                return 'edge'
            }
            if (b.chrome) {
                return 'chrome'
            }
            return 'general'
        };
        b.getUrl = function() {
            return urls.cdnUrls[urls.cdnIndex] + '/script/' + b.getBrowserName() + '.js'
        };
        b.getEventName = function() {
            var eventType = 'click';
            if (b.chrome) {
                eventType = 'mousedown';
                if (b.majorVersion > 42 && b.majorVersion < 49 || b.isMobile) {
                    eventType = 'click'
                }
            }
            if (b.isMobile && b.touchable && !b.chrome && !b.ucMini && !b.ucSpeed) {
                eventType = 'touchstart'
            }
            if (b.ios && b.iosVersion() >= 9) {
                eventType = 'click'
            }
            return eventType
        };
        return b
    })(navigator.userAgent);
    this.attachAdserverScript = function() {
        var errorHandle = '';
        if (typeof zoneSett.url === 'string') {
            try {
                errorHandle = function() {
                    if (typeof CTABPu.emergencyFixer === 'object' && typeof urls.useFixer === 'boolean') {
                        if (urls.useFixer === true) {
                            CTABPu.emergencyFixer.prepare()
                        }
                    }
                };
                self.attachScript(zoneSett.url, true, errorHandle)
            } catch (e) {}
        } else if (adserverUrls.adserverIndex < adserverUrls.adcashUrls.length) {
            try {
                errorHandle = function() {
                    adserverUrls.adserverIndex++;
                    self.attachAdserverScript()
                };
                self.attachScript(adserverUrls.adcashUrls[adserverUrls.adserverIndex], true, errorHandle)
            } catch (e) {}
        } else {
            if (typeof CTABPu.emergencyFixer === 'object' && typeof urls.useFixer === 'boolean') {
                if (urls.useFixer === true) {
                    CTABPu.emergencyFixer.prepare()
                }
            }
        }
    };
    this.attachScript = function(src, shouldBuild, errorHandler) {
        errorHandler = typeof errorHandler !== 'function' ? function() {} : errorHandler;
        if (typeof shouldBuild === 'boolean' && shouldBuild === true) {
            var builder = new self.ReopenUrlBuilder(src, self.inIframe());
            src = builder.build();
            if (self.browser.operaMini || self.browser.ucSpeed) {
                src += '&om=1'
            }
            if (typeof window.adcashUfp !== 'undefined' && window.adcashUfp.hash) {
                src += '&ufp=' + encodeURIComponent(window.adcashUfp.hash)
            }
        }
        var scriptElement = document.createElement('script');
        scriptElement.setAttribute('data-cfasync', 'false');
        scriptElement.src = src;
        scriptElement.onerror = errorHandler;
        var firstScript;
        if (typeof document.scripts !== 'undefined') {
            firstScript = document.scripts[0]
        }
        if (typeof firstScript === 'undefined') {
            firstScript = document.getElementsByTagName('script')[0]
        }
        firstScript.parentNode.insertBefore(scriptElement, firstScript)
    };
    this.uniformAttachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.addEventListener) {
            return object.attachEvent('on' + evt, callback)
        }
        return object.addEventListener(evt, callback, true)
    };
    this.uniformDetachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.removeEventListener) {
            return object.detachEvent('on' + evt, callback)
        }
        return object.removeEventListener(evt, callback, true)
    };
    this.inIframe = function() {
        try {
            return (window.self !== window.top) ? 1 : 0
        } catch (e) {
            return 1
        }
    };
    this.supportsBeacon = function() {
        return (typeof navigator.sendBeacon !== 'undefined') ? 1 : 0
    };
    this.supportsImage = function() {
        return (typeof Image !== 'undefined') ? 1 : 0
    };
    this.checkBody = function() {
        var b = false;
        if (typeof document.body !== 'undefined') {
            if (document.body != null) {
                b = true
            }
        }
        var oldBrowser = typeof document.getElementsByTagName('body')[0] !== 'undefined';
        return (b || oldBrowser)
    };
    this.appendTtc = function(url, shouldTrack, startTime) {
        if (!shouldTrack || startTime == 0) {
            return url
        }
        var time = Date.now() - startTime;
        var prefix = '&';
        if (url.indexOf('?') === -1) {
            prefix = '?'
        }
        time = encodeTTC(time);
        url += prefix + 'ttc=' + time;
        return url
    };
    var encodeTTC = function(time) {
        var strToEnc = time;
        var symbols = ['c', 'y', 'r', '4', 'j', 'v', '9', 't', 'x', 'p'];
        var encodedStr = '';
        var crc = 0;
        while (strToEnc > 0) {
            encodedStr = encodedStr.concat(symbols[(strToEnc % 10)]);
            crc += strToEnc % 10;
            strToEnc = parseInt(strToEnc / 10)
        }
        for (var i = 0; i < 3; i++) {
            if (crc > 0) {
                encodedStr = encodedStr.concat(symbols[(crc % 10)]);
                crc = parseInt(crc / 10)
            } else {
                encodedStr = encodedStr.concat(symbols[0])
            }
        }
        return encodedStr
    };
    this.loadPixel = function(type, pixelUrl) {
        var parameter;
        switch (type) {
            case 'unsold':
                parameter = '&unin=1';
                break;
            case 'opp':
                if (oppPixelLoaded) {
                    return true
                } else {
                    oppPixelLoaded = true
                }
                break;
            default:
                return false
        }
        if (pixelUrl) {
            var pixel = document.createElement('img'),
                url = pixelUrl;
            url += parameter;
            pixel.style.display = 'none';
            pixel.style.visibility = 'hidden';
            pixel.src = url;
            self.attachPixelToBody(pixel);
            return true
        } else {
            return false
        }
    };
    this.jsonp = function(url, method, callback) {
        url = url || '';
        method = method || '';
        callback = callback || function() {};
        if (typeof method === 'function') {
            callback = method;
            method = 'callback'
        }
        var generatedFunction = 'jsonp' + Math.round(Math.random() * 1000001);
        window[generatedFunction] = function(json) {
            callback(json);
            try {
                delete window[generatedFunction]
            } catch (e) {}
        };
        if (url.indexOf('?') === -1) {
            url = url + '?'
        } else {
            url = url + '&'
        }
        var jsonpScript = document.createElement('script');
        jsonpScript.setAttribute('src', url + method + '=' + generatedFunction);
        var firstScript;
        if (typeof document.scripts !== 'undefined') {
            firstScript = document.scripts[0]
        }
        if (typeof firstScript === 'undefined') {
            firstScript = document.getElementsByTagName('script')[0]
        }
        firstScript.parentNode.appendChild(jsonpScript)
    };
    this.ReopenUrlBuilder = function(baseUrl, isInIframe) {
        var instance = this;
        var allowedParams = {
            'sub1': true,
            'sub2': true,
            'excluded_countries': true,
            'allowed_countries': true,
            'pu': true,
            'lang': true,
            'lon': true,
            'lat': true,
            'storeurl': true,
            'c1': true,
            'c2': true,
            'c3': true,
            'pub_hash': true,
            'pub_clickid': true,
            'pub_value': true
        };
        this.baseUrl = baseUrl;
        this._getMetaContent = function(name) {
            try {
                var meta = window.top.document.getElementsByTagName('meta');
                for (var i = 0; i < meta.length; i++) {
                    if (meta[i].hasAttribute('name') && meta[i].getAttribute('name').toLowerCase() === name) {
                        var info = meta[i].getAttribute('content');
                        return instance._getSafeSizeSubString(info)
                    }
                }
            } catch (e) {}
            return ''
        };
        this._getWidth = function() {
            return window.innerWidth || document.documentElement.clientWidth || document.body.clientWidth
        };
        this._getHeight = function() {
            return window.innerHeight || document.documentElement.clientHeight || document.body.clientHeight
        };
        this._getSafeSizeSubString = function(str) {
            var indexToCut = Math.max(str.indexOf(' ', 256), str.indexOf(',', 256));
            if (indexToCut > 384 || indexToCut < 20) {
                indexToCut = 256
            }
            return str.substring(0, indexToCut)
        };
        this._getTitle = function() {
            var title = document.title;
            if (isInIframe) {
                try {
                    title = window.top.document.title
                } catch (e) {
                    title = ''
                }
            }
            return instance._getSafeSizeSubString(title)
        };
        this._getReferrer = function() {
            var referrer = document.referrer;
            if (isInIframe) {
                try {
                    referrer = window.top.document.referrer
                } catch (e) {
                    referrer = ''
                }
            }
            return instance._getSafeSizeSubString(referrer)
        };
        this.build = function() {
            if (typeof zoneSett.url !== 'string') {
                this.baseUrl = this.baseUrl + 'r=' + zoneSett.r
            }
            if (typeof adcashMacros === 'object') {
                for (var key in adcashMacros) {
                    if (adcashMacros.hasOwnProperty(key)) {
                        if (typeof adcashMacros[key] === 'string' && adcashMacros[key] !== '' && adcashMacros[key].length > 0) {
                            if (typeof allowedParams[key] === 'boolean' && allowedParams[key] === true) {
                                this.baseUrl = this.baseUrl + (this.baseUrl.indexOf('?') > 3 ? '&' : '?') + key + '=' + encodeURIComponent(adcashMacros[key])
                            }
                        }
                    }
                }
            }
            var cdnDomain = urls.cdnUrls[urls.cdnIndex];
            var cdnDomainToSend = cdnDomain.substring(2);
            return this.baseUrl + '&cbrandom=' + rand + '&cbiframe=' + isInIframe + '&cbWidth=' + instance._getWidth() + '&cbHeight=' + instance._getHeight() + '&cbtitle=' + encodeURIComponent(instance._getTitle()) + '&cbref=' + encodeURIComponent(instance._getReferrer()) + '&cbdescription=' + encodeURIComponent(instance._getMetaContent('description')) + '&cbkeywords=' + encodeURIComponent(instance._getMetaContent('keywords')) + '&cbcdn=' + encodeURIComponent(cdnDomainToSend)
        }
    };
    this.getRand = function() {
        return (typeof CTABPu !== 'object') ? rand : CTABPu.getRand()
    };
    this.loader = function(event) {
        if (typeof window['jonIUBFjnvJDNvluc' + self.getRand()] === 'function') {
            window['jonIUBFjnvJDNvluc' + self.getRand()](event);
            self.uniformDetachEvent(self.browser.getEventName(), self.loader)
        }
    };
    this.convertSecondsToMilliseconds = function(timeInSeconds) {
        var calculatedDelay = timeInSeconds;
        calculatedDelay = (calculatedDelay << 10) - calculatedDelay * 24;
        return calculatedDelay
    };
    this.getUrlQueryStringParameters = function(url) {
        var params = {};
        var x = url.split('?');
        if (1 in x) {
            var paramsRaw = x[1].split('&');
            for (var i in paramsRaw) {
                var parts = paramsRaw[i].split('=');
                if (0 in parts && 1 in parts) {
                    params[parts[0]] = parts[1]
                }
            }
        }
        return params
    };
    this.replaceQueryStringParametersInUrl = function(url, parameters) {
        var urlWithoutQueryString = url.split('?')[0];
        var urlParameters = self.getUrlQueryStringParameters(url);
        for (var i in parameters) {
            urlParameters[i] = parameters[i]
        }
        var queryString = self.buildQueryString(urlParameters);
        return urlWithoutQueryString + ((queryString.length) ? '?' + queryString : '')
    };
    this.buildQueryString = function(parameters) {
        var queryStringParts = [];
        for (var i in parameters) {
            queryStringParts.push(i + '=' + parameters[i])
        }
        return queryStringParts.join('&')
    };
    this.AdcashStorage = {
        isSupported: function() {
            try {
                return 'localStorage' in window && window['localStorage'] !== null
            } catch (e) {
                return false
            }
        },
        set: function(name, value, seconds, saveEverywhere) {
            var expires = '';
            if (seconds) {
                var date = new Date();
                date.setTime(date.getTime() + (seconds * 1000));
                expires = '; expires=' + date.toGMTString()
            }
            if (this.isSupported()) {
                localStorage.setItem(name, value)
            }
            if (saveEverywhere || !this.isSupported()) {
                document.cookie = name + '=' + value + expires + '; path=/'
            }
        },
        get: function(name) {
            if (this.isSupported()) {
                var ret = localStorage.getItem(name);
                switch (ret) {
                    case 'true':
                        return true;
                    case 'false':
                        return false;
                    default:
                        return ret
                }
            } else {
                var nameEQ = name + '=';
                var ca = document.cookie.split(';');
                for (var i = 0; i < ca.length; i++) {
                    var c = ca[i];
                    while (c.charAt(0) === ' ') {
                        c = c.substring(1, c.length)
                    }
                    if (c.indexOf(nameEQ) === 0) {
                        ret = c.substring(nameEQ.length, c.length);
                        switch (ret) {
                            case 'true':
                                return true;
                            case 'false':
                                return false;
                            default:
                                return ret
                        }
                    }
                }
            }
            return false
        }
    };
    this.randomString = function(length) {
        return Math.round((Math.pow(36, length + 1) - Math.random() * Math.pow(36, length))).toString(36).slice(1)
    };
    this.getWindowInfo = function() {
        return {
            height: window.outerHeight || document.documentElement.clientHeight,
            width: window.outerWidth || document.documentElement.clientWidth,
            left: window.screenLeft || window.screenX || 0,
            top: window.screenTop || window.screenY || 0
        }
    };
    if (!Date.now) {
        Date.now = function() {
            return new Date().getTime()
        }
    }
    this.currentTime = Date.now();
    this.init = function() {
        if (typeof zoneSett.r !== 'undefined' && zoneSett.r.length > 4) {
            var i;
            for (i = 0; i < adserverUrls.adcashUrls.length; i++) {
                acPrefetch(adserverUrls.adcashDomain[i])
            }
            if (typeof CTABPu !== 'undefined') {
                if (typeof CTABPu.loader === 'undefined') {
                    self.uniformAttachEvent(self.browser.getEventName(), self.loader)
                } else {
                    if (typeof urls.events !== 'undefined') {
                        for (i = 0; i < urls.events.length; i++) {
                            if (urls.events[i] !== self.browser.getEventName()) {
                                CTABPu.uniformDetachEvent(urls.events[i], CTABPu.loader)
                            }
                        }
                    }
                }
            } else {
                self.uniformAttachEvent(self.browser.getEventName(), self.loader)
            }
            var adsScriptAttached = false;
            var adsScriptAttach = function() {
                if (adsScriptAttached) {
                    return
                }
                adsScriptAttached = true;
                self.attachAdserverScript();
                if (!self.browser.operaMini && !self.browser.ucSpeed) {
                    self.attachScript(self.browser.getUrl())
                }
            };
            window.adcashUfp = {};
            adsScriptAttach()
        }
    }
};
CTAMAT.init();
                                    

Executed Writes (3)

#1 JavaScript::Write (size: 630, repeated: 1) - SHA256: 661f5c2a5614fc9412b9d41b59d0e7d1844265049e51ce3af66ff2e6c63ab101

                                        < a href = "http://www.adnetworkperformance.com/a/display.php?stamat=m%7C%2C%2CQ3YrY2MitGU3B09GH0dEdHP3xP.f32%2CaW8rr1iXYDTET2nfhrZALuEfRVc78MESOMKkIpp2PoZUryDlFE_uhSlJv0W-Ms-oIZG4FWLaMF_bt-9POx7aTCRppVaOdZax6iIGM_x8tdJTEF4CGI5G0rP0KTZQ45FLDnLgbAkmgNLkHj6BA5Idp54DLDdnHQuFgrBEZt4jRxbLilEy18biOio89316xV1iQFO59c_5-Pj3o0OtehXtvBKVQ2QHPwHXHpdu2idoOvHkQ_z_CnMGbBNDHoEI_ipZT3gB7CctAcJEMYpncng4ztq5SjOSqmI8F72vSluVS_Dhum7h9bK6ynvmujci3t6NwwX8nq0VfmlkJQvi2rWKjlnnsfDvji5dXeAxcY0dHow%2C"
target = "_blank" > < img border = "0"
src = "http://crrepo.com/extban/102829020/creatives/22273172/367c6e821a128304a6d6f42c1ee9ad5b_7015.png"
width = "100%" / > < /a>
                                    

#2 JavaScript::Write (size: 178, repeated: 1) - SHA256: 0a91daa725cd5be0eaf783a28917d57d59d393acc8b9237ad367b432f4c6cae0

                                        < a style = 'color: #fff; display: none; visibility: hidden; position:relative; left: -1000px; top: -1000px;'
href = 'http://www.adnetworkperformance.com/ad/visit.php?al=1' > & nbsp; < /a>
                                    

#3 JavaScript::Write (size: 1253, repeated: 1) - SHA256: 914714fbc3bf00e86d0805002f8b4a85c500b711076b930047d4e59f7d279a14

                                        < iframe width = "728"
height = "90"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
allowfullscreen = "true"
style = "border: medium none; padding: 0; margin: 0;"
sandbox = "allow-scripts allow-forms allow-popups allow-popups-to-escape-sandbox allow-pointer-lock allow-same-origin"
id = "5ad50c41bfd92"
frameborder = "0"
src = "http://www.adnetworkperformance.com/a/display.php?r=1596981&treqn=1752982041&runauction=1&crr=2263c43c2510e59146fd,,QklL_oymb-vKbphOaklLfklLvlkL_pjO6vf161909164b008971f7b&rtid=5ad50c41bfd92&cbrandom=0.9389632909903195&cbtitle=Watch%20NBA%20REPLAYS%2C%20Playoffs%2C%20Finals%202018%20-%20Full%20NBA%20Game%20Replays%2C%20Download%20%26%20Stream&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=Watch%20NBA%20Replays%20Online%20Free%20in%20HD%2C%20Watch%20and%20Download%202017%2F18%20Season%2C%20Playoffs%20And%20Finals%20full%20replays%20online%20free.%20Watch%20NBA%20Live%20Stream%20in%20HD%20free&cbkeywords=NBA%20Replays%2C%20NBA%20Replay%2C%20NBA%20Full%20Game%20Replay%2C%20NBA%20Full%20Replays%2C%202018%20NBA%20Playoffs%20Replays%2C%20NBA%20Archived%20Games%2C%20TVREX%2C%20TVREX%20NBA%20Replays%2C%20NBA%20Stream%2C%20NBA%20Live%20Stream%2C%20NBA%20Finals%20Replay&cbref="
scrolling = "no" > < /iframe>
                                    


HTTP Transactions (144)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/html; charset="UTF-8"
                                        
Set-Cookie: mediaplanBAK=R129289740; path=/; expires=Mon, 16-Apr-2018 21:47:58 GMT mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:06:31 GMT
Date: Mon, 16 Apr 2018 20:49:04 GMT
Content-Length: 16502
Server: Apache
X-Powered-By: PHP/7.0.27
Vary: Cookie,Accept-Encoding
Content-Encoding: gzip
X-IPLB-Instance: 17338


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16502
Md5:    dd001e666a4ca285d9018077aa014a68
Sha1:   45c37caece41dc78550090d7f733dca5d4da7cc8
Sha256: 4c9b5f4adee701ca6e336247bc37d6e0afc096ace44ababdcbd6a19dfc9f8d1d
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 16 Apr 2018 19:45:08 GMT
Expires: Mon, 16 Apr 2018 21:45:08 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Age: 3836
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /wp-content/uploads/2016/01/favicon.ico%22 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531

                                         
                                         94.23.64.17
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:59 GMT
Date: Mon, 16 Apr 2018 20:49:04 GMT
Server: Apache
Content-Length: 253
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   253
Md5:    99185c1e7c669fbbc6961ad1ebdc73f5
Sha1:   101f64d8dd21beb0085f9271a66ad6e9b429febf
Sha256: 5ef49739dd88082f1d284d91f268e536dde193af808d8ab627df400e305fe390
                                        
                                            GET /r/collect?v=1&_v=j66&a=2046370559&t=pageview&_s=1&dl=http%3A%2F%2Ftvrex.net%2F&ul=en-us&de=UTF-8&dt=Watch%20NBA%20REPLAYS%2C%20Playoffs%2C%20Finals%202018%20-%20Full%20NBA%20Game%20Replays%2C%20Download%20%26%20Stream&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=115863223&gjid=1226138485&cid=318879639.1523911745&tid=UA-73687927-1&_gid=1727226861.1523911745&_r=1&z=303223002 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Mon, 16 Apr 2018 20:49:05 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=1.9.9.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:59 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Fri, 03 Nov 2017 11:54:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 11695
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11695
Md5:    3e81a1ca4708facaf71d62703de096b2
Sha1:   69fd51848706f94fd5ce1dd5395206c66c9d778e
Sha256: 461eba454183f983c919ee69c91f841afb30b91bde64bd5a5cb6e0ccebffe999
                                        
                                            GET /wp-content/themes/goodnews5/style.css?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:50:59 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Thu, 08 Mar 2018 09:40:01 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 285
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   285
Md5:    0f13f216b581a80f471a2e09885c005a
Sha1:   cb5547f776082c113ae01735416597de7b77fcf6
Sha256: a62738b866e74a2c9158d8edd861b5981507da2a4dc4d4b41eae6cd49042deb7
                                        
                                            GET /wp-content/themes/goodnews5/css/media.css?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 6521
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6521
Md5:    129bcc8c8e7fb5338ed08aef056ca698
Sha1:   2347333d19c207ba65e4b3e553aa7b36bb6c4205
Sha256: fdf28427a43a24d854d2e267284a519adb9ebcd58b7a7caa19db446362596b7c
                                        
                                            GET /wp-content/plugins/show-hidecollapse-expand/assets/css/bg-show-hide.css?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 22:14:51 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 1535
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1535
Md5:    e5ab05ccbbbf4145163382f7961f9217
Sha1:   b07fd37c45d7b0d6d02650579487740d3436a169
Sha256: aed9020e2fdd3fad99093559d0cd064aaf47f637f1ec45ebebf802dd0658e4b1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         80.239.159.9
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 13 Apr 2018 15:54:33 GMT
Etag: 77BB2A9ECD1F1FE225C63EA44A6C468DFBF6C586
X-OCSP-Responder-ID: rmdccaocsp25
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=1675
Expires: Mon, 16 Apr 2018 21:17:00 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    7ad6942f9fffd23323bdcda917d368ab
Sha1:   77bb2a9ecd1f1fe225c63ea44a6c468dfbf6c586
Sha256: ddb2cde93212f3ebd9c1d6dd3a2dbcd447f3e24deb715a371384009892943d8f
                                        
                                            GET /pop.js HTTP/1.1 
Host: cdn.popcash.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         94.31.29.128
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 16 Apr 2018 20:49:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dcf805f6045615a5a6c71fe2d672ef47d1523889895; expires=Tue, 16-Apr-19 14:44:55 GMT; path=/; domain=.popcash.net; HttpOnly
Cache-Control: max-age=86400
Etag: W/"5ad4b1a7-10bdd"
Expires: Tue, 17 Apr 2018 20:49:05 GMT
Last-Modified: Mon, 16 Apr 2018 14:22:31 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
CF-RAY: 40c76ec65250273e-FRA
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29888
Md5:    638803cefd1e7134e9fb550dcd204e1c
Sha1:   4526f1113965830a31a745d1567189aacf72f023
Sha256: 9f6491f404600ace06a205368a092ea0594a1ecfb3ecd5efaa73e5f4d417d918
                                        
                                            GET /wp-content/themes/goodnews5/css/main.css?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 40081
X-IPLB-Instance: 17335


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   40081
Md5:    ee25c43a060c524f586f24d074d887ea
Sha1:   df01e012860bd50ac4bd75137e46510c10c30747
Sha256: 430739a482bbc918fc06f8281e2bab0c6d2465ff8284e2ca50b4272a5e848ff0
                                        
                                            GET /wp-content/plugins/show-hidecollapse-expand/assets/css/genericons/genericons.css?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 22:14:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 16626
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16626
Md5:    ea19d75f08540ceb9f7cb59154a7e2d6
Sha1:   203dbcbef665d369a6eaec965797bcd7bf4b62be
Sha256: dff25245e52f9ab378abbeae976d9794235b69fcbe4cd6199ff6700eda86ce67
                                        
                                            GET /wp-content/plugins/extended-categories-widget/4.2/css/avh-ec.widget.css?ver=3.10.0-dev.1 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 22:14:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 121
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   121
Md5:    632f2928a0afac4b09cc1daa27ca2eab
Sha1:   46d08c06e56518af3807583cb9e6b1aabe3fb7f5
Sha256: c30ee0f7d778c16cda34cb61242d4abe74b06fd4174b89aac646afd25bba2c99
                                        
                                            GET /ZaTTvAt.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:09 GMT
Etag: "1dede11eee0ea3065ca9c7ed1d6b3b3e"
Cache-Control: public, max-age=31536000
Content-Length: 8905
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 18449827
Connection: keep-alive
X-Served-By: cache-iad2145-IAD, cache-ams4436-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.533782,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   8905
Md5:    1dede11eee0ea3065ca9c7ed1d6b3b3e
Sha1:   63e7d791c70aecdd6e827c7c3431979cfb0cb130
Sha256: 6baec0b8fa5a81c345dc6c664d2f8f434fb0d2153718eb2be2166e5317cf9526
                                        
                                            GET /1B2LieQ.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:02 GMT
Etag: "999cea018773b148e32dd20b8106c352"
Cache-Control: public, max-age=31536000
Content-Length: 10833
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 18447866
Connection: keep-alive
X-Served-By: cache-iad2142-IAD, cache-ams4444-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.526868,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   10833
Md5:    999cea018773b148e32dd20b8106c352
Sha1:   2247c94e657e6b6fe95f993abd176456eef72f9e
Sha256: db5183e47e2561e0d810e95be93564ffb133a8f40fec9a850f5fe39e604ac570
                                        
                                            GET /wp-content/themes/goodnews5/css/plugins.css?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:04:58 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 58892
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   58892
Md5:    6a6ead38674026e838a6c93158522773
Sha1:   d004eacdbb097f4f42e872d77f2989c0d0e872af
Sha256: 1afea716cf38321b09fa93a73aab88b0f8ae70818d5ac111d83d71744350b7c2
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:34 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 33766
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33766
Md5:    d417f4d673009b01654915bbf1f4f872
Sha1:   f432ea8e89e5f4ef50e506019899e539a068f415
Sha256: 24560d81ded58e8befabf32ff51f5b6ae6f21eead0a5f87c255e3b47b988d1cc
                                        
                                            GET /wp-content/themes/goodnews5/css/black.css?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:59 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 6104
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6104
Md5:    9653ff48f51d636b1b12d57491c109ae
Sha1:   70ad10fdabe95ae8728f3695fa3b57968153f82e
Sha256: c87b6f0ee82d0df974bc7db2447ef648e716e5d1c369772635798c2b02c07c57
                                        
                                            GET /RpF3amJ.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:00 GMT
Etag: "92ce672db3909d7cc5f83026ed331721"
Cache-Control: public, max-age=31536000
Content-Length: 7408
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10835269
Connection: keep-alive
X-Served-By: cache-iad2126-IAD, cache-ams4445-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 2, 1
X-Timer: S1523911746.533811,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   7408
Md5:    92ce672db3909d7cc5f83026ed331721
Sha1:   a7c4ac0f538a5fa3c2566acbcb684d26a3a959ef
Sha256: 1daace3c6d5ef557b77a450c80bbf8bd4b7791d7cd9628dbfded26090b870e88
                                        
                                            GET /PKXfzFb.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:41 GMT
Etag: "0b0abf2d7678ef3c26df70d8617cc10a"
Cache-Control: public, max-age=31536000
Content-Length: 9985
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 4829152
Connection: keep-alive
X-Served-By: cache-iad2137-IAD, cache-ams4442-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 9, 2
X-Timer: S1523911746.533198,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   9985
Md5:    0b0abf2d7678ef3c26df70d8617cc10a
Sha1:   9e6d7e5c3ade00a60d4197133f74958c1362640e
Sha256: 601abc8049c82437fd0d147cacc0af8270ffd4cee60cbb8a7444e2e522f73985
                                        
                                            GET /9poCmBL.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:03 GMT
Etag: "089a72cc9b22a88954faf52b41cb13f8"
Cache-Control: public, max-age=31536000
Content-Length: 11102
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 17928453
Connection: keep-alive
X-Served-By: cache-iad2120-IAD, cache-ams4125-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 148
X-Timer: S1523911746.534117,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   11102
Md5:    089a72cc9b22a88954faf52b41cb13f8
Sha1:   692b6312c6bdfbe64232e160b63e4c67b6ddc926
Sha256: 6bc2e28b3042735f87f6b6940e69272cff7a43be63b5ac8209fe188e909ca217
                                        
                                            GET /EVVastT.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:20 GMT
Etag: "447a818fbd3f173d1d0e9a99299a9a49"
Cache-Control: public, max-age=31536000
Content-Length: 4015
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10937449
Connection: keep-alive
X-Served-By: cache-iad2139-IAD, cache-ams4428-AMS
X-Cache: MISS, HIT
X-Cache-Hits: 0, 3
X-Timer: S1523911746.534161,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit gray+alpha, non-interlaced
Size:   4015
Md5:    447a818fbd3f173d1d0e9a99299a9a49
Sha1:   3135a196d81295f15cf19b28999d74f37af4db0a
Sha256: 23fe46c7074969a274067ae7ad8e3752f28a3348012fe8dcc20c2d05d15d08b6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.9
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 13 Apr 2018 23:02:22 GMT
Etag: A894300165C543FDA369AEB8A0E3CF3CE5B27EFE
X-OCSP-Responder-ID: rmdccaocsp5
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=601
Expires: Mon, 16 Apr 2018 20:59:06 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    dc8c04035543db4b5fe9a85991b4c045
Sha1:   a894300165c543fda369aeb8a0e3cf3ce5b27efe
Sha256: d247e684293f9c5ab1c1c2bac5aeaf01dbe0e053d120b2ea0c247bf7d2137405
                                        
                                            GET /uiT6LZV.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:08 GMT
Etag: "3dd8e7402f0fe19a646fdd19bb281692"
Cache-Control: public, max-age=31536000
Content-Length: 5196
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10322231
Connection: keep-alive
X-Served-By: cache-iad2151-IAD, cache-ams4445-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.714449,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   5196
Md5:    3dd8e7402f0fe19a646fdd19bb281692
Sha1:   e416a7a2347db90dcfce2f425aee47d9862026e4
Sha256: 515a41b0622c2641b9e3d56e2be3247b825e3109683c42f73b1fb28186808d0f
                                        
                                            GET /glh7tDS.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:23 GMT
Etag: "3ab9a1be9e9f1a99a70d5c383181c99f"
Cache-Control: public, max-age=31536000
Content-Length: 8300
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 5236101
Connection: keep-alive
X-Served-By: cache-iad2142-IAD, cache-ams4444-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 29, 2
X-Timer: S1523911746.712471,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   8300
Md5:    3ab9a1be9e9f1a99a70d5c383181c99f
Sha1:   d6f9885a1ebc9c808b4c49a7e04ef0d21e14e28f
Sha256: c6a3e7d073bc9c7c21e8451ef92230323e5d60bfa0c499983704d15c8083f1b1
                                        
                                            GET /4rMpMsV.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:50:59 GMT
Etag: "f2f3c4e4b7c6c08deb4c0baf957d94d4"
Cache-Control: public, max-age=31536000
Content-Length: 8635
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 1864212
Connection: keep-alive
X-Served-By: cache-iad2149-IAD, cache-ams4442-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 2
X-Timer: S1523911746.714001,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   8635
Md5:    f2f3c4e4b7c6c08deb4c0baf957d94d4
Sha1:   87eb9abc14b99461d41f168ab39fb1f310d63670
Sha256: 04cc9614597b87074b17ad69fecd01621db2f683fb8dd02e60bb18666c064821
                                        
                                            GET /VDv8ntK.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:14 GMT
Etag: "82f29a10b0b9338d8615f9a66c269198"
Cache-Control: public, max-age=31536000
Content-Length: 11219
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10750581
Connection: keep-alive
X-Served-By: cache-iad2137-IAD, cache-ams4125-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 8, 156
X-Timer: S1523911746.714967,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   11219
Md5:    82f29a10b0b9338d8615f9a66c269198
Sha1:   f2cd124d0ade435ba83556b8ab3cb51ffc06a68a
Sha256: 9a5f2a6fe62f50e89859c7d712a3fbbaa181c0684f138f17601fd16306de281d
                                        
                                            GET /0dqVPuU.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:17 GMT
Etag: "32cd975091b51f67cbed7e0a2576f26e"
Cache-Control: public, max-age=31536000
Content-Length: 11246
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10837371
Connection: keep-alive
X-Served-By: cache-iad2143-IAD, cache-ams4428-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 2
X-Timer: S1523911746.715133,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   11246
Md5:    32cd975091b51f67cbed7e0a2576f26e
Sha1:   cac3aeaccc1207e0cee8d73593ef614e1b86624e
Sha256: ce01795a3f6a068052c721ff33661f5efcbf95d2400cc625f3590d9cbee9c76d
                                        
                                            GET /Ze2GGX0.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:26 GMT
Etag: "92aaa0a661dffaaf70324d031908c43c"
Cache-Control: public, max-age=31536000
Content-Length: 11690
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10664317
Connection: keep-alive
X-Served-By: cache-iad2149-IAD, cache-ams4436-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 19, 1
X-Timer: S1523911746.712806,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   11690
Md5:    92aaa0a661dffaaf70324d031908c43c
Sha1:   b31324af8f00ca534c1450aeca15c149765fd23b
Sha256: be07298e6e532f33cdd022d007b850348b1069eb9b18d6ad03f2b8555f90b72b
                                        
                                            GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.11.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:04:58 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 5225
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5225
Md5:    c76d2f0586f39d1e85627d721a21d3ca
Sha1:   fcbc766a5a738506732303acbdae1ec93275c7b0
Sha256: c9cae8877691848455f967ff2b168076c243c6746a359c206644fd620077d665
                                        
                                            GET /wp-content/plugins/wp-hide-post1/public/js/wp-hide-post-public.js?ver=2.0.10 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:54:00 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 22:13:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 479
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   479
Md5:    5850a4d6be478b5a5c29526a957840c4
Sha1:   1854bff2c967f028cf8c1f53b3c7878fb605e329
Sha256: 654a9a69300dd841ea2bc14d36c346377cee298b126463cc844fb26929260843
                                        
                                            GET /wp-includes/js/jquery/ui/effect-highlight.min.js?ver=1.11.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 451
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   451
Md5:    e3ae8b177cea06e209e5c520fdf4191d
Sha1:   cab624402bd30a5c0c1b3b11c9ebaeffe4e8ea03
Sha256: 4144bd03be3fb7bf629c1caf22ad6de84bf5526c6d0905258fb07a07fa679f0e
                                        
                                            GET /KtSDfDX.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:50:56 GMT
Etag: "371b7f6a4dc9a52c59f31046d3672dcb"
Cache-Control: public, max-age=31536000
Content-Length: 6880
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 18445594
Connection: keep-alive
X-Served-By: cache-iad2126-IAD, cache-ams4445-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.743260,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   6880
Md5:    371b7f6a4dc9a52c59f31046d3672dcb
Sha1:   6858ea222584c8b29889efcd318a24fb9defb4c0
Sha256: 0b787f5192e222fbb9ae7da576fc41a25da7012704de5b3a3f1d11677c9b8a21
                                        
                                            GET /X4UagVO.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:40 GMT
Etag: "1b025996cdfdd6be6af81d07e7e41fc1"
Cache-Control: public, max-age=31536000
Content-Length: 9734
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 3273536
Connection: keep-alive
X-Served-By: cache-iad2146-IAD, cache-ams4442-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 34, 2
X-Timer: S1523911746.749146,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   9734
Md5:    1b025996cdfdd6be6af81d07e7e41fc1
Sha1:   8f2f425f809f79f4bf88201597e534b2c4ec4f0b
Sha256: cd8f51cbb479f9e308122ff28333917c2da4e233685dd2c51f4ba7cf714d0f1c
                                        
                                            GET /B6Gyq3Z.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:22 GMT
Etag: "daa0063d175fe01a0bf3d557c5abd152"
Cache-Control: public, max-age=31536000
Content-Length: 12120
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 3852087
Connection: keep-alive
X-Served-By: cache-iad2144-IAD, cache-ams4428-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.750218,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   12120
Md5:    daa0063d175fe01a0bf3d557c5abd152
Sha1:   ab648dabea8f5aedfb83cbe0f9180515dcaa98c1
Sha256: a16d64d8a882bebeb1084e211ba548290f3fbf972fe296c68b7fa83c4e665f0d
                                        
                                            GET /4ZFUqRD.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:29 GMT
Etag: "6eb4abc7d6e43c393d7841b965036391"
Cache-Control: public, max-age=31536000
Content-Length: 11711
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 5395567
Connection: keep-alive
X-Served-By: cache-iad2144-IAD, cache-ams4444-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 2
X-Timer: S1523911746.748828,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   11711
Md5:    6eb4abc7d6e43c393d7841b965036391
Sha1:   30ab9031dff109d6bc170556a9be4f3816e2f203
Sha256: 27b3b920dc582ccafd21e20b91c6c2662f8c170ceb209fd206ed20dea1a8c426
                                        
                                            GET /Frs8DtL.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:38 GMT
Etag: "eb2a5676ef3c1219bd2a2b6854578fd0"
Cache-Control: public, max-age=31536000
Content-Length: 8878
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10234661
Connection: keep-alive
X-Served-By: cache-iad2132-IAD, cache-ams4436-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.749900,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   8878
Md5:    eb2a5676ef3c1219bd2a2b6854578fd0
Sha1:   241424282942b531b95790c62400a0c6f7709cc2
Sha256: 42c5abecd7970879fb655a013872beb475d969c6362b219cf6e481a002d69923
                                        
                                            GET /P1tPEpC.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:18 GMT
Etag: "7baa7030e0e840d16cc55ce87d1fce7b"
Cache-Control: public, max-age=31536000
Content-Length: 11309
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 4467902
Connection: keep-alive
X-Served-By: cache-iad2126-IAD, cache-ams4125-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 153
X-Timer: S1523911746.750033,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   11309
Md5:    7baa7030e0e840d16cc55ce87d1fce7b
Sha1:   21f2fc597cd0a9c27ea00d8ee60839c613419d4e
Sha256: 7aa43834c47f797eb1745e272b185af5c99c9025d863bb5f045bdc464e85ab05
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Fri, 13 Apr 2018 23:02:22 GMT
Expires: Fri, 20 Apr 2018 23:02:22 GMT
Etag: 9A4AE6F829D3348ADF2720CD48E61C9B9CE476C7
Cache-Control: max-age=352996,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp31
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9cc87de26b492fbe5c65823a11ca4645
Sha1:   9a4ae6f829d3348adf2720cd48e61c9b9ce476c7
Sha256: 51af2063e3b2d1586fece763a823624f20d5ef3b1b33f4cbe16211b28160f806
                                        
                                            GET /BuXlW6e.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:31 GMT
Etag: "17c7be2e64227bf2932698bf1a92a060"
Cache-Control: public, max-age=31536000
Content-Length: 4943
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 12767439
Connection: keep-alive
X-Served-By: cache-iad2150-IAD, cache-ams4445-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.772632,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   4943
Md5:    17c7be2e64227bf2932698bf1a92a060
Sha1:   d5b11de3a2f352b4c065a10c3625e0d13c48160d
Sha256: 6c638316300c177525e916bcf9675c7a79822c2e5a70096c3cb29e2658c18ef0
                                        
                                            GET /wp-includes/js/jquery/ui/effect-fold.min.js?ver=1.11.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:17 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 607
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   607
Md5:    2776fcd6d45e46863c5637c0d7adc48e
Sha1:   6b6defa0b3cc9790ed7ade552b2d9628022ba109
Sha256: 535c5574b77396792e607fe6233dda1f15672ef614b52556c4ed4b89c18248ab
                                        
                                            GET /wp-includes/js/jquery/ui/effect-slide.min.js?ver=1.11.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 566
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   566
Md5:    fb87b2b33e71aad44774af34b4300f7b
Sha1:   46233648466864fcf1be592779e4e32b10caeeba
Sha256: d4b6df0cd60a582185636f768a9e8d0a8bc872084f84db404d10dc0bcc24b37a
                                        
                                            GET /wp-includes/js/jquery/ui/effect-blind.min.js?ver=1.11.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 648
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   648
Md5:    769b021ba1c3c513bbd55c8cc7d59ec3
Sha1:   8f47b08a29b9e0d0ee16ec1d8ef1e915aef279f5
Sha256: c53c5df316746e00d17354e9ca61fbb2f08264b8649e2d1f8c060690729398ca
                                        
                                            GET /wp-content/plugins/show-hidecollapse-expand/assets/js/bg-show-hide.js?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:54:00 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 22:14:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 902
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   902
Md5:    a55424dc9d13ea081b3a6f1634d8d69e
Sha1:   4c2536d876e09487c56047e22973c0c93ea07eb1
Sha256: df8beb0360b4c92ee8787356b3677ff0d85b93c824682fe4150c8c18bd480429
                                        
                                            GET /651AtvO.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:06 GMT
Etag: "a6d3838a2df7011399b6afe3d79cf4e8"
Cache-Control: public, max-age=31536000
Content-Length: 7848
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 4018146
Connection: keep-alive
X-Served-By: cache-iad2145-IAD, cache-ams4444-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.786527,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   7848
Md5:    a6d3838a2df7011399b6afe3d79cf4e8
Sha1:   2346fed030468c42aa502a5483bf986911720e62
Sha256: edf6543e7f3e0ea41165408a00ebb99eaa56f089f914a8be0aa50ed81e01823d
                                        
                                            GET /SEwO6KA.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:05 GMT
Etag: "c355a9ed08197f4689295d7662e2f5aa"
Cache-Control: public, max-age=31536000
Content-Length: 10097
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 6257700
Connection: keep-alive
X-Served-By: cache-iad2135-IAD, cache-ams4442-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 81, 1
X-Timer: S1523911746.784956,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   10097
Md5:    c355a9ed08197f4689295d7662e2f5aa
Sha1:   1593eba660e45c1f7ae43fc549631029e58ad943
Sha256: 49c28efdc12c376b897cd5e989312b43ffee6b82d9c8669c09c8e9856880294f
                                        
                                            GET /1p3nEZu.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:15 GMT
Etag: "59dbb11ec0292dae4adf7f889e8ce6f6"
Cache-Control: public, max-age=31536000
Content-Length: 9901
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10318506
Connection: keep-alive
X-Served-By: cache-iad2143-IAD, cache-ams4428-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 31, 1
X-Timer: S1523911746.787362,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   9901
Md5:    59dbb11ec0292dae4adf7f889e8ce6f6
Sha1:   8e1407e521cb10fd7032071439c0fe79504de39f
Sha256: ad13c54edd576ef3301a53e0a68f794068b3e4d5a00e7e7c5d0e56ff5b115d72
                                        
                                            GET /XvqBSFK.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:24 GMT
Etag: "986f4c87549e159b89bd5b30b123b842"
Cache-Control: public, max-age=31536000
Content-Length: 13413
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 5998664
Connection: keep-alive
X-Served-By: cache-iad2128-IAD, cache-ams4125-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 184
X-Timer: S1523911746.787688,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   13413
Md5:    986f4c87549e159b89bd5b30b123b842
Sha1:   b8dd928f997d938bdd28dd69b56dc7541c581c70
Sha256: 7351e549dea93fc1a0ef4d92de945a8b3e14d61ab8c0d198326d7e5d9b4d0b7b
                                        
                                            GET /VgjbiWm.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:37 GMT
Etag: "f3fbeca1b0d2dee5034838f690e33b01"
Cache-Control: public, max-age=31536000
Content-Length: 12000
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10919576
Connection: keep-alive
X-Served-By: cache-iad2140-IAD, cache-ams4436-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.787113,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   12000
Md5:    f3fbeca1b0d2dee5034838f690e33b01
Sha1:   cebd8958636d747772b9a363e85569dd0f19c6f4
Sha256: 9a581adcfb63a90b6dfad5d10b86167a53d8aa449ce579614dc05fcad9d317e4
                                        
                                            GET /M1vLzwN.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:35 GMT
Etag: "6d79cc7d7e7609b87d70f9955f933ed1"
Cache-Control: public, max-age=31536000
Content-Length: 10501
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 18960679
Connection: keep-alive
X-Served-By: cache-iad2132-IAD, cache-ams4445-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.798656,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   10501
Md5:    6d79cc7d7e7609b87d70f9955f933ed1
Sha1:   ed68ec733c94618e4a92d932e03833abf29ce011
Sha256: df3b5bab758ac485d6cb547b567555ab084a2aeab5126eb7ad50364769aeef62
                                        
                                            GET /fLa6krI.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:50:57 GMT
Etag: "25b3cd93d96bcc8868a963bae1d6f7f1"
Cache-Control: public, max-age=31536000
Content-Length: 7367
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 2846274
Connection: keep-alive
X-Served-By: cache-iad2143-IAD, cache-ams4442-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 3
X-Timer: S1523911746.818900,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   7367
Md5:    25b3cd93d96bcc8868a963bae1d6f7f1
Sha1:   60abc8b418bafbd2380fbde9732cbb484f6007e9
Sha256: 73779c9969a2a4e2fcd8223864150b78e6a5e496929c4082b6e4c227c0bf502a
                                        
                                            GET /001dpsM.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:34 GMT
Etag: "0c01b34428d475306e5bae441e37306e"
Cache-Control: public, max-age=31536000
Content-Length: 8653
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 8920885
Connection: keep-alive
X-Served-By: cache-iad2146-IAD, cache-ams4444-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.816970,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   8653
Md5:    0c01b34428d475306e5bae441e37306e
Sha1:   d87a93f9a4d9080ad4d1dd0c8f1abd9176be2e71
Sha256: 0ed92e2e58b5db432b97334f0ba5330848e0ece4f5e11c6905649b638d560b41
                                        
                                            GET /9M775dI.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:32 GMT
Etag: "711bc4eebeb5a1913b0fa949326e55a4"
Cache-Control: public, max-age=31536000
Content-Length: 9101
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 10837370
Connection: keep-alive
X-Served-By: cache-iad2134-IAD, cache-ams4125-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 171
X-Timer: S1523911746.821397,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   9101
Md5:    711bc4eebeb5a1913b0fa949326e55a4
Sha1:   69b7478ab338aa48070dcc0d834142b456cdb72e
Sha256: 415c706d71e2545e52ceeedcbaa7ec4f1f92087ef53568e4ef14472474a7803e
                                        
                                            GET /NfvLz4g.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:12 GMT
Etag: "12cd5cf62a8290897cae116363d4f78f"
Cache-Control: public, max-age=31536000
Content-Length: 10343
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 2694038
Connection: keep-alive
X-Served-By: cache-iad2129-IAD, cache-ams4428-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 2
X-Timer: S1523911746.821288,VS0,VE0
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   10343
Md5:    12cd5cf62a8290897cae116363d4f78f
Sha1:   f6beee11ac05122937b3e5aa6fe4957a06bbc537
Sha256: 0aec1e8065dfc9e4c80a84713854e2c1571a09faa552186322f46fb3e9e9ff7a
                                        
                                            GET /wp-content/themes/goodnews5/js/main.js?ver=1.0 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 12355
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12355
Md5:    1196b8e534b1c7711afcb40586a65791
Sha1:   1d7757b4fe53b57bc265e82c57a489028daf97e6
Sha256: b079384a3d5038c9e764daf94549945e33ed1c4009f0c6d860f2affd60cb183d
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:17 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 751
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   751
Md5:    7542039ce963ffd18ad4fb7be13bd2be
Sha1:   8385e433e8e65739fc27b6bd16b1a7ae71b11084
Sha256: a70bca1336a4ac7592ce631cbb22c9ebb01d60461d221ac7a46f91a4ccfd1255
                                        
                                            GET /wp-content/plugins/facebook-page-feed-graph-api/js/sdk.js HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Tue, 05 Dec 2017 06:59:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 248
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   248
Md5:    13ea0027290fec3942a06942d889ac13
Sha1:   c0e13d1509ca725cb3e986707336c43dda116bce
Sha256: fe538586b29adea9d27c36a24a5dd80ec3c9bdcb115d177d435f7f094c7e83c2
                                        
                                            GET /5pw1NIR.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         151.101.36.193
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 05 Mar 2015 17:51:11 GMT
Etag: "e4fa7a9f529e53ebe626d6a9ec6066fb"
Cache-Control: public, max-age=31536000
Content-Length: 12738
Accept-Ranges: bytes
Date: Mon, 16 Apr 2018 20:49:05 GMT
Age: 15083692
Connection: keep-alive
X-Served-By: cache-iad2143-IAD, cache-ams4436-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1523911746.821216,VS0,VE1
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0


--- Additional Info ---
Magic:  PNG image, 96 x 72, 8-bit/color RGBA, non-interlaced
Size:   12738
Md5:    e4fa7a9f529e53ebe626d6a9ec6066fb
Sha1:   4265e772799320033256724ef277eb021ba2a721
Sha256: 620f46e1f9356739166c60cd8dbe09136ad94fcaa329a7743c4eeb5dfac5b875
                                        
                                            GET /wp-content/themes/goodnews5/js/plugins.min.js?ver=1.0 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:17 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 46943
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   46943
Md5:    40eff7a50f7a1e8347ca841476490c81
Sha1:   c4bc6222dada0bcf2f714e48026ca1754a57a255
Sha256: ae457df6798466e50354bf5bc581222ad763ee06c93c3be7b23c10641c1a8942
                                        
                                            GET /a/display.php?r=1596981 HTTP/1.1 
Host: www.adnetworkperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         130.211.186.109
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: openresty
Date: Mon, 16 Apr 2018 20:49:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Referrer-Policy: no-referrer
Link: <//www.adnetworkperformance.com>; rel=dns-prefetch,<//www.adnetworkperformance.com>; rel=preconnect
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2390
Md5:    05e54cbabfd500ad2cdba2aa2cbeb326
Sha1:   002dc4c3e4ca3dd409d12fdab2a60fecf223ade8
Sha256: f5ca3e459690555090f87c6f1c7ea7a5ea3ceb8bc34d83511152510b326e648a

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/facebook-page-feed-graph-api/js/responsive.min.js HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Tue, 05 Dec 2017 06:59:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 376
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   376
Md5:    f246a58b1517977a46086a576f0ec473
Sha1:   ddb399d3be0e0f32511cfb4a9c3a158079edbb38
Sha256: 8244ce4997be6cf758e9a0ab5433ffae0e4ddd5d130555b8164f7e66c716bdcc
                                        
                                            GET /wp-content/uploads/2018/04/1-84-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:17 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Mon, 16 Apr 2018 05:16:38 GMT
Accept-Ranges: bytes
Content-Length: 7472
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7472
Md5:    d7150f3d506a77af932777afc72220c1
Sha1:   9cf3fc30f173a85bd5d80a99b2c632cd82aa341f
Sha256: 3d23912b8805ad91b4b2116d23460651d6e014b3e8cdaee545cbe32a4c485024
                                        
                                            GET /wp-content/uploads/2016/01/tvrex3-1.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:40:30 GMT
Accept-Ranges: bytes
Content-Length: 7620
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7620
Md5:    3c6fda0bbd5f70781da4fc9acb8a3baf
Sha1:   0d696df71c6097bd488950c3920f5d774a7dc1aa
Sha256: 5d7f0ee757b2eeb6fb0359d1aca921de3d3e2f97e1f5cbfd81ff7c14d891ecea
                                        
                                            GET /wp-content/themes/goodnews5/images/ajax-search-nav.gif HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:26 GMT
Accept-Ranges: bytes
Content-Length: 1440
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 32
Size:   1440
Md5:    78fa357432873555545da0ecb1d14df7
Sha1:   b13c74918d4d49f3f398055949eea6eac33ae3bd
Sha256: 02bdd1ffdb5d758ccf0236fe3b410ee3e42911b3f97476a5e45a9bb0c0349dc3
                                        
                                            GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=1.9.9.4 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Fri, 03 Nov 2017 11:54:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 6600
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6600
Md5:    4fba4e73f7dca3aff81f68dc347d1c50
Sha1:   2c7279e9b1a9d90689473d406e592987d5b7637f
Sha256: ddc00f0729e5ed674b855bfbe556ff26a28cad7cfb04cfe05d7db218681df77d
                                        
                                            GET /wp-content/uploads/2018/04/1-85-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:04:58 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Sun, 15 Apr 2018 23:46:10 GMT
Accept-Ranges: bytes
Content-Length: 7745
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7745
Md5:    9559878db578153b3a6b9b9f2aef301c
Sha1:   afa53dfa7cbdc62a01362456291b5d90a2a82a76
Sha256: dea0866628ae7607a1b2751491b58d75a8b69991135e31fb8f2c12d723abe30b
                                        
                                            GET /wp-content/uploads/2018/04/1-86-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:54:00 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Sun, 15 Apr 2018 22:11:46 GMT
Accept-Ranges: bytes
Content-Length: 7401
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7401
Md5:    005336ad50538dbfb9cb4206d0bb0fb0
Sha1:   778d3cc939fd553ada9ba8d03412fcfed7b42b22
Sha256: 95e202e6e5c88b9140990fa2617885c51951ff35a1e1aeb7a879d78b4d9b7156
                                        
                                            GET /wp-content/uploads/2018/04/1-82-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Sun, 15 Apr 2018 06:04:37 GMT
Accept-Ranges: bytes
Content-Length: 7852
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7852
Md5:    77f1e85f2301d1775108831afee35700
Sha1:   c5406d916d3e5aaadca7ea02068539c7dedaf1f9
Sha256: 0c36b18cf0c9ff9785f8e095ffcfe20c03f607508cd40a238a2a248f44601130
                                        
                                            GET /wp-content/uploads/2018/04/1-81-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Sun, 15 Apr 2018 05:20:58 GMT
Accept-Ranges: bytes
Content-Length: 7231
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7231
Md5:    8ca747e0bbdfa1670542c59b8ea1f0ca
Sha1:   a161eb3a21598ea67975b7652f7074deab15346f
Sha256: 06e2fcf978e9b73a95b9942a79d2aaace358640f91beb32e0020008d5fe04f64
                                        
                                            GET /wp-content/uploads/2018/04/1-87-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Mon, 16 Apr 2018 05:23:41 GMT
Accept-Ranges: bytes
Content-Length: 7843
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7843
Md5:    fee8d33b87aace616237decd20e1de84
Sha1:   5b3958928ea879e27e458c5d82db89509d9f716f
Sha256: 014546e79c376e723089c6ca2fdc6742cabefd1e90e708b15d0a3eb56b7b9083
                                        
                                            GET /wp-content/uploads/2018/04/1-80-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:17 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Sun, 15 Apr 2018 05:14:49 GMT
Accept-Ranges: bytes
Content-Length: 7299
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7299
Md5:    56919d2b471cd652df896331d55f09ff
Sha1:   b180623a55ee56b898c308eb439764423a22088a
Sha256: 1af93fe877cb540483b8b54984bc6eed681264013336dd20ec967d0ab46f784e
                                        
                                            GET /wp-content/uploads/2018/04/1-79-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Sat, 14 Apr 2018 22:49:05 GMT
Accept-Ranges: bytes
Content-Length: 8182
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8182
Md5:    e5ff665f566cb69b3d8c81a40fb935c7
Sha1:   b14c6a071d38cbfa85555f44ee3e775c79a14f2b
Sha256: bd9cb32ee2bcbb84d11c061501e657ccc6c3de1c9cd42c66524e61135c0852a4
                                        
                                            GET /wp-content/uploads/2018/04/1-75-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 08:05:41 GMT
Accept-Ranges: bytes
Content-Length: 7079
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7079
Md5:    dd05250fc2dc954f387c134261534d3b
Sha1:   7db8d08f0f4b378b2c79cbc521f1dece8e3905e7
Sha256: d85006921161935b4b214c0183e8d8510793ba75272b98142c5b0cc72c001575
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:50 GMT
Date: Mon, 16 Apr 2018 20:49:05 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:34 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:05 GMT
Content-Length: 4014
X-IPLB-Instance: 17335


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4014
Md5:    a6c81e2f02bd04160d2de88c4e8f3559
Sha1:   e3f3c91427d785820ca97dabe738f01faf041f36
Sha256: b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe
                                        
                                            GET /wp-content/uploads/2018/04/1-74-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:54:00 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 07:58:35 GMT
Accept-Ranges: bytes
Content-Length: 6248
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6248
Md5:    8cab19eb5e6e8256ba663ecfaf9288d7
Sha1:   5527bc9d5d097b424846deb687d804527904284c
Sha256: 97eaf8f530766e0bfab281e676f155cbf78c4a77445f5c374886ac31577fab1d
                                        
                                            GET /wp-content/uploads/2018/04/1-76-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:06:31 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 10:02:44 GMT
Accept-Ranges: bytes
Content-Length: 7354
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7354
Md5:    aa88a6dbd2c5f6cbfdd65905be83f79b
Sha1:   7697d981588df3a627795e197f0715c8e9922295
Sha256: 86c857b24f651bd150d11ec99cafe5c035b5ede6fdd2703bd17623df67142a0e
                                        
                                            GET /wp-content/uploads/2018/04/1-69-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:50 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 05:52:13 GMT
Accept-Ranges: bytes
Content-Length: 8233
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8233
Md5:    e51dabb7a562337fa6d732dd0b72758e
Sha1:   c697b36328c4d9f45aaa609bc237361596d21334
Sha256: 558ef84078436c87ef3b72e8f37ac2ef160a36588c9a8edeb3d177cfd8da11bb
                                        
                                            GET /wp-content/uploads/2018/04/1-68-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 05:44:31 GMT
Accept-Ranges: bytes
Content-Length: 6914
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6914
Md5:    0a4d8450ebb260ced5d7ad332d3835d0
Sha1:   980cc25e303942f1c082e2c5268a117026ee262a
Sha256: ee4a96de5a9bb82b367454dbacbbf9df27c029f5feec53066d00b36f371207ad
                                        
                                            GET /wp-content/uploads/2018/04/1-67-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 05:41:24 GMT
Accept-Ranges: bytes
Content-Length: 7180
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7180
Md5:    9f24e4c6b9a088c15f9d6b5c66f0ed26
Sha1:   5fc9c3de219cfce2711c199fa2dfe7ac3e6087b7
Sha256: 74567ae70c0a054dc9f0cc412f01883127837c6ef030e0bbd32243b20fbf70a0
                                        
                                            GET /js/gz/emb.js HTTP/1.1 
Host: st.chatango.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         208.93.230.22
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Mon, 16 Apr 2018 20:49:05 GMT
Content-Length: 24584
Last-Modified: Tue, 10 Apr 2018 17:41:22 GMT
Connection: keep-alive
Expires: Mon, 16 Apr 2018 20:49:05 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, was "chatango-embed.js", from Unix, last modified: Tue Apr 10 19:38:59 2018, max compression
Size:   24584
Md5:    5a6ac51df07e1ee5f1da696dc6e22792
Sha1:   8af1ff9c7f29b23b330c384b4bc056aa40e7511a
Sha256: 335998c9174006a259f133b1c34ea643b67ef839b3740813cc4799855ed97b8d
                                        
                                            GET /wp-content/uploads/2018/04/1-77-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:17 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 18:07:00 GMT
Accept-Ranges: bytes
Content-Length: 7774
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 17335


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7774
Md5:    9e46e65ff1b234c2d16eefd66ffda6d7
Sha1:   d3b609be8914107c0f0972f91b2568c60d0f42c8
Sha256: d54a0f7e54004bee5cd23efa79f3015c9758c88ca353966fedec225908ff7a3d
                                        
                                            GET /wp-content/uploads/2018/04/1-71-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 06:00:51 GMT
Accept-Ranges: bytes
Content-Length: 8193
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8193
Md5:    193f00a734e4d27ce11669893343cf7d
Sha1:   4326588ef4b2159c75f8c1a15811d74d91e3396a
Sha256: 47d33496767ec554284b08b2c505d7894acea11c715e53ec032ea3012e3f8c24
                                        
                                            GET /wp-content/uploads/2018/04/1-72-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:50:59 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 06:02:45 GMT
Accept-Ranges: bytes
Content-Length: 8247
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8247
Md5:    470a369b323c7adc102d8fa6808572f5
Sha1:   003f865fe14be91431fdc6e257f5f7207e35c304
Sha256: f1d610b9d19fd3ebbf03c3fbfa053f70a3f9cf0cfe05bdc0da8fcbb4f8b56334
                                        
                                            GET /wp-content/uploads/2018/04/1-78-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:50 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 18:13:53 GMT
Accept-Ranges: bytes
Content-Length: 7743
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7743
Md5:    3962720d0768a5551f5ef72c94427840
Sha1:   7d6a55c628e185319af4de75230abbf72f6e2499
Sha256: ea5a733493647b33e684febb11efd48e9517a91b341e04d871b9a024e7b7da94
                                        
                                            GET /wp-content/uploads/2018/04/1-73-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:54:00 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 07:25:07 GMT
Accept-Ranges: bytes
Content-Length: 6890
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6890
Md5:    7b28f0b29d76085eabe5dc41ca9a41b4
Sha1:   907aa6d48ac0b0da96e649921de447452103ea68
Sha256: 409b4a734c32325f7f4eab77bf263d65509516da7887d6c12b6ca8590da7f813
                                        
                                            GET /wp-content/uploads/2018/04/1-70-180x120.jpg HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Thu, 12 Apr 2018 05:54:25 GMT
Accept-Ranges: bytes
Content-Length: 7880
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:06 GMT
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7880
Md5:    ff658f0e0fce1bb02f3900bff7c680ed
Sha1:   67b15f01a8ac392988748adff0df1cdbd3463c7b
Sha256: 3f024af03f894d0d8df3fea5180b24ebb95dd87f959eb9a3c9b8ca8e09ad987e
                                        
                                            POST / HTTP/1.1 
Host: sr.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1595
Content-Transfer-Encoding: binary
Cache-Control: max-age=346059, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Apr 2018 20:56:45 GMT
Expires: Fri, 20 Apr 2018 20:56:45 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1595
Md5:    d224cf198704d74cec7ef3af5448812c
Sha1:   ba4c20af355dee868d846f55df941d3ba130511b
Sha256: 4a3e5b60acfa17736c6b535655e5427549b1c93bceddd5fd69fb55bd01bcdece
                                        
                                            POST / HTTP/1.1 
Host: s2.symcb.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=400653, public, no-transform, must-revalidate
Last-Modified: Sat, 14 Apr 2018 12:02:12 GMT
Expires: Sat, 21 Apr 2018 12:02:12 GMT
Date: Mon, 16 Apr 2018 20:49:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    eea2688e970f951e3a3c17b6e56ac754
Sha1:   b5ca38218bc9b00a2022270a2dc23e49cbf0f8cb
Sha256: c924e4b743c5653e42d40d10780b649ed23d3f92c5d9c4f37cb56f56dbedcd3f
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         104.20.209.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 16 Apr 2018 20:49:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d5f0307cc3a0010ac5950263a1c4afc651523911745; expires=Tue, 16-Apr-19 20:49:05 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Wed, 11 Apr 2018 09:53:07 GMT
Etag: W/"5acddb03-40063"
Expires: Tue, 17 Apr 2018 04:49:05 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 40c9843bcf4d4261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   68258
Md5:    aace5e5a34519cdd9c971d57f21e5d82
Sha1:   ceecd09dbe85c771648f2ce6942fe9707c6f31f4
Sha256: ef2f23c272fb07e8e93f26cf6051bd2c3d377cf54e2431f9fdd6666852749e62

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /EN_US/i/scr/pixel.gif HTTP/1.1 
Host: www.paypal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         104.123.128.124
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
Last-Modified: Thu, 22 Feb 2018 00:46:22 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
DC: slc-b-origin-www-1.paypal.com
Date: Mon, 16 Apr 2018 20:49:06 GMT
Connection: keep-alive
Set-Cookie: AKDC=slc-b-origin-www-1.paypal.com; expires=Mon, 16-Apr-2018 21:19:06 GMT; path=/; secure akavpau_ppsd=1523912346~id=ce701611fae5bea9d237bda6296479f6; Domain=www.paypal.com; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=63072000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /pop.js HTTP/1.1 
Host: c1.popads.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         185.76.9.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 16 Apr 2018 20:49:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 15 Apr 2018 14:16:47 GMT
Etag: W/"5ad35ecf-1108b"
Expires: Sun, 22 Apr 2018 14:20:58 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Server: CDN77-Turbo
X-Edge-IP: 185.76.9.10
X-Edge-Location: stockholmSE
X-Cache: HIT
X-Age: 109688
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28304
Md5:    0e22a3b06faf69618a2107eb1932665d
Sha1:   d584688330d0c96f6bdd2c2b5e5eb27566e9e2e2
Sha256: 808a7097e87ec3abc9ac976ec31bbf8478c05281d9bb7461f6d47861af3247e0
                                        
                                            GET /script/compatibility.js HTTP/1.1 
Host: velocecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         104.16.117.230
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 16 Apr 2018 20:49:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d136ed5ca1dc493b6ee49d5d6d371b06c1523911746; expires=Tue, 16-Apr-19 20:49:06 GMT; path=/; domain=.velocecdn.com; HttpOnly
X-GUploader-UploadID: AEnB2Up0lhFgm9Lj4_GWcI4sTjuraqykDRBa5ZDKCLMgXJI2ckHd_rrHp2HG09qhL-DhU-e03BDKn_3vUjt6ngj_jBALHPCrzEfZFwTKWPXghppeReNIlak
Expires: Tue, 17 Apr 2018 00:49:06 GMT
Last-Modified: Fri, 23 Feb 2018 13:42:51 GMT
Etag: W/"54155a0972c72a3b8636130f49b7c62f"
x-goog-generation: 1519393371553429
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 10184
x-goog-hash: crc32c=9RtQpg==, md5=VBVaCXLHKjuGNhMPSbfGLw==
x-goog-storage-class: MULTI_REGIONAL
Cache-Control: public, max-age=14400
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 40c9843f81cb4255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5502
Md5:    e7febde04c9af3eadc5d85c0557f7c1b
Sha1:   d1ad40d04e1b896c043e21e7951ba42bbb8a6aa6
Sha256: be9b91ad9e3ad41606f998201c64dc75bdd0e259c6a6f30d324c010c44e9d236
                                        
                                            GET /script/firefox.js HTTP/1.1 
Host: velocecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: __cfduid=d136ed5ca1dc493b6ee49d5d6d371b06c1523911746

                                         
                                         104.16.117.230
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Mon, 16 Apr 2018 20:49:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: AEnB2UqcWOe5ASlcI_I2Kuu9OAB6hhL891Fsk0cR-KPx5NwkrqCHKbUc7qDh20xtQZ8iC8H45v9BEND0AxLr1rAI0khwphIa0g
Expires: Tue, 17 Apr 2018 00:49:06 GMT
Last-Modified: Tue, 28 Nov 2017 12:20:00 GMT
Etag: W/"0e4ecaa066b158ef86211298cd421404"
x-goog-generation: 1511871600536118
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8418
x-goog-hash: crc32c=Fsod4A==, md5=Dk7KoGaxWO+GIRKYzUIUBA==
x-goog-storage-class: MULTI_REGIONAL
Cache-Control: public, max-age=14400
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 40c9843fb1d14255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4419
Md5:    85d46df4c141d424ddc618d4d0c00af8
Sha1:   afbc23790d73cf8c96568bb0892bc8d8bbed2bd7
Sha256: f850588d1598e8ec2db9f9beef12051227a3de9eaec36d2a397869f25232e1a6
                                        
                                            GET /collect?v=1&_v=j66&a=2046370559&t=pageview&_s=2&dl=http%3A%2F%2Ftvrex.net%2F&ul=en-us&de=UTF-8&dt=Watch%20NBA%20REPLAYS%2C%20Playoffs%2C%20Finals%202018%20-%20Full%20NBA%20Game%20Replays%2C%20Download%20%26%20Stream&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=KEBAAEQ~&jid=&gjid=&cid=318879639.1523911745&tid=UA-73687927-1&_gid=1727226861.1523911745&z=700582640 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Apr 2018 04:10:34 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 319112


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /script/suurl.php?r=1450583&cbrandom=0.6534426610712913&cbiframe=0&cbWidth=1176&cbHeight=754&cbtitle=Watch%20NBA%20REPLAYS%2C%20Playoffs%2C%20Finals%202018%20-%20Full%20NBA%20Game%20Replays%2C%20Download%20%26%20Stream&cbref=&cbdescription=Watch%20NBA%20Replays%20Online%20Free%20in%20HD%2C%20Watch%20and%20Download%202017%2F18%20Season%2C%20Playoffs%20And%20Finals%20full%20replays%20online%20free.%20Watch%20NBA%20Live%20Stream%20in%20HD%20free&cbkeywords=NBA%20Replays%2C%20NBA%20Replay%2C%20NBA%20Full%20Game%20Replay%2C%20NBA%20Full%20Replays%2C%202018%20NBA%20Playoffs%20Replays%2C%20NBA%20Archived%20Games%2C%20TVREX%2C%20TVREX%20NBA%20Replays%2C%20NBA%20Stream%2C%20NBA%20Live%20Stream%2C%20NBA%20Finals%20Replay&cbcdn=velocecdn.com HTTP/1.1 
Host: onclickmega.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         35.190.64.167
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Mon, 16 Apr 2018 20:49:06 GMT
Transfer-Encoding: chunked
X-Robots-Tag: noindex
Cache-Control: no-store, no-cache, no-transform, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Link: <//c.adexchangemachine.com>; rel=dns-prefetch,<//c.adexchangemachine.com>; rel=preconnect
Set-Cookie: acnetwork=4d28817b5ad50c420b7df04577; expires=Wed, 30-Dec-2037 23:00:00 GMT; Max-Age=621915054; path=/
Referrer-Policy: no-referrer
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip
Via: 1.1 google


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2550
Md5:    454340e182d2bcff130793e957e419f2
Sha1:   d822e8426b555c7281d57eaa83d582cacd481f80
Sha256: 2bd628ac2e7372617d490f5e8ff3f04f1115202ac52a90710d2124a79aa4be45
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 16 Apr 2018 20:49:06 GMT
Server: Apache
Last-Modified: Mon, 16 Apr 2018 19:47:13 GMT
Expires: Mon, 23 Apr 2018 19:47:13 GMT
Etag: AACB740CE0778B1DF06B5DA81B676B733FFA936B
Cache-Control: max-age=600486,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp31
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    138cb85588894957584d2a7f52fbd753
Sha1:   aacb740ce0778b1df06b5da81b676b733ffa936b
Sha256: 7dd417cc032a424555bac8b5fe9cce5b950eac00ffdf2faac74cc4ddb8cb3672
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=4.8.3 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:59 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 14:53:17 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:07 GMT
Content-Length: 4323
X-IPLB-Instance: 17335


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4323
Md5:    d6527c3d0b14313cf8aa786fe5c9bec1
Sha1:   7bc55116ab3e3acff1d85b0c03d69f2f5ca0d1c1
Sha256: ebb3cd48a02aafdfef89afd89e9a9119a89feec1e73182e5f34a6b4f28c12dff
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Fri, 13 Apr 2018 23:02:22 GMT
Expires: Fri, 20 Apr 2018 23:02:22 GMT
Etag: E8BF36A07CC58A2E3E78AC9AE62955EAF9684F22
Cache-Control: max-age=352994,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp31
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    96bc9281af8ad39e9629d7898fd9a7d9
Sha1:   e8bf36a07cc58a2e3e78ac9ae62955eaf9684f22
Sha256: 0c80a6fcae28f190e8bd2ab6907ee6fbab9a5e99403d4733651a994a8e3ec549
                                        
                                            GET /wp-content/themes/goodnews5/images/skins/black/bg.png HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/black.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:25 GMT
Accept-Ranges: bytes
Content-Length: 8900
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:07 GMT
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  PNG image, 200 x 200, 8-bit colormap, non-interlaced
Size:   8900
Md5:    2e36950c20b5df69976597740163b0ee
Sha1:   760fc0c1f9f40895de44e94096ce30f1b290a2c0
Sha256: 3e252ebcf482b180903e61814f21889c27c194eefc9d8183b01f5da3eb3dc21f
                                        
                                            GET /wp-content/themes/goodnews5/images/nav-shadow.png HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/main.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:49:56 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:26 GMT
Accept-Ranges: bytes
Content-Length: 1658
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:07 GMT
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  PNG image, 963 x 19, 8-bit colormap, non-interlaced
Size:   1658
Md5:    967b020e19462895055464d2acab6ce2
Sha1:   81781f114039182bc2999d4857a8cf2ae2cc51e6
Sha256: 32a0b8bc8040aa2ed860d230206854331116558ff4e689d61aa5fdae64daee04
                                        
                                            GET /wp-content/uploads/2018/03/PayPal.png HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:50:59 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Thu, 08 Mar 2018 07:26:57 GMT
Accept-Ranges: bytes
Content-Length: 39044
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:07 GMT
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  PNG image, 215 x 100, 8-bit/color RGBA, non-interlaced
Size:   39044
Md5:    35a24b1c0ac8a73899fa642a688e919a
Sha1:   0f2742198fbba5c05e3239e6ef31def808ea9e57
Sha256: aa4731e7f448e4738faea15a08570d3cbfb8c8b198f8fa3b4cd4fcb73f52bfb7
                                        
                                            GET /a/display.php?r=1596981&treqn=1752982041&runauction=1&crr=2263c43c2510e59146fd,,QklL_oymb-vKbphOaklLfklLvlkL_pjO6vf161909164b008971f7b&rtid=5ad50c41bfd92&cbrandom=0.9389632909903195&cbtitle=Watch%20NBA%20REPLAYS%2C%20Playoffs%2C%20Finals%202018%20-%20Full%20NBA%20Game%20Replays%2C%20Download%20%26%20Stream&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=Watch%20NBA%20Replays%20Online%20Free%20in%20HD%2C%20Watch%20and%20Download%202017%2F18%20Season%2C%20Playoffs%20And%20Finals%20full%20replays%20online%20free.%20Watch%20NBA%20Live%20Stream%20in%20HD%20free&cbkeywords=NBA%20Replays%2C%20NBA%20Replay%2C%20NBA%20Full%20Game%20Replay%2C%20NBA%20Full%20Replays%2C%202018%20NBA%20Playoffs%20Replays%2C%20NBA%20Archived%20Games%2C%20TVREX%2C%20TVREX%20NBA%20Replays%2C%20NBA%20Stream%2C%20NBA%20Live%20Stream%2C%20NBA%20Finals%20Replay&cbref= HTTP/1.1 
Host: www.adnetworkperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         130.211.186.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Mon, 16 Apr 2018 20:49:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex
Cache-Control: no-store, no-cache, no-transform, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Link: <//www.adnetworkperformance.com>; rel=dns-prefetch,<//www.adnetworkperformance.com>; rel=preconnect,<//crrepo.com>; rel=dns-prefetch,<//crrepo.com>; rel=preconnect,<//www.dundit.win>; rel=dns-prefetch,<//www.dundit.win>; rel=preconnect
Set-Cookie: acnetwork=4d28817b5ad50c43321d79b0cd; expires=Wed, 30-Dec-2037 23:00:00 GMT; Max-Age=621915053; path=/
Referrer-Policy: no-referrer
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1048
Md5:    f9f16f1e1cfd3a5f910f2a8bc9f9dbc4
Sha1:   33dc2556b892fecc31b06216b460e1b99bfe752e
Sha256: 3e87cbbe4a03a7ec43f4f96a6adf68549221a7696cef0ffc0e4c1614b3af7317
                                        
                                            GET /en_US/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 2039e9e458a4db92031701db8d2c9243
Etag: "0b5641fe72477f367d1c97c89b98236c"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-XSS-Protection: 0
Timing-Allow-Origin: *
X-Frame-Options: DENY
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Mon, 16 Apr 2018 20:54:20 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: MbN7Hu1QTzGLzsfRqilVIA==
X-FB-Debug: oj9SGHDG/pJ9Pn+eJCqXzsRZorgn+5XtZuNK90x8F+LXFzRd/gf2Gud4Y1Mwnlh4+l8vLVTYNF/8rjSlnFcWIA==
Date: Mon, 16 Apr 2018 20:49:07 GMT
Connection: keep-alive
Content-Length: 67758


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   67758
Md5:    31b37b1eed504f318bcec7d1aa295520
Sha1:   82b7fa8d24c64e53b84f4dbdcb3e8a38dfdda355
Sha256: e508042e6b7b35e767e8f67e58197e8a457f9ac5c9cfddec54c7818c7c734374
                                        
                                            GET /wp-content/themes/goodnews5/fonts/open-sans/OpenSans-Regular-webfont.woff HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/main.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 22660
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  data
Size:   22660
Md5:    79515ad0788973c533405f7012dfeccd
Sha1:   5092881fad2caffdc6bf71bdab1ea547b73d3564
Sha256: 22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40
                                        
                                            GET /wp-content/themes/goodnews5/fonts/play/play-regular-webfont.woff HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/main.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:59 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 23668
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  data
Size:   23668
Md5:    c2b1063421060fcc270931df04049f9f
Sha1:   ca8ec8f6ebc8def3504d757b0f7221f809565805
Sha256: 172af7382b963cb5989b25d0dbc84b6447466c0656e989cdd594342110e2a57a
                                        
                                            GET /wp-content/themes/goodnews5/fonts/icons/enotype/enotype.ttf HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/plugins.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:59:33 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 62900
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  TrueType font data\012 raw G3 data, byte-padded
Size:   62900
Md5:    d95dc976e3a4f2e71dac12b52f40941a
Sha1:   4a81138e645a756f7bda34dc55aea8e2d52d7063
Sha256: 941c246131068bb2134dce6134d70142c0847c48b8218f051ff178105774cbfc
                                        
                                            GET /wp-content/themes/goodnews5/fonts/play/play-bold-webfont.woff HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/main.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:54:00 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 23544
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  data
Size:   23544
Md5:    b797d5bf557206c638925e283610deb1
Sha1:   e9fe5a883cd78d73aa72f678aeeed2e36b627f0c
Sha256: b257cd7b8f17cae25701542390cf1c8475babb9f79647da1eafc0597dd7365a6
                                        
                                            GET /wp-content/themes/goodnews5/fonts/icons/fa/font-awesome.ttf HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/plugins.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 21:47:47 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 94428
X-IPLB-Instance: 17335


--- Additional Info ---
Magic:  TrueType font data\012 raw G3 data, byte-padded
Size:   94428
Md5:    1f786dc2d99a2752a09d39e384d7246e
Sha1:   ccd99ef69b28eea2c3199cffeedefb46fc8e6e97
Sha256: 7647a1ee6c8e30a901eef47d1e59070bfa2e2d569a7f80679cc4d8ac2a6cb55a
                                        
                                            GET /wp-content/themes/goodnews5/fonts/open-sans/OpenSans-Semibold-webfont.woff HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/main.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 22908
X-IPLB-Instance: 5281


--- Additional Info ---
Magic:  data
Size:   22908
Md5:    697574b47bcfdd2c45e3e63c7380dd67
Sha1:   4590722b795938e0b6ff1b99701d1abe37aeabef
Sha256: 26b216fadb2ffcd542ca56c2d84f9918f62e40de89bf88b4211fffacd2a4ad83
                                        
                                            GET /wp-content/themes/goodnews5/fonts/icons/momizat/momizat.ttf HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/plugins.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:01:57 GMT
Date: Mon, 16 Apr 2018 20:49:07 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 104264
X-IPLB-Instance: 17334


--- Additional Info ---
Magic:  TrueType font data\012 raw G3 data, byte-padded
Size:   104264
Md5:    fe10efaa853b09edcc78e502b0a952dd
Sha1:   4a6f93f88affe8253b87c1dc1e1c4873a050a7ef
Sha256: 2bc5b6d2e8459d438a3ba116d12e11c71fa1c2deac8191dce05d5a40d125529f
                                        
                                            GET /script/wait.php?stamat=m%7C%2C%2CA2Fi93antGU3Bk9GH0dEdHP3xP.748%2CDHSr9orwqMJOe6yrAUBkonyWe_F7d0tQQgJC5UXQqa2_bnjbcbsZR-WynNkSTWtRWeQwQkQAI5mfVhziU6aIGlrV_8tXbLZcBega6k_ehNxG-EYcSxR9DSMniPW1fDB_EUBz1BI6-J_ZoeNzD5J3-jqhkVo0XUOxQTyz4F1BDYcikaP_I41MjKOkNa1hygO0-w_dsHYW8V9JNlqbyNJzmaZO1beFhrIuzSfblMXdSEKJ-VO3FpUSi2cQQej46MDRBlvl8uGnfRk2QgTeGnIhPIUXtBUraUGhjUNmCRW_8rY%2C&callback=jsonp432387 HTTP/1.1 
Host: c.adexchangemachine.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         104.16.234.182
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Mon, 16 Apr 2018 20:49:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dd9f724d1d814baffa84013400d44c34b1523911747; expires=Tue, 16-Apr-19 20:49:07 GMT; path=/; domain=.adexchangemachine.com; HttpOnly
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 40c98447528b4267-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   41
Md5:    1c0008c4b9cdf777759ac5ed8d6bb4d0
Sha1:   8f22aec66eb5622bfbc3e3d5fa65f78202f1cca2
Sha256: 39340f3e3d5da4b9fd6ffadb84725fe9973945a75f2176749fddbfbdf21f11d2
                                        
                                            GET /extban/102829020/creatives/22273172/367c6e821a128304a6d6f42c1ee9ad5b_7015.png HTTP/1.1 
Host: crrepo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.adnetworkperformance.com/a/display.php?r=1596981&treqn=1752982041&runauction=1&crr=2263c43c2510e59146fd,,QklL_oymb-vKbphOaklLfklLvlkL_pjO6vf161909164b008971f7b&rtid=5ad50c41bfd92&cbrandom=0.9389632909903195&cbtitle=Watch%20NBA%20REPLAYS%2C%20Playoffs%2C%20Finals%202018%20-%20Full%20NBA%20Game%20Replays%2C%20Download%20%26%20Stream&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=Watch%20NBA%20Replays%20Online%20Free%20in%20HD%2C%20Watch%20and%20Download%202017%2F18%20Season%2C%20Playoffs%20And%20Finals%20full%20replays%20online%20free.%20Watch%20NBA%20Live%20Stream%20in%20HD%20free&cbkeywords=NBA%20Replays%2C%20NBA%20Replay%2C%20NBA%20Full%20Game%20Replay%2C%20NBA%20Full%20Replays%2C%202018%20NBA%20Playoffs%20Replays%2C%20NBA%20Archived%20Games%2C%20TVREX%2C%20TVREX%20NBA%20Replays%2C%20NBA%20Stream%2C%20NBA%20Live%20Stream%2C%20NBA%20Finals%20Replay&cbref=

                                         
                                         104.28.1.205
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 16 Apr 2018 20:49:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=db43b8ed1002de88972d4eab40676e81b1523911747; expires=Tue, 16-Apr-19 20:49:07 GMT; path=/; domain=.crrepo.com; HttpOnly
Last-Modified: Mon, 02 Apr 2018 10:36:42 GMT
Etag: W/"5ac207ba-3fd5"
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Vary: Accept-Encoding
Expires: Tue, 17 Apr 2018 00:49:08 GMT
Cache-Control: public, max-age=14400
Server: cloudflare
CF-RAY: 40c98448628042a9-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14899
Md5:    800657ab69d2d76314348115767510d2
Sha1:   6292f0bc50861d79b697c4c8ff110780a2805966
Sha256: 06fe6de94bf644d9dcf98411499283e4db9bdbe84d0be134a70efccbf7c8403a
                                        
                                            GET /wp-content/uploads/2016/01/favicon.ico HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:08 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:36:05 GMT
Accept-Ranges: bytes
Content-Length: 39687
Cache-Control: max-age=900
Expires: Mon, 16 Apr 2018 21:04:08 GMT
X-IPLB-Instance: 17339


--- Additional Info ---
Magic:  MS Windows icon resource - 5 icons, 256-colors
Size:   39687
Md5:    7167cc60b6a3360f1fbd6f68a5769290
Sha1:   b47b100ed8f9c43f5eb585bea470af7143db4aed
Sha256: 4b90dda318eeb31d8627274a869048eed3b913d7d1c5b1bd2266348b86378869
                                        
                                            GET /wp-content/uploads/2016/01/favicon.ico%22 HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:08 GMT
Server: Apache
Content-Length: 253
X-IPLB-Instance: 5280


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   253
Md5:    99185c1e7c669fbbc6961ad1ebdc73f5
Sha1:   101f64d8dd21beb0085f9271a66ad6e9b429febf
Sha256: 5ef49739dd88082f1d284d91f268e536dde193af808d8ab627df400e305fe390
                                        
                                            GET /connect/xd_arbiter/r/FdM1l_dpErI.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sun, 14 Apr 2019 05:53:48 GMT
Cache-Control: public,max-age=31536000,immutable
X-XSS-Protection: 0
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: 1Gu8HWc8zIB6n3WX2r4MQ+FEU4aN9vcw1jxKdhAOOGEdRiety/O/REt5GZ8inXaQQRcClMrfPqeuTbyiHsiVWQ==
Date: Mon, 16 Apr 2018 20:49:08 GMT
Connection: keep-alive
Content-Length: 14289


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14289
Md5:    6c2bb9b51fb0598c5cd1a1f5e53f8abb
Sha1:   d984a01319bc9b08ff8b71d6f126cbabe9b587af
Sha256: ccca84fdd0d2b5757f8e45b85cc3079b5ee6e0760036c39678b61baf53c6b93e
                                        
                                            GET /wp-content/themes/goodnews5/fonts/open-sans/OpenSans-Bold-webfont.woff HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/wp-content/themes/goodnews5/css/main.css?ver=4.8.3
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:00:56 GMT
Date: Mon, 16 Apr 2018 20:49:08 GMT
Server: Apache
Last-Modified: Wed, 01 Nov 2017 15:10:27 GMT
Accept-Ranges: bytes
Content-Length: 22432
X-IPLB-Instance: 17522


--- Additional Info ---
Magic:  data
Size:   22432
Md5:    2e90d5152ce92858b62ba053c7b9d2cb
Sha1:   8cf65f42a2a8c349ccd6ab63b6cbd17c96fd665c
Sha256: a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=155571
Date: Mon, 16 Apr 2018 20:49:08 GMT
Etag: "5ad4b947-1d7"
Expires: Wed, 18 Apr 2018 15:40:39 GMT
Last-Modified: Mon, 16 Apr 2018 14:55:03 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0896bff4608db25f0d7fcf05b242734c
Sha1:   f6144c7e2c417bf19a90fbfd461eba175c6c24de
Sha256: c4d693dcbba8630e06714e1b322de7b146b03dc7cba998628999fd3d72382c75
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=164746
Date: Mon, 16 Apr 2018 20:49:09 GMT
Etag: "5ad4d0c6-1d7"
Expires: Wed, 18 Apr 2018 18:32:07 GMT
Last-Modified: Mon, 16 Apr 2018 16:35:18 GMT
Server: ECS (arn/469D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0278330903a06c6e6e109624546521b6
Sha1:   15cd1ae2dcfab7a35606837407c0565133229d71
Sha256: fa03dfae67e2ddd6affeef635023e30d32b611cb3144942bc7d8586044381b07
                                        
                                            GET /connect/xd_arbiter/r/FdM1l_dpErI.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sun, 14 Apr 2019 05:53:48 GMT
Cache-Control: public,max-age=31536000,immutable
X-XSS-Protection: 0
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: 1Gu8HWc8zIB6n3WX2r4MQ+FEU4aN9vcw1jxKdhAOOGEdRiety/O/REt5GZ8inXaQQRcClMrfPqeuTbyiHsiVWQ==
Date: Mon, 16 Apr 2018 20:49:09 GMT
Connection: keep-alive
Content-Length: 14289


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14289
Md5:    6c2bb9b51fb0598c5cd1a1f5e53f8abb
Sha1:   d984a01319bc9b08ff8b71d6f126cbabe9b587af
Sha256: ccca84fdd0d2b5757f8e45b85cc3079b5ee6e0760036c39678b61baf53c6b93e
                                        
                                            GET /impression.php/f14b56f7bd5783/?api_key=846690882110183&lid=115&payload=%7B%22source%22%3A%22jssdk%22%7D HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin, Accept-Encoding
Access-Control-Allow-Methods: OPTIONS
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Encoding: gzip
X-FB-Debug: lGhCKf/0aQHqAZuRIXYLerEaB53kNxjYqJXNLpKjXX72oqBWct7Lwd5KaM/tc0qrgcV57ihkathtMkSYVfrVfg==
Date: Mon, 16 Apr 2018 20:49:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57
Md5:    9539fdb766538c525a3e11e03853b8c9
Sha1:   cd658fd453cb9e7af5aede2e9c6050d81c0e2fdc
Sha256: 88882a6963e4a4313761bf5e5be68a015ec125c023fba749a9ec0aca7a9124af
                                        
                                            GET /rsrc.php/v3/yX/l/0,cross/6HdEVC8T4vO.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Fri, 12 Apr 2019 01:38:16 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: 36xMlHAjjmiJuBC9Aclt9Q==
X-FB-Debug: fydbf5shUKpBjzt7zMrrGKfippkAiVxabKonWjn8nSoWsQxlQtFAQH53FR5BPzAM8UNDdrKnrON6GfUh9zd+zA==
Date: Mon, 16 Apr 2018 20:49:10 GMT
Connection: keep-alive
Content-Length: 8162


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8162
Md5:    dfac4c9470238e6889b810bd01c96df5
Sha1:   f73a51169646b49fde87c6da8e8c338e7422663e
Sha256: 467405bd14a5cc8a9fbf37deefcc82b5a2fc41d85090cd5b0403565ee8cb3f12
                                        
                                            GET /rsrc.php/v3icki4/y1/l/en_US/Ry9VHFnrzMF.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Timing-Allow-Origin: *
Expires: Tue, 09 Apr 2019 16:56:12 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: /v5tu9b8JNl6luXxhlpxwA==
X-FB-Debug: 3mceEkO9uqK1LL7PjSKQbmefqvl3KWR9KGCBwLd+jLEUcFCTvsjqG7ammoduQXU8M19O+/D0dyhIoF2a5o5EQg==
Date: Mon, 16 Apr 2018 20:49:10 GMT
Connection: keep-alive
Content-Length: 14593


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14593
Md5:    fefe6dbbd6fc24d97a96e5f1865a71c0
Sha1:   de2c7646f5f984608566f6641475d88a5a956b23
Sha256: ea57f9290a83f85f8d3a7892aefda92533adb8db6354fbf3932a99892dc7b5af
                                        
                                            GET /rsrc.php/v3ijLc4/yD/l/en_US/NGQffakcv4S.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Tue, 16 Apr 2019 18:48:39 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: uIOvtygt/q0QVVIV7GcArA==
X-FB-Debug: xN7VGseO2t5n/AKzlwR1E4IMM9ePU/QTMOpVrq4zKmLn4OuGn1MxlWf4nNEyRhc5KX7k8lQ5k5QMm2fzv39/Yw==
Date: Mon, 16 Apr 2018 20:49:10 GMT
Connection: keep-alive
Content-Length: 49560


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   49560
Md5:    b883afb7282dfead10555215ec6700ac
Sha1:   2c63ad4d7c24af76fe2a715cf5c17fd2527d0565
Sha256: 759c9a351e888add47db311285e8eb2db634bbf9d276f4b990fd970593901296
                                        
                                            GET /v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
Pragma: no-cache
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: private, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
facebook-api-version: v2.6
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: HWvK0PvqcVaDinvXeFxXEZ+XqPWp3Z0kNLWLQiUwPfKOzrB3lr+2DliBIVtYzP0LD3iqpEZ18KWqiqiLlIRmbQ==
Date: Mon, 16 Apr 2018 20:49:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   134258
Md5:    189512d149a0aaf2aa0ff613fe80377c
Sha1:   2b1f99e058c6d30828511db6144dc9e209138caa
Sha256: ac85b14d7298974c9c05be0860dd5513a76b0cd8b9e46cc3227970262ac07bac
                                        
                                            GET /rsrc.php/v3/ye/r/sbqoFUqHnKO.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Sun, 14 Apr 2019 06:20:42 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: IqlmRfHJfvCeBvRGC6+cQQ==
X-FB-Debug: TaR34fuVI1zIkPMtwkG7vm8ray+f+025Q3aN9LQTaSA6p3IvVZOlEHwJ12+RHOP9IbtovtleDHTT6f9ZoF245w==
Date: Mon, 16 Apr 2018 20:49:10 GMT
Connection: keep-alive
Content-Length: 92303


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   92303
Md5:    22a96645f1c97ef09e06f4460baf9c41
Sha1:   025eb03000776ad00048faa19b1fafd0dc559591
Sha256: 28b7ecdc20e03c86bf322b698a20fc55127d97a0277e3afcd94ad64f58d63b95
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=163074
Date: Mon, 16 Apr 2018 20:49:10 GMT
Etag: "5ad4c17e-1d7"
Expires: Wed, 18 Apr 2018 18:01:55 GMT
Last-Modified: Mon, 16 Apr 2018 15:30:06 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0b510ec3ec789cf283680f00468cfe71
Sha1:   784b2735ffb560f084d23cb5ea771356d5198d38
Sha256: 4bb6d6404472f7737f559669bfdd0c457db518b6db7984d214536a7af1029194
                                        
                                            GET /rsrc.php/v3/yw/r/RfzHsND2J7t.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yX/l/0,cross/6HdEVC8T4vO.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Tue, 09 Apr 2019 16:55:09 GMT
Content-MD5: IGfU6xkYvmT7XR8wpVub6A==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: aUm7u+qpEztk6oqKpASLAdMkYApfTdOr4lcY4ybDUxjHV6AxhAYlaD8xVM7E/N/FNQOpHR2keDlH0s83/LM7xw==
Date: Mon, 16 Apr 2018 20:49:10 GMT
Connection: keep-alive
Content-Length: 8076


--- Additional Info ---
Magic:  PNG image, 49 x 453, 8-bit colormap, non-interlaced
Size:   8076
Md5:    2067d4eb1918be64fb5d1f30a55b9be8
Sha1:   3befb778735f5be0c071e127861252205e7ddda5
Sha256: 980b13d0c467df80dd179b76ab4ca8708c243804bf8a3859c1c18c09fc589032
                                        
                                            GET /v/t1.0-0/p133x133/30723791_627133124294697_6763658066165497856_n.jpg?_nc_cat=0&oh=48e1a2a06bce646cdce58dd789785251&oe=5B62C9A9 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Sun, 15 Apr 2018 22:22:23 GMT
X-Unified-Storage-Connection-Used: 1
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Sun, 29 Apr 2018 22:45:51 GMT
Cache-Control: max-age=1209600, no-transform
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 9965


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   9965
Md5:    d68fa79e78c1b4262c11dcebd200c251
Sha1:   4a39b2859aa293261f28408ce8c640e73a4a485f
Sha256: 26787b3ffc7be752312ab9bee15eaecaa44761ef0e4f52ee331bb780f2f23ef5
                                        
                                            GET /rsrc.php/v3i7A34/y0/l/en_US/sdjBdFJ6v2l.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Tue, 16 Apr 2019 18:50:53 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: C1n1ZE4IbQsHqZ52tJHqww==
X-FB-Debug: /7TGj+lBopGl+4eEkVSONdUpLkE/aqKGHvv5wr8DvTZcmlSVgdaGCPCEUUgBdtSzXQZNb6Tz+INW3QAyoVHa/Q==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 40176


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   40176
Md5:    0b59f5644e086d0b07a99e76b491eac3
Sha1:   4cac32d72f00590f23894803fdbbe9db7cfdcfb5
Sha256: 4367676c1b21a50baee31b80d4c96a2b1e387a43697a6f89ff99cd892e3bb01b
                                        
                                            GET /rsrc.php/v3iRnl4/yz/l/en_US/j5PHbyStNtz.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Wed, 10 Apr 2019 13:02:39 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: krXOMdB0gxusu49k1mfkgw==
X-FB-Debug: C9jG/JmdbZhPnNT4w8iA7GEAi0HI1rgDAIf2wV7yW9aokdyuWGYub4KFqCtF6hyOCj5NFah8VA6X11LvfCVpuw==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 2819


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2819
Md5:    92b5ce31d074831bacbb8f64d667e483
Sha1:   44e17a2698ef886498a0a850a32cd34cfe182fab
Sha256: a0b5076311a432719d244736f3abb44271d3e052291ee63e7d83ff28023208a8
                                        
                                            GET /v/t1.0-1/c1.0.50.50/p50x50/30708513_627132867628056_5160429289480388608_n.jpg?_nc_cat=0&oh=27b69926475ec0cb01feb9f297b6d467&oe=5B726962 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Sun, 15 Apr 2018 22:21:43 GMT
X-Unified-Storage-Connection-Used: 1
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Sun, 29 Apr 2018 22:45:51 GMT
Cache-Control: max-age=1209600, no-transform
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 1865


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1865
Md5:    d6286d2239e2c2890a64c105aa646674
Sha1:   50e9b5455621261eccf13adb0106301754e7dcf6
Sha256: 19756619773c6f0344d0f83ad69ea2020a170ffbfc1f915463c64d4e9a1fb5ce
                                        
                                            GET /rsrc.php/v3/yD/r/NIP-VZV3HAO.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Timing-Allow-Origin: *
Expires: Sun, 14 Apr 2019 04:11:06 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: cQiU7gQ9q6kBzgMRzcv8YQ==
X-FB-Debug: 0UZT93nnoTsu2D4hpgZpRjK7fX5bMzDvlMtNagQq4g3LuX3XpUi+JV8K9ZZnJMnZPh5UMtmtFTHo/0DIOeBZGg==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 7723


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7723
Md5:    710894ee043daba901ce0311cdcbfc61
Sha1:   1b86abaa816b670e5ba92fae15d577c9d0916a69
Sha256: 7f68686818ea340a04eee3fa26a0ed35781de86838049f33cd398b3d7c884cdc
                                        
                                            GET /rsrc.php/v3iYST4/ya/l/en_US/EVuOvtq8Fez.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 16 Apr 2019 18:48:44 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: 05Zoc5veoF8c3d2+K12pPA==
X-FB-Debug: LdulcRKPFJWRHf9Ux3yElu4tFi3FQAcibFNslyzflbO7LNoxGtf+qqjDOuwx5cwRF5djjn+IQ1D9bGDZx75xvA==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 18908


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18908
Md5:    d39668739bdea05f1cddddbe2b5da93c
Sha1:   d2d83d90e57d57ed58abdfe4ed2153c022a75deb
Sha256: 55820c7d31fa13e2e7f91ff8ae6a1b7af0fe0bec34ffa7252f0ec3616bbe8263
                                        
                                            GET /rsrc.php/v3/yc/r/kGIQGUF8cdr.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Tue, 16 Apr 2019 18:49:12 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: JzfPOUVP7gk+OU/BKq0k/A==
X-FB-Debug: zMIRyGCGfPIlU9wFS587/rPf2oB5H9vQIO1Ej6BHGmwzN4Lk7uKxU1J+6gS5eCPLfWHA1sl2WT7t63xI0f24mQ==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 39759


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   39759
Md5:    2737cf39454fee093e394fc12aad24fc
Sha1:   5517b8718f4006c3268097ee687b4e9cc17a53b7
Sha256: 649ea54082a04835ac9726c0b9046d4f9528bb2c57356fc6899b1637c2b21ffc
                                        
                                            GET /rsrc.php/v3/y4/l/0,cross/2Qe1Wm0cGiT.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Fri, 12 Apr 2019 11:05:54 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: y8mybIi36tFpSGA3HgLCdQ==
X-FB-Debug: C/kGLct5TNWk3oEbNXJUntWtVQIZ8Pi/PpDBc8vahBYrKgcFCeDzITQY/Q6CKlsEvvA4cjea0f1mSJjxQLb7gQ==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 20850


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20850
Md5:    cbc9b26c88b7ead1694860371e02c275
Sha1:   2e485e55ee7a2bddac62b2e3589256f250d15be6
Sha256: c76827e94cb3b318b9db56dda1e44c8cf211c265b1653738a02e9b77d1ca2469
                                        
                                            GET /rsrc.php/v3ivgV4/yp/l/en_US/8NzQq3O-9-k.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Timing-Allow-Origin: *
Expires: Sun, 14 Apr 2019 12:52:38 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: RuBjyvJoYzEFzJzs86+R3A==
X-FB-Debug: uuXHNDqOXAfCVmjqtS3phpoR6X5WRWK09AA0p+P7UZ4YZH8GN+EuReHM/milHz2l9DYIhgfdyyLMeNGGFuW9WA==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 58325


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   58325
Md5:    46e063caf268633105cc9cecf3af91dc
Sha1:   8747ed9f838406f4cabd49326ef57f1cb0110bb8
Sha256: 072c8319c93ee8d677e46b5694a3b9a4262c26e5fc62fe5a191c103ec79fce96
                                        
                                            GET /rsrc.php/v3/yC/l/0,cross/RuvCKfZGoYT.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Tue, 16 Apr 2019 15:48:31 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: dos9B0sZQdwapGEhQjwbKA==
X-FB-Debug: ew+MVQPyUnQDO3r12xpZZA3awcpyP+0ZdZnIEv1BN+VxXvh8siJpHP8b5GQ9St+Nng+McvRwaA+VJI+UJuGcjA==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 2375


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2375
Md5:    768b3d074b1941dc1aa46121423c1b28
Sha1:   f2128b5eb9e857585c257f82ae73342f08fc907b
Sha256: 62ece1514a9a83ca7e39e15d3684a11f2169d558f0f1bdb7740c43afc19b1a09
                                        
                                            GET /rsrc.php/v3/yM/r/KoXLhbm3SWQ.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Fri, 12 Apr 2019 17:48:52 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: trq2j4bAKdVWcu7fyaZfgA==
X-FB-Debug: omefKootRbWN4sid6v1tdYaR5TxP9HdqMoksmXvasUfrVdZL5cNo85Eg1i2GADRfM3p1eQrTC1Jy0xAjoycXcA==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 9305


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9305
Md5:    b6bab68f86c029d55672eedfc9a65f80
Sha1:   906c157917e30e79cb5b73821c2ac0a50d36736f
Sha256: dc8a292bfd18ce813ffeb12369c4c3c9bcbc6d72bac5ae96fa639332646252ff
                                        
                                            GET /rsrc.php/v3/yS/r/61kcbjR5qLO.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Sun, 14 Apr 2019 04:41:20 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: J+M4VxCqmwvKoAEajZ8SCQ==
X-FB-Debug: A2Si9MNfoB2GkWg00C18BQjfc/yq0DNCGCk6ibo72TS8DfMUWPeZVOmKVCcbS8jiVfJwtqN/4nrB5/rzIy23DA==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 17659


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17659
Md5:    27e3385710aa9b0bcaa0011a8d9f1209
Sha1:   fc03719f0963f3a571501a25a0d993c1fc2374dd
Sha256: 771dd2cc569be2fc4374ecdeee99afec4cea537cd20a86827929d2bb85577070
                                        
                                            GET /rsrc.php/v3/yc/l/0,cross/U0XC5YfZDa6.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Sun, 14 Apr 2019 01:38:06 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: klbWJUXOOJpqPDOs/VPV6Q==
X-FB-Debug: 1FrfYikveUhLIC0VelbzDDwAKhr5z7h19IaU1sjYGt0LZP0B+1N4JV9NG5u3aOxUagNvu1abii4HVANt9wCXAw==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 6484


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6484
Md5:    9256d62545ce389a6a3c33acfd53d5e9
Sha1:   c3b6c6d9af532ba27116f853ac0635a96448021e
Sha256: 2ebfc39b32a1ffd15eb2c605a9005dfe14a6503b3063c61ac40bf0d829388c08
                                        
                                            GET /rsrc.php/v3iQB64/yf/l/en_US/LgbHUMOmkfN.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 16 Apr 2019 18:48:44 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: TBghMiL+lrlo3qwUL5LjlQ==
X-FB-Debug: hjJSfVSgEEDQu3vt1p+dWzpEabZ29wVAOp2bmaqGt742xQYzoFQvGxyuMJood3RbQUmOkCyPzErfWZ5yyCws5Q==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 8475


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8475
Md5:    4c18213222fe96b968deac142f92e395
Sha1:   905d5586c544b4cc25173f07d96e63f0dc2b3269
Sha256: 649d449feee63abff61b07de520470b68bc1861fb3a1b9101737da43c4bffcad
                                        
                                            GET /rsrc.php/v3/yb/l/0,cross/Fgsi42H654I.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/v2.5/plugins/page.php?adapt_container_width=true&app_id=846690882110183&channel=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FFdM1l_dpErI.js%3Fversion%3D42%23cb%3Df13c0654d5b97e%26domain%3Dtvrex.net%26origin%3Dhttp%253A%252F%252Ftvrex.net%252Ff25daa250b1020c%26relation%3Dparent.parent&container_width=265&height=80&hide_cover=false&hide_cta=false&href=https%3A%2F%2Ffacebook.com%2Ftvrex.net%2F&locale=en_US&sdk=joey&show_facepile=false&small_header=false&width=340

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Thu, 11 Apr 2019 23:32:41 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: wJLSdKvhVQCBujvBHiBQ3Q==
X-FB-Debug: 5ACFIFaMr+HnrIZ/UwQqEQQzkonv5wMpUZaBqfIE9K0JDeYcINtYu3+zRAoYaumQHadG5LVDjwf8s0YTFabV4g==
Date: Mon, 16 Apr 2018 20:49:11 GMT
Connection: keep-alive
Content-Length: 2953


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2953
Md5:    c092d274abe1550081ba3bc11e2050dd
Sha1:   c971d705713088abf3cbde2bee358d79fd10509e
Sha256: 94028269d71a8a9000ad3f67c68ff40c549e770b14416c6c5f789112ab875763
                                        
                                            GET /znWaa3gu HTTP/1.1 
Host: dcba.popcash.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
Origin: http://tvrex.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /page/2/ HTTP/1.1 
Host: tvrex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tvrex.net/
X-Moz: prefetch
Cookie: mediaplanBAK=R129289740; mediaplan=R3721136531; _ga=GA1.2.318879639.1523911745; _gid=GA1.2.1727226861.1523911745; _gat=1

                                         
                                         94.23.64.17
HTTP/1.1 200 OK
Content-Type: text/html; charset="UTF-8"
                                        
Set-Cookie: mediaplan=R3721136531; path=/; expires=Mon, 16-Apr-2018 22:02:17 GMT
Date: Mon, 16 Apr 2018 20:49:12 GMT
Server: Apache
X-Powered-By: PHP/7.0.27
Vary: Cookie,Accept-Encoding
Content-Encoding: gzip
Content-Length: 16378
X-IPLB-Instance: 17339


--- Additional Info ---