Overview

URL imgserve.net/img-5508f989215f8.html
IP104.27.171.91
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-10-11 14:20:28 CEST
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-10-11 2 imgserve.net/img-5508f989215f8.html Malware
2018-10-11 2 coinhive.com/lib/coinhive.min.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.171.91

Date UQ / IDS / BL URL IP
2018-10-17 18:15:38 +0200
2 - 1 - 0 imgserve.net/img-54dc041aab63a.html 104.27.171.91
2018-10-17 18:15:36 +0200
2 - 0 - 0 imgserve.net/img-546d50e48aeaf.html 104.27.171.91
2018-10-17 14:10:49 +0200
2 - 1 - 0 imgserve.net/img-546f5f5f153b1.html 104.27.171.91
2018-10-17 13:08:03 +0200
2 - 1 - 0 imgserve.net/img-52d09e35751ad.htmlIMGhttp:/s (...) 104.27.171.91
2018-10-17 10:09:26 +0200
2 - 0 - 0 imgserve.net/img-54cfe34566122.html 104.27.171.91
2018-10-17 10:09:08 +0200
2 - 0 - 0 imgserve.net/img-5513fbbee23b1.html 104.27.171.91
2018-10-17 05:06:54 +0200
2 - 0 - 0 imgserve.net/img-54ac8c4def6ef.html 104.27.171.91
2018-10-17 03:45:33 +0200
2 - 0 - 0 imgserve.net/img-52be0e95e8097.html 104.27.171.91
2018-10-17 02:11:37 +0200
2 - 1 - 0 imgserve.net/img-53536b27877c0.html 104.27.171.91
2018-10-17 02:11:23 +0200
2 - 0 - 0 imgserve.net/img-52179b2741547.html 104.27.171.91

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-10-17 19:01:25 +0200
0 - 0 - 0 https://tinyurl.com/ybwnn4uw 104.20.218.42
2018-10-17 18:56:28 +0200
0 - 2 - 0 as.zqwhs960oi.pw/ 104.27.149.236
2018-10-17 18:52:02 +0200
0 - 0 - 0 reauthenticator.com/ 104.28.4.162
2018-10-17 18:51:21 +0200
0 - 0 - 3 optimizepro.biz/inst?hid=1c8676a7f4b3faef10fa (...) 104.28.30.14
2018-10-17 18:46:58 +0200
0 - 0 - 0 wirecellar.com/8ABB 104.27.166.73
2018-10-17 18:42:41 +0200
0 - 0 - 0 oke.io/full/?api=14239721022d285c682ad64504eb (...) 104.27.26.41
2018-10-17 18:42:04 +0200
0 - 0 - 0 phnompenhpost.com 104.24.4.43
2018-10-17 18:41:59 +0200
0 - 1 - 0 www.lorman.com/training/general-business/succ (...) 104.24.18.14
2018-10-17 18:40:17 +0200
0 - 0 - 0 www.daystohappiness.com/#%21happiness-secrets (...) 104.16.15.194
2018-10-17 18:34:50 +0200
0 - 0 - 0 reauthenticator.com/ 104.28.5.162

Last 10 reports on domain: imgserve.net

Date UQ / IDS / BL URL IP
2018-10-17 18:15:38 +0200
2 - 1 - 0 imgserve.net/img-54dc041aab63a.html 104.27.171.91
2018-10-17 18:15:36 +0200
2 - 0 - 0 imgserve.net/img-546d50e48aeaf.html 104.27.171.91
2018-10-17 14:10:49 +0200
2 - 1 - 0 imgserve.net/img-546f5f5f153b1.html 104.27.171.91
2018-10-17 13:08:03 +0200
2 - 1 - 0 imgserve.net/img-52d09e35751ad.htmlIMGhttp:/s (...) 104.27.171.91
2018-10-17 10:09:26 +0200
2 - 0 - 0 imgserve.net/img-54cfe34566122.html 104.27.171.91
2018-10-17 10:09:08 +0200
2 - 0 - 0 imgserve.net/img-5513fbbee23b1.html 104.27.171.91
2018-10-17 10:08:28 +0200
2 - 0 - 0 imgserve.net/img-5495b0af9fb96.html 104.27.170.91
2018-10-17 09:08:22 +0200
2 - 0 - 0 imgserve.net/img-53858f1158c5d.html 104.27.170.91
2018-10-17 05:06:54 +0200
2 - 0 - 0 imgserve.net/img-54ac8c4def6ef.html 104.27.171.91
2018-10-17 04:50:31 +0200
2 - 0 - 0 imgserve.net/img-5528eb424b27f.html 104.27.170.91


JavaScript

Executed Scripts (23)


Executed Evals (0)


Executed Writes (20)

#1 JavaScript::Write (size: 11, repeated: 1) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#2 JavaScript::Write (size: 6, repeated: 16) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 171, repeated: 1) - SHA256: 8c05543f6d6c863ae6a4b316f658ada3e43594f68a9a96da5f69a4b39ae25750

                                        < a href = "http://kmylvwo5.com/tracker_clicks.php?a=1142&c=12470&b=36377&_t=1539260394"
id = "ad_link"
target = "_blank" > Check This FREE PORN Site Before It 's BANNED Forever</a>
                                    

#4 JavaScript::Write (size: 531, repeated: 1) - SHA256: 41f5617d98118a659485b7d2ae10df26f304fe7196aaa737729a883c8279ddd7

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394444" > < /iframe>
                                    

#5 JavaScript::Write (size: 531, repeated: 1) - SHA256: 1ad017173c4965cfa93a47c25dff7f5afbe01d1352f860023725cfdb9b4e4191

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394582" > < /iframe>
                                    

#6 JavaScript::Write (size: 531, repeated: 1) - SHA256: 6b33652988f168671d5cf41127c4bf8467bd68e5cc19cb16218e1d9795bc6d54

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394677" > < /iframe>
                                    

#7 JavaScript::Write (size: 531, repeated: 1) - SHA256: f267db84c789534715ac76ef7231b4c86a2f345a9dd5be7a7e8185088e8dc883

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394855" > < /iframe>
                                    

#8 JavaScript::Write (size: 531, repeated: 1) - SHA256: 9350f37696795d5dca1fa4325700ca101e51ed9c4e17b4e25bbf31fb5109963f

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260395207" > < /iframe>
                                    

#9 JavaScript::Write (size: 531, repeated: 1) - SHA256: bce9ee3b4ac34671fb29f0593b87a1dea0c067a673eae54d39f54935be30c5aa

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260396075" > < /iframe>
                                    

#10 JavaScript::Write (size: 531, repeated: 1) - SHA256: 823d8b372c9e161c372ddd068bea5d3523f87d7d0e47a483c53a3a9e99dc3a81

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260397272" > < /iframe>
                                    

#11 JavaScript::Write (size: 531, repeated: 1) - SHA256: f61990a044fa15fcee37b6254244fa26fbf0a82ae1a0795cc9279f159ca115b6

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260397343" > < /iframe>
                                    

#12 JavaScript::Write (size: 531, repeated: 1) - SHA256: 220cfc167d996b17ceee18dd05abdd19890a184258223e667d9047453963e87e

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399427" > < /iframe>
                                    

#13 JavaScript::Write (size: 531, repeated: 1) - SHA256: b1e142f4cd761f3235849a4557629f23bfe076a0d409ea35c88147871ab23a2c

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399502" > < /iframe>
                                    

#14 JavaScript::Write (size: 531, repeated: 1) - SHA256: b9f5559cad7625a61586e38952b53a6dd5f6948a5d0779a94c39195838f4166b

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399537" > < /iframe>
                                    

#15 JavaScript::Write (size: 531, repeated: 1) - SHA256: dea16ce9708cc2cbaed6d205b291bd924df137b2d576ae0255e0703a8dfe35c1

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399576" > < /iframe>
                                    

#16 JavaScript::Write (size: 531, repeated: 1) - SHA256: fca95e0e0a3c97b9626b914da0942687b8bb4f10619526502626dfa3b686d28d

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399615" > < /iframe>
                                    

#17 JavaScript::Write (size: 531, repeated: 1) - SHA256: 5ae08f5f41efc325023566df7e617eeea364fd60a4cb534ff3155fc43fdbcfa8

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399653" > < /iframe>
                                    

#18 JavaScript::Write (size: 531, repeated: 1) - SHA256: b2d11e2c7b2544515a957a6e19ea8f3a85708eb55a90f75746ab17d46dd7b832

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399688" > < /iframe>
                                    

#19 JavaScript::Write (size: 531, repeated: 1) - SHA256: 320df341bd2c2af4447eec3b33e5bb70fe0a88fa85abf004fb2ecfe21da23e7d

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399727" > < /iframe>
                                    

#20 JavaScript::Write (size: 90, repeated: 1) - SHA256: 05fab24c2c0e0102ad0d4524fdaa1f0339a7518373ef265b6170c55ba481d505

                                        < script type = 'text/javascript'
src = 'http://5gl1x9qc.com/d/a/1142.php?ext=js&_t=58314967164
                                    


HTTP Transactions (81)


Request Response
                                        
                                            GET /img-5508f989215f8.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 11 Oct 2018 12:19:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; expires=Fri, 11-Oct-19 12:19:53 GMT; path=/; domain=.imgserve.net; HttpOnly refererx=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; path=/ viewer=3192c6d894a235e129be6eb1ec1864eb; expires=Thu, 11-Oct-2018 13:19:53 GMT; path=/; domain=.imgserve.net viewerid=5508f989215f8; expires=Thu, 11-Oct-2018 13:19:53 GMT; path=/; domain=.imgserve.net imagen3=1; expires=Fri, 12-Oct-2018 12:19:53 GMT
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: cloudflare
CF-RAY: 46814714d64d427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9582
Md5:    78ae8429970e3e3ddb9ff55490b56a93
Sha1:   1ac5e913f2ab3d97309b5550b5e1f4a00a5707df
Sha256: 98347607e61d0d1b99af52b8d506be578544f535f57fb48a873ba7def6300430

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /js/jquery-1.7.1.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 11 Oct 2018 12:19:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:20 GMT
Etag: W/"51ae97f4-16eac"
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:53 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46814715c4f442b5-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33223
Md5:    797e5aeed7a915aa9423119040979407
Sha1:   1287bebc61e72f65aa726faeb9a27485a38b9707
Sha256: 4f74858d849a6a197bbf30d7bdb6003ae954f55c757c95aeaea94071fdff710c
                                        
                                            GET /css/styles.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 11 Oct 2018 12:19:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 13 Jan 2015 07:23:52 GMT
Etag: W/"54b4c808-fceb"
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Expires: Thu, 11 Oct 2018 16:19:53 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46814715c66d427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16363
Md5:    cdae48c2d228c78bcc72c4c0895ad283
Sha1:   a83d7527c3a8f3683094ff25f11ce7d76cfe0841
Sha256: c14d3811da0f79fcd55bc1af6daed9a29cfb6b7622b81f090a230a11ab08a090
                                        
                                            GET /js/jquery-ui-1.8.18.custom.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:27 GMT
Etag: W/"51ae97fb-335f7"
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46814716a51d42b5-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   52155
Md5:    1c8b6494b85c448273f83a2814226e0e
Sha1:   f7713dd0a26d0cfaa051020b2b37d589414c45f1
Sha256: fec6535c94fe5fb5604068322a6a43b16ea598c98415d8fe05fc54e8176021a7
                                        
                                            GET /css/smoothness/jquery-ui-1.8.18.custom.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:43 GMT
Etag: W/"51ae9a27-833b"
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Expires: Thu, 11 Oct 2018 16:19:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46814716a68d427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7335
Md5:    8c3ae5f2631058b80fb6f6d84342ecd0
Sha1:   888aa2afe402561fe03a98b94b2abd7d48d69efd
Sha256: f9da0fc48c829ebfeb5079da87520156bd8e8f14d2ba4f3bdf4488fc49bba9d1
                                        
                                            GET /css/img/logo.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Content-Length: 21186
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:28 GMT
Etag: "52c2-4de5e76c8b600"
CF-Cache-Status: REVALIDATED
Expires: Thu, 11 Oct 2018 16:19:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46814717253342b5-OSL


--- Additional Info ---
Magic:  PNG image, 280 x 80, 8-bit/color RGBA, non-interlaced
Size:   21186
Md5:    0f2ef79913ef0d8ab7b994bb7c5fe9fe
Sha1:   a9f53968b43919d2db7f1ce7033a9f41a6d5ade3
Sha256: 5bf1fff11cc2949712da86d18ed92bef598cbdda2ab57f0d5e98357152e28667
                                        
                                            GET /css/img/pig.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Content-Length: 821
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:30 GMT
Etag: "335-4de5e76e73a80"
CF-Cache-Status: REVALIDATED
Expires: Thu, 11 Oct 2018 16:19:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681471726ae427f-OSL


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   821
Md5:    603b3f482f950ea6ecbe3f02e4527d51
Sha1:   cc218bdf4d001f3db5482e6290e3d2ba13969ca0
Sha256: 4a96458a5a569e653a34eeb335eafe180e28129ac00125392ee5bec392ccbb3d
                                        
                                            GET /css/img/menubutton.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Content-Length: 3494
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:29 GMT
Etag: "da6-4de5e76d7f840"
CF-Cache-Status: REVALIDATED
Expires: Thu, 11 Oct 2018 16:19:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681471733e2428b-OSL


--- Additional Info ---
Magic:  PNG image, 150 x 40, 8-bit/color RGBA, non-interlaced
Size:   3494
Md5:    d1394f343c66e133faf085d089c7994b
Sha1:   a4064bd855e37c837ca0071416244e20dea5a1fa
Sha256: ad28f482b6f4e37eeafc726c5d2058da03cf848a3397d09d25773ea6a6fe32ad
                                        
                                            GET /jquery/text.js?_t=Math.floor(Math.random()*99999999999) HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         104.16.194.215
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d43dfa2ee27a2f676ec259fc58b49b2f51539260394; expires=Fri, 11-Oct-19 12:19:54 GMT; path=/; domain=.5gl1x9qc.com; HttpOnly
Last-Modified: Wed, 29 Mar 2017 18:20:04 GMT
Etag: W/"58dbfad4-1c9"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46814717d1664297-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    ce46a3c0de343339a689c89866261e07
Sha1:   15d7033005f8313d87ee7fc0c01ff04cfbc0408e
Sha256: 046a2434ac8093105cc19850e70be73d6d08b2ec52df39aa9df28e8e9503b606
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 07 Oct 2018 01:21:31 GMT
Etag: EB50C806959B9568C8D682E5B68E87320AB669B0
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=219041
Expires: Sun, 14 Oct 2018 01:10:35 GMT
Date: Thu, 11 Oct 2018 12:19:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    54cdf1ee222e89442d5cb163a14ac732
Sha1:   eb50c806959b9568c8d682e5b68e87320ab669b0
Sha256: 4479274fbd14eb22f09401da01d08d64afc45f49034ccf3e66123eda1b7616d3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 08 Oct 2018 09:27:34 GMT
Etag: 99401F8BD467D90F886179C64493E78DA9B8E4C5
X-OCSP-Responder-ID: rmdccaocsp13
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=334628
Expires: Mon, 15 Oct 2018 09:17:02 GMT
Date: Thu, 11 Oct 2018 12:19:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    d9b08f335c6577b244c88529169de9ed
Sha1:   99401f8bd467d90f886179c64493e78da9b8e4c5
Sha256: 9fb86e028f68b7b471041d512b8351fae7184d1c6d11d41eaa0a1dda673ff62a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 08 Oct 2018 09:27:34 GMT
Etag: 090C34B232998ED0CB442389A283D60A7212687C
X-OCSP-Responder-ID: rmdccaocsp19
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=334707
Expires: Mon, 15 Oct 2018 09:18:21 GMT
Date: Thu, 11 Oct 2018 12:19:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    918e7ad6efba9cd193ede3de6438f9b1
Sha1:   090c34b232998ed0cb442389a283d60a7212687c
Sha256: ff1641777dd048546458ac7b135f68cda235fd5d2e4dc8b9cb1c9bfa51ef30ec
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         104.20.208.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=ddaa78df4f26baa6632ecf1a08df1d22e1539260394; expires=Fri, 11-Oct-19 12:19:54 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Wed, 11 Apr 2018 09:52:41 GMT
Etag: W/"5acddae9-40063"
Expires: Thu, 11 Oct 2018 20:19:54 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 468147192f7942a9-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   68258
Md5:    aace5e5a34519cdd9c971d57f21e5d82
Sha1:   ceecd09dbe85c771648f2ce6942fe9707c6f31f4
Sha256: ef2f23c272fb07e8e93f26cf6051bd2c3d377cf54e2431f9fdd6666852749e62

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /imgs-5508f989215f8.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 468147198711427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   393
Md5:    683d975f0afd4979f56ee8c21b4218a3
Sha1:   629952f74abdbbe8094b0640c79206544c7feb7a
Sha256: 844bce032ed8712745d47fd2ae04d63efdeeda3f9451b7249d1e200fe52216bd
                                        
                                            GET /css/img/bg2.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/styles.css
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Content-Length: 7637
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:23 GMT
Etag: "1dd5-4de5e767c6ac0"
CF-Cache-Status: REVALIDATED
Expires: Thu, 11 Oct 2018 16:19:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46814719858842b5-OSL


--- Additional Info ---
Magic:  PNG image, 2247 x 190, 8-bit colormap, non-interlaced
Size:   7637
Md5:    8388f9f5ebca3dd2c58b44f190687497
Sha1:   44678688ae09eb0b35eaef09f83771165d1104cb
Sha256: de57f5342874c0d1e33353e7e42b61134d2aab7cb52d1929e115b44049d5f525
                                        
                                            GET /image-5508f989215f8.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 468147198427428b-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /view.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46814719a74a42a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /adserver.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 4681471997ac4255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394444 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea7e0675.869004642289136635%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:54 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D; expires=Fri, 12-Oct-2018 12:19:54 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   816
Md5:    555dadb15c49dc2ca460e9d02f8f9bc4
Sha1:   0444c673815cb2b4f84c6d3240cb40bb745b776b
Sha256: f0e9e5933b41ac82f2a8e69267807ecf27a767e1cdf443d50ae606c253e1b5a1
                                        
                                            GET /z/349947500 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         104.24.120.232
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d77cdf7a03a6fb3257a854b6806eba41a1539260394; expires=Fri, 11-Oct-19 12:19:54 GMT; path=/; domain=.tweowhvrim.review; HttpOnly
Location: https://tweowhvrim.review/z/349947500
Server: cloudflare
CF-RAY: 46814719e5d842c1-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   245
Md5:    1d80af574d8f0943d228cfd9077cc788
Sha1:   e5305a2ae1433717e034176ab341b416647a750a
Sha256: dcb1993cbd390431173142d7730b71adacf4407acf8cb52bed955de7a76c756f
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394582 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:54 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D; expires=Fri, 12-Oct-2018 12:19:54 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   817
Md5:    54678ab3d68ce75ee41d821b3f30eb27
Sha1:   6d50fa82434852a0ecdbe71d5bcdb5c6015b811d
Sha256: 47927e1e35584ef47afce4c4976f83f69a7b41020a2aae011673f8895f8128e2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 08 Oct 2018 11:18:22 GMT
Etag: 191B21D23EE6FEA8E3561BF3C42AB2E22B0FD02D
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 279
Cache-Control: public, no-transform, must-revalidate, max-age=341290
Expires: Mon, 15 Oct 2018 11:08:04 GMT
Date: Thu, 11 Oct 2018 12:19:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   279
Md5:    4e61d8429a3fd2b01bef96947aba739f
Sha1:   191b21d23ee6fea8e3561bf3c42ab2e22b0fd02d
Sha256: 9a3f26d344370581b6392df2bd59bc21cedb1a07bb1ff46624c7668ac1ae1f40
                                        
                                            GET /library/118525/8b8e3adb5aa71d9c7a4712657708db3e90978635.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394444
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea7e0675.869004642289136635%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1539004789"
Cache-Control: max-age=86400
Content-Length: 192493
Last-Modified: Mon, 08 Oct 2018 13:19:49 GMT
X-HW: 1539260394.dop006.sk1.t,1539260394.cds038.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   192493
Md5:    ad4b26e4017742f56a179f29f80343d9
Sha1:   8b8e3adb5aa71d9c7a4712657708db3e90978635
Sha256: 78f9704d0baf00017d3929813942b5ecc3d34c52379d6f3ba77b613782c9dc49
                                        
                                            GET /library/118525/50ce91d6129ab7253b25f81ae396bbc99d72e123.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394582
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1533223863"
Cache-Control: max-age=86400
Content-Length: 30573
Last-Modified: Thu, 02 Aug 2018 15:31:03 GMT
X-HW: 1539260394.dop006.sk1.t,1539260394.cds034.sk1.c


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   30573
Md5:    f03a3934e4633aee5a00f827677959a0
Sha1:   50ce91d6129ab7253b25f81ae396bbc99d72e123
Sha256: c2df43bd036033e56ce6adfb2d87e37904ebf4fcc10bf7326b66d351685d6af2
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea7e0675.869004642289136635%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 08 Oct 2018 09:27:34 GMT
Etag: 0A4A143748F2ECDDACB38A3FF6C8F2F0F436DE9F
X-OCSP-Responder-ID: rmdccaocsp13
Content-Length: 312
Cache-Control: public, no-transform, must-revalidate, max-age=334661
Expires: Mon, 15 Oct 2018 09:17:35 GMT
Date: Thu, 11 Oct 2018 12:19:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   312
Md5:    48eafcf90efbed7d0868eb16fc0647cd
Sha1:   0a4a143748f2ecddacb38a3ff6c8f2f0f436de9f
Sha256: 287e8782d6ba21e601b721a70e20b7c1d07cd7c5810da32e219f7b36a0762457
                                        
                                            GET /d/a/1142.php?ext=js&_t=58314967164 HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=d43dfa2ee27a2f676ec259fc58b49b2f51539260394

                                         
                                         104.16.194.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: tr_az=m%255B0%255D%3D10%26m%255B1%255D%3D1142%26d%255B0%255D%3D11%26d%255B1%255D%3D1142; expires=Sat, 13-Oct-2018 12:19:54 GMT; Max-Age=172800 tr_a=m%255B0%255D%3D10%26m%255B1%255D%3D36377%26d%255B0%255D%3D11%26d%255B1%255D%3D36377; expires=Sat, 13-Oct-2018 12:19:54 GMT; Max-Age=172800
Content-Encoding: gzip
Server: cloudflare
CF-RAY: 4681471ab1ca4297-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   197
Md5:    08477699543831f51102ec3634afea0b
Sha1:   934f8b698086089811c023e1adfdc1ea5a5b6fa2
Sha256: 526430a9d986d1d0f5ea8e040e0c8f64ea708cea7ee556e1042a21a34a7b0337
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260396075 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%8DK%0A%840%10D%EF%D2%27Hb%27%C6%CEa%24%848%D30%8A%9A%B8%10%F1%EE%FE%B6%22%CE%A6%E0UA%3DO%8A%16%26%A5%AD%D0h%9D%27%A4%25%ED%01_%CE%09%1C%93t%27fn%E3%89%BA%A8%94%11E%85%7Bo%09%7E%3E%E5%DBM%96%04%C1%F7%3Dw%9F%BA%19%E30%C5.%CCp%9DID%01n%3D%B4%A5%B1%88%7Fh%CD%83%D6%BC%D3%AE%1B%1E%E6F%24; expires=Fri, 12-Oct-2018 12:19:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   708
Md5:    1c8094ffe9b5a5a77558cfc84add6836
Sha1:   254a0dde3e883b41d4733fed9b14f7bc93bdc88d
Sha256: 3de1b52b57380cdce2b81cd631845beb2310e53afb871590223ced25987d88ba
                                        
                                            GET /z/349947500 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=d77cdf7a03a6fb3257a854b6806eba41a1539260394

                                         
                                         104.24.120.232
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 11 Oct 2018 12:19:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Apr 2018 23:09:55 GMT
Etag: W/"26f0-56a4fc9445fbb"
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46814723cdaf4297-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2690
Md5:    11e8d1cb4e37f10e66c40c28833656ac
Sha1:   70f389d5ca18684e72d27a86d7e9fbbd61407053
Sha256: 66b115902ebc0a0136cd5d57816d9d7d7482d828af79d168b19ec7bdcd36149c
                                        
                                            GET /images/big/2015/03/18/5508f989215b9.jpg HTTP/1.1 
Host: s12.imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 11 Oct 2018 12:19:54 GMT
Content-Length: 549699
Connection: keep-alive
Last-Modified: Wed, 18 Mar 2015 04:08:10 GMT
Etag: "5508fa2a-86343"
Expires: Sun, 08 Oct 2028 12:19:54 GMT
Cache-Control: public, max-age=315360000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681471897d842a3-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   549699
Md5:    ad346e74ab5672503367939942ee4069
Sha1:   65984fdadbc9b1167dacc80f6703c1d9cbd89680
Sha256: 9859ab843c0c1d05d9efef7559849451fe1dc7f0b00e80e2459c76e16d53e6c1
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/146502/9e411dea211b1a7671f4e7ee30bde276e8778528.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260396075
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%8DK%0A%840%10D%EF%D2%27Hb%27%C6%CEa%24%848%D30%8A%9A%B8%10%F1%EE%FE%B6%22%CE%A6%E0UA%3DO%8A%16%26%A5%AD%D0h%9D%27%A4%25%ED%01_%CE%09%1C%93t%27fn%E3%89%BA%A8%94%11E%85%7Bo%09%7E%3E%E5%DBM%96%04%C1%F7%3Dw%9F%BA%19%E30%C5.%CCp%9DID%01n%3D%B4%A5%B1%88%7Fh%CD%83%D6%BC%D3%AE%1B%1E%E6F%24

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538745059"
Cache-Control: max-age=86400
Content-Length: 295073
Last-Modified: Fri, 05 Oct 2018 13:10:59 GMT
X-HW: 1539260397.dop006.sk1.t,1539260397.cds029.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   295073
Md5:    c0e838fcdf28a1f9bbe8b9b169ff02d0
Sha1:   9e411dea211b1a7671f4e7ee30bde276e8778528
Sha256: 41ccf4ef9856c9bb12b333c8308e9ccec9ed7f482f8f73c7d1fa8a31c84a740c
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27P%5B%CB%D6%C3%84%88%D5B%89%A5%7DDt%F7%A4%7E%FB%19%98y%F0%1CI%BA%98%946B%A3%B1%8E%90%AE%5C%013%97%0C%96I%DAW%0B%AF%E1U%DD%F4%AA%15M%8F%B5%1B%82%C5%E5%F2%BB%C9%8E%C0%BB%948N%C3%B8%87%ED%08%D1%9F%F0%9DID%01%F6%BE%1F%A6%0D%24%0D

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /templates/images/background-right.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/servegimg.png
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:57 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681472bc1ce427f-OSL


--- Additional Info ---
                                        
                                            GET /templates/images/background-left.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/hostsgimg.png
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:57 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681472bc00242b5-OSL


--- Additional Info ---
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260397343 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%8DK%0A%840%10D%EF%D2%27Hb%27%C6%CEa%24%848%D30%8A%9A%B8%10%F1%EE%FE%B6%22%CE%A6%E0UA%3DO%8A%16%26%A5%AD%D0h%9D%27%A4%25%ED%01_%CE%09%1C%93t%27fn%E3%89%BA%A8%94%11E%85%7Bo%09%7E%3E%E5%DBM%96%04%C1%F7%3Dw%9F%BA%19%E30%C5.%CCp%9DID%01n%3D%B4%A5%B1%88%7Fh%CD%83%D6%BC%D3%AE%1B%1E%E6F%24

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:57 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26; expires=Fri, 12-Oct-2018 12:19:57 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   708
Md5:    f40a102e732c3c540ca14474f2a6ec87
Sha1:   70f2ffe5057ae2c12f6f1061b4d9a0db53d4bb06
Sha256: 700ffd7d319f499f5f4da8b2aa516e15eafa57451884a69a6a5654f40338f39d
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 11 Oct 2018 11:33:51 GMT
Expires: Thu, 11 Oct 2018 13:33:51 GMT
Last-Modified: Mon, 01 Oct 2018 17:56:18 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 2766
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%8DK%0A%840%10D%EF%D2%27Hb%27%C6%CEa%24%848%D30%8A%9A%B8%10%F1%EE%FE%B6%22%CE%A6%E0UA%3DO%8A%16%26%A5%AD%D0h%9D%27%A4%25%ED%01_%CE%09%1C%93t%27fn%E3%89%BA%A8%94%11E%85%7Bo%09%7E%3E%E5%DBM%96%04%C1%F7%3Dw%9F%BA%19%E30%C5.%CCp%9DID%01n%3D%B4%A5%B1%88%7Fh%CD%83%D6%BC%D3%AE%1B%1E%E6F%24

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /css/smoothness/images/ui-icons_454545_256x240.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Content-Length: 4369
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:06 GMT
Etag: "1111-4de5e790c8b80"
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:57 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681472cc690428b-OSL


--- Additional Info ---
Magic:  PNG image, 256 x 240, 8-bit colormap, non-interlaced
Size:   4369
Md5:    119dd0c2e94ad689de873ef39fd43e6e
Sha1:   1ab19df782d0b8491fc21c1edf7b20941624dd34
Sha256: cb36e80beaf2a527d463da552a5c679a46c4ff8c881318a194bb0ccb61cb2d5c
                                        
                                            GET /css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Content-Length: 105
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:02 GMT
Etag: "69-4de5e78cf8280"
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:57 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681472cc21542a9-OSL


--- Additional Info ---
Magic:  PNG image, 1 x 400, 8-bit/color RGBA, non-interlaced
Size:   105
Md5:    e5a8f32e28fd5c27bf0fed33c8a8b9b5
Sha1:   7e5c99e9f0113ba6b63c2bb408b8347191316cda
Sha256: f0e6cd91b837d5c5644d026e5ffeccd907953317cd5c0f689901733afda260b2
                                        
                                            GET /css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Content-Length: 178
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:01 GMT
Etag: "b2-4de5e78c04040"
CF-Cache-Status: HIT
Expires: Thu, 11 Oct 2018 16:19:57 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681472cd2954255-OSL


--- Additional Info ---
Magic:  PNG image, 40 x 100, 8-bit/color RGBA, non-interlaced
Size:   178
Md5:    8692e6efddf882acbff144c38ea7dfdf
Sha1:   a9bb131c4acff0d07fa7b7f21bef05179c28d13b
Sha256: 39ab7ccd9f4e82579da78a9241265df288d8eb65dbbd7cf48aed2d0129887df5
                                        
                                            GET /swidget/servegimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         67.202.94.86
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/15.png


--- Additional Info ---
                                        
                                            GET /swidget/hostsgimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         67.202.94.86
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 11 Oct 2018 12:19:57 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/27.png


--- Additional Info ---
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=588305291&utmhn=imgserve.net&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x737&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=ImgServe.net%20%7C%20Earn%20Money%20Sharing%20Images&utmhid=699109594&utmr=-&utmp=%2Fimg-5508f989215f8.html&utmht=1539260398393&utmac=UA-40347884-1&utmcc=__utma%3D120226704.27503203.1539260398.1539260398.1539260398.1%3B%2B__utmz%3D120226704.1539260398.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=85528624&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 11 Oct 2018 12:19:58 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /library/146502/db77cea5f13482ab74a50acf3efe4bbb568db54e.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260397343
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:19:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538745059"
Cache-Control: max-age=86400
Content-Length: 160126
Last-Modified: Fri, 05 Oct 2018 13:10:59 GMT
X-HW: 1539260397.dop006.sk1.t,1539260399.cds029.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   160126
Md5:    5afea6099c1d1a42dff1dcbdae5a6e31
Sha1:   db77cea5f13482ab74a50acf3efe4bbb568db54e
Sha256: 2e8e2b6b4d0e89284f47245acd9f9a5957979889f129f5b597e0cd9218e0dc46
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /small/00/27.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:59 GMT
Content-Length: 320
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-140"
Expires: Fri, 12 Oct 2018 12:19:59 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   320
Md5:    60517c5fa1816d354b0e407dc5dc4ec8
Sha1:   61f22897ff0d30c7e3c913fc5e66032d087f49fe
Sha256: 768336c5db8cc497d561100b06fc2d11430d30d77710cf0767846e48be07b27e
                                        
                                            GET /small/00/15.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:19:59 GMT
Content-Length: 321
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-141"
Expires: Fri, 12 Oct 2018 12:19:59 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   321
Md5:    e2db48d23d6dd0b5de3a4b9d7e668784
Sha1:   b90f92fe2813345ae4b110e7b017a25c1574e6fc
Sha256: d44e472e0716765b9956e86e27c209eef46473a58d3c21b6c80958ea3ddf4713
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394677 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%B4i%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A30%DA%A0%2C%85%94%99x%AC%CB%80%AB%B4%0AIX%A756%B9%975Z%13%D1%29%13i%D9%07%86%5B%AEm%B3%D3%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C74%91%824%7DX%EF%02%D1%06%8B%3FX%B7%C3%FA%C3%2Cz%E5%08%FF%F86%EE%B0%F1%18%3B%CDn%A9h6; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   690
Md5:    36298f2a0a618075aa38c0d85ecc2723
Sha1:   aeba30709533f4d876e4e5247696cbd055d46837
Sha256: a5c5249fe5db7ffd4c8d2b46bf1c355151f5b8faadb6fcd63763547565f20b8c
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394855 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%F4%27m%D3%F4a%A4%8C%AA%01%1D%D3%D6%0B%19%7B%F7%CDy%3B%C7%BC%09%9C%1C%C8G2%5B%1E%85%8D%23%E5%90Rf%E4%B1.%03%AE%D2%2A%24a%9D%D6%D8%E4%5E%D6%E8l4%5E%D9%88%CB%9E%18n%B9%B6%CDN%07%86.%0F%83%F4%97%D3%F9Y%1E%AF%D2wo%F8%1E%D3%88%0A%D2%F4a%83%27%C4%0D%D6%FC%60%FD%0E%1B%8E%B3d%3D%A9%3F%BE%8D%3Bl%3C%C6N3r%B9h%3F; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   661
Md5:    01b3770dbeef63b27d86c9822bc74637
Sha1:   8d8e2967937677360333b7460df4bf3b62bbeeaa
Sha256: 815c094a2818a0d6b9047900df7d253e62e888a80a2b5ef65e527e6a1b2fd432
                                        
                                            GET /library/530318/a059fb6c8330f74784db9a7c5ad19ccde1f89e07.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394677
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%B4i%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A30%DA%A0%2C%85%94%99x%AC%CB%80%AB%B4%0AIX%A756%B9%975Z%13%D1%29%13i%D9%07%86%5B%AEm%B3%D3%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C74%91%824%7DX%EF%02%D1%06%8B%3FX%B7%C3%FA%C3%2Cz%E5%08%FF%F86%EE%B0%F1%18%3B%CDn%A9h6

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 11 Oct 2018 12:19:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1520955008"
Cache-Control: max-age=86400
Content-Length: 23106
Last-Modified: Tue, 13 Mar 2018 15:30:08 GMT
X-HW: 1539260397.dop006.sk1.t,1539260399.cds029.sk1.c


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23106
Md5:    b068b72a430d8a6518c1b8ad1bf40230
Sha1:   a059fb6c8330f74784db9a7c5ad19ccde1f89e07
Sha256: 3b0ae64bc817e6de50cf1b62811b9d347509d90da967880f8f3e3d3e73eb1639
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399576 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%F4%27m%D3%F4a%A4%8C%AA%01%1D%D3%D6%0B%19%7B%F7%CDy%3B%C7%BC%09%9C%1C%C8G2%5B%1E%85%8D%23%E5%90Rf%E4%B1.%03%AE%D2%2A%24a%9D%D6%D8%E4%5E%D6%E8l4%5E%D9%88%CB%9E%18n%B9%B6%CDN%07%86.%0F%83%F4%97%D3%F9Y%1E%AF%D2wo%F8%1E%D3%88%0A%D2%F4a%83%27%C4%0D%D6%FC%60%FD%0E%1B%8E%B3d%3D%A9%3F%BE%8D%3Bl%3C%C6N3r%B9h%3F; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   659
Md5:    e6fc5ea74913aaf08991a7eea2caf0f4
Sha1:   7d813cbfd5c5be9677b75d96c83b5d59a49ea7e6
Sha256: f6917bc9af435b33336f7883cb8e35dc68e74ea73ec82b2ce326aca7ba4f61f4
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260397272 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%B4i%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A30%DA%A0%2C%85%94%99x%AC%CB%80%AB%B4%0AIX%A756%B9%975Z%13%D1%29%13i%D9%07%86%5B%AEm%B3%D3%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C74%91%824%7DX%EF%02%D1%06%8B%3FX%B7%C3%FA%C3%2Cz%E5%08%FF%F86%EE%B0%F1%18%3B%CDn%A9h6; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   690
Md5:    36298f2a0a618075aa38c0d85ecc2723
Sha1:   aeba30709533f4d876e4e5247696cbd055d46837
Sha256: a5c5249fe5db7ffd4c8d2b46bf1c355151f5b8faadb6fcd63763547565f20b8c
                                        
                                            GET /library/581670/b4473878051d212771e8b9a09140da2a37079abc.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260394855
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%F4%27m%D3%F4a%A4%8C%AA%01%1D%D3%D6%0B%19%7B%F7%CDy%3B%C7%BC%09%9C%1C%C8G2%5B%1E%85%8D%23%E5%90Rf%E4%B1.%03%AE%D2%2A%24a%9D%D6%D8%E4%5E%D6%E8l4%5E%D9%88%CB%9E%18n%B9%B6%CDN%07%86.%0F%83%F4%97%D3%F9Y%1E%AF%D2wo%F8%1E%D3%88%0A%D2%F4a%83%27%C4%0D%D6%FC%60%FD%0E%1B%8E%B3d%3D%A9%3F%BE%8D%3Bl%3C%C6N3r%B9h%3F

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:19:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753183"
Cache-Control: max-age=86400
Content-Length: 203366
Last-Modified: Fri, 05 Oct 2018 15:26:23 GMT
X-HW: 1539260399.dop012.sk1.t,1539260399.cds040.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   203366
Md5:    acddcb39801479e0193480a4deb2348c
Sha1:   b4473878051d212771e8b9a09140da2a37079abc
Sha256: 1ef03d87099748a7dc052a1ffa5ed4c7da0c7bdf6ef63f04fd1e47056df2094b
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260395207 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%B4i%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A30%DA%A0%2C%85%94%99x%AC%CB%80%AB%B4%0AIX%A756%B9%975Z%13%D1%29%13i%D9%07%86%5B%AEm%B3%D3%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C74%91%824%7DX%EF%02%D1%06%8B%3FX%B7%C3%FA%C3%2Cz%E5%08%FF%F86%EE%B0%F1%18%3B%CDn%A9h6; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   690
Md5:    36298f2a0a618075aa38c0d85ecc2723
Sha1:   aeba30709533f4d876e4e5247696cbd055d46837
Sha256: a5c5249fe5db7ffd4c8d2b46bf1c355151f5b8faadb6fcd63763547565f20b8c
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399427 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%134m%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A3%B0%B6AY%0A%293%F1X%97%01Wi%15%920%A656%B9%975Z%13%B5S%26%D2%B2%0F%0C%B7%5C%DBf%87%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C7%90HA%9A%3E%ACw%81h%83%D5%3FX%B7%C3%FA%C3%2Cz%AB%D0%FD%F1m%DCa%E31v%9A%01n4h5; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   667
Md5:    fb971e3c1db161124fab03e4a37a2b4c
Sha1:   4b2715154e1e7df15440a4fbf4bd4445dcbecb93
Sha256: 7ac9848ea5d09bdf059550fe40ed970332596e5bb15651fcc454a24fdc7b49ab
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399615 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%B4i%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A30%DA%A0%2C%85%94%99x%AC%CB%80%AB%B4%0AIX%A756%B9%975Z%13%D1%29%13i%D9%07%86%5B%AEm%B3%D3%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C74%91%824%7DX%EF%02%D1%06%8B%3FX%B7%C3%FA%C3%2Cz%E5%08%FF%F86%EE%B0%F1%18%3B%CDn%A9h6; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   690
Md5:    36298f2a0a618075aa38c0d85ecc2723
Sha1:   aeba30709533f4d876e4e5247696cbd055d46837
Sha256: a5c5249fe5db7ffd4c8d2b46bf1c355151f5b8faadb6fcd63763547565f20b8c
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399653 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%5B%0A%83%40%0C%05%D0%BDd%05%F3%C8%BC2%8B%29%83L%DB%80%8Av%A6%1FE%DC%BB%D6%FEZ%D1%9F%C0%CD%85%1C%92H%D3%C4%A4%8C%17%06%7DL%844%95u%C0%93k%81%C8%24%E3%16%2Bwy%8BF%07e%85%0E%B8%EE%3DA%9BJ%DD%ED%A4%23h%D20p%FF%B8%DD_y%7C%E7%BE%F9%C0%EF%98D%14%10%E7%2F%EB%ACG%DCa%D5%1F%D6%1E%B0%EE4%8BZ%A2U%17%BE%0D%07l8%C7%CE%0Bn4h5; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   709
Md5:    18cfedf61fdff80eb0392aaa4bf5d17c
Sha1:   1a0e33a84e079e6c84ce81ebbc3c09d05ab6ab31
Sha256: ecb5b1733e80758173c6bae519980a79792b4e4bb4f00914951a1f2c5bfbd28c
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399502 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%B4i%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A30%DA%A0%2C%85%94%99x%AC%CB%80%AB%B4%0AIX%A756%B9%975Z%13%D1%29%13i%D9%07%86%5B%AEm%B3%D3%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C74%91%824%7DX%EF%02%D1%06%8B%3FX%B7%C3%FA%C3%2Cz%E5%08%FF%F86%EE%B0%F1%18%3B%CDn%A9h6; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   690
Md5:    36298f2a0a618075aa38c0d85ecc2723
Sha1:   aeba30709533f4d876e4e5247696cbd055d46837
Sha256: a5c5249fe5db7ffd4c8d2b46bf1c355151f5b8faadb6fcd63763547565f20b8c
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399727 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%5B%0A%83%40%0C%05%D0%BDd%05%F3%C8%BC2%8B%29%83L%DB%80%8Av%A6%1FE%DC%BB%D6%FEZ%D1%9F%C0%CD%85%1C%92H%D3%C4%A4%8C%17%06%7DL%844%95u%C0%93k%81%C8%24%E3%16%2Bwy%8BF%07e%85%0E%B8%EE%3DA%9BJ%DD%ED%A4%23h%D20p%FF%B8%DD_y%7C%E7%BE%F9%C0%EF%98D%14%10%E7%2F%EB%ACG%DCa%D5%1F%D6%1E%B0%EE4%8BZ%A2U%17%BE%0D%07l8%C7%CE%0Bn4h5; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   711
Md5:    0747a47cc91d692106faa8031d604665
Sha1:   163a7f72f5cb114339e39d68b49aa02ae90c467c
Sha256: 051a7b5d8bf3e9f6fd81dd830786c0f4adb085c98b4d3eb37a8ca902e2bffaa1
                                        
                                            GET /library/581670/f524aef4344cc37e920fa6186b5bf92c185e8fb5.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399576
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%13%F4%27m%D3%F4a%A4%8C%AA%01%1D%D3%D6%0B%19%7B%F7%CDy%3B%C7%BC%09%9C%1C%C8G2%5B%1E%85%8D%23%E5%90Rf%E4%B1.%03%AE%D2%2A%24a%9D%D6%D8%E4%5E%D6%E8l4%5E%D9%88%CB%9E%18n%B9%B6%CDN%07%86.%0F%83%F4%97%D3%F9Y%1E%AF%D2wo%F8%1E%D3%88%0A%D2%F4a%83%27%C4%0D%D6%FC%60%FD%0E%1B%8E%B3d%3D%A9%3F%BE%8D%3Bl%3C%C6N3r%B9h%3F

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:19:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753181"
Cache-Control: max-age=86400
Content-Length: 205169
Last-Modified: Fri, 05 Oct 2018 15:26:21 GMT
X-HW: 1539260399.dop006.sk1.t,1539260399.cds043.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   205169
Md5:    c12baf57d446233495ef88a697c0c43e
Sha1:   f524aef4344cc37e920fa6186b5bf92c185e8fb5
Sha256: 1e86833e732e484ef6da936b7e6e43042ee71fcaaac0547e9fb112432a77a523
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399537 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%134m%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A3%B0%B6AY%0A%293%F1X%97%01Wi%15%920%A656%B9%975Z%13%B5S%26%D2%B2%0F%0C%B7%5C%DBf%87%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C7%90HA%9A%3E%ACw%81h%83%D5%3FX%B7%C3%FA%C3%2Cz%AB%D0%FD%F1m%DCa%E31v%9A%01n4h5; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   667
Md5:    fb971e3c1db161124fab03e4a37a2b4c
Sha1:   4b2715154e1e7df15440a4fbf4bd4445dcbecb93
Sha256: 7ac9848ea5d09bdf059550fe40ed970332596e5bb15651fcc454a24fdc7b49ab
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399688 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5508f989215f8.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%8D%CD%5B%0A%830%10%05%D0%BD%CC%0A%F2%98%3C%9C%2C%A6%04%89%3A%A0%A2M%FAQ%82%7B%AF%D5_%5B%FC%19%B8s%E1%9EH%8A%2A%932%5E%18%F4%21%12R%CD%FB%81%81K%86%C0%24%C3%11%0BO%E9%88F7%CA%0A%DD%E0%FE%F7%04c%CC%E5%B2%93%8E%A0%8D%CB%C2s%FF%E8%9Ei%7D%A5%B9%7D%C39%26%11%05%84%ED%CB%3A%EB%11%2FX%F5%83%B5%7FXw%8F%DD%3E%1FjF%26

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; expires=Sat, 10-Oct-2020 12:19:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%134m%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A3%B0%B6AY%0A%293%F1X%97%01Wi%15%920%A656%B9%975Z%13%B5S%26%D2%B2%0F%0C%B7%5C%DBf%87%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C7%90HA%9A%3E%ACw%81h%83%D5%3FX%B7%C3%FA%C3%2Cz%AB%D0%FD%F1m%DCa%E31v%9A%01n4h5; expires=Fri, 12-Oct-2018 12:19:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   667
Md5:    fb971e3c1db161124fab03e4a37a2b4c
Sha1:   4b2715154e1e7df15440a4fbf4bd4445dcbecb93
Sha256: 7ac9848ea5d09bdf059550fe40ed970332596e5bb15651fcc454a24fdc7b49ab
                                        
                                            GET /library/103333/91bfac09763ed3616ea136707721ab52afdb869a.png HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399653
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%CF%5B%0A%83%40%0C%05%D0%BDd%05%F3%C8%BC2%8B%29%83L%DB%80%8Av%A6%1FE%DC%BB%D6%FEZ%D1%9F%C0%CD%85%1C%92H%D3%C4%A4%8C%17%06%7DL%844%95u%C0%93k%81%C8%24%E3%16%2Bwy%8BF%07e%85%0E%B8%EE%3DA%9BJ%DD%ED%A4%23h%D20p%FF%B8%DD_y%7C%E7%BE%F9%C0%EF%98D%14%10%E7%2F%EB%ACG%DCa%D5%1F%D6%1E%B0%EE4%8BZ%A2U%17%BE%0D%07l8%C7%CE%0Bn4h5

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:20:00 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1530401042"
Cache-Control: max-age=86400
Content-Length: 93482
Last-Modified: Sat, 30 Jun 2018 23:24:02 GMT
X-HW: 1539260400.dop008.sk1.t,1539260400.cds053.sk1.c


--- Additional Info ---
Magic:  PNG image, 300 x 250, 8-bit/color RGB, non-interlaced
Size:   93482
Md5:    3f11291205cf168e256954bc87b13f31
Sha1:   91bfac09763ed3616ea136707721ab52afdb869a
Sha256: ba776346a7df13030902c4e2632d513f2af5e2a8accead027f6046ccc19e4ab1
                                        
                                            GET /library/530318/7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399427
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%CF%DD%0A%C20%0C%05%E0w%C9%134m%FA%97%3E%8C%94Q5%A0c%DAz%21c%EF%BE9o%E7%987%81%93%03%F9Hf%C3%A3%B0%B6AY%0A%293%F1X%97%01Wi%15%920%A656%B9%975Z%13%B5S%26%D2%B2%0F%0C%B7%5C%DBf%87%9E%A1%CB%C3+%FD%E5t%7E%96%C7%AB%F4%DD%1B%BE%C7%90HA%9A%3E%ACw%81h%83%D5%3FX%B7%C3%FA%C3%2Cz%AB%D0%FD%F1m%DCa%E31v%9A%01n4h5

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:19:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705623"
Cache-Control: max-age=86400
Content-Length: 296015
Last-Modified: Tue, 19 Dec 2017 17:47:03 GMT
X-HW: 1539260399.dop012.sk1.t,1539260399.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   296015
Md5:    3ddb8167820e977615a641bc6a1eb2bd
Sha1:   7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f
Sha256: 3d5072cf06330fd3372e63fb73246718457b179b5cc2fae904f5ec09998d9c03
                                        
                                            GET /library/103333/630f76fc7b9a58e677be065edc83b59503d39e1c.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5508f989215f8.html&dt=1539260399727
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bbf3fea9f2f20.304977653807135441%22%3B%7D; impressions=x%9C%95%CF%5B%0A%83%40%0C%05%D0%BDd%05%F3%C8%BC2%8B%29%83L%DB%80%8Av%A6%1FE%DC%BB%D6%FEZ%D1%9F%C0%CD%85%1C%92H%D3%C4%A4%8C%17%06%7DL%844%95u%C0%93k%81%C8%24%E3%16%2Bwy%8BF%07e%85%0E%B8%EE%3DA%9BJ%DD%ED%A4%23h%D20p%FF%B8%DD_y%7C%E7%BE%F9%C0%EF%98D%14%10%E7%2F%EB%ACG%DCa%D5%1F%D6%1E%B0%EE4%8BZ%A2U%17%BE%0D%07l8%C7%CE%0Bn4h5

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:20:00 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1529703885"
Cache-Control: max-age=86400
Content-Length: 418325
Last-Modified: Fri, 22 Jun 2018 21:44:45 GMT
X-HW: 1539260400.dop005.sk1.t,1539260400.cds033.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   418325
Md5:    f42d2d872da2ebdcc10c8f2ea8c78a6a
Sha1:   630f76fc7b9a58e677be065edc83b59503d39e1c
Sha256: 677c485eb731be33795aced9d9f22659b21d01f3362a9ec9cd726c0fac4887c9
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=da513b86e06564fd421fe8dad9624e3421539260393; PHPSESSID=3d1cc1e6d6f68cb4baf5be8a3edcad61; viewer=3192c6d894a235e129be6eb1ec1864eb; viewerid=5508f989215f8; imagen3=1; __utma=120226704.27503203.1539260398.1539260398.1539260398.1; __utmb=120226704.1.10.1539260398; __utmc=120226704; __utmz=120226704.1539260398.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Thu, 11 Oct 2018 12:20:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:42:49 GMT
Etag: W/"51ae9799-47c"
CF-Cache-Status: REVALIDATED
Expires: Thu, 18 Oct 2018 12:20:01 GMT
Cache-Control: public, max-age=604800
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4681474224de427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   921
Md5:    06ee4e4a98828888549e3ed7693dd78c
Sha1:   ef954a19b195cce9f07d6ef1efb08e295aa81baf
Sha256: 281e819159c678c2a170900b0d6d584fab10d46613c3567dd8b5c31ea93b8eb6
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html

                                         
                                         172.64.163.36
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 11 Oct 2018 12:20:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d8a2feba3696deb101d86b8c7ed1d7d871539260401; expires=Fri, 11-Oct-19 12:20:01 GMT; path=/; domain=.popmyads.com; HttpOnly
Location: https://popmyads.com/x/pma
Server: cloudflare
CF-RAY: 468147440061904d-DME


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   234
Md5:    f93c41ecf56596dfaff243d71b6315ce
Sha1:   348380cff5f286fd99bf74d71f37bcb0fbf3e95f
Sha256: ab246188c1c38fdd6b1b5e721ef8d14caa305028bc6b79fe314e316d6407323d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sat, 06 Oct 2018 19:49:05 GMT
Etag: D20608EE87E279802E80C2967C9B6B0C2E5DEF69
X-OCSP-Responder-ID: rmdccaocsp23
Content-Length: 279
Cache-Control: public, no-transform, must-revalidate, max-age=199138
Expires: Sat, 13 Oct 2018 19:39:00 GMT
Date: Thu, 11 Oct 2018 12:20:02 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   279
Md5:    65c3643b6c8e777cfb39d77896f10c4c
Sha1:   d20608ee87e279802e80c2967c9b6b0c2e5def69
Sha256: 424d4ce4ad77028df66bb5416cbecf422e3d6cea88c375d99e57701242785191
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5508f989215f8.html
Cookie: __cfduid=d8a2feba3696deb101d86b8c7ed1d7d871539260401

                                         
                                         172.64.163.36
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 11 Oct 2018 12:20:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.1.16
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4681474a0efa4e6c-DME
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26897
Md5:    74df32e7c9729cc21ddb00e044c8a808
Sha1:   919daf6d75fd32b4ca59cc29a331cb0078373bce
Sha256: 2e99678de740ec7d0b2f6080245ecc6b0a764a463dd1e858ef1d95b6892ff84a