Overview

URL https://t.co/wijdJwhfWh
IP199.16.156.11
ASNAS13414 Twitter Inc.
Location United States
Report completed2018-11-06 00:28:46 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 199.16.156.11

Date UQ / IDS / BL URL IP
2018-11-16 09:31:08 +0100
0 - 0 - 0 t.co 199.16.156.11
2018-11-16 09:09:28 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.11
2018-11-16 07:38:06 +0100
0 - 0 - 0 https://t.co/AceckE7zkb 199.16.156.11
2018-11-15 19:42:54 +0100
0 - 1 - 4 t.co/NrfzRDmyca 199.16.156.11
2018-11-15 00:45:51 +0100
0 - 0 - 0 https://t.co/gzijSBKKca 199.16.156.11
2018-11-14 18:02:07 +0100
0 - 3 - 0 https://t.co/4rmTF2QXaz 199.16.156.11
2018-11-14 15:37:23 +0100
0 - 0 - 0 https://t.co/GC07DarV3e 199.16.156.11
2018-11-14 13:56:32 +0100
0 - 0 - 1 https://t.co/ePklJ97Nxm 199.16.156.11
2018-11-14 11:43:47 +0100
0 - 0 - 0 https://t.co/ui5V61Neum 199.16.156.11
2018-11-13 22:50:57 +0100
0 - 0 - 0 https://t.co/RYCx1TtEEK 199.16.156.11

Last 10 reports on ASN: AS13414 Twitter Inc.

Date UQ / IDS / BL URL IP
2018-11-16 09:31:08 +0100
0 - 0 - 0 t.co 199.16.156.11
2018-11-16 09:30:23 +0100
0 - 0 - 0 https://twitter.com/jules_su/status/106186588 (...) 104.244.42.129
2018-11-16 09:09:28 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.11
2018-11-16 08:16:10 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.75
2018-11-16 07:38:06 +0100
0 - 0 - 0 https://t.co/AceckE7zkb 199.16.156.11
2018-11-16 03:30:53 +0100
0 - 2 - 3 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 19:42:54 +0100
0 - 1 - 4 t.co/NrfzRDmyca 199.16.156.11
2018-11-15 19:20:01 +0100
0 - 1 - 4 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 17:50:59 +0100
0 - 0 - 0 https://twitter.com/MaryCos82251712 104.244.42.65
2018-11-15 17:47:29 +0100
0 - 0 - 0 https://twitter.com/SuperBo97020009 104.244.42.193

Last 10 reports on domain: t.co

Date UQ / IDS / BL URL IP
2018-11-16 09:31:08 +0100
0 - 0 - 0 t.co 199.16.156.11
2018-11-16 09:09:28 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.11
2018-11-16 08:16:10 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.75
2018-11-16 07:38:06 +0100
0 - 0 - 0 https://t.co/AceckE7zkb 199.16.156.11
2018-11-16 03:30:53 +0100
0 - 2 - 3 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 19:42:54 +0100
0 - 1 - 4 t.co/NrfzRDmyca 199.16.156.11
2018-11-15 19:20:01 +0100
0 - 1 - 4 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 12:52:50 +0100
0 - 0 - 0 hxxps://t.co/xnWoOlYndv 199.16.156.75
2018-11-15 00:45:51 +0100
0 - 0 - 0 https://t.co/gzijSBKKca 199.16.156.11
2018-11-14 18:02:07 +0100
0 - 3 - 0 https://t.co/4rmTF2QXaz 199.16.156.11


JavaScript

Executed Scripts (26)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 758, repeated: 1) - SHA256: 792cb975295390c4473e3630894fa4dd310cc15df4959d939216c5ba6793e9df

                                        < img height = "1"
width = "1"
border = "0"
alt = ""
src = "https://www.googleadservices.com/pagead/conversion/1038302480/?random=1541460497504&cv=9&fst=1541460497504&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair"
style = "display:none" / >
                                    


HTTP Transactions (64)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=137894
Date: Mon, 05 Nov 2018 23:28:14 GMT
Etag: "5be02e6d-1d7"
Expires: Wed, 07 Nov 2018 13:46:28 GMT
Last-Modified: Mon, 05 Nov 2018 11:50:05 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b4c88de82c16ce7954ddf44e6b713c10
Sha1:   d6e79b42d36f1aeac2cbe913ddd403797ed82cb0
Sha256: 8c84f46711beb9625f5a4fd40a2ebbd806bfec7bf708327a90ccff5b1e5ff8c7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=140007
Date: Mon, 05 Nov 2018 23:28:14 GMT
Etag: "5be04388-1d7"
Expires: Wed, 07 Nov 2018 14:21:41 GMT
Last-Modified: Mon, 05 Nov 2018 13:20:08 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e3e90a0715e6b08f8682079a5f40a0d9
Sha1:   e565b1865b5f10d3c341c877ada8df3f6e7ceade
Sha256: 9d42cd694967d0927de77ea35b39e9fe6791a204ce2ea35f0376103fba65000a
                                        
                                            GET /wijdJwhfWh HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         199.16.156.75
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private,max-age=300
Content-Encoding: gzip
Content-Length: 229
content-security-policy: referrer always;
Date: Mon, 05 Nov 2018 23:28:14 GMT
Expires: Mon, 05 Nov 2018 23:33:14 GMT
referrer-policy: unsafe-url
Server: tsa_b
Set-Cookie: muc=d894de71-b198-4b63-a6ea-c73422a41378; Expires=Wed, 04 Nov 2020 23:28:14 GMT; Domain=t.co
strict-transport-security: max-age=0
Vary: Origin
x-connection-hash: bb884f0d96461636b58234f211a12418
x-response-time: 48
x-xss-protection: 1; mode=block; report=https://twitter.com/i/xss_report


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   229
Md5:    5f54c618bc16f08229d624be88669440
Sha1:   cb17ec4ecdfa993655ecb3e8e2fe9ca34a7670bb
Sha256: dc9ec543d1ba6a5acd73ce1902f23a9fd6ba53e24930494566570f56b80efe10
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: muc=d894de71-b198-4b63-a6ea-c73422a41378

                                         
                                         199.16.156.75
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Content-Length: 1150
Date: Mon, 05 Nov 2018 23:28:14 GMT
Server: tsa_b
strict-transport-security: max-age=0
x-connection-hash: bb884f0d96461636b58234f211a12418
x-response-time: 4


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    630d203cdeba06df4c0e289c8c8094f6
Sha1:   eee14e8a36b0512c12ba26c0516b4553618dea36
Sha256: bbce71345828a27c5572637dbe88a3dd1e065266066600c8a841985588bf2902
                                        
                                            GET /979141VF736571md0hS0bH38AGr40560wG HTTP/1.1 
Host: easydeuch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.203.24.11
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Nov 2018 23:28:14 GMT
Server: Apache/2.4.6 (CentOS)
Location: https://www.cagedwizdom.com/6Qhb23uijkoq5t-IpEjecyzuNePf6STu4xb_RgcVVfuSbsfPXk4gjvsL07K9I9qdNcPhO3qcl_178xttvOhjBg~~/12b-979141-736571-40560-0-/0
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.91
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "81786BEF3B039B6DE2D09336ED8721076A5C5BFD6B36F6BA6EF65AFC51FD001E"
Last-Modified: Sun, 04 Nov 2018 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=29252
Expires: Tue, 06 Nov 2018 07:35:47 GMT
Date: Mon, 05 Nov 2018 23:28:15 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    0569a3a02af55d04aeb2ff9e6c46a04e
Sha1:   1567b45e852698f0792081963a222f1e77bd234f
Sha256: 81786bef3b039b6de2d09336ed8721076a5c5bfd6b36f6ba6ef65afc51fd001e
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.121
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Mon, 05 Nov 2018 10:03:15 GMT
Etag: "f4e1c93dab6b42d8bc2ca6573d155c9f26376ba6"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=17305
Expires: Tue, 06 Nov 2018 04:16:40 GMT
Date: Mon, 05 Nov 2018 23:28:15 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    98ca9fe5f1a28f79c137b74ae2fe8d36
Sha1:   f4e1c93dab6b42d8bc2ca6573d155c9f26376ba6
Sha256: 62e1eccec222cdb2390f35ec6a80706e67d56ff4a82fbe5baaeab14533edf2b3
                                        
                                            GET /6Qhb23uijkoq5t-IpEjecyzuNePf6STu4xb_RgcVVfuSbsfPXk4gjvsL07K9I9qdNcPhO3qcl_178xttvOhjBg~~/12b-979141-736571-40560-0-/0 HTTP/1.1 
Host: www.cagedwizdom.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         179.43.147.216
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Nov 2018 23:28:15 GMT
Content-Length: 0
Server: Apache
Set-Cookie: uid5527=543567105-20181105182815-17a407a6e80d23892b1950fd1123806f-; path=/; domain=cagedwizdom.com
Location: https://mgsse.popularshieldredirect.com/?s1=820611&kw=KW


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.91
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "34152F2EBBF6FC6B28BC7D5BFA10D4285E3CF702F70359AA209A143FEFB60EBA"
Last-Modified: Sun, 04 Nov 2018 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=29252
Expires: Tue, 06 Nov 2018 07:35:48 GMT
Date: Mon, 05 Nov 2018 23:28:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    7dbfb740cb973eac52f813998a4d0fe7
Sha1:   39b22301ca438b7f2dc0982f062a90c376d2a0f6
Sha256: 34152f2ebbf6fc6b28bc7d5bfa10d4285e3cf702f70359aa209a143fefb60eba
                                        
                                            GET /?s1=820611&kw=KW HTTP/1.1 
Host: mgsse.popularshieldredirect.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.35.138.117
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Nov 2018 23:28:16 GMT
Transfer-Encoding: chunked
X-ImpID: 78b07dd6-e152-11e8-9270-4e4e3e1c4387
Location: http://www.reimageplus.com/includes/router_land.php?tracking=YTZ2&lpx=slm&banner=ALF&%3F%3Fs1=820611&group_id=483&cntrl=00000&pid=2348&redid=74651&gsid=483&campaign_id=1228&p_id=2348&id=XNSX.-r74651-t483&impid=78b07dd6-e152-11e8-9270-4e4e3e1c4387


--- Additional Info ---
                                        
                                            GET /includes/router_land.php?tracking=YTZ2&lpx=slm&banner=ALF&%3F%3Fs1=820611&group_id=483&cntrl=00000&pid=2348&redid=74651&gsid=483&campaign_id=1228&p_id=2348&id=XNSX.-r74651-t483&impid=78b07dd6-e152-11e8-9270-4e4e3e1c4387 HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate
Content-Encoding: gzip
Date: Mon, 05 Nov 2018 23:13:52 GMT
Location: http://www.reimageplus.com/land/sqi/index.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; expires=Fri, 04-Jan-2019 23:13:52 GMT; path=/ _testcookie=test; expires=Mon, 05-Nov-2018 23:19:52 GMT; path=/ one_time_package=true; expires=Fri, 09-Nov-2018 23:13:52 GMT; path=/; domain=reimageplus.com _master_srcid_ytz2_alf=364; expires=Fri, 09-Nov-2018 23:13:52 GMT; path=/; domain=reimageplus.com _srcid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _srcid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ reward_ab=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com reward_ab=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ rmo=true; expires=Thu, 20-Dec-2018 23:13:52 GMT; path=/; domain=reimageplus.com marketnetwork_subid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com
Content-Length: 22


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    a0501a98ab1b294fd669c2ecd1b8c027
Sha1:   ecd8ceda437c617578af895ce922b9497f20938b
Sha256: cada81a8faf83daa504d843d0795ec58a6f77bd94a28345385cdb54cef383832
                                        
                                            GET /land/sqi/index.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Content-Security-Policy: script-src 'self' 'nonce-a28ac3a5f5d9fa979375693e897cc7e3' *.reimage.com *.reimageplus.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com ;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Encoding: gzip
content-security-policy: script-src 'self' 'nonce-a28ac3a5f5d9fa979375693e897cc7e3' *.reimage.com *.reimageplus.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com ;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Date: Mon, 05 Nov 2018 23:13:52 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: PHPSESSID=utgmg56uhgm0run52hdc20tf21; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _testcookie=test; expires=Mon, 05-Nov-2018 23:19:52 GMT; path=/
X-Webkit-CSP: script-src 'self' 'nonce-a28ac3a5f5d9fa979375693e897cc7e3' *.reimage.com *.reimageplus.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com ;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Length: 3971


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3971
Md5:    c11354d94164c0d2dfa20c56f82e2fd2
Sha1:   010c86ef96654e8b7c016546c88680072d6f8db2
Sha256: 486956ad1ef15b667a2a3abe11acde9898fae646add43f85de46e35eb2e1e263
                                        
                                            GET /ajax/libs/jquery/1.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29839
Date: Wed, 24 Oct 2018 22:27:03 GMT
Expires: Thu, 24 Oct 2019 22:27:03 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
x-xss-protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1040473


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29839
Md5:    9a9b2acb8c0cf46985e07996f688b43d
Sha1:   341c927be8f8344f30afb46d49ce6b5e3da62c7d
Sha256: 0b1e12a7712d7b092fd5e1b2724d6e248670ff82620ec75e24105b6b127e3ca8
                                        
                                            GET /land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Content-Security-Policy: script-src 'self' 'nonce-b740ade8f8426ba476ee7de8b709312b' *.reimage.com *.reimageplus.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com ;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Encoding: gzip
content-security-policy: script-src 'self' 'nonce-b740ade8f8426ba476ee7de8b709312b' *.reimage.com *.reimageplus.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com ;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Date: Mon, 05 Nov 2018 23:13:52 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm; expires=Fri, 04-Jan-2019 23:13:52 GMT; path=/ _testcookie=test; expires=Mon, 05-Nov-2018 23:19:52 GMT; path=/
X-Webkit-CSP: script-src 'self' 'nonce-b740ade8f8426ba476ee7de8b709312b' *.reimage.com *.reimageplus.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com ;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Length: 7899


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7899
Md5:    726ac9602dec64c87d5f66f30c59b8cc
Sha1:   ba42d45bc3d61ed37299ef313e6c4938b4614b05
Sha256: 71402e8bac0fec3c9be3f403a94a41189b5d6e59628a47402fe1d5eb9986b880
                                        
                                            GET /pagead/conversion.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 05 Nov 2018 23:28:17 GMT
Expires: Mon, 05 Nov 2018 23:28:17 GMT
Cache-Control: private, max-age=3600
Etag: 8349754170434782785
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 9225
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9225
Md5:    13fdaf90bf39fba34f8cddfa85bb7583
Sha1:   5953513796fda886da7a5c8c0a76e3538168bcb2
Sha256: 3c5473a2bfd406654faa2e3634bafdad067148999c75c4cf0b39c30f558923b0
                                        
                                            GET /meter/www.reimageplus.com/23.gif HTTP/1.1 
Host: images.scanalert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         143.204.47.60
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Content-Length: 3005
Connection: keep-alive
Date: Mon, 05 Nov 2018 23:06:01 GMT
Server: Apache
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: public
Expires: Tue, 06 Nov 2018 00:06:01 GMT
Content-Encoding: gzip
Age: 1336
X-Cache: Hit from cloudfront
Via: 1.1 bb684631d3410428ce0102bc44ea709f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: IRHIuv7bJ8LxKNNi-2dtCTafbBOKlhBYi3AnXQr6A3y6cMuuIM9Fww==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3005
Md5:    102539419ea49058a5fd78365f742469
Sha1:   e4e891e5dc0d2c41eabf5dd8b497c191c287560a
Sha256: 7d59d63d95e75cf20757455fb4c3cc5333a2aacbf0424fc92a7a01ad3b694370
                                        
                                            GET /website/newwebsite/lp/sqh/Win7.gif HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783273"
Cache-Control: max-age=86400
Content-Length: 3059
Last-Modified: Wed, 01 Jun 2016 12:14:33 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds006.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 60 x 62
Size:   3059
Md5:    72edefcd39d81e6d207b19834e6941ef
Sha1:   03e824da65cf1fbb8849c06df5fee4f753d3d8ce
Sha256: 41e53e6880391a2ffdcecfc04969e62ade0e3383c54aed8c281a3c5c122a5f3c
                                        
                                            GET /website/newwebsite/lp/sys/reimage-repair-software-screen.en.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1390487880"
Cache-Control: max-age=86400
Content-Length: 38615
Last-Modified: Thu, 23 Jan 2014 14:38:00 GMT
X-HW: 1541460497.dop003.sk1.t,1541460497.cds055.sk1.c


--- Additional Info ---
Magic:  PNG image, 270 x 194, 8-bit/color RGB, non-interlaced
Size:   38615
Md5:    bee784d55ec18bbbb78d9cf551c0105f
Sha1:   e1b6cf0968e124fdc1089668a97c619c1a3ae0da
Sha256: ce64b3df68854a7dd3bc367bcd76ead89fec756099f139e8098597abc9172d8e
                                        
                                            GET /land/sqi/css/style.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 05 Nov 2018 23:13:53 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Connection: Keep-Alive
Content-Length: 2365


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2365
Md5:    71eb0211abaa9316304cff6d05713e35
Sha1:   a5d3eb2e686930a97206360bee8dd78e5ed1f63e
Sha256: 24393c321dda7fc83f943387a482bbfd97947eebdf89d002f5749cce2ea9b9b2
                                        
                                            GET /website/newwebsite/lp/sqh/page-header.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783260"
Cache-Control: max-age=86400
Content-Length: 28164
Last-Modified: Wed, 01 Jun 2016 12:14:20 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds036.sk1.c


--- Additional Info ---
Magic:  PNG image, 1484 x 34, 8-bit/color RGB, non-interlaced
Size:   28164
Md5:    72eb11363a557a2d01e4fc9e453e0d93
Sha1:   0bc01fa850199e45985fc2c05036c2daaea1cc19
Sha256: 104c8b1b981bed8968301cd28d4daf83d09dbc23b51a862ab6ebb9e59cc0f785
                                        
                                            GET /assets/styles/jquery.fancybox/jquery.fancybox-2.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 05 Nov 2018 23:13:53 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Connection: Keep-Alive
Content-Length: 1606


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1606
Md5:    39c87544233ef0fafef3816c7dc083d1
Sha1:   b5a214c16e29bb922d7dd247c8cd4ab32a48ec15
Sha256: e39857dbe26db2b9569d4ee2d3246135a51f76684c0caa76a4b7ba1d63f0b8ea
                                        
                                            GET /website/newwebsite/lp/sqh/button_download_anim.gif HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783237"
Cache-Control: max-age=86400
Content-Length: 13233
Last-Modified: Wed, 01 Jun 2016 12:13:57 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds056.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 266 x 64
Size:   13233
Md5:    a415393521909e0c856acf0e00116630
Sha1:   6210356d1cd38ecf31de48c746a650418e41a520
Sha256: 031e1fb30c05d97c39bd6db7a4c99b4fd96fcfad71c9f2ffdffc8cd19e4012fe
                                        
                                            GET /assets/scripts/cookie-note.js HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache/2.2.15 (CentOS)
Date: Mon, 05 Nov 2018 23:13:53 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Thu, 11 Oct 2018 10:09:19 GMT
Content-Length: 684


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   684
Md5:    31a26a241ed14defc5417202d0ec5362
Sha1:   4071ec8b0f05942d1debfc17f04e14a24c890c76
Sha256: 6348d80a177746d0a346fb0c8aba8b73d2ddee827506a31abc054a60b77b6168
                                        
                                            GET /website/newwebsite/lp/sqh/box-bg.gif HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783236"
Cache-Control: max-age=86400
Content-Length: 1854
Last-Modified: Wed, 01 Jun 2016 12:13:56 GMT
X-HW: 1541460497.dop009.sk1.t,1541460497.cds047.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 5 x 187
Size:   1854
Md5:    8ff2fa6eb2a493a50bd5d1e62ca65aab
Sha1:   a417692e32fd2191007dbe0d720bd47f3944f5f5
Sha256: 29bb9c83e89d0bc33f498d269d352e39d2685903a1edf1f01b2b48f6830b10c8
                                        
                                            GET /website/newwebsite/lp/sqh/step1-bg-trans.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783266"
Cache-Control: max-age=86400
Content-Length: 3300
Last-Modified: Wed, 01 Jun 2016 12:14:26 GMT
X-HW: 1541460497.dop005.sk1.t,1541460497.cds028.sk1.c


--- Additional Info ---
Magic:  PNG image, 58 x 90, 8-bit/color RGBA, non-interlaced
Size:   3300
Md5:    1d15fb682fe3dff47991aa9751a875b9
Sha1:   8eb2b2cf19fe82e7188aeee5ce0e9b9da1906103
Sha256: b8755dc875e0a34693d2a5d357d9bff4d5f19d7c2a2d5134dc628a3f61caf000
                                        
                                            GET /website/newwebsite/lp/sqh/step2-bg-trans.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783268"
Cache-Control: max-age=86400
Content-Length: 7025
Last-Modified: Wed, 01 Jun 2016 12:14:28 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds019.sk1.c


--- Additional Info ---
Magic:  PNG image, 138 x 122, 8-bit/color RGBA, non-interlaced
Size:   7025
Md5:    d5ee2f43e2a023082f436ecbd1bdc481
Sha1:   fba3f6e488539af100ab96bac877064732320921
Sha256: 11d91f55b1674e173ddfe06eb57ae85fa33a6cff7af1302f507ac242d07a80d8
                                        
                                            GET /website/newwebsite/lp/sqh/step-bg.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783269"
Cache-Control: max-age=86400
Content-Length: 18292
Last-Modified: Wed, 01 Jun 2016 12:14:29 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds028.sk1.c


--- Additional Info ---
Magic:  PNG image, 275 x 61, 8-bit/color RGB, non-interlaced
Size:   18292
Md5:    7b6e60e77c3654a847d5081395960cf5
Sha1:   c796375204359b947c6b62ebfbaccaaa7680b8b8
Sha256: 33c28e008ac3729e9b12dbc10be193b77e16a41a6c3693d4082858d3cba92e59
                                        
                                            GET /website/newwebsite/lp/sqh/green_v.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783247"
Cache-Control: max-age=86400
Content-Length: 1600
Last-Modified: Wed, 01 Jun 2016 12:14:07 GMT
X-HW: 1541460497.dop012.sk1.t,1541460497.cds033.sk1.c


--- Additional Info ---
Magic:  PNG image, 17 x 18, 8-bit/color RGB, non-interlaced
Size:   1600
Md5:    2008cbae40db2b500152c7dafd984d93
Sha1:   b96943808ebecacadb2854638340c44ed81f5131
Sha256: 9d67b141e9910fc9573bb40f0da15b37a07f321f364b49d248dd04b051b94cfe
                                        
                                            GET /website/newwebsite/lp/sqh/left-line1.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783252"
Cache-Control: max-age=86400
Content-Length: 1408
Last-Modified: Wed, 01 Jun 2016 12:14:12 GMT
X-HW: 1541460497.dop009.sk1.t,1541460497.cds033.sk1.c


--- Additional Info ---
Magic:  PNG image, 19 x 18, 8-bit/color RGB, non-interlaced
Size:   1408
Md5:    51e96eb80b3315a78a3c263128863f80
Sha1:   298c6e6342d078787d2faed5a9c72fbb52b69608
Sha256: b331acc4c4aa2a03b8285ea5c5713d0fc0a1b8afab057511942b984af3a94c33
                                        
                                            GET /website/newwebsite/lp/sqh/left-line2.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783253"
Cache-Control: max-age=86400
Content-Length: 1769
Last-Modified: Wed, 01 Jun 2016 12:14:13 GMT
X-HW: 1541460497.dop005.sk1.t,1541460497.cds050.sk1.c


--- Additional Info ---
Magic:  PNG image, 20 x 20, 8-bit/color RGB, non-interlaced
Size:   1769
Md5:    f0cbc1f1348e5a7dd71117fff276b24c
Sha1:   2727805dff980bd62185470382b842811d4318fb
Sha256: b0eed672ea60ec55d4d9cf2d35704334217a77c07b6dcaadc8c5e6aa67cfedfd
                                        
                                            GET /website/newwebsite/lp/sqh/left-line3.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783254"
Cache-Control: max-age=86400
Content-Length: 1674
Last-Modified: Wed, 01 Jun 2016 12:14:14 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds058.sk1.c


--- Additional Info ---
Magic:  PNG image, 19 x 20, 8-bit/color RGB, non-interlaced
Size:   1674
Md5:    39494baf3c541996c3b3bb06283fdb46
Sha1:   62ff085ad2b7373d5f11b5b069cd7a583d3e863f
Sha256: 4e23b54f1144c274b359d7ef5c60d49a82bd6e060896e6b5816a779fe0eb6cb1
                                        
                                            GET /website/newwebsite/lp/sqh/left-line4.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783255"
Cache-Control: max-age=86400
Content-Length: 1694
Last-Modified: Wed, 01 Jun 2016 12:14:15 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds005.sk1.c


--- Additional Info ---
Magic:  PNG image, 21 x 21, 8-bit/color RGB, non-interlaced
Size:   1694
Md5:    5e66342138a9e7fe493159cd1d022c7f
Sha1:   4644e410677f717a372309dcaec4e0040e0869f5
Sha256: 6ef1d9b7114972450bc65ef971b9f1b6bcda9a14dfdacd0d2eef5982ab13bbd6
                                        
                                            GET /website/newwebsite/lp/sqh/left-line5.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783256"
Cache-Control: max-age=86400
Content-Length: 1491
Last-Modified: Wed, 01 Jun 2016 12:14:16 GMT
X-HW: 1541460497.dop012.sk1.t,1541460497.cds041.sk1.c


--- Additional Info ---
Magic:  PNG image, 18 x 17, 8-bit/color RGB, non-interlaced
Size:   1491
Md5:    a59e741ab3d51d4e1e5ba30b0a7b29a8
Sha1:   8ceb645eaf53da45d0308de878c665ab9b2c6359
Sha256: 79c1403f2c097fe69db72c4a7f7200093781ee005dfd6c6cb2b4c6d6f10e389a
                                        
                                            GET /website/newwebsite/lp/sqh/free-scan.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783246"
Cache-Control: max-age=86400
Content-Length: 2049
Last-Modified: Wed, 01 Jun 2016 12:14:06 GMT
X-HW: 1541460497.dop009.sk1.t,1541460497.cds033.sk1.c


--- Additional Info ---
Magic:  PNG image, 30 x 24, 8-bit/color RGB, non-interlaced
Size:   2049
Md5:    8c7d05b98e6f2d5fbf1c60adffeea4f2
Sha1:   6149378a53addf1878bfaeab1b0e89c0c8db3b83
Sha256: 158bdf06a0618d1484c272c35bf6eeed158a9440ae9b12ac74dd66c7ba435dd8
                                        
                                            GET /website/newwebsite/lp/sqh/cloud.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783238"
Cache-Control: max-age=86400
Content-Length: 2816
Last-Modified: Wed, 01 Jun 2016 12:13:58 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds005.sk1.c


--- Additional Info ---
Magic:  PNG image, 46 x 38, 8-bit/color RGB, non-interlaced
Size:   2816
Md5:    37b3f2641ececb4eda59252b1a621eb7
Sha1:   5911bfd3a30a6b3b2d83ac8e9ffe631c0c4e5039
Sha256: c2ebc7735534bd0e5708bfae2406b4cfcdbdc7f6ab7bf8838aba82023383269c
                                        
                                            GET /website/newwebsite/lp/sqh/repair-win.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783264"
Cache-Control: max-age=86400
Content-Length: 2179
Last-Modified: Wed, 01 Jun 2016 12:14:24 GMT
X-HW: 1541460497.dop005.sk1.t,1541460497.cds050.sk1.c


--- Additional Info ---
Magic:  PNG image, 27 x 28, 8-bit/color RGB, non-interlaced
Size:   2179
Md5:    5851745de354765e2125f096e27ae2a2
Sha1:   c894df89fada34d309a6774ddc9babf725934ed6
Sha256: e51e18fcf47fa9b6b5bf724f6a9655c25a05d215afba827f205aaeb47642d87a
                                        
                                            GET /website/newwebsite/lp/sqh/improve-pc.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:17 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783249"
Cache-Control: max-age=86400
Content-Length: 1390
Last-Modified: Wed, 01 Jun 2016 12:14:09 GMT
X-HW: 1541460497.dop004.sk1.t,1541460497.cds019.sk1.c


--- Additional Info ---
Magic:  PNG image, 25 x 25, 8-bit/color RGB, non-interlaced
Size:   1390
Md5:    a33103966c40c7af0394283801707874
Sha1:   e49748cd9d3b4966984dc25acd8a688828210390
Sha256: da2871c4669d112fb708df1920f01a6aefdd5f257ef87cdfd3b424fc8eb2be59
                                        
                                            GET /dc.js HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         108.177.14.154
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
Date: Mon, 05 Nov 2018 21:39:12 GMT
Expires: Mon, 05 Nov 2018 23:39:12 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17093
Cache-Control: public, max-age=7200
Age: 6545


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17093
Md5:    5f65521f6c6223e1e18cb161832bea2a
Sha1:   f03800023e7bbe2579cd24e122cdf8c6ecf8b4c6
Sha256: 787b69b93681cf41784dfa8655cbdafe8a56ecc62f0112a6ea2241a284a0e3c9
                                        
                                            GET /assets/scripts/jquery.fancybox/jquery.fancybox-2.js HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache/2.2.15 (CentOS)
Date: Mon, 05 Nov 2018 23:13:53 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Sun, 07 Jun 2015 06:06:18 GMT
Content-Length: 48716


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   48716
Md5:    932c065e6c0658681ca19a34d45981f4
Sha1:   7e10f6aba5d7bc1b21e0c62ba107ac5593c039d8
Sha256: 1a2da275a2f66503da340a4b38a064c5329d8b3f03eb057dee553786482c4874
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2dc&utms=1&utmn=1591238400&utmhn=www.reimageplus.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Reimage%20Repair&utmhid=898453372&utmr=0&utmp=%2Fland%2Fsqi%2Findex_src.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&utmht=1541460498245&utmac=UA-24411584-1&utmcc=__utma%3D141870001.965065928.1541460498.1541460498.1541460498.1%3B%2B__utmz%3D141870001.1541460498.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1502603329&utmredir=3&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         108.177.14.154
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
strict-transport-security: max-age=10886400; includeSubDomains; preload
Date: Mon, 05 Nov 2018 23:28:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Nov 2018 23:28:18 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
x-xss-protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    7130547d58db234da499d9c7020b2421
Sha1:   3563d3ff7dd34ab0a94d6ce8442d96334ae36671
Sha256: 6af80d4f01d1339c7c877f41fc8608fcb0774fec2b6206b900306a383f34b52d
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Nov 2018 23:28:18 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
x-xss-protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /js/1.js HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         143.204.47.127
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 2829
Connection: keep-alive
Date: Mon, 05 Nov 2018 23:16:14 GMT
Server: Apache
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff
Expires: Tue, 06 Nov 2018 00:16:14 GMT
Content-Encoding: gzip
Age: 724
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: x7K5tCLX7fucrQSm7aLITEOYv7CPLqnLqUoBYHQA-DqDQ7NCR7EcNQ==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2829
Md5:    e2f006b9cb97e3af3672505fe23c4660
Sha1:   dd1283a182f72a9dfe0b0e397dc2cf3ed16f2ca5
Sha256: 278cdee696684a6d8b3344cc99e1f92869d3a8a03764f790414c0731e8c42dfa
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: muc=d894de71-b198-4b63-a6ea-c73422a41378

                                         
                                         199.16.156.75
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Content-Length: 1150
Date: Mon, 05 Nov 2018 23:28:18 GMT
Server: tsa_b
strict-transport-security: max-age=0
x-connection-hash: bb884f0d96461636b58234f211a12418
x-response-time: 4


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    630d203cdeba06df4c0e289c8c8094f6
Sha1:   eee14e8a36b0512c12ba26c0516b4553618dea36
Sha256: bbce71345828a27c5572637dbe88a3dd1e065266066600c8a841985588bf2902
                                        
                                            GET /pagead/conversion/1038302480/?random=1541460497504&cv=9&fst=1541460497504&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         216.58.209.130
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 05 Nov 2018 23:28:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1038302480/?random=1431102666&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=EtLgW6mdIdCBywX0zbGgAQ&crd=CKrPGwiC0BsI19EbCInSGw&gtd=
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
x-xss-protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Nov 2018 23:28:18 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
x-xss-protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    5108c12165baecbb8ec2ad38d07ead9c
Sha1:   6eb3f758915a43e84637d0c7322c72b6a01b9d26
Sha256: 8b706f02f0147a4f77267b0aafb611175d562522fa4028e7c2e75d318c390ac2
                                        
                                            GET /pagead/viewthroughconversion/1038302480/?random=1431102666&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=EtLgW6mdIdCBywX0zbGgAQ&crd=CKrPGwiC0BsI19EbCInSGw&gtd= HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         216.58.207.194
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Mon, 05 Nov 2018 23:28:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/pagead/1p-user-list/1038302480/?random=1431102666&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=CKrPGwjX0RsIidIbCITQGw&cdct=2&is_vtc=1&random=3487422072&resp=GooglemKTybQhCsO
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
x-xss-protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 05-Nov-2018 23:43:18 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Nov 2018 23:28:18 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
x-xss-protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    30f4f632397471f9a34f37988164b838
Sha1:   84dc8405f3be9ed485c86cd34261f81b306257b9
Sha256: 2db944fdacafcc2bd447e905ad5f53397d4452af94868e7ef4098defb6b269df
                                        
                                            GET /pagead/1p-user-list/1038302480/?random=1431102666&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=CKrPGwjX0RsIidIbCITQGw&cdct=2&is_vtc=1&random=3487422072&resp=GooglemKTybQhCsO HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         172.217.21.132
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 05 Nov 2018 23:28:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/pagead/1p-user-list/1038302480/?random=1431102666&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=CKrPGwjX0RsIidIbCITQGw&cdct=2&is_vtc=1&random=3487422072&resp=GooglemKTybQhCsO&ipr=y
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
x-xss-protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Nov 2018 23:28:18 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
x-xss-protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    52a112044e91aedc3c99220bc1f3fd08
Sha1:   61149eb9bee110b0818a9bfebc6a5b982afbb35d
Sha256: 515e3650b7e057de512092550df3a2dd03eff5ea215f7920a92f1ffb77e681f8
                                        
                                            GET /pagead/1p-user-list/1038302480/?random=1431102666&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&eid=659255991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=CKrPGwjX0RsIidIbCITQGw&cdct=2&is_vtc=1&random=3487422072&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 05 Nov 2018 23:28:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
x-xss-protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /mfesecure-public/host/reimageplus.com/client.json HTTP/1.1 
Host: s3-us-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm
Origin: http://www.reimageplus.com

                                         
                                         52.218.204.0
HTTP/1.1 200 OK
Content-Type: application/json
                                        
x-amz-id-2: d/vr2zT+ui+/IbFoZ6bknpYGZsN0jTblLexwt20V6oRNQluk9msxekcUINw4DyLdgGvBxW+ZWhk=
x-amz-request-id: 9D7A0609E285FA61
Date: Mon, 05 Nov 2018 23:28:19 GMT
Access-Control-Allow-Origin: http://www.reimageplus.com
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Expose-Headers: Access-Control-Allow-Origin
Access-Control-Max-Age: 60
Access-Control-Allow-Credentials: true
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 04 Nov 2018 14:35:10 GMT
Etag: "86a8d89e3d194b9bfdc41f1c04a76272"
Cache-Control: public, max-age=60
Content-Encoding: gzip
x-amz-version-id: P1snIaY9fq4OILh7sY0u4GF6_bb.A9Fw
Accept-Ranges: bytes
Content-Length: 144
Server: AmazonS3


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   144
Md5:    86a8d89e3d194b9bfdc41f1c04a76272
Sha1:   9dc4ae4f8f88b438b68f235d050407372d090ab2
Sha256: c9307911e3455085ca9581366c6fff5bac901cf192bb37d8fcaf75f491d67eb3
                                        
                                            GET /static/img/tm-float.png HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         143.204.47.127
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Content-Length: 9330
Connection: keep-alive
Date: Thu, 26 Apr 2018 23:59:53 GMT
Expires: Fri, 27 Apr 2018 23:59:53 GMT
Cache-Control: public, max-age=86400
Server: Apache
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff
Etag: "HioVbLUyInv"
Last-Modified: Thu, 26 Apr 2018 22:02:54 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Age: 84350
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 4nGbVBTkr1FFBoNA2uvUgylwwVZyqusak-WQlx8fNJzglGDGG7QgzQ==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   9330
Md5:    c4c9391d05918c1a7045dff82c1391b2
Sha1:   be2ec6556d902ae0d78fa62cf2cb2751f357e8c0
Sha256: ec706c9c38eb71c40deb0d3deb2abe51058dc256910bfde4ef76d2a2bae24f61
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.201
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=111419
Date: Mon, 05 Nov 2018 23:28:19 GMT
Etag: "5bdfc04c-1d7"
Expires: Wed, 07 Nov 2018 06:25:18 GMT
Last-Modified: Mon, 05 Nov 2018 04:00:12 GMT
Server: ECS (lga/1378)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714d.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zPF02ueG_SfXtjZApiADeYN_b00LXuCiy_XHpIJKbumyVB442O4OZA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4c92d9689462147608fe0b6c908cc156
Sha1:   a4dcc33eb588c8692eadaa7821431d86c016165b
Sha256: 8378c4c01546c84af69ee8bfa58765a8c6a099beb2ebaaa825bfa7f1b1e68ea4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.148
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Mon, 05 Nov 2018 23:28:19 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.7/2018-03-28)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0771.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zUCqbzmVJVIp030QIAjG57k_2yj6O2mBL1bY7Y5wbzdmwuplYj95nA==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    5b06f2b44b842656a8e5af0f0da9951e
Sha1:   91fe65c8a6bdbb6632f9ab75c3714539f63390ac
Sha256: 82798a01d7991b12b2c1b50dccc72c77e7c00b80264c63a3aeb16933582d2039
                                        
                                            GET /js/1.js HTTP/1.1 
Host: cdn.trustedsite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         143.204.47.97
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 1872
Connection: keep-alive
Date: Mon, 05 Nov 2018 22:50:42 GMT
Server: Apache
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff
Expires: Mon, 05 Nov 2018 23:50:42 GMT
Content-Encoding: gzip
Age: 2257
X-Cache: Hit from cloudfront
Via: 1.1 bb684631d3410428ce0102bc44ea709f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: w54j2PI9b1ha2o4n1RwE7b5sOKA4dYyz9XSUPtcNXEH659PRYDJT9g==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1872
Md5:    68dc342c1d27074362709798cc24d63e
Sha1:   cee55e0da80266c231acd65ebd386a563cca4e1c
Sha256: 5d4eda3ee64d69b769c026a13f4d30022c7af252a378acd0198943e917a9dbae
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.201
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=104914
Date: Mon, 05 Nov 2018 23:28:19 GMT
Etag: "5bdf8a5c-1d7"
Expires: Wed, 07 Nov 2018 04:36:53 GMT
Last-Modified: Mon, 05 Nov 2018 00:10:04 GMT
Server: ECS (lga/1391)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714d.cloudfront.net (CloudFront)
X-Amz-Cf-Id: eId-N-PVyJbYsVxT5ya6QkNylTvw8S0dMKAJB1jyvBKe64g_MQP9jQ==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b089911cd22feb2730ece710e0061a00
Sha1:   e3ac4ea46912bff762e677a58f864a9af5222408
Sha256: d962e60edab032aa5d1f48fdfb6182c20bd0e35d7df545ab360b8f7c99c00fa9
                                        
                                            GET /trustedsite-public/host/reimageplus.com/client.js HTTP/1.1 
Host: s3-us-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         52.218.204.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: ZYknYkOS+tKuoWe32zg+Td06rgXUIdwuDVW1g1aJhquIzRVaTdube5VNrZ2tVp20NpRJqSPksaw=
x-amz-request-id: 9CEAF53CFB724755
Date: Mon, 05 Nov 2018 23:28:20 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 04 Jul 2018 23:05:38 GMT
Etag: "99a45cba3096b08317048a968af70cbd"
Cache-Control: public, max-age=60
Content-Encoding: gzip
x-amz-version-id: Otnbc0GHkBiRt7w2FfDBHNevvLnNWi3E
Accept-Ranges: bytes
Content-Length: 148
Server: AmazonS3


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   148
Md5:    99a45cba3096b08317048a968af70cbd
Sha1:   cdb50d86e5f776a679bd516f54f9b87eaee8938d
Sha256: bb45e632cbf9940c1180c70ff511fcd962b7fd2bc9c107f36a1c05850ca40582
                                        
                                            GET /website/newwebsite/lp/sqh/patent.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css
Cookie: one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 23:28:20 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1464783261"
Cache-Control: max-age=86400
Content-Length: 9406
Last-Modified: Wed, 01 Jun 2016 12:14:21 GMT
X-HW: 1541460500.dop003.sk1.t,1541460500.cds029.sk1.c


--- Additional Info ---
Magic:  PNG image, 95 x 43, 8-bit/color RGBA, interlaced
Size:   9406
Md5:    a325c56ac5095d3459a31023cbddaad8
Sha1:   77d2ce1eaa9775d901dc79a329d324c5f20f0e75
Sha256: 2e7c88199f79f7ee899df4333e85ea8959c6b156c1ea96dc0f0a1d3fe7d48f0e
                                        
                                            GET /rpc/ajax?do=tmjs-visit&host=reimageplus.com&rand=1541460498906 HTTP/1.1 
Host: www.mcafeesecure.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         35.166.16.223
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Mon, 05 Nov 2018 23:28:20 GMT
Content-Length: 40
Connection: keep-alive
Set-Cookie: AWSALB=Yyx93vGo4udFJMl01fZtJU9yguJjmdVmHz2WD3t8mrS9tRBmOB0rrDALxCbPNhU/qNBLd4X1Fsu9MLTFbyYWgR2Mf6Moah3QDAAQiCASmqNbIOoMwfcvmyxTvFnZ; Expires=Mon, 12 Nov 2018 23:28:20 GMT; Path=/
Server: Apache
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   40
Md5:    23f8af64a9364dc9b916c8bcb04992e4
Sha1:   a2ddcaca5153740d1827634a352b2fbad122b087
Sha256: ac2aeadca857d63c1a4145862504a664f4cb1716246995057a11f2c7f1b12dca
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm; __utma=141870001.965065928.1541460498.1541460498.1541460498.1; __utmb=141870001.1.10.1541460498; __utmc=141870001; __utmz=141870001.1541460498.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; mfesecure_visit=1

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 05 Nov 2018 23:13:56 GMT
Location: http://www.reimageplus.com/images/reimage.ico
Connection: Keep-Alive
Content-Length: 253


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   253
Md5:    89fbda29cd4758e3ab1f35468df805c2
Sha1:   337a11ad7f3201d716eafe475be4744c14579cb1
Sha256: aa3c8a7d131750c62a273230a83039796256fc9b9f7cb160de4b7e97a39af71d
                                        
                                            GET /images/reimage.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm; __utma=141870001.965065928.1541460498.1541460498.1541460498.1; __utmb=141870001.1.10.1541460498; __utmc=141870001; __utmz=141870001.1541460498.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; mfesecure_visit=1

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: Apache/2.2.15 (CentOS)
Date: Mon, 05 Nov 2018 23:13:56 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Mon, 30 Apr 2012 13:14:46 GMT
Content-Length: 894


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   894
Md5:    d0c2bd29933d303826e58db070e10832
Sha1:   1a6f18c55c3cd9ea9ff9485afc30c213a6aeefef
Sha256: 3af4842e79f2e783c9a73e19493a10164df5cf27e7e2fb67fb51b2f99d3b4d84
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=B35D044F0E02D4A70B1EE00B7AE864AF; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ2%26lpx%3Dslm%26banner%3DALF%26%253F%253Fs1%3D820611%26group_id%3D483%26cntrl%3D00000%26pid%3D2348%26redid%3D74651%26gsid%3D483%26campaign_id%3D1228%26p_id%3D2348%26id%3DXNSX.-r74651-t483%26impid%3D78b07dd6-e152-11e8-9270-4e4e3e1c4387; _testcookie=test; one_time_package=true; _master_srcid_ytz2_alf=364; rmo=true; PHPSESSID=utgmg56uhgm0run52hdc20tf21; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ2%26banner%3DALF%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3Ddirect%26nms%3D1%26lpx%3Dslm; __utma=141870001.965065928.1541460498.1541460498.1541460498.1; __utmb=141870001.1.10.1541460498; __utmc=141870001; __utmz=141870001.1541460498.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; mfesecure_visit=1

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 05 Nov 2018 23:13:59 GMT
Location: http://www.reimageplus.com/images/reimage.ico
Connection: Keep-Alive
Content-Length: 253


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   253
Md5:    89fbda29cd4758e3ab1f35468df805c2
Sha1:   337a11ad7f3201d716eafe475be4744c14579cb1
Sha256: aa3c8a7d131750c62a273230a83039796256fc9b9f7cb160de4b7e97a39af71d
                                        
                                            GET /getseal?host_name=www.reimageplus.com&size=S&use_flash=NO&use_transparent=NO&lang=en HTTP/1.1 
Host: seal.websecurity.norton.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ2&banner=ALF&adgroup=direct&ads_name=direct&keyword=direct&nms=1&lpx=slm

                                         
                                         0.0.0.0
                                        


--- Additional Info ---