Overview

URL imgserve.net/img-5528eb424b27f.html
IP104.27.170.91
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-10-17 04:50:31 CEST
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.170.91

Date UQ / IDS / BL URL IP
2018-11-12 18:26:19 +0100
2 - 1 - 1 imgserve.net/img-536ad1a395425.html 104.27.170.91
2018-11-05 07:03:30 +0100
2 - 0 - 2 imgserve.net/img-54c64c324d6bc.html 104.27.170.91
2018-11-05 04:04:00 +0100
2 - 0 - 1 imgserve.net/img-520ff6461bbc8.html 104.27.170.91
2018-11-04 20:09:10 +0100
2 - 0 - 2 imgserve.net/img-54caf1eb9d099.html 104.27.170.91
2018-11-04 04:56:26 +0100
2 - 0 - 1 imgserve.net/img-54d0daf1d6f0e.html 104.27.170.91
2018-11-02 20:11:38 +0100
2 - 0 - 2 imgserve.net/img-528e347438fab.html 104.27.170.91
2018-11-02 20:04:40 +0100
2 - 0 - 1 imgserve.net/img-54662a0d827f1.html 104.27.170.91
2018-11-02 17:12:06 +0100
2 - 0 - 2 imgserve.net/img-528e347438fab.html 104.27.170.91
2018-11-01 23:16:30 +0100
2 - 0 - 1 imgserve.net/img-5413f0423fa72.html 104.27.170.91
2018-11-01 03:14:54 +0100
2 - 0 - 1 imgserve.net/img-551600f03f579.html 104.27.170.91

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-11-14 12:56:28 +0100
0 - 1 - 0 https://watch.hdmovieswatch.pw/youtube-chanel-hd 104.18.44.114
2018-11-14 12:53:35 +0100
0 - 0 - 1 bodasoriginales.net/%C2%BFcuales-son-las-opci (...) 104.27.177.17
2018-11-14 12:53:35 +0100
0 - 0 - 1 bodasoriginales.net/tag/vestidos-hannibal-laguna 104.27.176.17
2018-11-14 12:51:08 +0100
0 - 0 - 0 apploi.link 104.18.35.244
2018-11-14 12:46:34 +0100
0 - 1 - 0 itdmusic.com/ 104.27.139.123
2018-11-14 12:45:09 +0100
0 - 0 - 2 checkpointsignaling.com/when-a-bleed-occurred (...) 104.27.133.217
2018-11-14 12:42:09 +0100
0 - 0 - 0 cdn2.i4memory.info/images/alert.png 104.24.125.210
2018-11-14 12:39:22 +0100
0 - 0 - 0 zipansion.com 104.27.155.99
2018-11-14 12:34:12 +0100
0 - 0 - 3 www.critcaremed-ottawa.ca/tag/fitness-trainer (...) 104.28.11.245
2018-11-14 12:33:08 +0100
0 - 0 - 0 r.agilemanagementcertification.com/mk/cl/1xv2 (...) 104.16.234.163

Last 10 reports on domain: imgserve.net

Date UQ / IDS / BL URL IP
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-12 18:26:19 +0100
2 - 1 - 1 imgserve.net/img-536ad1a395425.html 104.27.170.91
2018-11-09 02:53:11 +0100
2 - 1 - 2 imgserve.net/img-54b8f7f76f9f2.html 104.27.171.91
2018-11-07 21:06:07 +0100
2 - 0 - 1 imgserve.net/img-531b3b116a506.html 104.27.171.91
2018-11-07 15:11:36 +0100
2 - 0 - 2 imgserve.net/img-51f083d266342.html 104.27.171.91
2018-11-05 18:07:20 +0100
2 - 0 - 2 imgserve.net/img-51ea9c13dbd6c.html 104.27.171.91
2018-11-05 08:10:59 +0100
2 - 0 - 2 imgserve.net/img-54b40e54bb3a9.html 104.27.171.91
2018-11-05 07:03:30 +0100
2 - 0 - 2 imgserve.net/img-54c64c324d6bc.html 104.27.170.91
2018-11-05 04:04:00 +0100
2 - 0 - 1 imgserve.net/img-520ff6461bbc8.html 104.27.170.91


JavaScript

Executed Scripts (20)


Executed Evals (0)


Executed Writes (20)

#1 JavaScript::Write (size: 11, repeated: 1) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#2 JavaScript::Write (size: 6, repeated: 16) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 171, repeated: 1) - SHA256: 20f394b8c4eed5b3cc8e6dd57b975b4b25220bf0b7112b224808b4ef744f8c71

                                        < a href = "http://kmylvwo5.com/tracker_clicks.php?a=1142&c=12470&b=36377&_t=1539744595"
id = "ad_link"
target = "_blank" > Check This FREE PORN Site Before It 's BANNED Forever</a>
                                    

#4 JavaScript::Write (size: 531, repeated: 1) - SHA256: 740a3488f8b708d4f20e93259f175cfd61e1dc14da69b2132a4b5cbd3db5ece5

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744594950" > < /iframe>
                                    

#5 JavaScript::Write (size: 531, repeated: 1) - SHA256: bfed2fef5682c49d0af62fa5321b2b0ba3edf4430f677926102d746d03e2752e

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595086" > < /iframe>
                                    

#6 JavaScript::Write (size: 531, repeated: 1) - SHA256: 0ac6bf20228cf13fa3844f0b5ed400b7f0cb1f7fe631fc24f24525560fe38d4b

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595128" > < /iframe>
                                    

#7 JavaScript::Write (size: 531, repeated: 1) - SHA256: f51627199a6f1046de1cb6069d297376cb4e611d34e542ae5fce617cd9a73124

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595166" > < /iframe>
                                    

#8 JavaScript::Write (size: 531, repeated: 1) - SHA256: abb2aee7b46f8f82013fc9fcc846bf7142da9a09b3bd23d4fc64a608f07a3c5e

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595204" > < /iframe>
                                    

#9 JavaScript::Write (size: 531, repeated: 1) - SHA256: f78c6c13c611204b60b24f5f7598746dee2d6fef2fa7b0de8875c924dc8340d2

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595243" > < /iframe>
                                    

#10 JavaScript::Write (size: 531, repeated: 1) - SHA256: 95b61ced6cbc3542a5ba9e6d60c82aab9771461f833f6da5b09836a8e311b3f9

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595280" > < /iframe>
                                    

#11 JavaScript::Write (size: 531, repeated: 1) - SHA256: 53f8f58197ef88cdc70b9f11ed0cb02a43fb03844cd749375005173342488c56

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595318" > < /iframe>
                                    

#12 JavaScript::Write (size: 531, repeated: 1) - SHA256: 3835f4605ac4ad2cd844d3208e13c4b4f1dbfc467e3b0424053aaf72d6c4f1c5

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595355" > < /iframe>
                                    

#13 JavaScript::Write (size: 531, repeated: 1) - SHA256: 090f322da274f117dd4af06d89bdab871010d1a2c540f59f89bc95b0debe3f4a

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595407" > < /iframe>
                                    

#14 JavaScript::Write (size: 531, repeated: 1) - SHA256: bb17eb9579e9904c52f26a0fbe52a4cd38d6d354169a7fb132434aa5783e3a9e

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595456" > < /iframe>
                                    

#15 JavaScript::Write (size: 531, repeated: 1) - SHA256: 24a448a80178d04e8078dd4871147c0fb51856db86443e0f78af4125a493c85f

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595495" > < /iframe>
                                    

#16 JavaScript::Write (size: 531, repeated: 1) - SHA256: 07a22a480f40e48f9722678e798d12e79b79ef58b5fcb71f61b7fc1e24581836

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595533" > < /iframe>
                                    

#17 JavaScript::Write (size: 531, repeated: 1) - SHA256: faa7cf00eea15e0c88287ade73b73d092c200fc2aee63a88069415b37fb570b3

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744596269" > < /iframe>
                                    

#18 JavaScript::Write (size: 531, repeated: 1) - SHA256: 960e126e9a9bdc9b4206640ebec73754aea8e28072013a76cfa119ed9b06fd64

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744596322" > < /iframe>
                                    

#19 JavaScript::Write (size: 531, repeated: 1) - SHA256: 21502e34a6ca9176f9e104124ac65804cf40ce50ed941757ba782fe379e82762

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744596359" > < /iframe>
                                    

#20 JavaScript::Write (size: 90, repeated: 1) - SHA256: 8490e3d447bc405978d52647839746f5e3d3553fafc0619edc7e8ca2513d8d1e

                                        < script type = 'text/javascript'
src = 'http://5gl1x9qc.com/d/a/1142.php?ext=js&_t=17721224267
                                    


HTTP Transactions (71)


Request Response
                                        
                                            GET /img-5528eb424b27f.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; expires=Thu, 17-Oct-19 02:49:53 GMT; path=/; domain=.imgserve.net; HttpOnly refererx=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ PHPSESSID=992f46cf2500347b1155f177b2da48d7; path=/ viewer=0f278dcb324606adb1d3098012e0a281; expires=Wed, 17-Oct-2018 03:49:53 GMT; path=/; domain=.imgserve.net viewerid=5528eb424b27f; expires=Wed, 17-Oct-2018 03:49:53 GMT; path=/; domain=.imgserve.net imagen3=1; expires=Thu, 18-Oct-2018 02:49:54 GMT
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: cloudflare
CF-RAY: 46af746014374285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9173
Md5:    d701bf8034d0a88a3d64d6ac3b333557
Sha1:   4c2095c65654837fd661297cd779264435ce07ad
Sha256: bbd0f09d940806a686df9f91a56302e73133d495684ee8b564251cae4c8806b4
                                        
                                            GET /css/styles.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 13 Jan 2015 07:23:52 GMT
Etag: W/"54b4c808-fceb"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746154494285-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16363
Md5:    cdae48c2d228c78bcc72c4c0895ad283
Sha1:   a83d7527c3a8f3683094ff25f11ce7d76cfe0841
Sha256: c14d3811da0f79fcd55bc1af6daed9a29cfb6b7622b81f090a230a11ab08a090
                                        
                                            GET /js/jquery-1.7.1.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:20 GMT
Etag: W/"51ae97f4-16eac"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746172d84297-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33223
Md5:    797e5aeed7a915aa9423119040979407
Sha1:   1287bebc61e72f65aa726faeb9a27485a38b9707
Sha256: 4f74858d849a6a197bbf30d7bdb6003ae954f55c757c95aeaea94071fdff710c
                                        
                                            GET /css/smoothness/jquery-ui-1.8.18.custom.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:43 GMT
Etag: W/"51ae9a27-833b"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746182da4297-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7335
Md5:    8c3ae5f2631058b80fb6f6d84342ecd0
Sha1:   888aa2afe402561fe03a98b94b2abd7d48d69efd
Sha256: f9da0fc48c829ebfeb5079da87520156bd8e8f14d2ba4f3bdf4488fc49bba9d1
                                        
                                            GET /js/jquery-ui-1.8.18.custom.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:27 GMT
Etag: W/"51ae97fb-335f7"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af7461866e42a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   52155
Md5:    1c8b6494b85c448273f83a2814226e0e
Sha1:   f7713dd0a26d0cfaa051020b2b37d589414c45f1
Sha256: fec6535c94fe5fb5604068322a6a43b16ea598c98415d8fe05fc54e8176021a7
                                        
                                            GET /css/img/logo.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Content-Length: 21186
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:28 GMT
Etag: "52c2-4de5e76c8b600"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af7462245c4285-OSL


--- Additional Info ---
Magic:  PNG image, 280 x 80, 8-bit/color RGBA, non-interlaced
Size:   21186
Md5:    0f2ef79913ef0d8ab7b994bb7c5fe9fe
Sha1:   a9f53968b43919d2db7f1ce7033a9f41a6d5ade3
Sha256: 5bf1fff11cc2949712da86d18ed92bef598cbdda2ab57f0d5e98357152e28667
                                        
                                            GET /css/img/menubutton.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Content-Length: 3494
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:29 GMT
Etag: "da6-4de5e76d7f840"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746222e64297-OSL


--- Additional Info ---
Magic:  PNG image, 150 x 40, 8-bit/color RGBA, non-interlaced
Size:   3494
Md5:    d1394f343c66e133faf085d089c7994b
Sha1:   a4064bd855e37c837ca0071416244e20dea5a1fa
Sha256: ad28f482b6f4e37eeafc726c5d2058da03cf848a3397d09d25773ea6a6fe32ad
                                        
                                            GET /css/img/pig.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Content-Length: 821
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:30 GMT
Etag: "335-4de5e76e73a80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746222e54297-OSL


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   821
Md5:    603b3f482f950ea6ecbe3f02e4527d51
Sha1:   cc218bdf4d001f3db5482e6290e3d2ba13969ca0
Sha256: 4a96458a5a569e653a34eeb335eafe180e28129ac00125392ee5bec392ccbb3d
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /jquery/text.js?_t=Math.floor(Math.random()*99999999999) HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         104.16.198.215
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d27ac58cd450e614dc07c35007a510d281539744594; expires=Thu, 17-Oct-19 02:49:54 GMT; path=/; domain=.5gl1x9qc.com; HttpOnly
Last-Modified: Wed, 29 Mar 2017 18:20:04 GMT
Etag: W/"58dbfad4-1c9"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746303464273-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    ce46a3c0de343339a689c89866261e07
Sha1:   15d7033005f8313d87ee7fc0c01ff04cfbc0408e
Sha256: 046a2434ac8093105cc19850e70be73d6d08b2ec52df39aa9df28e8e9503b606
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 14 Oct 2018 01:21:33 GMT
Etag: 5E911FA3F0AB2E44C9C4C034FC9FF70F18C81503
X-OCSP-Responder-ID: rmdccaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=339695
Expires: Sun, 21 Oct 2018 01:11:29 GMT
Date: Wed, 17 Oct 2018 02:49:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ee4cbc28a1495826fa71ae4ccbbf9862
Sha1:   5e911fa3f0ab2e44c9c4c034fc9ff70f18c81503
Sha256: 928f4a7dbcee4d73b7d15eb621806ce80e33b5dbcc561609928ece97c70648a3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 424B413FCAD941C040D692B87CDE897F59DB16AA
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=152845
Expires: Thu, 18 Oct 2018 21:17:19 GMT
Date: Wed, 17 Oct 2018 02:49:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    83c72f9ab989986ef6becba8e433c7ac
Sha1:   424b413fcad941c040d692b87cde897f59db16aa
Sha256: 88fa386cbec8abadec656da6ae494781daa1a1c8d14dc768376fc7ede025432e
                                        
                                            GET /images/big/2015/04/11/5528eb424b241.jpg HTTP/1.1 
Host: s12.imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Content-Length: 875479
Connection: keep-alive
Last-Modified: Sat, 11 Apr 2015 09:39:59 GMT
Etag: "5528ebef-d5bd7"
Expires: Sat, 14 Oct 2028 02:49:54 GMT
Cache-Control: public, max-age=315360000
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af7463047a426d-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   875479
Md5:    3a9c3b62895b4e5fe99fef0a3f7db451
Sha1:   f55d3d599f89ecaa198b7156157952db1f210ce7
Sha256: 30304c4603c3eeb56060b48c3f6e6b5b95f20c51c5354e77a2e5de5248b85988
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: E8581583C2803974EDDB983E5584CDB37B4F9E14
X-OCSP-Responder-ID: rmdccaocsp26
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=152821
Expires: Thu, 18 Oct 2018 21:16:55 GMT
Date: Wed, 17 Oct 2018 02:49:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5e712a8f20f0ae131a32a41f82c55b67
Sha1:   e8581583c2803974eddb983e5584cdb37b4f9e14
Sha256: 65e0f33f70b334d388d92507b68dacbf8b7390892e3cb264962501c2836b9e79
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         104.20.209.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=df580efcbba529eb8ae36a5af8df103b21539744594; expires=Thu, 17-Oct-19 02:49:54 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Mon, 15 Oct 2018 11:58:24 GMT
Etag: W/"5bc480e0-423b4"
Expires: Wed, 17 Oct 2018 10:49:54 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af7465e9ee4261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   70162
Md5:    b6bb44f95a22a27e8b92d2ccbc591524
Sha1:   b5f4bf87301fb5291d70f392758d9c56ae374cc3
Sha256: e32b7829c99619bfa2c1de9e1ed9e9e515863b2d094e86c629c67c7350e8c96d

Alerts:
  urlquery:
    - Crypto currency mining script
                                        
                                            GET /css/img/bg2.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/styles.css
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Content-Length: 7637
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:23 GMT
Etag: "1dd5-4de5e767c6ac0"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:54 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af7466778742a9-OSL


--- Additional Info ---
Magic:  PNG image, 2247 x 190, 8-bit colormap, non-interlaced
Size:   7637
Md5:    8388f9f5ebca3dd2c58b44f190687497
Sha1:   44678688ae09eb0b35eaef09f83771165d1104cb
Sha256: de57f5342874c0d1e33353e7e42b61134d2aab7cb52d1929e115b44049d5f525
                                        
                                            GET /imgs-5528eb424b27f.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 02:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af746674a94285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   393
Md5:    683d975f0afd4979f56ee8c21b4218a3
Sha1:   629952f74abdbbe8094b0640c79206544c7feb7a
Sha256: 844bce032ed8712745d47fd2ae04d63efdeeda3f9451b7249d1e200fe52216bd
                                        
                                            GET /image-5528eb424b27f.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af7466731f4297-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /adserver.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af746673204297-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /view.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af7466825a428b-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744594950 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:54 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%C8%DAE%5D%0F%13%22V%0B%15%95%F6%11%E1%DD%0B%FB%EDg%60%E6%C1%F3%AC%F8%16n%C94%84%C6yF%BE%D3%0B%98%24%27p%C2%CAU%CD%B2%C4%AA%D4Y%8DH%96%DEn%18f%9F%F2%EF%A64C%F0%DB%26%EB%D8%0FG%DC%CF%B8%86%0B%BE3%85%D8%80%2B%E5%01%AA%87%24%21; expires=Thu, 18-Oct-2018 02:49:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   818
Md5:    94064973b461f356239d18fbb6ebe67c
Sha1:   99b525859a32765105922906bb52726ccb5f405e
Sha256: 385d642617d30d1099934650d60d4b96d62d02f019048e7c90e237e4abb849f1
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/118525/c5a187d64e607349786728fd25809b1892f787bb.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744594950
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%C8%DAE%5D%0F%13%22V%0B%15%95%F6%11%E1%DD%0B%FB%EDg%60%E6%C1%F3%AC%F8%16n%C94%84%C6yF%BE%D3%0B%98%24%27p%C2%CAU%CD%B2%C4%AA%D4Y%8DH%96%DEn%18f%9F%F2%EF%A64C%F0%DB%26%EB%D8%0FG%DC%CF%B8%86%0B%BE3%85%D8%80%2B%E5%01%AA%87%24%21

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1539004788"
Cache-Control: max-age=86400
Content-Length: 25924
Last-Modified: Mon, 08 Oct 2018 13:19:48 GMT
X-HW: 1539744595.dop012.sk1.t,1539744595.cds016.sk1.c


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   25924
Md5:    1b895a1037d7bcadb84dc994e771783d
Sha1:   c5a187d64e607349786728fd25809b1892f787bb
Sha256: 9071b98db0141191a87f52a61dd944775cfcf2f6eb2137518ac762efc5a80861
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595086 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%C8%DAE%5D%0F%13%22V%0B%15%95%F6%11%E1%DD%0B%FB%EDg%60%E6%C1%F3%AC%F8%16n%C94%84%C6yF%BE%D3%0B%98%24%27p%C2%CAU%CD%B2%C4%AA%D4Y%8DH%96%DEn%18f%9F%F2%EF%A64C%F0%DB%26%EB%D8%0FG%DC%CF%B8%86%0B%BE3%85%D8%80%2B%E5%01%AA%87%24%21

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B; expires=Thu, 18-Oct-2018 02:49:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    776f1cdfd9a877ebd44d252d1519e4bb
Sha1:   f439c402cf5e79c7e46e21466ad30c88a5dc5a9d
Sha256: e233a728b88a892b031f9eaef077badf44cd6a30b686fdcf7881733740315913
                                        
                                            GET /library/530318/a059fb6c8330f74784db9a7c5ad19ccde1f89e07.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595086
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1520955008"
Cache-Control: max-age=86400
Content-Length: 23106
Last-Modified: Tue, 13 Mar 2018 15:30:08 GMT
X-HW: 1539744595.dop012.sk1.t,1539744595.cds040.sk1.c


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23106
Md5:    b068b72a430d8a6518c1b8ad1bf40230
Sha1:   a059fb6c8330f74784db9a7c5ad19ccde1f89e07
Sha256: 3b0ae64bc817e6de50cf1b62811b9d347509d90da967880f8f3e3d3e73eb1639
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%C8%DAE%5D%0F%13%22V%0B%15%95%F6%11%E1%DD%0B%FB%EDg%60%E6%C1%F3%AC%F8%16n%C94%84%C6yF%BE%D3%0B%98%24%27p%C2%CAU%CD%B2%C4%AA%D4Y%8DH%96%DEn%18f%9F%F2%EF%A64C%F0%DB%26%EB%D8%0FG%DC%CF%B8%86%0B%BE3%85%D8%80%2B%E5%01%AA%87%24%21

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /d/a/1142.php?ext=js&_t=17721224267 HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=d27ac58cd450e614dc07c35007a510d281539744594

                                         
                                         104.16.198.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: tr_az=m%255B0%255D%3D10%26m%255B1%255D%3D1142%26d%255B0%255D%3D16%26d%255B1%255D%3D1142; expires=Fri, 19-Oct-2018 02:49:55 GMT; Max-Age=172800 tr_a=m%255B0%255D%3D10%26m%255B1%255D%3D36377%26d%255B0%255D%3D16%26d%255B1%255D%3D36377; expires=Fri, 19-Oct-2018 02:49:55 GMT; Max-Age=172800
Content-Encoding: gzip
Server: cloudflare
CF-RAY: 46af746753794273-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   196
Md5:    2be49325186857b8f4032eee12fa3fae
Sha1:   386ec4b1339b24dd5de4b092d41985c1333c0405
Sha256: 3b23f9fd28a3e2ef0f95d771cf51905ff1df8c44a5097ee27d0897a9ce75f4b2
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595456 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%B5%8DA%0A%830%10E%EF2%27H%A63M%9C%1C%A6%04Iu%C0%8Am%E2B%24w7%D8%AD%5B7%1F%DE%FF%F0_%14%94%5D%05%D9%1B%26%1F%A2%90%EC%B9%05%8CZ2%04%15%1BN%2C%FAI%27%F2%A3sD%DCq%EB%BD%C0%14s%B9%DC%AC%13%E8%E3%B2%E8%3C%BC%DE%BF%F4%5D%D3%DCo%F0%3F%B3D%06BmZt%E6Ix%A1%C5%FB%B4%F5%00%2A%D5F%3C; expires=Thu, 18-Oct-2018 02:49:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    776f1cdfd9a877ebd44d252d1519e4bb
Sha1:   f439c402cf5e79c7e46e21466ad30c88a5dc5a9d
Sha256: e233a728b88a892b031f9eaef077badf44cd6a30b686fdcf7881733740315913
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595533 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:55 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT; expires=Thu, 18-Oct-2018 02:49:55 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   669
Md5:    925e777617d06697f65103dbed85f2ef
Sha1:   8312e7a201a8ceea6008aef3db107ff9c4fe1531
Sha256: 020d78019830626655c039dc013f7434e976ba1264f4bd06e5d42b500e28e344
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 17 Oct 2018 01:27:48 GMT
Expires: Wed, 17 Oct 2018 03:27:48 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 4927
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /templates/images/background-left.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/hostsgimg.png
CF-Cache-Status: EXPIRED
Expires: Wed, 17 Oct 2018 06:49:55 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746a34f44285-OSL


--- Additional Info ---
                                        
                                            GET /templates/images/background-right.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/servegimg.png
CF-Cache-Status: EXPIRED
Expires: Wed, 17 Oct 2018 06:49:55 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746a30af42a9-OSL


--- Additional Info ---
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%850%0CD%EF%92%13%B45%F9%AD%E9a%A4H%D5%80%8A%DA%BA%10%F1%EE%BF%E8%D6%B5%9B%817%03%F3%02%1B%3E%85%0D9E%E8%7C%60%E43%95%80Ar%02%2F%AC%FD%8DY%A6x%23U%B5E%A4%9AJ%EF%18%C6%90%F2%EB%A6-C%1B%96E%E6%BE%E9%B6%B8%EEqn%0Fx%CE4%A2%02%7F%15%AD%B1%EA%87%E6%5B%ED%F5%07%2AyF%3B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /css/smoothness/images/ui-icons_454545_256x240.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Content-Length: 4369
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:06 GMT
Etag: "1111-4de5e790c8b80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:55 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746aa3744297-OSL


--- Additional Info ---
Magic:  PNG image, 256 x 240, 8-bit colormap, non-interlaced
Size:   4369
Md5:    119dd0c2e94ad689de873ef39fd43e6e
Sha1:   1ab19df782d0b8491fc21c1edf7b20941624dd34
Sha256: cb36e80beaf2a527d463da552a5c679a46c4ff8c881318a194bb0ccb61cb2d5c
                                        
                                            GET /css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Content-Length: 178
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:01 GMT
Etag: "b2-4de5e78c04040"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:55 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746ab3754297-OSL


--- Additional Info ---
Magic:  PNG image, 40 x 100, 8-bit/color RGBA, non-interlaced
Size:   178
Md5:    8692e6efddf882acbff144c38ea7dfdf
Sha1:   a9bb131c4acff0d07fa7b7f21bef05179c28d13b
Sha256: 39ab7ccd9f4e82579da78a9241265df288d8eb65dbbd7cf48aed2d0129887df5
                                        
                                            GET /css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:55 GMT
Content-Length: 105
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:02 GMT
Etag: "69-4de5e78cf8280"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 06:49:55 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af746ab2a9428b-OSL


--- Additional Info ---
Magic:  PNG image, 1 x 400, 8-bit/color RGBA, non-interlaced
Size:   105
Md5:    e5a8f32e28fd5c27bf0fed33c8a8b9b5
Sha1:   7e5c99e9f0113ba6b63c2bb408b8347191316cda
Sha256: f0e6cd91b837d5c5644d026e5ffeccd907953317cd5c0f689901733afda260b2
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1085486260&utmhn=imgserve.net&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x737&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=ImgServe.net%20%7C%20Earn%20Money%20Sharing%20Images&utmhid=843839215&utmr=-&utmp=%2Fimg-5528eb424b27f.html&utmht=1539744596253&utmac=UA-40347884-1&utmcc=__utma%3D120226704.101625767.1539744596.1539744596.1539744596.1%3B%2B__utmz%3D120226704.1539744596.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1951131580&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Wed, 17 Oct 2018 02:49:56 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/530318/7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595533
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705623"
Cache-Control: max-age=86400
Content-Length: 296015
Last-Modified: Tue, 19 Dec 2017 17:47:03 GMT
X-HW: 1539744596.dop012.sk1.t,1539744596.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   296015
Md5:    3ddb8167820e977615a641bc6a1eb2bd
Sha1:   7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f
Sha256: 3d5072cf06330fd3372e63fb73246718457b179b5cc2fae904f5ec09998d9c03
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595166 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   666
Md5:    9d26539146dfc2069a4b1758cef30192
Sha1:   9ec624737e37148317bd327f79e6f36d30472058
Sha256: 7f8d7aca7dd5bc2025062769952ec52af3ad0ee3dcbbdfa3eba225f5df522522
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595204 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    3418c4e93d5e888f618ce943172dbaa1
Sha1:   092481676ece9188573d15e7315cba323982ccb8
Sha256: c6e8c6d8d4d07e7c9da81beed97586ab3e8322b9b114057c13eb233388a6b5bc
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595355 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    3418c4e93d5e888f618ce943172dbaa1
Sha1:   092481676ece9188573d15e7315cba323982ccb8
Sha256: c6e8c6d8d4d07e7c9da81beed97586ab3e8322b9b114057c13eb233388a6b5bc
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595128 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8F%C1%0A%C30%0CC%FF%C5_%10%A7v%92%3A%1F3B%C9V%C3V%BA%25%3B%8C%D2%7Foh%AF%3D%8C%1Dv%11H%02%3D%94%A4%93E%C5r0L%21%26%21YJ%13%18%B5%16%88%2A%18w%5B%F5%91w%CB%5D%EF%89%B8%E7%96%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88k%C3Zo%1C%D9%13%AC%FD%01%EB%BE%C6%A2g%83%EE%BFo%D7%0D%86%D6hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    9df639eedba8e8bca8dd2ad43b00753f
Sha1:   8badc03ebef96504020378d422a68fabce7e3853
Sha256: 180d967ae08a531411f1e23a7a04e8a31bbb31d81d4b887aba36bc4a71d96101
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595407 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    0dd956eddc00d34f21a90cae820b2729
Sha1:   cb24571340a78540d12128cfd9e35b28e48ddeae
Sha256: 4aecdf1e115a4312597537b1e2c93b2402c6a85c22b31a57b366f571396c24ed
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595280 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8F%C1%0A%C30%0CC%FF%C5_%10%A7v%92%3A%1F3B%C9V%C3V%BA%25%3B%8C%D2%7Foh%AF%3D%8C%1Dv%11H%02%3D%94%A4%93E%C5r0L%21%26%21YJ%13%18%B5%16%88%2A%18w%5B%F5%91w%CB%5D%EF%89%B8%E7%96%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88k%C3Zo%1C%D9%13%AC%FD%01%EB%BE%C6%A2g%83%EE%BFo%D7%0D%86%D6hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    9df639eedba8e8bca8dd2ad43b00753f
Sha1:   8badc03ebef96504020378d422a68fabce7e3853
Sha256: 180d967ae08a531411f1e23a7a04e8a31bbb31d81d4b887aba36bc4a71d96101
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595318 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%13%A4%5D%92v%E9%C3H%19u%16tL%5B%0F%22%7Bw%EB%BC%CA%D0%CB.%81%3F%81%7CQI%9FY-%7Bd%F2%21%BE%B3%B4%01%A7%5C%0B%84%AC%26%ACY%F3%25%AD%C9%5D%EF%88%B8%E7%B6%F7%0A%E7X%EA%D7%9Bq%0AC%9C%E7%3C%8D%87%E3-%5D%EFi%1A%1E%F0yf%88%10%C2%D2X%EBP%C8%EE%CE%1A%C7hdw%96%7D%27%1E%FF%60e%83%95%DF%D8%E5%05%C0F%8Ay; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   655
Md5:    4f5fa0ebd53f32e5020109b5e471a0f7
Sha1:   c05ff1fcf3faeaae9105b34d792e6f8af8e1be57
Sha256: e41fc51b83ca32d2bb3e677a486acef132b0d2e436d0cf77b86c20e6ba1d05f3
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595243 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8F%C1%0A%C30%0CC%FF%C5_%10%A7v%92%3A%1F3B%C9V%C3V%BA%25%3B%8C%D2%7Foh%AF%3D%8C%1Dv%11H%02%3D%94%A4%93E%C5r0L%21%26%21YJ%13%18%B5%16%88%2A%18w%5B%F5%91w%CB%5D%EF%89%B8%E7%96%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88k%C3Zo%1C%D9%13%AC%FD%01%EB%BE%C6%A2g%83%EE%BFo%D7%0D%86%D6hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    9df639eedba8e8bca8dd2ad43b00753f
Sha1:   8badc03ebef96504020378d422a68fabce7e3853
Sha256: 180d967ae08a531411f1e23a7a04e8a31bbb31d81d4b887aba36bc4a71d96101
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744596269 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   666
Md5:    9d26539146dfc2069a4b1758cef30192
Sha1:   9ec624737e37148317bd327f79e6f36d30472058
Sha256: 7f8d7aca7dd5bc2025062769952ec52af3ad0ee3dcbbdfa3eba225f5df522522
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595495 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%13%A4%5D%92v%E9%C3H%19u%16tL%5B%0F%22%7Bw%EB%BC%CA%D0%CB.%81%3F%81%7CQI%9FY-%7Bd%F2%21%BE%B3%B4%01%A7%5C%0B%84%AC%26%ACY%F3%25%AD%C9%5D%EF%88%B8%E7%B6%F7%0A%E7X%EA%D7%9Bq%0AC%9C%E7%3C%8D%87%E3-%5D%EFi%1A%1E%F0yf%88%10%C2%D2X%EBP%C8%EE%CE%1A%C7hdw%96%7D%27%1E%FF%60e%83%95%DF%D8%E5%05%C0F%8Ay; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   655
Md5:    4f5fa0ebd53f32e5020109b5e471a0f7
Sha1:   c05ff1fcf3faeaae9105b34d792e6f8af8e1be57
Sha256: e41fc51b83ca32d2bb3e677a486acef132b0d2e436d0cf77b86c20e6ba1d05f3
                                        
                                            GET /library/530318/b1b992e28cb2dd59c8af9c880871e5478002ac0e.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595204
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705625"
Cache-Control: max-age=86400
Content-Length: 326567
Last-Modified: Tue, 19 Dec 2017 17:47:05 GMT
X-HW: 1539744596.dop012.sk1.t,1539744596.cds003.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   326567
Md5:    9b7fe1be99cb649d0b893c86ff9ea496
Sha1:   b1b992e28cb2dd59c8af9c880871e5478002ac0e
Sha256: a9064aa832aad0685a0081bc8b6af0e7b188f7a360d9cf0c5114837e5b80b062
                                        
                                            GET /swidget/hostsgimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         67.202.94.86
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/39.png


--- Additional Info ---
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744596359 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   666
Md5:    9d26539146dfc2069a4b1758cef30192
Sha1:   9ec624737e37148317bd327f79e6f36d30472058
Sha256: 7f8d7aca7dd5bc2025062769952ec52af3ad0ee3dcbbdfa3eba225f5df522522
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744596322 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5528eb424b27f.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%8DA%0A%840%10%04%FF2%2F%C8%C4%19%13%27%8F%91+Q%07v%C55%D9%C3%22%FE%DD%E0%5E%3D%7Bi%A8n%E8%8A%D2%C8%AEb%D9%1B%26%1F%A2%90%EC%B9%06%CCZ2%04%15%0C%17%16%7D%A7%0B%B9%E9%1C%11w%5C%7B%2F%F0%8A%B9%DCn%E8%04%86%B8%AE%BAL%FD%B8%A5%CF7-%C3%0F%FEgHd+%1CUk%9Di%C9%3E%AEE%C7%06%DBg%B5%C7%09%85dhT

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; expires=Fri, 16-Oct-2020 02:49:56 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%C5%8FA%0A%C20%10E%EF2%27%C8%C4%99%24%9D%1CFBIu%40K5q%21%A5w7%B6%5B%11%DD%E8f%E0%FD%0F%FF1IHf%15%CB%C10%85%98%9EX%DA%81%A3%D6%02Q%05%E3%8AU%CFyE%DEu%9E%88%3Bny%108%A5R_v%E8%05%FA4M%3A%1E%F6%C35_ny%EC%EF%B0%8D%21%91%81%B84%AD%F5%C6%91%FD%B9%16%3D%1Bt%7F%F8%16%EDWZ%F7F%EB%3E%D3.%0F%BBN%8An; expires=Thu, 18-Oct-2018 02:49:56 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   669
Md5:    082aa58f19a37c4f3c934c71a8b670a7
Sha1:   82c9e24324d77f5a4062f24cbd184ada9c55278d
Sha256: f9fef699a62ce0031279fdf8841b40f80383e2b8b82b7bd040681c949f074aba
                                        
                                            GET /swidget/servegimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         67.202.94.86
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/33.png


--- Additional Info ---
                                        
                                            GET /small/00/39.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Content-Length: 318
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-13e"
Expires: Thu, 18 Oct 2018 02:49:56 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   318
Md5:    d1e88fab157adbed0de1c158c224eca2
Sha1:   c8501e9e0a8bcbb99565087a76294e3628518a12
Sha256: 0f54913c12d66feadd3113db09838a3af2492ade01c89461617017ba6ae401cd
                                        
                                            GET /small/00/33.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5528eb424b27f.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Content-Length: 312
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-138"
Expires: Thu, 18 Oct 2018 02:49:56 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   312
Md5:    d893e26f382f366efc8a7b7cf09bc82f
Sha1:   43fe0077c8c161d8f9fdcf59117c96d7c89c0585
Sha256: 035df80f0b7608f6b1070e8e5107e824376be35f9ddb1708d025b8120fbfaa16
                                        
                                            GET /library/546258/8fc34ca2ff7cbabf952762120722529c02145e52.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744596322
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%C5%8FA%0A%C20%10E%EF2%27%C8%C4%99%24%9D%1CFBIu%40K5q%21%A5w7%B6%5B%11%DD%E8f%E0%FD%0F%FF1IHf%15%CB%C10%85%98%9EX%DA%81%A3%D6%02Q%05%E3%8AU%CFyE%DEu%9E%88%3Bny%108%A5R_v%E8%05%FA4M%3A%1E%F6%C35_ny%EC%EF%B0%8D%21%91%81%B84%AD%F5%C6%91%FD%B9%16%3D%1Bt%7F%F8%16%EDWZ%F7F%EB%3E%D3.%0F%BBN%8An

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1521013017"
Cache-Control: max-age=86400
Content-Length: 70715
Last-Modified: Wed, 14 Mar 2018 07:36:57 GMT
X-HW: 1539744596.dop012.sk1.t,1539744596.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   70715
Md5:    3d30f9f55cfb7f5235fccb8f96e7f457
Sha1:   8fc34ca2ff7cbabf952762120722529c02145e52
Sha256: 0a066fc2d9726bc00e2c43d6211f9fb5a52e60c927ed46c00d24d1afc694c182
                                        
                                            GET /library/581670/76e5002e166315c2331ac8f454ef23926ddeee19.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595318
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%13%A4%5D%92v%E9%C3H%19u%16tL%5B%0F%22%7Bw%EB%BC%CA%D0%CB.%81%3F%81%7CQI%9FY-%7Bd%F2%21%BE%B3%B4%01%A7%5C%0B%84%AC%26%ACY%F3%25%AD%C9%5D%EF%88%B8%E7%B6%F7%0A%E7X%EA%D7%9Bq%0AC%9C%E7%3C%8D%87%E3-%5D%EFi%1A%1E%F0yf%88%10%C2%D2X%EBP%C8%EE%CE%1A%C7hdw%96%7D%27%1E%FF%60e%83%95%DF%D8%E5%05%C0F%8Ay

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753041"
Cache-Control: max-age=86400
Content-Length: 170648
Last-Modified: Fri, 05 Oct 2018 15:24:01 GMT
X-HW: 1539744596.dop013.sk1.t,1539744596.cds019.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   170648
Md5:    6a4a931d345ddcec5e9cb4991f428829
Sha1:   76e5002e166315c2331ac8f454ef23926ddeee19
Sha256: 7411a6f8634a054d680ff562ecfeb722bb88379bd46395a190868392e239b29d
                                        
                                            GET /library/530318/3205d638d43d508b2c7b8af14ac66485a51374e9.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5528eb424b27f.html&dt=1539744595407
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a352ee1500.343618523379434287%22%3B%7D; impressions=x%9C%BD%CD1%0A%C30%0C%05%D0%BB%E8%04%96%23%D9%8E%7C%98b%82%DB%08%DA%90%D6%EEPB%EE%1E%93%AC%19J%87.%82%AF%0F%FF%25%E9dQ%B1%1C%0CS%88IH%96%D2%0E%8CZ%0BD%15%8C%7B%AC%FA%C8%7B%E4%AE%F7D%DCs%FB%07%81%7B%2A%F5%B4C%2F0%A4y%D6%E9v%B9%BE%F2%F3%9D%A7%E1%03%C7%18%12%19%88kc%AD7%8E%EC%DFY%F4l%D0%9D%B0%F6%07%D6%7D%C7%AE%1B%85%E8hV

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705627"
Cache-Control: max-age=86400
Content-Length: 478744
Last-Modified: Tue, 19 Dec 2017 17:47:07 GMT
X-HW: 1539744596.dop010.sk1.t,1539744596.cds049.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   478744
Md5:    c90eb3444b30f50466b6183e5177ac56
Sha1:   3205d638d43d508b2c7b8af14ac66485a51374e9
Sha256: a375b1a82e66c73244b5e8d5fd1fd77ded12de71eff98fdb766305606707684c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=db1215358b9419411d78c6a3b819aeb4c1539744593; PHPSESSID=992f46cf2500347b1155f177b2da48d7; viewer=0f278dcb324606adb1d3098012e0a281; viewerid=5528eb424b27f; imagen3=1; __utma=120226704.101625767.1539744596.1539744596.1539744596.1; __utmb=120226704.1.10.1539744596; __utmc=120226704; __utmz=120226704.1539744596.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 17 Oct 2018 02:49:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:42:49 GMT
Etag: W/"51ae9799-47c"
CF-Cache-Status: REVALIDATED
Expires: Wed, 24 Oct 2018 02:49:56 GMT
Cache-Control: public, max-age=604800
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af7471d58a4285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   921
Md5:    06ee4e4a98828888549e3ed7693dd78c
Sha1:   ef954a19b195cce9f07d6ef1efb08e295aa81baf
Sha256: 281e819159c678c2a170900b0d6d584fab10d46613c3567dd8b5c31ea93b8eb6