Overview

URL Slagstreet.com
IP94.136.40.82
ASNAS20738 Webfusion Internet Solutions
Location United Kingdom
Report completed2018-04-16 22:43:55 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 94.136.40.82

Date UQ / IDS / BL URL IP
2018-07-13 23:58:28 +0200
0 - 0 - 1 nude-lighting.co.uk/var/at5_crypted.exe 94.136.40.82
2018-07-13 03:39:17 +0200
0 - 0 - 1 farnham-taxi.co.uk/wp-content/themes/twentyth (...) 94.136.40.82
2018-07-10 19:01:07 +0200
0 - 0 - 1 farnham-taxi.co.uk/wp-content/themes/twentyth (...) 94.136.40.82
2018-07-09 17:12:14 +0200
0 - 0 - 0 www.piresearch.com 94.136.40.82
2018-07-09 08:54:29 +0200
0 - 0 - 1 tailor-madeadventures.com/wp-content/themes/2010 94.136.40.82
2018-07-08 14:14:56 +0200
0 - 0 - 0 financialadviceguildford.co.uk 94.136.40.82
2018-07-08 13:54:02 +0200
0 - 0 - 0 suitablefinancialadvice.com 94.136.40.82
2018-07-07 21:09:44 +0200
0 - 0 - 0 cityfinancialadvice.co.uk 94.136.40.82
2018-07-07 10:57:20 +0200
0 - 0 - 0 startfinancialadvice.com 94.136.40.82
2018-07-07 10:38:15 +0200
0 - 0 - 0 financialadvicebeverley.co.uk 94.136.40.82

Last 10 reports on ASN: AS20738 Webfusion Internet Solutions

Date UQ / IDS / BL URL IP
2018-07-20 15:37:21 +0200
0 - 0 - 0 documents@service-impots.net 46.32.240.41
2018-07-20 14:49:32 +0200
0 - 0 - 0 gr.qbicom.net 212.48.78.206
2018-07-20 12:42:31 +0200
0 - 0 - 1 fastrackagency.co.uk/apply 94.136.40.51
2018-07-19 19:08:14 +0200
0 - 0 - 0 www.mattberkley.com 94.136.40.103
2018-07-19 17:38:11 +0200
0 - 1 - 0 hacialihomes.com/ 79.170.44.147
2018-07-19 09:06:12 +0200
0 - 0 - 1 kent.graphics/ 94.136.40.51
2018-07-19 07:53:50 +0200
0 - 0 - 1 averlon.global/ 94.136.40.51
2018-07-19 02:32:58 +0200
0 - 0 - 1 kbijoux.co.uk/ 94.136.40.51
2018-07-17 01:46:30 +0200
0 - 1 - 0 bankofamerica.com-verification.link.unitedsta (...) 176.32.230.48
2018-07-17 00:34:31 +0200
0 - 0 - 1 tidyurl247.com/ 94.136.50.85

No other reports on domain: slagstreet.com



JavaScript

Executed Scripts (10)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (34)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: slagstreet.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         94.136.40.82
HTTP/1.1 301 Moved Permanently
                                        
Cache-Control: private
Location: https://t.insigit.com/tds/int?tdsId=a8582yal_r&tds_campaign=a8582yal&utm_source=int&utm_campaign=7062d360&utm_content=%7Butm_content%7D&data2=%7Bdata2%7D&utm_sub=opnfnlconf
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Mon, 16 Apr 2018 20:43:19 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         13.33.23.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170315
Date: Mon, 16 Apr 2018 20:43:21 GMT
Etag: "5ad4f19e-1d7"
Expires: Wed, 18 Apr 2018 20:01:56 GMT
Last-Modified: Mon, 16 Apr 2018 18:55:26 GMT
Server: ECS (lga/13AD)
X-Cache: Miss from cloudfront
Via: 1.1 6a4ac6dc45d50207c441c9986e5019a0.cloudfront.net (CloudFront)
X-Amz-Cf-Id: r4UU5mB8kC51ov6U6HEttqTpeMrX1_5_fro_iu3OsRSoN1T6m5tSZw==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    062305ab48bef2127f66bbb9f6e28369
Sha1:   18a37f3bfeccdbe893fd27c88624282ccbb0e684
Sha256: 7d00cbef39261a306dd10843a3c1065da1136604cadd16899a59cdb438637d56
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         13.33.23.243
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Mon, 16 Apr 2018 20:43:21 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.6/2017-12-14)
X-Cache: Miss from cloudfront
Via: 1.1 6a4ac6dc45d50207c441c9986e5019a0.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zlAtQLWnT7buTvZoOAo_k7JTRxGyKztRDR43c5USrHbKmKiGvtScfA==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    f55861f7334a37f71fd9123e06c059c2
Sha1:   d66a03d9e6cab9ad4d46ab82374f9c22f5661a96
Sha256: ed68f349d33c02caeb612a8a74eb9664db1d532c2bc22dad7cc77ff3a987e77c
                                        
                                            GET /tds/int?tdsId=a8582yal_r&tds_campaign=a8582yal&utm_source=int&utm_campaign=7062d360&utm_content=%7Butm_content%7D&data2=%7Bdata2%7D&utm_sub=opnfnlconf HTTP/1.1 
Host: t.insigit.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.58.136.77
HTTP/1.1 302 Found
                                        
Date: Mon, 16 Apr 2018 20:43:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=i6xJ0UKbkwfnWMVXCysJeXLsW8XvO5YbsWWeLkbr0XSNEDXaXbhxbUBMvxISkqsiv5xj+t1Nhv0jyOyu2ewdbgAow5EdiGN2zz2xgLqZLOsMRNPK/WBhwpw4M1Sv; Expires=Mon, 23 Apr 2018 20:43:21 GMT; Path=/ dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412; Max-Age=31536000; Path=/; Expires=Tue, 16 Apr 2019 20:43:21 GMT
X-Powered-By: Express
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 16 Apr 2018 20:43:22 GMT
Server: Apache
Last-Modified: Sat, 14 Apr 2018 09:08:47 GMT
Expires: Sat, 21 Apr 2018 09:08:47 GMT
Etag: 374C123460F64BFCDC4F42B03CC236068E54A5A9
Cache-Control: max-age=389724,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp32
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    20c0696831221a5e9cf5056f3a88b34a
Sha1:   374c123460f64bfcdc4f42b03cc236068e54a5a9
Sha256: 9c05c24c80bbea2eb294a7b2450c5316be5ba13415b4dba2e93979b0db59958d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 16 Apr 2018 20:43:22 GMT
Server: Apache
Last-Modified: Fri, 13 Apr 2018 23:02:22 GMT
Expires: Fri, 20 Apr 2018 23:02:22 GMT
Etag: E8BF36A07CC58A2E3E78AC9AE62955EAF9684F22
Cache-Control: max-age=353339,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp32
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    96bc9281af8ad39e9629d7898fd9a7d9
Sha1:   e8bf36a07cc58a2e3e78ac9ae62955eaf9684f22
Sha256: 0c80a6fcae28f190e8bd2ab6907ee6fbab9a5e99403d4733651a994a8e3ec549
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 16 Apr 2018 20:43:22 GMT
Server: Apache
Last-Modified: Fri, 13 Apr 2018 23:02:22 GMT
Expires: Fri, 20 Apr 2018 23:02:22 GMT
Etag: 9A4AE6F829D3348ADF2720CD48E61C9B9CE476C7
Cache-Control: max-age=353339,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp31
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9cc87de26b492fbe5c65823a11ca4645
Sha1:   9a4ae6f829d3348adf2720cd48e61c9b9ce476c7
Sha256: 51af2063e3b2d1586fece763a823624f20d5ef3b1b33f4cbe16211b28160f806
                                        
                                            GET /aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw HTTP/1.1 
Host: www.flingpa1blunk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         69.90.60.46
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Mon, 16 Apr 2018 20:43:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: frame-ancestors 'self' http://digitalspace.togethernetworks.com
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: PHPSESSID=01c190a496b97a3d90771489d667c39e; path=/; domain=.flingpa1blunk.com; secure; HttpOnly;HttpOnly;Secure locale=en; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure ulpvi=c011b75e86f8e757b7a7cfab185bc43f; expires=Sun, 16-Apr-2028 20:43:22 GMT; Max-Age=315619200; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure lpvi=c011b75e86f8e757b7a7cfab185bc43f; expires=Sun, 16-Apr-2028 20:43:22 GMT; Max-Age=315619200; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure locale=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure locale=en; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure locale=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure locale=en; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure _uuid=5ad50aeac7fc27.18816058; expires=Thu, 13-Apr-2028 20:43:22 GMT; Max-Age=315360000; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure TRACK_VISIT=a%3A6%3A%7Bs%3A6%3A%22url_to%22%3Bs%3A501%3A%22https%3A%2F%2Fwww.flingpa1blunk.com%2Faff.php%3Fdynamicpage%3Dqf_wlp_5st_memb_a_hid%26utm_medium%3Dweb%26h%3D1%26utm_funnel%3Dtds%26utm_ex%3Da%26dci%3Db6891ccd0aca3bf5705a84ee5e6ad19ee855b412%26tds_campaign%3Da5092res%26tds_id%3Da5092res_lp_a_501245261947_qf%26tds_oid%3D1ef4d1208eba11e69bf5984be1741384_%26tdsId%3Da5092res_tds_site_group_a_501245261947%26utm_source%3Dint%26utm_campaign%3D2cc54985%26utm_content%3D7062d360%26data2%3D%257Bdata2%257D%26utm_sub%3Dopnfnlconf%26tds_cid%3Db54959edeb73e282da5ea4c525a5fdee11e2d83e%26p_tds_cid%3Ddf2aa884f9b550b8340f5b67200768e3a48c757f%26%22%3Bs%3A8%3A%22url_from%22%3BN%3Bs%3A4%3A%22date%22%3Bs%3A19%3A%222018-04-16+20%3A43%3A22%22%3Bs%3A6%3A%22source%22%3Bs%3A12%3A%22Aff+Internal%22%3Bs%3A5%3A%22cluid%22%3BN%3Bs%3A12%3A%22trackVisitId%22%3Bs%3A32%3A%22c011b75e86f8e757b7a7cfab185bc43f%22%3B%7D; expires=Tue, 16-Apr-2019 20:43:22 GMT; Max-Age=31536000; path=/; domain=.flingpa1blunk.com;HttpOnly;Secure
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4449
Md5:    166edc82fefc1642b4d21e68cf8d8961
Sha1:   c878c18f9436adb4996b0ca37e57d5297527bd0d
Sha256: ae45f54f5623b232570528571c81d0a6efddda6a172e676b3db1739334f5b6a9
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=341315, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Apr 2018 19:31:58 GMT
Expires: Fri, 20 Apr 2018 19:31:58 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    523c71d50c1defdb807392de5877359a
Sha1:   276260d0cf3bc9d471787e54eb6c075a22de64d8
Sha256: 12d2fc93d7e50f63e14a46687600e6d1048976ed70f75e6594599eaef56d2a5b
                                        
                                            GET /landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%2FdGRzSWQ9YTUwOTJyZXNfdGRzX3NpdGVfZ3JvdXBfYV81MDEyNDUyNjE5NDcmdGRzX2NhbXBhaWduPWE1MDkycmVzJnV0bV9zb3VyY2U9aW50JnV0bV9jYW1wYWlnbj0yY2M1NDk4NSZ1dG1fY29udGVudD03MDYyZDM2MCZkYXRhMj0lN0JkYXRhMiU3RCZ1dG1fc3ViPW9wbmZubGNvbmYmdGRzX2lkPWE1MDkycmVzX3Rkc19zaXRlX2dyb3VwX2FfNTAxMjQ1MjYxOTQ3JnRkc19vaWQ9cWYmdGRzX2NpZD1iNTQ5NTllZGViNzNlMjgyZGE1ZWE0YzUyNWE1ZmRlZTExZTJkODNlJnBfdGRzX2NpZD1kZjJhYTg4NGY5YjU1MGI4MzQwZjViNjcyMDA3NjhlM2E0OGM3NTdmJnRkc01vZGU9YmFja1RyYWZmaWNBTCZ0ZHNTb2x1dGlvbj1xZiZ0cmFuc2FjdGlvbl9pZD1mN2ZmMDgyZi0xNmE3LTRhMTQtOWJlOS1kNDAxZDQ0OGU3MDc%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Last-Modified: Wed, 04 Apr 2018 16:52:08 GMT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 4518
Cache-Control: max-age=1541334
Expires: Fri, 04 May 2018 16:52:17 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4518
Md5:    9cd5cfbab2b9bcc7c362fbdd8590d962
Sha1:   2096e4bcad66ad7a562fb73888ff18afd8f215a1
Sha256: bada78ada0e6b287b7a00d6f2783f468cd4b5f3bc5186f470acab9f2c110652f
                                        
                                            GET /assets/f419ce3f/c_a17241f7e6187e9a42dff0a8b8c50d22.css HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Last-Modified: Wed, 01 Nov 2017 10:07:55 GMT
Etag: "59f99cfb-241"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1510385
Expires: Fri, 04 May 2018 08:16:28 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Content-Length: 331
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   331
Md5:    01b1ab6aebc0ad3972e8ede2ccaab2c3
Sha1:   69abd8a0858f0533b28acfc78973be36712ec5c2
Sha256: 8d29ac9299eca327b88e1b2c0da9c9a8c65e6caecfcc4bd607f82d29995c3790
                                        
                                            GET /assets/bfe19c6/fsl_favicon.ico HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Content-Length: 7406
Last-Modified: Wed, 07 Dec 2016 15:01:48 GMT
Etag: "5848245c-1cee"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=1158888
Expires: Mon, 30 Apr 2018 06:38:11 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 16x16, 256-colors
Size:   7406
Md5:    644a8ea3573e9c3814c511986c7c5747
Sha1:   d7a3f0e98877e7ca991cbc766c5a8651106a9267
Sha256: 3e2814e314889bfc92b8cf3cfa12aaf12bd54f6cd4e7ab05876ef8921a3c2571
                                        
                                            GET /assets/6125f495/logoFlingpa1blunkWhite.svg HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx
Last-Modified: Mon, 12 Mar 2018 08:03:23 GMT
Etag: "5aa6344b-10d2"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1972
Cache-Control: max-age=1250626
Expires: Tue, 01 May 2018 08:07:09 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1972
Md5:    fe6123a9c8d08b52b892c78c2ad6d518
Sha1:   70ebc271746e7886d62e72c1e0530d813dd55101
Sha256: 28fac8f1f1f30b42efda1eb0ad5925c0487849d914ede540e609fa4e102d46b4
                                        
                                            GET /landing/resource/id/539682331613799486d7f15a8e8a2600.png HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Mon, 15 Feb 2016 15:46:42 GMT
Server: nginx
Content-Length: 5912
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=2486062
Expires: Tue, 15 May 2018 15:17:45 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 576 x 130, 8-bit/color RGBA, non-interlaced
Size:   5912
Md5:    539682331613799486d7f15a8e8a2600
Sha1:   383e220643759bd5d5d02eef055829f6cd361918
Sha256: 8c9353a7a3723bce690883483cf0c9ead02503cf6ac99b4bb7ac1fa7c5e1a1af
                                        
                                            GET /fp/dct.js HTTP/1.1 
Host: t.insigit.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw
Cookie: AWSALB=i6xJ0UKbkwfnWMVXCysJeXLsW8XvO5YbsWWeLkbr0XSNEDXaXbhxbUBMvxISkqsiv5xj+t1Nhv0jyOyu2ewdbgAow5EdiGN2zz2xgLqZLOsMRNPK/WBhwpw4M1Sv; dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412

                                         
                                         52.58.136.77
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Mon, 16 Apr 2018 20:43:23 GMT
Content-Length: 1300
Connection: keep-alive
Set-Cookie: AWSALB=pV3dAj8tM5mnYWelmfzlBFjLwFWFHhTupl5xvMih0OmfQtVMpXicn9O1rRoIay4gVbkTmZGBRKgl7Dsq/Tba3svsHcBuv3F98/KI56pq5UTSX9LE0O4iLbjd2F/i; Expires=Mon, 23 Apr 2018 20:43:23 GMT; Path=/
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=6
Last-Modified: Tue, 03 Apr 2018 15:39:16 GMT
Etag: W/"514-1628c298ca0"


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1300
Md5:    2343453e7c60ddcf72cc8d9c466b50e0
Sha1:   28672c00a829614778983083904f7067b7ac7874
Sha256: 8fdcb583474f31343845afa58d6bcc0f9cbc4d3db7dcd2bf3656f53e116012b6
                                        
                                            GET /landing/resource/id/f266603d422d35613a333c46c7aebd89.jpg HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 15 Feb 2016 17:20:16 GMT
Server: nginx
Content-Length: 126086
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=2485610
Expires: Tue, 15 May 2018 15:10:13 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   126086
Md5:    f266603d422d35613a333c46c7aebd89
Sha1:   4166c52ba5925504d8925aac98ea2f185fd91ce5
Sha256: b99329140e3dd554034059f379ca5e385d6f08058e8dff6eea051b055b0d13da
                                        
                                            GET /assets/444391ef/OpenSans-Regular-webfont.woff HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css
Origin: https://www.flingpa1blunk.com

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Server: nginx
Content-Length: 84928
Last-Modified: Thu, 13 Jul 2017 08:01:38 GMT
Etag: "596728e2-14bc0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=1914268
Expires: Wed, 09 May 2018 00:27:51 GMT
Date: Mon, 16 Apr 2018 20:43:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   84928
Md5:    55b8ce1f9a32bb0f83f14813eac0b7ca
Sha1:   c0d0478dc16d58a02f169198d862e684a2b591eb
Sha256: 33637fa0826291bfe2cf8cd916c1e0e96a0e6f9f7fbb9a7e93c183e5448d1774
                                        
                                            GET /assets/9787d8a2/OpenSans-Semibold.woff HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css
Origin: https://www.flingpa1blunk.com

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Last-Modified: Thu, 13 Jul 2017 07:23:07 GMT
Etag: "59671fdb-54f4"
Server: nginx
Content-Length: 21748
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=1507430
Expires: Fri, 04 May 2018 07:27:14 GMT
Date: Mon, 16 Apr 2018 20:43:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   21748
Md5:    4ec1aca1ca02cd148c0d9d7bd17cba14
Sha1:   ff83460c6baad6b5db6bb0cd51931583752318fe
Sha256: 6476de96f025b88e64b4c1ffbb75083dc3111120229e03dca5c6eeb7c40db794
                                        
                                            GET /43fbb6270523e1760fa5f0d2579dea07/481c4d55f88aa3ecf4d5bef36196da8f?nid=2cc54985&afd=7062d360&um=web&ut=&tdsid=a5092res_lp_a_501245261947_qf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&tds_campaign=a5092res&tdso=1ef4d1208eba11e69bf5984be1741384_&udp=qf_wlp_5st_memb_a_hid&lid=1ef4d1208eba11e69bf5984be1741384&mpid=&pid=&ts=&p=webSite&g1=&ep=0&aw=&bnr=Firefox3.6&os=Windows&sid=b43bce24d28527adcacb9565f4f000b2&d=flingpa1blunk.com&b=&ag=&dfb=&g2=&emd=&emh=&emha=&et=3&ed=1523911402&crp=&cnrp=&scn=&c=NOR&loc=en&dvd=Unknown&dos=Windows&dov=7&so=&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412 HTTP/1.1 
Host: t.insigit.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw
Cookie: AWSALB=pV3dAj8tM5mnYWelmfzlBFjLwFWFHhTupl5xvMih0OmfQtVMpXicn9O1rRoIay4gVbkTmZGBRKgl7Dsq/Tba3svsHcBuv3F98/KI56pq5UTSX9LE0O4iLbjd2F/i; dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412

                                         
                                         52.58.136.77
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 16 Apr 2018 20:43:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=NV6GaM4FiPYJU0vO6yA/gb7d2lDvMbLu9Nz0IsznMILvnRqawy29yFiTjSN8sB2P9KXanqI6Mii0igvXtTyfENg6B+oJghsikEFAI5m6IO9M2RHk4QdndEi5jM18; Expires=Mon, 23 Apr 2018 20:43:24 GMT; Path=/ dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412; Max-Age=31536000; Path=/; Expires=Tue, 16 Apr 2019 20:43:24 GMT dci_storage=cd624f3f5410df625477804b3a163859337ff1fc3a2833b6e7fd5aab2ccd527f9fc87f82841de4878057772346144df69cc22318ce11000508cab2ac85ccc1c6a19dc7ab5e6050cf755d0f1e1b5dde42aa795efe71188087be24e95a2735fe9ac76b8ec54e9e0ab239ae28c659341d0b; Max-Age=31536000; Path=/; Expires=Tue, 16 Apr 2019 20:43:24 GMT
X-Powered-By: Express
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         13.33.23.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163411
Date: Mon, 16 Apr 2018 20:43:24 GMT
Etag: "5ad4ab38-1d7"
Expires: Wed, 18 Apr 2018 18:00:15 GMT
Last-Modified: Mon, 16 Apr 2018 13:55:04 GMT
Server: ECS (lga/1372)
X-Cache: Miss from cloudfront
Via: 1.1 6a4ac6dc45d50207c441c9986e5019a0.cloudfront.net (CloudFront)
X-Amz-Cf-Id: vqNhtx9O5WwmHS4_xPCz63gn17nqYOYVzoEu2polkECo41XuZ7qSGw==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    96db78a94b74eae5a449a06f7770007e
Sha1:   eda11175d4a3fda3b3caf61c1f54a654a0e7ab29
Sha256: 8467d7831ce9c649685d037c37b700f9dbb5700edc3fbdcf0c19de7f244bdba6
                                        
                                            GET /assets/aaef4b0c/OpenSans-Bold-webfont.woff HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css
Origin: https://www.flingpa1blunk.com

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Last-Modified: Thu, 13 Jul 2017 07:23:07 GMT
Etag: "59671fdb-14ad8"
Server: nginx
Content-Length: 84696
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=1507756
Expires: Fri, 04 May 2018 07:32:40 GMT
Date: Mon, 16 Apr 2018 20:43:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   84696
Md5:    57988d1e313ced044867ac305c58ce7b
Sha1:   991c74f36c41082dc72ca21d1ca5e108406102c3
Sha256: ff94376e9e04cda1655d1ff43c9901722491edf7cc2f5b27f1eb2e8e10bd0696
                                        
                                            GET /c_js/main.js?dp=481c4d55f88aa3ecf4d5bef36196da8f HTTP/1.1 
Host: retargetcore.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         54.183.82.204
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Mon, 16 Apr 2018 20:43:24 GMT
Etag: W/"f46-7ASoCEDHVT3PAVBcShuIHUXIyTY"
Set-Cookie: visitor_id=5ad50aec76687a01d9f44e0e; path=/; expires=Mon, 30 Apr 2018 20:43:24 GMT; httponly
Vary: Accept-Encoding
X-Powered-By: Express
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1459
Md5:    8e293bdde8cd7990073dbbe565fad06b
Sha1:   fa5035a3805810e0ffa98316c3d280102c28936f
Sha256: 5d23f027f0c391bfc01ca901b7b596a8361f68242b9d245e4ea7c3066679283a
                                        
                                            GET /assets/f419ce3f/c_4e05ff95c7eaf265f0597f210b4fca1f.js HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Tue, 06 Dec 2016 14:27:06 GMT
Etag: "5846caba-138"
Server: nginx
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 223
Cache-Control: max-age=1515204
Expires: Fri, 04 May 2018 09:36:48 GMT
Date: Mon, 16 Apr 2018 20:43:24 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   223
Md5:    125fddc5b310650aae9f1bd1a5fb9d2a
Sha1:   3b728839fa878712c07d8ec828b5e0c49e26a8b9
Sha256: 49931811a7a31f87c408a5bff432aaa4c2bf6e8667ddc5274b0ed1ac4ed2e06b
                                        
                                            GET /assets/f419ce3f/c_3a1d9b5741d2ed2fbb1460cd3428f5b5.js HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%2FdGRzSWQ9YTUwOTJyZXNfdGRzX3NpdGVfZ3JvdXBfYV81MDEyNDUyNjE5NDcmdGRzX2NhbXBhaWduPWE1MDkycmVzJnV0bV9zb3VyY2U9aW50JnV0bV9jYW1wYWlnbj0yY2M1NDk4NSZ1dG1fY29udGVudD03MDYyZDM2MCZkYXRhMj0lN0JkYXRhMiU3RCZ1dG1fc3ViPW9wbmZubGNvbmYmdGRzX2lkPWE1MDkycmVzX3Rkc19zaXRlX2dyb3VwX2FfNTAxMjQ1MjYxOTQ3JnRkc19vaWQ9cWYmdGRzX2NpZD1iNTQ5NTllZGViNzNlMjgyZGE1ZWE0YzUyNWE1ZmRlZTExZTJkODNlJnBfdGRzX2NpZD1kZjJhYTg4NGY5YjU1MGI4MzQwZjViNjcyMDA3NjhlM2E0OGM3NTdmJnRkc01vZGU9YmFja1RyYWZmaWNBTCZ0ZHNTb2x1dGlvbj1xZiZ0cmFuc2FjdGlvbl9pZD1mN2ZmMDgyZi0xNmE3LTRhMTQtOWJlOS1kNDAxZDQ0OGU3MDc%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Mon, 30 Jan 2017 10:22:51 GMT
Etag: "588f13fb-2bdd4"
Server: nginx
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 50862
Cache-Control: max-age=1478416
Expires: Thu, 03 May 2018 23:23:40 GMT
Date: Mon, 16 Apr 2018 20:43:24 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   50862
Md5:    8de33751521fed775d0be8374202d65a
Sha1:   b6f7d02668cc43751d16887f852cc7a58af8f7ac
Sha256: 248452926030135af6554bc898b97d24334527f7becab80e3cf6e09191154dcf
                                        
                                            GET /c_js/uniqueTdsCid.js?referer=&doc_location=https%3A%2F%2Fwww.flingpa1blunk.com%2Faff.php%3Fdynamicpage%3Dqf_wlp_5st_memb_a_hid%26utm_medium%3Dweb%26h%3D1%26utm_funnel%3Dtds%26utm_ex%3Da%26dci%3Db6891ccd0aca3bf5705a84ee5e6ad19ee855b412%26tds_campaign%3Da5092res%26tds_id%3Da5092res_lp_a_501245261947_qf%26tds_oid%3D1ef4d1208eba11e69bf5984be1741384_%26tdsId%3Da5092res_tds_site_group_a_501245261947%26utm_source%3Dint%26utm_campaign%3D2cc54985%26utm_content%3D7062d360%26data2%3D%257Bdata2%257D%26utm_sub%3Dopnfnlconf%26tds_cid%3Db54959edeb73e282da5ea4c525a5fdee11e2d83e%26p_tds_cid%3Ddf2aa884f9b550b8340f5b67200768e3a48c757f%26_disAL%3Dtrue%26_cbUrl%3DaHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%253D%26_boUrl%3DaHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw&dp=481c4d55f88aa3ecf4d5bef36196da8f HTTP/1.1 
Host: retargetcore.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw
Cookie: visitor_id=5ad50aec76687a01d9f44e0e

                                         
                                         54.183.82.204
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Date: Mon, 16 Apr 2018 20:43:24 GMT
Etag: W/"1f5-gYfzkqcqU9Py+01Z+eepfKcJIM8"
Set-Cookie: visitor_id=5ad50aec76687a01d9f44e0e; path=/; expires=Mon, 30 Apr 2018 20:43:24 GMT; httponly
Vary: Accept-Encoding
X-Powered-By: Express
Content-Length: 501
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   501
Md5:    01401390e23aea8a02851102e60b136a
Sha1:   8187f392a72a53d3f2fb4d59f9e7a97ca70920cf
Sha256: 4025f93edb6f87fb61712aa3a6fa3022698e62776d2f825285a79bc3205b3de5
                                        
                                            GET /backoffer-events.min.js HTTP/1.1 
Host: t.insigit.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw
Cookie: AWSALB=NV6GaM4FiPYJU0vO6yA/gb7d2lDvMbLu9Nz0IsznMILvnRqawy29yFiTjSN8sB2P9KXanqI6Mii0igvXtTyfENg6B+oJghsikEFAI5m6IO9M2RHk4QdndEi5jM18; dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412; dci_storage=cd624f3f5410df625477804b3a163859337ff1fc3a2833b6e7fd5aab2ccd527f9fc87f82841de4878057772346144df69cc22318ce11000508cab2ac85ccc1c6a19dc7ab5e6050cf755d0f1e1b5dde42aa795efe71188087be24e95a2735fe9ac76b8ec54e9e0ab239ae28c659341d0b

                                         
                                         52.58.136.77
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Mon, 16 Apr 2018 20:43:24 GMT
Content-Length: 693
Connection: keep-alive
Set-Cookie: AWSALB=apOvxfki11fFnvxT6PwsIZAfDUe0fMntwEfkp97/qOvC9RsJebVW//wa2Hnv7fA4tw2/zsCM/hucqKWDDwqHREjIJ2/s0qOJE/rJGSjxhuvxSm4m0fT/TXqrQja3; Expires=Mon, 23 Apr 2018 20:43:24 GMT; Path=/
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=6
Last-Modified: Tue, 03 Apr 2018 15:39:16 GMT
Etag: W/"2b5-1628c298ca0"


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   693
Md5:    d318d3210f3a7abf8a11e7c1e48ad0d2
Sha1:   2aeb5f5318c921aa0beb1149effe23424b0410ce
Sha256: 82c5a8b230458dd70f65b94690ea0fdb3609b933acf47467b5d407eb900d6f1a
                                        
                                            GET /landing/resource/id/614b7efc9d3c7fff0b02c1ed1402a2a7_en.js?v=3426330349 HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%2FdGRzSWQ9YTUwOTJyZXNfdGRzX3NpdGVfZ3JvdXBfYV81MDEyNDUyNjE5NDcmdGRzX2NhbXBhaWduPWE1MDkycmVzJnV0bV9zb3VyY2U9aW50JnV0bV9jYW1wYWlnbj0yY2M1NDk4NSZ1dG1fY29udGVudD03MDYyZDM2MCZkYXRhMj0lN0JkYXRhMiU3RCZ1dG1fc3ViPW9wbmZubGNvbmYmdGRzX2lkPWE1MDkycmVzX3Rkc19zaXRlX2dyb3VwX2FfNTAxMjQ1MjYxOTQ3JnRkc19vaWQ9cWYmdGRzX2NpZD1iNTQ5NTllZGViNzNlMjgyZGE1ZWE0YzUyNWE1ZmRlZTExZTJkODNlJnBfdGRzX2NpZD1kZjJhYTg4NGY5YjU1MGI4MzQwZjViNjcyMDA3NjhlM2E0OGM3NTdmJnRkc01vZGU9YmFja1RyYWZmaWNBTCZ0ZHNTb2x1dGlvbj1xZiZ0cmFuc2FjdGlvbl9pZD1mN2ZmMDgyZi0xNmE3LTRhMTQtOWJlOS1kNDAxZDQ0OGU3MDc%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Last-Modified: Thu, 22 Mar 2018 16:32:25 GMT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 229
Cache-Control: max-age=418739
Expires: Sat, 21 Apr 2018 17:02:24 GMT
Date: Mon, 16 Apr 2018 20:43:25 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   229
Md5:    02f63a73d509a4fd85058cb4279adf89
Sha1:   7a1d1ec00cd5298bbf506a4bf947d720551a8bcf
Sha256: eb050d3d95b97be8d144bbdee9698f22438a8183a01856022dff2efbed24fd57
                                        
                                            GET /landing/resource/id/6bcdfa27327646d594a4aa82acebf4c8.js?v=3426330349 HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Last-Modified: Thu, 22 Mar 2018 15:22:45 GMT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 5198
Cache-Control: max-age=418726
Expires: Sat, 21 Apr 2018 17:02:11 GMT
Date: Mon, 16 Apr 2018 20:43:25 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   5198
Md5:    da908b770ada66e6f4ac687a27b1bc99
Sha1:   8389dc922a4a7d2a6d3d3fa253adbb6ce0e37523
Sha256: 5c90cfceba088dc5f35415a3e1f581c4b695843f0cadf62ce7e8c99623977aa2
                                        
                                            GET /landing/resource/id/b2c50a73c5983d598dbc271c956ef602.jpg HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 16 Feb 2016 07:22:01 GMT
Server: nginx
Content-Length: 20246
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=2485751
Expires: Tue, 15 May 2018 15:12:36 GMT
Date: Mon, 16 Apr 2018 20:43:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   20246
Md5:    b2c50a73c5983d598dbc271c956ef602
Sha1:   1b4947c035183505173226d11b1707973865c01c
Sha256: d046f49ef6f36ce361162a2ee695e4d2ec95094fd36e3cd5e23d39f9ba517b4b
                                        
                                            GET /landing/resource/id/7023da88acb705e80fbc347ca64d8573.jpg HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 16 Feb 2016 07:21:52 GMT
Server: nginx
Content-Length: 22798
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=1829776
Expires: Tue, 08 May 2018 00:59:41 GMT
Date: Mon, 16 Apr 2018 20:43:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   22798
Md5:    7023da88acb705e80fbc347ca64d8573
Sha1:   6842ad3af449d930c65743480339a43fcf30a04d
Sha256: 934d55fc41cf507589ca56f97a867eda435a8c6e83f4fff48a3f260c6fd51937
                                        
                                            GET /landing/resource/id/19fd1b56ef84413773b0447a9dfb986f.jpg HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 16 Feb 2016 07:22:06 GMT
Server: nginx
Content-Length: 20747
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=2461710
Expires: Tue, 15 May 2018 08:31:55 GMT
Date: Mon, 16 Apr 2018 20:43:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   20747
Md5:    19fd1b56ef84413773b0447a9dfb986f
Sha1:   f72a94777ede5ff83e6a4a04468c3454f472a1b0
Sha256: a9e6324b11a5670a291e133b5ac728f325bf076fd6e6763c85333394c353ca61
                                        
                                            GET /landing/resource/id/b1ff9d00613eaec419975c6c45fc1ecd.jpg HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Content-Length: 23592
Last-Modified: Tue, 16 Feb 2016 07:22:08 GMT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=2486566
Expires: Tue, 15 May 2018 15:26:11 GMT
Date: Mon, 16 Apr 2018 20:43:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23592
Md5:    b1ff9d00613eaec419975c6c45fc1ecd
Sha1:   2b251ed70f5782eca85716caac1ae4902570afe0
Sha256: 2f05b63d25a47ecc4e8f9459244db2fe808743009af0747674aaccb7e8d74c1b
                                        
                                            GET /landing/resource/id/3f649dcc671d2d79e71947d275bfaa82.jpg HTTP/1.1 
Host: cdn.wdrimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn.wdrimg.com/landing/resource/id/766a1e53110a9e977b56f5a1aa496953.css

                                         
                                         95.100.5.189
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 16 Feb 2016 07:21:57 GMT
Server: nginx
Content-Length: 21948
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=1749592
Expires: Mon, 07 May 2018 02:43:17 GMT
Date: Mon, 16 Apr 2018 20:43:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   21948
Md5:    3f649dcc671d2d79e71947d275bfaa82
Sha1:   c2af728daeafe6840d357ca31d18d9cf745216ce
Sha256: 91c5ca5b466d171d98c3a0721488b2cebe8ff06a759de09a75e64c4e70b30d82
                                        
                                            GET /v1/uniqueTdsCid/check/?doc_location=https%3A%2F%2Fwww.flingpa1blunk.com%2Faff.php%3Fdynamicpage%3Dqf_wlp_5st_memb_a_hid%26utm_medium%3Dweb%26h%3D1%26utm_funnel%3Dtds%26utm_ex%3Da%26dci%3Db6891ccd0aca3bf5705a84ee5e6ad19ee855b412%26tds_campaign%3Da5092res%26tds_id%3Da5092res_lp_a_501245261947_qf%26tds_oid%3D1ef4d1208eba11e69bf5984be1741384_%26tdsId%3Da5092res_tds_site_group_a_501245261947%26utm_source%3Dint%26utm_campaign%3D2cc54985%26utm_content%3D7062d360%26data2%3D%257Bdata2%257D%26utm_sub%3Dopnfnlconf%26tds_cid%3Db54959edeb73e282da5ea4c525a5fdee11e2d83e%26p_tds_cid%3Ddf2aa884f9b550b8340f5b67200768e3a48c757f%26_disAL%3Dtrue%26_cbUrl%3DaHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%253D%26_boUrl%3DaHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw HTTP/1.1 
Host: retargetcore.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.flingpa1blunk.com/aff.php?dynamicpage=qf_wlp_5st_memb_a_hid&utm_medium=web&h=1&utm_funnel=tds&utm_ex=a&dci=b6891ccd0aca3bf5705a84ee5e6ad19ee855b412&tds_campaign=a5092res&tds_id=a5092res_lp_a_501245261947_qf&tds_oid=1ef4d1208eba11e69bf5984be1741384_&tdsId=a5092res_tds_site_group_a_501245261947&utm_source=int&utm_campaign=2cc54985&utm_content=7062d360&data2=%7Bdata2%7D&utm_sub=opnfnlconf&tds_cid=b54959edeb73e282da5ea4c525a5fdee11e2d83e&p_tds_cid=df2aa884f9b550b8340f5b67200768e3a48c757f&_disAL=true&_cbUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQ%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%3D&_boUrl=aHR0cHM6Ly90Lmluc2lnaXQuY29tL3Rkcy9pbnQvYmFja29mZmVySW50ZXJsYXllcj9keW5hbWljcGFnZT1xZl93bHBfNXN0X21lbWJfYV9oaWQmdXRtX21lZGl1bT13ZWImaD0xJnV0bV9mdW5uZWw9dGRzJnV0bV9leD1hJmRjaT1iNjg5MWNjZDBhY2EzYmY1NzA1YTg0ZWU1ZTZhZDE5ZWU4NTViNDEyJnRkc0lkPWI5NzU4dGFnX3ImdXRtX3NvdXJjZT1pbnQmdXRtX2NhbXBhaWduPTJjYzU0OTg1JnV0bV9jb250ZW50PTcwNjJkMzYwJmRhdGEyPSU3QmRhdGEyJTdEJnV0bV9zdWI9b3BuZm5sY29uZiZwX3Rkc19jaWQ9YjU0OTU5ZWRlYjczZTI4MmRhNWVhNGM1MjVhNWZkZWUxMWUyZDgzZSZfZGlzQUw9dHJ1ZSZ0ZHNfYm9fb3JpZ2luPWxw
Origin: https://www.flingpa1blunk.com

                                         
                                         54.183.82.204
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Date: Mon, 16 Apr 2018 20:43:25 GMT
Etag: W/"35-g2eDQw5hcaL4hmhJcuQAEwe/Ap4"
Vary: Accept-Encoding
X-Powered-By: Express
Content-Length: 53
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   53
Md5:    2668096969b65028010ed7501611112f
Sha1:   836783430e6171a2f886684972e4001307bf029e
Sha256: b3497cb0b33a719d0231bf06eb1a59912807405df27d5c5c990834ed0f2d8b13