Overview

URL freebiesfrenzy.com/sign-up/2017/06/30/peng630/
IP64.91.254.4
ASNAS32244 Liquid Web, Inc.
Location United States
Report completed2017-11-14 20:37:12 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-11-14 2 cookie.vrtzads.com/pixel/vsync?rd=http://sync.c1exchange.com%2Fsync%2Fuser% (...) Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 64.91.254.4

Date UQ / IDS / BL URL IP
2017-11-18 03:10:11 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/07/19/pens719/ 64.91.254.4
2017-11-17 13:05:09 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/07/18/browse- (...) 64.91.254.4
2017-11-17 12:25:27 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2016/11/15/ninja1115/ 64.91.254.4
2017-11-17 06:34:23 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/06/13/btrfly613/ 64.91.254.4
2017-11-17 06:07:11 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/06/24/sage624/ 64.91.254.4
2017-11-17 05:53:40 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/03/15/repoftea315/ 64.91.254.4
2017-11-16 21:55:03 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/07/17/genpak717/ 64.91.254.4
2017-11-16 21:22:28 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/05/21/biddl521/ 64.91.254.4
2017-11-16 20:30:10 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/06/20/natdes620/ 64.91.254.4
2017-11-16 15:13:26 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2016/11/15/vaselin (...) 64.91.254.4

Last 10 reports on ASN: AS32244 Liquid Web, Inc.

Date UQ / IDS / BL URL IP
2017-11-24 02:34:12 +0100
0 - 0 - 0 69.16.194.131/prod/MTU1Mzg2Njg3/The-Wiggles-Y (...) 69.16.194.131
2017-11-24 02:15:07 +0100
0 - 0 - 0 69.16.194.131/js/jsconfig.php 69.16.194.131
2017-11-24 00:30:20 +0100
0 - 0 - 0 bedroom-a.com/bedroom/bedroom-a/2012/05/maste (...) 67.225.210.80
2017-11-23 23:04:05 +0100
0 - 0 - 11 franjoacoi.com/facebook/?gfid=mhvtlt 209.59.134.58
2017-11-23 23:03:36 +0100
0 - 0 - 1 offlineaudit.squeezemobi.com/securelink/www.A (...) 67.43.5.249
2017-11-23 23:03:22 +0100
0 - 0 - 2 www.rdgsinteriorspro.com/zzzz/scs/pin.php 67.227.236.173
2017-11-23 23:03:09 +0100
0 - 0 - 3 inoripooja.com/UPS.com/13-Nov-17-03-28-41 67.225.139.196
2017-11-23 23:03:05 +0100
0 - 0 - 2 www.rdgsinteriorspro.com/zzzz/scs/email.php 67.227.236.173
2017-11-23 23:00:09 +0100
0 - 0 - 1 www.elrufaiisapatriot.com/ER3us3fFhLe7xa/ 67.225.141.165
2017-11-23 22:59:44 +0100
0 - 0 - 2 www.rdgsinteriorspro.com/zzzz/scs/question.php 67.227.236.173

Last 10 reports on domain: freebiesfrenzy.com

Date UQ / IDS / BL URL IP
2017-11-18 03:10:11 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/07/19/pens719/ 64.91.254.4
2017-11-17 13:05:09 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/07/18/browse- (...) 64.91.254.4
2017-11-17 12:25:27 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2016/11/15/ninja1115/ 64.91.254.4
2017-11-17 06:34:23 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/06/13/btrfly613/ 64.91.254.4
2017-11-17 06:07:11 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/06/24/sage624/ 64.91.254.4
2017-11-17 05:53:40 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/03/15/repoftea315/ 64.91.254.4
2017-11-16 21:55:03 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/07/17/genpak717/ 64.91.254.4
2017-11-16 21:22:28 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/05/21/biddl521/ 64.91.254.4
2017-11-16 20:30:10 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2017/06/20/natdes620/ 64.91.254.4
2017-11-16 15:13:26 +0100
0 - 0 - 1 freebiesfrenzy.com/sign-up/2016/11/15/vaselin (...) 64.91.254.4


JavaScript

Executed Scripts (133)


Executed Evals (3)

#1 JavaScript::Eval (size: 3206, repeated: 1) - SHA256: ec5258277fcaea63e528b57a67c558b0a38fd7a18ad52f2ff7cfc4f5ad9e4704

                                        (function() {
    try {
        var O = document.createElement("iframe");
        O.width = "1px";
        O.height = "1px";
        O.style.display = "none";
        O.src = "https://ads.pubmatic.com/AdServer/js/user_sync.html?p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D";
        if (document.body) {
            document.body.appendChild(O)
        }
    } catch (K) {
        console.log(K.message)
    }
    try {
        var Z = document.createElement("img");
        Z.src = "https://ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fan-usersync%3Fuser_id%3D%24UID";
        Z.width = "1px";
        Z.height = "1px";
        Z.style.display = "none";
        if (document.body) {
            document.body.appendChild(Z)
        }
    } catch (K) {
        console.log(K.message)
    }
    var Q = window;
    try {
        if (window.top && window.top.location && window.top.document && window.top.document.body && window.self !== window.top) {
            Q = window.top
        }
    } catch (g) {
        console.log("infolinks is embedded in an unfriendly IFRAME which is not supported.")
    }
    var B = window.location.href;
    var T = B.substr(0, B.indexOf("://") + 3);
    var c = navigator.userAgent.toLowerCase(),
        X = function(l) {
            for (var m = 0, e = l.length; m < e; m++) {
                if (c.indexOf(l[m]) != -1) {
                    return true
                }
            }
            return false
        },
        D = X(["mobi", "iphone", "ipad", "android", "windows phone", "opera mini", "ucweb"]) ? "mobile" : "",
        V = "ice" + D + ".js",
        H = window["infolinks_white_label"];

    function N(e) {
        return window[H + "_" + e] || window["infolinks_" + e] || window["infolink_" + e] || null
    }

    function L(o) {
        var n = o.split(/[&]/);
        for (var m = 0; m < n.length; m++) {
            var e = n[m].split("=");
            if (!e || e.length != 2) {
                continue
            }
            var l = decodeURIComponent(e[0]);
            var p = decodeURIComponent(e[1]);
            window["infolinks_" + l] = p
        }
    }
    var h = window["$iceboot"] = {};
    window["INFOLINKS"] = {
        _boot: h
    };
    var P = h.versions = {
        "1610.012": 50,
        "1609.003.ab.1610.012": 50
    };
    var A = h.siteVersions = {
        "366.01.01": ["infolinks.com"]
    };
    var C = 0,
        M, G, R, U = location.hostname;
    M = location.search.match(/[\?&]il\.sv=([^&]+)/);
    if (M) {
        h.version = M[1]
    } else {
        for (G in P) {
            if (P.hasOwnProperty(G)) {
                R = P[G];
                P[G] = {
                    weight: R,
                    from: C,
                    to: C + R
                };
                C += R
            }
        }
        h.rand = Math.ceil((Math.random() * C));
        for (G in P) {
            if (P.hasOwnProperty(G)) {
                if (h.rand > P[G].from && h.rand <= P[G].to) {
                    h.version = G;
                    break
                }
            }
        }
    }
    var S = [];
    for (G in A) {
        if (A.hasOwnProperty(G)) {
            for (b = 0, F = A[G].length; b < F; b++) {
                if (U.indexOf(A[G][b]) > -1) {
                    S.push(G);
                    break
                }
            }
        }
    }
    if (S.length) {
        h.version = S[Math.floor(Math.random() * S.length)]
    }
    var k = ["/", h.version, "/", V].join("");
    var d = N("resources");
    M = location.search.match(/[\?&]il\.su=([^&]+)/);
    if (M) {
        h.url = M[1] + k
    } else {
        if (d) {
            h.url = d + k
        } else {
            var W = document.getElementsByTagName("script"),
                I, b, F;
            var Y = /\/infolinks_main\.js(\?.*)?$/;
            for (b = 0, F = W.length; b < F; b++) {
                I = W[b].src;
                if (I && I.match(Y) != null) {
                    h.url = I.replace(Y, k);
                    try {
                        var E = W[b].src.substr(W[b].src.indexOf("?") + 1, W[b].src.length);
                        L(E)
                    } catch (f) {}
                    break
                }
            }
            if (!h.url) {
                h.url = "https://resources.infolinks.com/js" + k
            }
        }
    }

    function a() {
        var e = h.url.substr(0, h.url.indexOf("/js/"));
        if (e && e != "undefined") {
            var i = document.createElement("iframe");
            i.width = "1px";
            i.height = "1px";
            i.style.display = "none";
            i.src = e + "/static/an/usersyncup-an.html";
            if (document.body) {
                document.body.appendChild(i)
            }
        }
    }
    h.tmr_scr = new Date().getTime();
    if (h.url) {
        try {
            a()
        } catch (f) {}
        var j = document.createElement("script");
        j.type = "text/javascript";
        j.charset = "UTF-8";
        j.src = h.url;
        j.async = N("async") || j.async;
        j.defer = N("ddw") || j.defer;
        var J = document.getElementsByTagName("head");
        if (J && J.length) {
            J[0].appendChild(j)
        } else {
            document.body.appendChild(j)
        }
    }
})()
                                    

#2 JavaScript::Eval (size: 34, repeated: 1) - SHA256: 2bb0f85b8836f8290d7eeaf4fca2ad0e8ecf8eba345a1705c5ad32f061dca3c9

                                        ({
    "Nzkwfjg3OA": "1:1510688594974"
})
                                    

#3 JavaScript::Eval (size: 25, repeated: 1) - SHA256: 5de966b747cc3b307af592dba792bed5b2ad31fb52fca4e779dae1ac3741ef54

                                        ({
    "c": "1:1510688594975"
})
                                    

Executed Writes (31)

#1 JavaScript::Write (size: 44015, repeated: 1) - SHA256: 6ab42f4691f1d7f5d99bf99dc38cf11693a9637698d299314bae305e2e8926a2

                                        < !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" >
< html xmlns = "http://www.w3.org/1999/xhtml" >
    < head > < style type = "text/css" > body {
        background - color: transparent;
    } < /style><meta name="tids" content="a='800031768' b='800243551' c='freebiesfrenzy.com' d='entity SERP'" / > < script type = "text/javascript" >
    try {
        window.locHash = (parent._mNDetails && parent._mNDetails.getLocHash && parent._mNDetails.getLocHash("434594251", "1510688590362523968")) || (parent._mNDetails["locHash"] && parent._mNDetails["locHash"]["434594251"]) || parent.window.locHash || "";
    } catch (e) {
        window.locHash = "";
    };
var locHash = window.locHash || window.location.hash || ''; < /script><title>Freebiesfrenzy.com</title >
< meta http - equiv = "Content-Type"
content = "text/html; charset=UTF-8" >
    < meta name = "viewport"
content = "width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" / >
    < style type = "text/css" >

    html, body, div, span, applet, object, iframe,
    h1, h2, h3, h4, h5, h6, p, blockquote, pre,
    a, abbr, acronym, address, big, cite, code,
    del, dfn, em, img, ins, kbd, q, s, samp,
    small, strike, strong, sub, sup, tt,
    var,
    b, u, i, center,
    dl, dt, dd, ol, ul, li,
    fieldset, form, label, legend,
    table, caption, tbody, tfoot, thead, tr, th, td,
    article, aside, canvas, details, embed,
    figure, figcaption, footer, header, hgroup,
    menu, nav, output, ruby, section, summary,
    time, mark, audio, video {
        margin: 0;padding: 0;border: 0;font - size: 100 % ;font: inherit;vertical - align: baseline
    }
article, aside, details, figcaption, figure,
footer, header, hgroup, menu, nav, section {
    display: block
}
body {
    line - height: 1
}
ol, ul {
    list - style: none
}
blockquote, q {
    quotes: none
}
blockquote: before, blockquote: after, q: before, q: after {
        content: '';content: none
    }
    .clearfix: after {
        clear: both;content: ' ';display: block;font - size: 0;line - height: 0;visibility: hidden;width: 0;height: 0
    }
    .clearfix {
        display: inline - block
    } * html.clearfix {
        height: 1 %
    }
    .clearfix {
        display: block;
    }
table {
    border - collapse: collapse;
    border - spacing: 0;
}
a {
    text - decoration: none;
    outline: none
}
a: hover {
    text - indent: 0;
    cursor: pointer
}
img {
    border: none
}
ul {
    list - style: none
}

body {
    font - family: Arial, "Helvetica Neue", Helvetica, sans - serif;
}
# mnet_wrapper {
    height: 250 px;overflow: hidden;position: relative;background: # fff
}

.mnet_kw_listing ul {
    overflow: hidden;width: auto;padding - top: 22 px;
}
.mnet_kw_listing li {
    background: # ffcd01;
    overflow: hidden;position: relative;height: 44 px;margin: 0 0 9 px 0;border - radius: 5 px; - moz - border - radius: 5 px; - webkit - border - radius: 5 px; - o - border - radius: 5 px; - ms - border - radius: 5 px;
}
.mnet_kw_listing li span.num {
        font - size: 14 px;
        color: #5b342d; width: 30px; height: 34px; line-height: 34px; text-align: center; position: absolute; left: 0; top: 5px; z-index: 0; border-right: 1px solid # 3 bb3c3;
        font - family: arial;
    }
    .mnet_kw_listing li span.arrow {
        font - size: 30 px;
        color: #3bb3c3; width: 22px; height: 44px; line-height: 44px; position: absolute; right: 0; top: -1px; z-index: 0; font-family: Arial; z-index: 0;}
.mnet_kw_listing li a{word-wrap:break-word; font-family: arial;
    color: # 5 b342d;
        font - size: 14 px;
        line - height: 44 px;
        height: 44 px;
        overflow: hidden;
        display: block;
        padding: 0 28 px 0 40 px;
        background: url(http: //contextual.media.net/__media__/pics/800015191/tran.png) right top no-repeat; position: relative; text-transform: capitalize; z-index: 99;}

            .mnet_kw_listing li: hover {
                background: #3bb3c3;}
.mnet_kw_listing li:hover span.num{color: # fff;border - color: #5b342d}
.mnet_kw_listing li:hover span.arrow{color: # 5 b342d;
            }
            .mnet_kw_listing li: hover a {
                color: # fff;
            }
            .mnet_kw_listing li: hover, .mnet_kw_listing li: hover span, .mnet_kw_listing li: hover a {
                -webkit - transition: all 0.65 s ease; - moz - transition: all 0.65 s ease; - ms - transition: all 0.65 s ease; - o - transition: all 0.65 s ease;
                transition: all 0.65 s ease;
            }

            .last {
                border: none!important
            }

            # footer {
                clear: both;position: absolute;top: 0 px;right: 0 px;
            }
            # footer a {
                font - size: 10 px;
                color: #000;
        font-family:arial;}
# footer a: hover {
                    text - decoration: Underline;
                }

                @ - moz - document url - prefix() {.mnet_kw_listing li span.arrow {
                        width: 26 px;
                    }
                }

                < /style> < script type = "text/javascript" > function is_ie6() {
                    return void 0 == window.XMLHttpRequest && void 0 != ActiveXObject && /msie|MSIE 6/.test(navigator.userAgent)
                }

                function sendRequest(t, e) {
                    showPop = 0, thisform = document.getElementById(t);
                    var n = e,
                        i = new Array;
                    i = n.split("@@@@");
                    for (var o = 0; o < i.length; o++) {
                        var p = new Array,
                            r = new String(i[o]);
                        switch (p = r.split("####"), p[0]) {
                            case "action":
                                thisform.action = p[1] + generateBrowLogURL("adclk");
                                break;
                            case "data":
                                thisform.params.value = p[1]
                        }
                    }
                    return thisform.method = "POST", is_ie6() && (thisform.target = ""), thisform.submit(), !1
                }

                function changeStatus(t) {
                    return window.status = t, !0
                }

                function relplaceAllALinks(t) {
                    try {
                        for (links = window.document.getElementsByTagName("A"), links_len = links.length, i = 0; i < links_len; i++) links[i].href.match(t) && (tempData = links[i].innerHTML, modifyKeywordClickURL(links[i], "olod"), links[i].innerHTML = tempData)
                    } catch (e) {}
                }

                function modifyKeywordClickURL(t, e) {
                    return t.href = t.href + generateBrowLogURL(e), "undefined" != typeof prctu && prctu.length > 0 && (t.href = prctu + getEscapedString(t.href)), !0
                }

                function generateBrowLogURL(t) {
                    var e = "";
                    try {
                        "undefined" != typeof br_data && br_data || (br_data = new brdata), e = "kwclk" == t ? escape(br_data.getMousePositionData()) : "adclk" == t || "srcqry" == t ? "&bd=" + escape(br_data.getSearchBoxRelatedData()) : "&bd=" + escape(br_data.getURLBrowserData())
                    } catch (n) {}
                    return e
                }

                function renderFACP(t) {
                    if ("ex" == t) return !1;
                    if (1 != showPop || "undefined" == typeof __pp || "undefined" == typeof __pp.FACP || 0 != __pp.FACP.pd) return !1;
                    try {
                        if (!t) {
                            var t = window.event || window.Event;
                            t.cancelBubble = !0
                        }
                        if (t.button && 2 == t.button) return !1;
                        if ("undefined" != typeof __pp.FACP.u && __pp.FACP.u.length > 0) return __pp.FACP.pd = !0, __pp.FACP.u = __pp.FACP.u + generateBrowLogURL("adclk"), _skPU.doPU(__pp.FACP.u, __pp.FACP.w, __pp.FACP.h, __pp.FACP.p, "ex" == t), showPop = 0, !0
                    } catch (t) {
                        return __pp.FACP.pd = !0, !1
                    }
                }

                function atevt() {
                    document.addEventListener ? document.addEventListener("click", ppctrl, !1) : document.attachEvent ? document.attachEvent("onclick", ppctrl) : document.onclick = ppctrl
                }

                function ppctrl(t) {
                    1 != showPop || renderFACP(t) || shpp(t)
                }

                function shpp(t) {
                    if ("undefined" != typeof __pp && 1 == showPop) try {
                        if (!t) {
                            var t = window.event || window.Event;
                            t.cancelBubble = !0
                        }
                        if (t.button && 2 == t.button) return;
                        try {
                            var e = !1;
                            isIE() && (e = shdsp(t)), e || "undefined" != typeof __pp.kp && "undefined" != typeof __pp.kp.u && __pp.kp.u && __pp.kp.u.length > 0 && 0 == __pp.kp.pd && (__pp.kp.pd = !0, "ex" == t && (__pp.kp.u = __pp.kp.u + "&_onx_=1"), _skPU.doPU(__pp.kp.u, __pp.kp.w, __pp.kp.h, __pp.kp.p, "ex" == t))
                        } catch (n) {}
                        "ex" == t ? shmsc(t) : shdsp(t)
                    } catch (n) {}
                }

                function shdsp(t) {
                    try {
                        return !!("undefined" != typeof __pp.dp && "undefined" != typeof __pp.dp.u && __pp.dp.u && __pp.dp.u.length > 0 && 0 == __pp.dp.pd) && (__pp.dp.pd = !0, _skPU.doPU(__pp.dp.u, __pp.dp.w, __pp.dp.h, __pp.dp.p, "ex" == t), !0)
                    } catch (t) {
                        return !1
                    }
                }

                function isIE() {
                    var t = !1;
                    try {
                        t = /msie|MSIE/.test(navigator.userAgent)
                    } catch (e) {}
                    return t
                }
                var showPop = 1,
                    brdata = function() {
                        this.fd = "#", this.cookieSupport = -1, this.isinframe = -1, this.browserdata = "", this.getLocalTimeZone = function() {
                            return (new Date).getTimezoneOffset() / 60 * -1
                        }, this.getScreenHeight = function() {
                            return screen.height
                        }, this.getScreenWidth = function() {
                            return screen.width
                        }, this.calledInExternalFrame = function() {
                            return "n"
                        }, this.isCookieSupported = function() {
                            if (this.cookieSupport == -1) {
                                var t = navigator.cookieEnabled || !1;
                                "undefined" != typeof navigator.cookieEnabled || t || (document.cookie = "skck", t = document.cookie.indexOf("skck") != -1)
                            }
                            return this.cookieSupport
                        }, this.getURLBrowserData = function() {
                            return "" == this.browserdata && (this.browserdata = this.getLocalTimeZone().toString() + this.fd + this.getScreenHeight() + this.fd + this.getScreenWidth() + this.fd + (this.isCookieSupported() ? 1 : 0).toString() + this.fd + this.calledInExternalFrame().toString()), this.browserdata
                        }, this.getMousePositionData = function() {
                            return this.fd + mX + this.fd + mY
                        }, this.getSearchBoxRelatedData = function() {
                            return this.getURLBrowserData() + this.getMousePositionData()
                        }
                    },
                    _skPU = {
                        _Top: null,
                        _wh: function() {
                            var t = 0;
                            try {
                                "number" == typeof this._Top.window.innerHeight ? t = this._Top.window.innerHeight : this._Top.document.documentElement && this._Top.document.documentElement.clientHeight ? t = this._Top.document.documentElement.clientHeight : this._Top.document.body && this._Top.document.body.clientHeight && (t = this._Top.document.body.clientHeight)
                            } catch (e) {
                                t = 0
                            }
                            return t
                        },
                        _ww: function() {
                            var t = 0;
                            try {
                                "number" == typeof this._Top.window.innerWidth ? t = this._Top.window.innerWidth : this._Top.document.documentElement && this._Top.document.documentElement.clientWidth ? t = this._Top.document.documentElement.clientWidth : this._Top.document.body && this._Top.document.body.clientWidth && (t = this._Top.document.body.clientWidth)
                            } catch (e) {
                                t = 0
                            }
                            return t
                        },
                        _wt: function() {
                            return this._Top ? void 0 != this._Top.window.screenTop ? this._Top.window.screenTop : this._Top.window.screenY : 0
                        },
                        _wl: function() {
                            return this._Top ? void 0 != this._Top.window.screenLeft ? this._Top.window.screenLeft : this._Top.window.screenX : 0
                        },
                        doPU: function(url, pw, ph, npf, dr) {
                            if (!this._Top && (this._Top = self, top != self)) try {
                                top.document.location.toString() && (this._Top = top)
                            } catch (e) {}
                            var _npSU = dr ? url : "about:blank",
                                _npID = "pu_" + Math.floor(89999999 * Math.random() + 1e7),
                                pxLeft = 0,
                                pxTop = 0;
                            pw == -1 && (pw = this._ww()), ph == -1 && (ph = this._wh()), pxLeft = this._wl() + this._ww() / 2 - pw / 2, pxTop = this._wt() + this._wh() / 2 - ph / 2, npf || (npf = "toolbar=0,scrollbars=1,location=1,statusbar=0,menubar=0,resizable=1");
                            var _npW = this._Top.window.open(_npSU, _npID, npf + ",top=" + pxTop + ",left=" + pxLeft + ",width=" + pw + ",height=" + ph);
                            return _npW && (_npW.blur(), navigator.userAgent.toLowerCase().indexOf("applewebkit") > -1 && (this._Top.window.blur(), this._Top.window.focus()), _npW.Init = function(e) {
                                with(e) Params = e.Params, Main = function() {
                                    if ("undefined" != typeof window.mozPaintCount) {
                                        var t = window.open("about:blank");
                                        t && t.close()
                                    }
                                    var e = Params.dUrl;
                                    try {
                                        navigator.userAgent.toLowerCase().indexOf("msie") < 1 && opener.window.focus()
                                    } catch (n) {}
                                    dr || (window.location = e)
                                }, Main()
                            }, _npW.Params = {
                                dUrl: url
                            }, _npW.Init(_npW)), _npW
                        }
                    }; < /script><script type="text/javascript
                ">var _mNVsid = '1536901910021923000V10'; if(_mNVsid.indexOf("
                VID ") == -1 && _mNVsid.length > 10) { var trimOffset = _mNVsid.indexOf("
                V ") === -1 ? 3 : 6;  _mNVsid = _mNVsid.substr(0, _mNVsid.length - trimOffset); } else { _mNVsid = undefined; }</script><script type="
                text / javascript ">window.mnIpua='791488df2a85806bd23c9c3c9f63a8bf';</script><script type="
                text / javascript ">window.mnCts='1510688592';</script><script type="
                text / javascript " language="
                javascript ">var _mNL3 = {viComp:"
                1510688590362523968 ", vi:"
                1510688590362523968 ", mnetOptout:"
                ", geoloc:"
                59.92 | 10.75 ", _ygxid:"
                ", esPar: {nw:"
                None ", nwType:"
                dsl ", asnum:"
                5381 ", proxy:"
                None ", comp:"
                None "}};</script><script type='text/javascript'>var _mNEntities = { crid: "
                434594251 ", 
                pid: "8POSF2GM3",
                    cid: "8CU3F87CL",
                    dn: "freebiesfrenzy.com",
                    requrl: "http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F",
                    chid: "",
                    ugd: "4",
                    cc: "NO",
                    sc: "",
                    cme: "urkX7RiRgLfVCOHgf1lO_zqHCZ0RAug34gzJXu3dCeafsNx9gWMlzddCesNJcrd0B56yNMUUhDoNYVxYYCafMXt_OcJfiHCWP-8SvQY4OHyufX1qLOq1AfaZlLvaEzs5Cbt2K6GpT4ss6wXHIadH7L0soU-Cqh69OBcU3nF-07Fzl-bvR8REhwwPqz0wAhLrWwubxkZzQqk%3D%7C%7CNDHRnZ9Gz3KXlI-i9OnZqQ%3D%3D%7C5gDUJdTGiJzedmq9hanWYg%3D%3D%7CN7fu2vKt8_s%3D%7CFcl4VLL-IaL66CD3I4vf4jDs6HVWwiFNwZDV5mKMwIssEhaCy7IY3guQvVbLepR7LCGKlq2T6wk%3D%7CsRBSg3CPSiQ%3D%7C6b3zLfg-CHwV7Pv8R-vG6Z8ZIYrWzxIClmspkhI8bxKAXffT8uQScv8CMXGli6fAB27EMvcxHRGnh8k4DpoHJGa-HPIuBiDMxlxIzsZMMR8cN5vOboohluCGTDdgWrUfGWVQ19swpCe9XWlGCRSnp-60UvOqhpKZvjS8Bb1Q2gY%3D%7C"
            }; < /script><script type='text/javascript
            '>var hN = '
            http: //lg1.media.net';var lFN = 'bqi.php';!function(e){var n=e.document,t=n.documentMode,i={cDoc:"",queue:[]};i.eventLib={addEvent:function(e,n,t){e.addEventListener?e.addEventListener(n,t,!1):e.attachEvent&&e.attachEvent("on"+n,t),e=null},removeEvent:function(e,n,t){e.removeEventListener?e.removeEventListener(n,t):e.detachEvent&&e.detachEvent("on"+n,t),e=null}},i.buildQuery=function(n){var t,i={vi:"lf=3",h:"lf=4"}[n];for(t in _mNEntities)i=[i,"&",t,"=",_mNEntities[t]].join("");return e._mNL3&&e._mNL3.vi&&(i+="&vi="+e._mNL3.vi),e.mUtil&&"function"==typeof e.mUtil.getABPFlag&&(i+=e.mUtil.getABPFlag()),i},i.supportsHC="onhashchange"in e&&(void 0===t||t>7),i.cScript=function(e){var t=n.createElement("script"),o=hN+"/"+lFN+"?"+i.buildQuery(e);return"undefined"!=typeof _mNVsid&&_mNVsid.length>0&&(o+="&vsid="+_mNVsid),o+=locHash.replace(/#/g,"&"),t.src=o,t.type="text/javascript",t.async=!0,t},i.log={vi:function(){i.supportsHC&&i.eventLib.removeEvent(e,"hashchange",i.log.vi),n.getElementsByTagName("head")[0].appendChild(i.cScript("vi")),i.dequeueCB()},hover:function(){i.eventLib.removeEvent(i.cDoc,"mouseover",i.log.hover),n.getElementsByTagName("head")[0].appendChild(i.cScript("h"))}},i.isDone=function(){return/done/.test(e.location.hash)},i.hcFallBack=function(){i.isDone()&&(clearInterval(i.pollInterval),i.log.vi())},i.callWhenViewed=function(e,n){i.queue.push({cb:e,t:n||0})},i.dequeueCB=function(){var e,n;for(e in i.queue)n=i.queue[e],setTimeout(n.cb,n.t)},i.init=function(){i.cDoc=n&&n.body||e,i.eventLib.addEvent(i.cDoc,"mouseover",i.log.hover),i.isDone()?i.log.vi():i.supportsHC?i.eventLib.addEvent(e,"hashchange",i.log.vi):i.pollInterval=setInterval(i.hcFallBack,100)},e._mNHC=i}(window);</script></head>
            < body onload = ""
            onunload = ""
            onBeforeUnload = "" > < div style = "visibility:hidden;display:none;"
            id = "divSponAds" > < form name = "frmSponsAds"
            id = "frmSponsAds"
            method = "post"
            action = ""
            target = "_blank" > < input type = "hidden"
            name = "params"
            id = "params" / > < /form></div > < div id = "mnet_wrapper" >
            < div id = "mnet_kw_listing"
            class = "mnet_kw_listing clearfix" >
            < ul >
            < li > < span class = "num" > 1 < /span><a href="http:/ / 886797718. keywordblocks.com / .cfm ? && kp = 1 & " target="
            _blank " onmouseover="
            changeStatus('');
            return true;
            " onmouseout="
            changeStatus('');
            return true;
            " onclick="
            if (typeof(showPop) != 'undefined') showPop = 0;
            return modifyKeywordClickURL(this, 'kwclk');;
            " title="
            " id="
            dk1 " name="
            dk1 "></a><span class="
            arrow ">�</span></li> < li > < span class = "num" > 2 < /span><a href="http:/ / 886797718. keywordblocks.com / .cfm ? && kp = 2 & " target="
            _blank " onmouseover="
            changeStatus('');
            return true;
            " onmouseout="
            changeStatus('');
            return true;
            " onclick="
            if (typeof(showPop) != 'undefined') showPop = 0;
            return modifyKeywordClickURL(this, 'kwclk');;
            " title="
            " id="
            dk2 " name="
            dk2 "></a><span class="
            arrow ">�</span></li> < li > < span class = "num" > 3 < /span><a href="http:/ / 886797718. keywordblocks.com / .cfm ? && kp = 3 & " target="
            _blank " onmouseover="
            changeStatus('');
            return true;
            " onmouseout="
            changeStatus('');
            return true;
            " onclick="
            if (typeof(showPop) != 'undefined') showPop = 0;
            return modifyKeywordClickURL(this, 'kwclk');;
            " title="
            " id="
            dk3 " name="
            dk3 "></a><span class="
            arrow ">�</span></li> < li class = "last" > < span class = "num" > 4 < /span><a href="http:/ / 886797718. keywordblocks.com / .cfm ? && kp = 4 & " target="
            _blank " onmouseover="
            changeStatus('');
            return true;
            " onmouseout="
            changeStatus('');
            return true;
            " onclick="
            if (typeof(showPop) != 'undefined') showPop = 0;
            return modifyKeywordClickURL(this, 'kwclk');;
            " title="
            " id="
            dk4 " name="
            dk4 "></a><span class="
            arrow ">�</span></li> < /ul> < /div>   < /div> < div id = "footer" >
            < script type = 'text/javascript' > (function() {
                var c = document.createElement('a'),
                    a = 'url(//res.media.net/__media__/js/AdChoices.png) no-repeat ',
                    b;
                b = c.style;
                c.href = 'http://www.media.net/adchoices', c.target = '_blank', document.body.appendChild(c), b.display = 'block', b.width = '17px', b.height = '15px', b.position = 'absolute', b.bottom = 0, b.right = 0, b.background = a + '-58px 0', c.onmouseover = function() {
                    b.width = '75px', b.background = a + '0px 0'
                }, c.onmouseout = function() {
                    b.width = '17px', b.background = a + '-58px 0'
                }
            })(); < /script></div >
            < script type = "text/javascript" >
            if (relplaceAllALinks) relplaceAllALinks(/(\/trf|\.cfm)\?/); < /script><script type="text/javascript
            ">     function appendCustomHeader() {         var cH = document.createElement('div');         cH.innerHTML = 'Advertisement';         cH.className = 'mnetAdb';         var cHsT = cH.style;         cHsT.top = '5px';         cHsT.right = '5px';         cHsT.position = 'absolute';         cHsT.fontSize = '10px';         cHsT.background = "
            # FFF ";         cHsT.color = "
            # F00 ";         cHsT.padding = "
            1 px ";        cHsT.fontWeight = "
            bold ";         document.body.appendChild(cH);     } </script><iframe name="
            mediaNetHiddenIFrame " style="
            display : none;
            "></iframe><form id="
            postForm "  name="
            postForm " target="
            mediaNetHiddenIFrame " method="
            post "><input type="
            hidden " name="
            fp " value="
            0 q0HrTTFB46rphiXWfPwOMrR3ofO - hsx0RCo8JQXNh8d70YJH2fB5DcuylZzz9REhjBCrEem7Y7djhLQlkbyexaeYxIVIKRTgVyFn9GoN61VugF9ot9xZw2HvcxNz3dWFf - W7TWlG5Q = "><input type="
            hidden " name="
            lpid " value="
            "><input type="
            hidden " name="
            tsid " value="
            1 "><input type="
            hidden " name="
            ksu " value="
            224 "><input type="
            hidden " name="
            cme " value="
            urkX7RiRgLfVCOHgf1lO_zqHCZ0RAug34gzJXu3dCeafsNx9gWMlzddCesNJcrd0B56yNMUUhDoNYVxYYCafMXt_OcJfiHCWP - 8 SvQY4OHyufX1qLOq1AfaZlLvaEzs5Cbt2K6GpT4ss6wXHIadH7L0soU - Cqh69OBcU3nF - 07 Fzl - bvR8REhwwPqz0wAhLrWwubxkZzQqk = || NDHRnZ9Gz3KXlI - i9OnZqQ == | 5 gDUJdTGiJzedmq9hanWYg == | N7fu2vKt8_s = | Fcl4VLL - IaL66CD3I4vf4jDs6HVWwiFNwZDV5mKMwIssEhaCy7IY3guQvVbLepR7LCGKlq2T6wk = | sRBSg3CPSiQ = | 6 b3zLfg - CHwV7Pv8R - vG6Z8ZIYrWzxIClmspkhI8bxKAXffT8uQScv8CMXGli6fAB27EMvcxHRGnh8k4DpoHJGa - HPIuBiDMxlxIzsZMMR8cN5vOboohluCGTDdgWrUfGWVQ19swpCe9XWlGCRSnp - 60 UvOqhpKZvjS8Bb1Q2gY = | "><input type="
            hidden " name="
            q " value="
            "><input type="
            hidden " name="
            prv " value="
            "><input type="
            hidden " name="
            type " value="
            "><input type="
            hidden " name="
            ps " value="
            "><input type="
            hidden " name="
            chid " value="
            "></form><script language="
            JavaScript " type="
            text / javascript ">var w = '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';var clkHostName = 'http://www.mnetads.net';var hostName = 'http://886797718.keywordblocks.com';var hostLog = 'http://lg1.media.net';var hostAds = 'http://srvjs.media.net'; var hostNm = 'http://contextual.media.net'; var hostRefactoredAds = 'http://srvjsr.media.net' ; </script><script type="
            text / javascript " language="
            javascript " src="
            http : //contextual.media.net/__media__/js/util/nrr.js?v=58"></script><script type='text/javascript'>if (typeof _mNHC === 'object') { _mNHC.init(); }</script><script type="text/javascript"> try { (function() {
            var img = new Image(); img.src = "http://ib.adnxs.com/pxj?bidder=96&seg=2535736" + "&action=" + encodeURIComponent("incr_cm_freq()");
        })();
} catch (e) {} < /script> </body >
< /html>
                                    

#2 JavaScript::Write (size: 3470, repeated: 1) - SHA256: a83c112cd488b048f2647ffd730079876e445549254fd719e0876ed8dc556bfb

                                        < !DOCTYPE html > < html > < head > < script type = "text/javascript" >
    var iframeId = "_mN_gpt_434594251",
        dyncId = "_mN_dy_434594251",
        requrl = "http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F",
        tfcd = "0",
        isLogEventSwitched = false;
requrl = decodeURIComponent(requrl);
window._mNDetails = window._mNDetails || {};
window._mNDetails[dyncId] = {};
window.googletag = window.googletag || {};
window.googletag.cmd = window.googletag.cmd || [];

function loadGpt() {
    var e = document.createElement("script");
    e.async = true;
    e.type = "text/javascript";
    var t = "https:" === document.location.protocol;
    e.src = (t ? "https:" : "http:") + "//www.googletagservices.com/tag/js/gpt.js";
    var n = document.getElementsByTagName("script")[0];
    n.parentNode.insertBefore(e, n);
}

function createDivElement(googleDivId) {
    var gDiv = document.createElement("div");
    gDiv.id = googleDivId;
    document.body.appendChild(gDiv);
}

function dfpCallback(event) {
    if (event && event.isEmpty === true) {
        window.parent._mNDetails.checkAndHideAdxFrame(window.medianet_crid);
    }
    if (!isLogEventSwitched) {
        callLog();
    }
}

function callLog() {
    try {
        if (!window.mnet_triggered) {
            var ifrs = document.getElementById(window.google_placeholder).getElementsByTagName('iframe'),
                handle, docBody, i = ifrs.length;
            while (i--) {
                if (!(ifrs[i].style.visibility === "hidden" || ifrs[i].style.display === "none")) {
                    if (ifrs[i].src && ifrs[i].src.toLowerCase().indexOf('googlesyndication.com') !== -1) {
                        return window.parent._mNDetails.logAdX(window.medianet_crid, window);
                    }
                    handle = parent.window._mN.util.getIframeDoc(ifrs[i]);
                    docBody = handle[0] && (handle[0].body || handle[0].getElementsByTagName("body")[0]);
                    if (docBody && docBody.children.length > 0) {
                        return window.parent._mNDetails.logAdX(window.medianet_crid, window);
                    }
                }
            }
            return window.parent._mNDetails.logAdX(window.medianet_crid, window, true);
        }
    } catch (e) {}
}
window.setDFPSlot = function(paramsObj) {
    window.medianet_crid = paramsObj.crid;
    window.google_placeholder = paramsObj.divId;
    createDivElement(paramsObj.divId);
    window.googletag.cmd.push(function() {
        if (paramsObj.switchLogEvent) {
            isLogEventSwitched = true;
            window.googletag.pubads().addEventListener("slotOnload", callLog);
        }
        window.googletag.pubads().addEventListener("slotRenderEnded", dfpCallback);
        window.googletag.pubads().set("page_url", requrl);
        if (tfcd === "1") {
            window.googletag.pubads().setTagForChildDirectedTreatment(1);
        }
        window._mNDetails[dyncId].gtag = window.googletag.defineSlot(paramsObj.slotId, [paramsObj.width, paramsObj.height], paramsObj.divId).addService(window.googletag.pubads());
    });
};
window.setDFPDisplay = function(paramsObj) {
    if (!document.getElementById(paramsObj.divId) && paramsObj.slotId) {
        var ifrElem = window.parent.document.getElementById(iframeId);
        if (ifrElem) {
            ifrElem.width = paramsObj.width;
            ifrElem.height = paramsObj.height;
        }
        window.setDFPSlot(paramsObj);
    }
    window.googletag.cmd.push(function() {
        if (typeof paramsObj.target === "object") {
            for (var key in paramsObj.target) {
                window._mNDetails[dyncId].gtag.setTargeting(key, paramsObj.target[key]);
            }
        }
        window.googletag.enableServices();
        window.googletag.display(paramsObj.divId);
    });
};
window._mNDetails.show = function(crid, winObj) {
    window.mnet_triggered = true;
    parent._mNDetails.show(crid, winObj);
};
window._mNDetails.directAdShow = function(adObj) {
    parent._mNDetails.directAdShow(adObj);
}; < /script></head > < body onload = "loadGpt()" > < /body></html >
                                    

#3 JavaScript::Write (size: 252, repeated: 1) - SHA256: 40300f6b02121205b5b59162198d7fa4b0af35b57f7596fd7cfa9fb53752b255

                                        < !DOCTYPE html > < html > < head > < /head><body><script type="text/javascript
">if (!window.OX_ads) { OX_ads = []; }OX_ads.push({ "
auid " : "
537253288 " });</script><script type="
text / javascript " src = "
http: //us-ads.openx.net/w/1.0/jstag"></script></body></html>
                                    

#4 JavaScript::Write (size: 527, repeated: 1) - SHA256: 1369b720d916fab14d5b5b2f58308a03d805dcfcf65694113f466ef8660a118c

                                        < !DOCTYPE html > < html > < head > < script type = "text/javascript" > function logBeacons() {
    if (window.parent && window.parent._mNDetails && window.parent._mNDetails.beaconsQueue) {
        if (Object.prototype.toString.call(window.parent._mNDetails.beaconsQueue) === "[object Array]" && window.parent._mNDetails.beaconsQueue.length > 0) {
            var i, j;
            for (i = 0, j = window.parent._mNDetails.beaconsQueue.length; i < j; i++) {
                (new Image()).src = window.parent._mNDetails.beaconsQueue.shift();
            }
        }
    }
}; < /script></head > < body onload = "logBeacons()" > < /body></html >
                                    

#5 JavaScript::Write (size: 2014, repeated: 1) - SHA256: a2aa34de70506f7c427a464cdc310d777c5b859d30d40fe4b15af042b9bc7260

                                        < !DOCTYPE html > < html > < head > < script type = "text/javascript" >
    var publisherScope = window.parent.winScope;
var iframeID = typeof(frameID) !== "undefined" ? frameID : window.parent._mNDetails["434594251"]["iframeID"],
    callback = false,
    dyncId = iframeID.replace("main", "dy").replace(/_[0-9]*$/g, ""),
    mFrame = window.parent._mNDetails["434594251"]["iframeURL"].replace(/#.*/, "");

function makeParentAccessible() {
    try {
        window.parent.winScope;
    } catch (domainException) {
        document.domain = document.domain.replace(/^www./, "");
    }
}

function processL3() {
    makeParentAccessible();
    window.parent._mNDetails[dyncId] = window.parent._mNDetails[dyncId] || {};
    window.parent._mNDetails[dyncId].l3Code = adContent.content;
    if (window.parent._mNDetails.triggerAdTagEvent && window.parent._mNDetails.addToEventQueue) {
        window.parent._mNDetails.addToEventQueue("loadL3", "434594251", loadL3);
        window.parent._mNDetails.triggerAdTagEvent("434594251", "adContentLoaded");
    } else {
        loadL3();
    }
}
window.parent.loadL3 = loadL3;

function loadL3() {
    makeParentAccessible();
    parent._mN_dy.putContent({
        data: adContent.content,
        url: "",
        width: "100%",
        height: "250",
        id: iframeID,
        isInsl: false
    }, {
        ifrmVifFlag: 1,
        adtagUID: "434594251"
    });
};

function getL3URL(urlFromL2) {
    var isSecureSrc = urlFromL2.indexOf("https") === 0,
        isWindowSecure = "https:" == document.location.protocol,
        _mNL2;
    if (!isWindowSecure || isSecureSrc) {
        return urlFromL2 + "&nb=1";
    }
    try {
        _mNL2 = window.parent._mNL2;
        if (_mNL2 && _mNL2.util && _mNL2.util.logFailover && _mNL2.htFlUrl) {
            _mNL2.util.logFailover(_mNL2.htFlUrl);
        }
    } catch (e) {}
    return "";
};

function createTag() {
    var l3src = getL3URL(mFrame);
    if (!l3src) {
        return;
    }
    var scr = document.createElement("script");
    scr.onload = scr.onreadystatechange = function() {
        if (typeof adContent != "undefined" && !callback) {
            callback = true;
            processL3();
        }
    };
    scr.type = "text/javascript";
    scr.src = l3src;
    scr.async = "async";
    document.getElementsByTagName("head")[0].appendChild(scr);
}; < /script></head > < body onload = "createTag()" > < /body></html >
                                    

#6 JavaScript::Write (size: 314, repeated: 1) - SHA256: 1db751fb1f2ddf7f8e50f180b33662359e6983df6146902aeeee5b0c091e22cd

                                        < !DOCTYPE html > < html > < head > < script type = "text/javascript" >
    var syncURL = "http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&prv=OPENXS2S,APPNEXUS,C1EXCHANGE,PULSEPOINT&vsSync=1";

function createTag() {
    window.location.replace(syncURL);
} < /script></head > < body onload = "createTag()" > < /body></html >
                                    

#7 JavaScript::Write (size: 270, repeated: 1) - SHA256: 93ca4abc388dede949f6f69add92afc348795cb145ea272d40487fddaaad06c2

                                        < !DOCTYPE html > < html > < head > < script type = "text/javascript" >
    var syncURL = "http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1";

function createTag() {
    window.location.replace(syncURL);
} < /script></head > < body onload = "createTag()" > < /body></html >
                                    

#8 JavaScript::Write (size: 2405, repeated: 1) - SHA256: 149d19226af9807169724165e2a6b196851be93abf52f95fe12f1637db11b573

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-5919730405305472"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171108/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_format="370x280";google_ad_slot="3123702620";google_ad_client="ca-pub-5919730405305472";google_adsbygoogle_status="done";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=4;google_responsive_formats=3;google_ad_width=370;google_ad_height=280;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=1;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["62710011","62710014","38893303","21061122"],"loeids":["38893313"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_unit_key="1795008180";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=2;google_async_iframe_id="aswift_0";google_start_time=1510688590947;google_pub_vars="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";google_bpp=33;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20171108/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#9 JavaScript::Write (size: 14300, repeated: 1) - SHA256: 0bb187f023f9c17368ba92fbbaaac5f6e3aac6c6c3ba41fd390798156875f869

                                        < !doctype html > < html > < head > < script >
    var google_casm = ["", 0, null, 0, 0, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < script > (function() {
    var aa = "function" == typeof Object.create ? Object.create : function(a) {
            var b = function() {};
            b.prototype = a;
            return new b
        },
        l;
    if ("function" == typeof Object.setPrototypeOf) l = Object.setPrototypeOf;
    else {
        var n;
        a: {
            var ba = {
                    a: !0
                },
                q = {};
            try {
                q.__proto__ = ba;
                n = q.a;
                break a
            } catch (a) {}
            n = !1
        }
        l = n ? function(a, b) {
            a.__proto__ = b;
            if (a.__proto__ !== b) throw new TypeError(a + " is not extensible");
            return a
        } : null
    }
    var t = l,
        u = this,
        v = function(a, b) {
            a = a.split(".");
            var c = u;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        },
        w = Date.now || function() {
            return +new Date
        };
    var x = document,
        y = window;
    var ca = Array.prototype.forEach ? function(a, b) {
        Array.prototype.forEach.call(a, b, void 0)
    } : function(a, b) {
        for (var c = a.length, d = "string" == typeof a ? a.split("") : a, e = 0; e < c; e++) e in d && b.call(void 0, d[e], e, a)
    };
    var z = function(a) {
        z[" "](a);
        return a
    };
    z[" "] = function() {};
    var A = function(a) {
            try {
                var b;
                if (b = !!a && null != a.location.href) a: {
                    try {
                        z(a.foo);
                        b = !0;
                        break a
                    } catch (c) {}
                    b = !1
                }
                return b
            } catch (c) {
                return !1
            }
        },
        B = function(a, b) {
            for (var c in a) Object.prototype.hasOwnProperty.call(a, c) && b.call(void 0, a[c], c, a)
        };
    var da;
    da = /^true$/.test("");
    var ea = function(a, b, c) {
        a.addEventListener ? a.addEventListener(b, c, void 0) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var fa = function(a, b) {
        a.google_image_requests || (a.google_image_requests = []);
        var c = a.document.createElement("img");
        c.src = b;
        a.google_image_requests.push(c)
    };
    var ha = !!window.google_async_iframe_id,
        C = ha && window.parent || window;
    var E = function(a) {
            return {
                visible: 1,
                hidden: 2,
                prerender: 3,
                preview: 4,
                unloaded: 5
            }[a.webkitVisibilityState || a.mozVisibilityState || a.visibilityState || ""] || 0
        },
        ia = function(a) {
            var b;
            a.mozVisibilityState ? b = "mozvisibilitychange" : a.webkitVisibilityState ? b = "webkitvisibilitychange" : a.visibilityState && (b = "visibilitychange");
            return b
        };
    var F = null,
        G = !1,
        I = function() {
            this.g = x;
            this.o = y;
            this.j = !1;
            this.h = this.l = null;
            this.i = [];
            this.m = [];
            G ? this.h = w() : 3 == E(this.g) ? (this.h = w(), ka(this)) : H(this)
        },
        H = function(a) {
            if (!a.j) {
                a.j = !0;
                for (var b = 0; b < a.i.length; ++b) a.u.apply(a, a.i[b]);
                a.i = [];
                for (b = 0; b < a.m.length; ++b) a.o.setTimeout(a.m[b], 0);
                a.m = []
            }
        },
        ka = function(a) {
            var b = function() {
                if (3 != E(a.g)) {
                    H(a);
                    var b = ia(a.g);
                    if (b && a.l) {
                        var c = a.g,
                            f = a.l;
                        c.removeEventListener ? c.removeEventListener(b, f, void 0) : c.detachEvent && c.detachEvent("on" + b, f)
                    }
                }
            };
            F && (b = F("di::vch", b));
            a.l = b;
            var c = ia(a.g);
            c && ea(a.g, c, b)
        };
    I.prototype.u = function(a) {
        this.o.rvdt = this.h ? w() - this.h : 0;
        fa(this.o, a)
    };
    I.g = void 0;
    I.h = function() {
        return I.g ? I.g : I.g = new I
    };
    var J = function(a, b, c) {
        c = void 0 === c ? {} : c;
        this.error = a;
        this.context = b.context;
        this.line = b.line || -1;
        this.msg = b.message || "";
        this.file = b.file || "";
        this.id = b.id || "jserror";
        this.meta = c
    };
    var la = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
        ma = function(a, b) {
            this.g = a;
            this.h = b
        },
        na = function(a, b) {
            this.url = a;
            this.s = !!b;
            this.depth = null
        };
    var K = function() {
            this.i = "&";
            this.j = !1;
            this.h = {};
            this.l = 0;
            this.g = []
        },
        oa = function(a, b) {
            var c = {};
            c[a] = b;
            return [c]
        },
        qa = function(a, b, c, d, e) {
            var f = [];
            B(a, function(a, m) {
                (a = pa(a, b, c, d, e)) && f.push(m + "=" + a)
            });
            return f.join(b)
        },
        pa = function(a, b, c, d, e) {
            if (null == a) return "";
            b = b || "&";
            c = c || ",$";
            "string" == typeof c && (c = c.split(""));
            if (a instanceof Array) {
                if (d = d || 0, d < c.length) {
                    for (var f = [], g = 0; g < a.length; g++) f.push(pa(a[g], b, c, d + 1, e));
                    return f.join(c[d])
                }
            } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(qa(a, b, c, d, e + 1)) : "...";
            return encodeURIComponent(String(a))
        },
        L = function(a, b, c, d) {
            a.g.push(b);
            a.h[b] = oa(c, d)
        },
        sa = function(a, b, c, d) {
            b = b + "//" + c + d;
            var e = ra(a) - d.length - 0;
            if (0 > e) return "";
            a.g.sort(function(a, b) {
                return a - b
            });
            d = null;
            c = "";
            for (var f = 0; f < a.g.length; f++)
                for (var g = a.g[f], m = a.h[g], k = 0; k < m.length; k++) {
                    if (!e) {
                        d = null == d ? g : d;
                        break
                    }
                    var h = qa(m[k], a.i, ",$");
                    if (h) {
                        h = c + h;
                        if (e >= h.length) {
                            e -= h.length;
                            b += h;
                            c = a.i;
                            break
                        } else a.j && (c = e, h[c - 1] == a.i && --c, b += h.substr(0, c), c = a.i, e = 0);
                        d = null == d ? g : d
                    }
                }
            a = "";
            null != d && (a = c + "trn=" + d);
            return b + a + ""
        },
        ra = function(a) {
            var b = 1,
                c;
            for (c in a.h) b = c.length > b ? c.length : b;
            return 3997 - b - a.i.length - 1
        };
    var ta = function(a, b, c, d) {
        if (Math.random() < (d || a.g)) try {
            if (c instanceof K) var e = c;
            else e = new K, B(c, function(a, b) {
                var c = e,
                    d = c.l++;
                a = oa(b, a);
                c.g.push(d);
                c.h[d] = a
            });
            var f = sa(e, a.j, a.h, a.i + b + "&");
            f && fa(u, f)
        } catch (g) {}
    };
    var M = null;
    var ua = function() {
            var a = u.performance;
            return a && a.now && a.timing ? Math.floor(a.now() + a.timing.navigationStart) : w()
        },
        va = function() {
            var a = u.performance;
            return a && a.now ? a.now() : null
        };
    var wa = function(a, b, c) {
        this.label = a;
        this.type = b;
        this.value = c;
        this.duration = 0;
        this.uniqueId = this.label + "_" + this.type + "_" + Math.random();
        this.slotId = void 0
    };
    var N = u.performance,
        xa = !!(N && N.mark && N.measure && N.clearMarks),
        P = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a;
            if (a = xa) {
                if (null === M) {
                    M = "";
                    try {
                        var b = u.top.location.hash;
                        if (b) {
                            var c = b.match(/\bdeid=([\d,]+)/);
                            M = c ? c[1] : ""
                        }
                    } catch (d) {}
                }
                a = M;
                a = !!a.indexOf && 0 <= a.indexOf("1337")
            }
            return a
        }),
        ya = function() {
            var a = Q;
            this.h = [];
            this.i = a || u;
            var b = null;
            a && (a.google_js_reporting_queue = a.google_js_reporting_queue || [], this.h = a.google_js_reporting_queue, b = a.google_measure_js_timing);
            this.g = P() || (null != b ? b : 1 > Math.random())
        },
        za = function(a) {
            a && P() && (N.clearMarks("goog_" + a.uniqueId + "_start"), N.clearMarks("goog_" + a.uniqueId + "_end"))
        };
    ya.prototype.start = function(a, b) {
        if (!this.g) return null;
        var c = va() || ua();
        a = new wa(a, b, c);
        b = "goog_" + a.uniqueId + "_start";
        P() && N.mark(b);
        return a
    };
    var Ba = function() {
            var a = R;
            this.i = Aa;
            this.j = this.h;
            this.g = void 0 === a ? null : a
        },
        Ca = function(a, b, c, d) {
            try {
                if (a.g && a.g.g) {
                    var e = a.g.start(b.toString(), 3);
                    var f = c();
                    var g = a.g;
                    c = e;
                    if (g.g && "number" == typeof c.value) {
                        var m = va() || ua();
                        c.duration = m - c.value;
                        var k = "goog_" + c.uniqueId + "_end";
                        P() && N.mark(k);
                        g.g && g.h.push(c)
                    }
                } else f = c()
            } catch (h) {
                g = !0;
                try {
                    za(e), g = a.j.call(a, b, new S(V(h), h.fileName, h.lineNumber), void 0, d)
                } catch (p) {
                    a.h(217, p)
                }
                if (!g) throw h;
            }
            return f
        },
        W = function(a, b, c) {
            var d = Da;
            return function(e) {
                for (var f = [], g = 0; g < arguments.length; ++g) f[g - 0] = arguments[g];
                return Ca(d, a, function() {
                    return b.apply(void 0, f)
                }, c)
            }
        };
    Ba.prototype.h = function(a, b, c, d, e) {
        e = e || "jserror";
        try {
            var f = new K;
            f.j = !0;
            L(f, 1, "context", a);
            b.error && b.meta && b.id || (b = new S(V(b), b.fileName, b.lineNumber));
            b.msg && L(f, 2, "msg", b.msg.substring(0, 512));
            b.file && L(f, 3, "file", b.file);
            0 < b.line && L(f, 4, "line", b.line);
            var g = b.meta || {};
            if (d) try {
                d(g)
            } catch (T) {}
            b = [g];
            f.g.push(5);
            f.h[5] = b;
            g = u;
            b = [];
            var m = null;
            do {
                d = g;
                if (A(d)) {
                    var k = d.location.href;
                    m = d.document && d.document.referrer || null
                } else k = m, m = null;
                b.push(new na(k || ""));
                try {
                    g = d.parent
                } catch (T) {
                    g = null
                }
            } while (g && d != g);
            k = 0;
            for (var h = b.length - 1; k <= h; ++k) b[k].depth = h - k;
            d = u;
            if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (k = 1; k < b.length; ++k) {
                var p = b[k];
                p.url || (p.url = d.location.ancestorOrigins[k - 1] || "", p.s = !0)
            }
            var O = new na(u.location.href, !1);
            h = null;
            var U = b.length - 1;
            for (p = U; 0 <= p; --p) {
                var r = b[p];
                !h && la.test(r.url) && (h = r);
                if (r.url && !r.s) {
                    O = r;
                    break
                }
            }
            r = null;
            var Ga = b.length && b[U].url;
            0 != O.depth && Ga && (r = b[U]);
            var D = new ma(O, r);
            D.h && L(f, 6, "top", D.h.url || "");
            L(f, 7, "url", D.g.url || "");
            ta(this.i, e, f, c)
        } catch (T) {
            try {
                ta(this.i, e, {
                    context: "ecmserr",
                    rctx: a,
                    msg: V(T),
                    url: D.g.url
                }, c)
            } catch (Ha) {}
        }
        return !0
    };
    var V = function(a) {
            var b = a.toString();
            a.name && -1 == b.indexOf(a.name) && (b += ": " + a.name);
            a.message && -1 == b.indexOf(a.message) && (b += ": " + a.message);
            if (a.stack) {
                a = a.stack;
                var c = b;
                try {
                    -1 == a.indexOf(c) && (a = c + "\n" + a);
                    for (var d; a != d;) d = a, a = a.replace(/((https?:\/..*\/)[^\/:]*:\d+(?:.|\n)*)\2/, "$1");
                    b = a.replace(/\n */g, "\n")
                } catch (e) {
                    b = c
                }
            }
            return b
        },
        S = function(a, b, c) {
            J.call(this, Error(a), {
                message: a,
                file: void 0 === b ? "" : b,
                line: void 0 === c ? -1 : c
            })
        },
        X = S;
    X.prototype = aa(J.prototype);
    X.prototype.constructor = X;
    if (t) t(X, J);
    else
        for (var Y in J)
            if ("prototype" != Y)
                if (Object.defineProperties) {
                    var Ea = Object.getOwnPropertyDescriptor(J, Y);
                    Ea && Object.defineProperty(X, Y, Ea)
                } else X[Y] = J[Y];
    X.v = J.prototype;
    var Aa, Da;
    if (ha && !A(C)) {
        var Z = "." + x.domain;
        try {
            for (; 2 < Z.split(".").length && !A(C);) x.domain = Z = Z.substr(Z.indexOf(".") + 1), C = window.parent
        } catch (a) {}
        A(C) || (C = window)
    }
    var Q = C,
        R = new ya,
        Fa = function() {
            if (!Q.google_measure_js_timing) {
                var a = R;
                a.g = !1;
                a.h != a.i.google_js_reporting_queue && (P() && ca(a.h, za), a.h.length = 0)
            }
        };
    Aa = new function() {
        var a = void 0 === a ? y : a;
        this.j = "http:" === a.location.protocol ? "http:" : "https:";
        this.h = "pagead2.googlesyndication.com";
        this.i = "/pagead/gen_204?id=";
        this.g = .01
    };
    Da = new Ba;
    "complete" == Q.document.readyState ? Fa() : R.g && ea(Q, "load", function() {
        Fa()
    });
    F = function(a, b, c) {
        return W(a, b, c)
    };
    G = da;
    v("vu", W("vu", function(a) {
        a = a.replace("&amp;", "&");
        var b = /(google|doubleclick).*\/pagead\/adview/.test(a),
            c = I.h();
        if (b) {
            b = "&vis=" + E(c.g);
            var d = a.indexOf("&adurl");
            a = -1 == d ? a + b : a.substring(0, d) + b + a.substring(d)
        }
        c.j ? c.u(a) : c.i.push([a])
    }, void 0));
    v("vv", W("vv", function() {
        G && H(I.h())
    }, void 0));
}).call(this); < /script><script>vu("https:/ / googleads.g.doubleclick.net / pagead / adview ? ai\ x3dCVI6PUEcLWqy3GM7yvALvooXgBpqnvvBNjpKgjlfAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTkxOTczMDQwNTMwNTQ3MqAB2obz6APIAQmoAwGqBJQBT9AlOk8qPPEU5Q2Ol3mtXGue8tGm4TrlmX_J0bZGUUa5V - m8XYo3eBQrQwOJsaFvIrGJnIFz5gmyRd5NTWhCpNXcmjWslMV5XHD8GUdmQLYsGaIbIxWgZhHrx - 6 Q9i5BZmkH46uwWBqR3I7I_5sTKvRNMIC8g5Hap8htqZbBJZDOykGY5qEeKq_7Pg51oMnvJnuRFYAGgdvJ1aGAt4emAaAGIagHpr4b2AcA0ggFCIBhEAE\ x26sigh\ x3d_fz79g - 2 Tmw ")</script><img src="
https: //eur-ukp.adsrvr.org/bid/feedback/google?iid=6c483fb3-dc96-4e3b-b20b-0237150e14f4&crid=53zum91a&wp=WgtHUAAGG6wKTzlOAAFRbwI5s6xzKHo85kGmmA&aid=1&wpc=USD&sfe=c42c750&puid=&tdid=&pid=ul911xn&ag=yzxg83o&sig=yi4I7jrkHIinsuNvKXM6fKM6WFuS6U2f85OwDaFb0pw.&cf=177800&fq=0&td_s=freebiesfrenzy.com&rcats=&mcat=&mste=&mfld=2&mssi=&mfsi=bwyy2zfa8v&uhow=68&agsa=&rgco=Norway&rgre=Oslo%20County&rgme=&rgci=Oslo&rgz=0001&svbttd=1&dt=PC&osf=Windows&os=Windows7&br=Firefox&rlangs=en&mlang=&svpid=pub-5919730405305472&did=&rcxt=Other&lat=59.905000&lon=10.748700&tmpc=-2&daid=&vp=0&osi=&osv=&bp=0.1&mdl=Firefox%20-%20Windows&dur=&crrelr=&atst=0" width="1" height="1" style="display: none;"/><img src="https://production.selectmedia.asia/sm.evt?eventType=INIT&sellerId=google&campaignId=yzxg83o&PUBLISHER_ID=ul911xn&smcreativeid=144617015&declaredurl=freebiesfrenzy.com&cb=721577" width="0" height="0"  style="position:absolute; visibility:hidden">
    < script id = 'sm_main_script'
src = "https://cloud.selectmedia.asia/Code/player/smclient_min.js?server=production&cv=&sellerId=google&campaignId=yzxg83o&PUBLISHER_ID=ul911xn&smcreativeid=144617015&declaredurl=freebiesfrenzy.com&cb=721577&click=http%3A%2F%2Finsight.adsrvr.org%2Ftrack%2Fclk%3Fimp%3D6c483fb3-dc96-4e3b-b20b-0237150e14f4%26ag%3Dyzxg83o%26sfe%3Dc42c750%26sig%3Dyi4I7jrkHIinsuNvKXM6fKM6WFuS6U2f85OwDaFb0pw.%26crid%3D53zum91a%26cf%3D177800%26fq%3D0%26td_s%3Dfreebiesfrenzy.com%26rcats%3D%26mcat%3D%26mste%3D%26mfld%3D2%26mssi%3D%26mfsi%3Dbwyy2zfa8v%26sv%3Dgoogle%26uhow%3D68%26agsa%3D%26rgco%3DNorway%26rgre%3DOslo%2520County%26rgme%3D%26rgci%3DOslo%26rgz%3D0001%26dt%3DPC%26osf%3DWindows%26os%3DWindows7%26br%3DFirefox%26svpid%3Dpub-5919730405305472%26rlangs%3Den%26mlang%3D%26did%3D%26rcxt%3DOther%26tmpc%3D-2%26vrtd%3D%26osi%3D%26osv%3D%26daid%3D%26dnr%3D0%26vpb%3D%26svsc%3D%26dur%3D%26crrelr%3D%26npt%3D%26svscid%3Dpub-5919730405305472%26mdl%3DFirefox%2520-%2520Windows%26atst%3D0%26r%3Dhttps://adclick.g.doubleclick.net/aclk%3Fsa%3Dl%26ai%3DCVI6PUEcLWqy3GM7yvALvooXgBpqnvvBNjpKgjlfAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTkxOTczMDQwNTMwNTQ3MqAB2obz6APIAQmoAwGqBJQBT9AlOk8qPPEU5Q2Ol3mtXGue8tGm4TrlmX_J0bZGUUa5V-m8XYo3eBQrQwOJsaFvIrGJnIFz5gmyRd5NTWhCpNXcmjWslMV5XHD8GUdmQLYsGaIbIxWgZhHrx-6Q9i5BZmkH46uwWBqR3I7I_5sTKvRNMIC8g5Hap8htqZbBJZDOykGY5qEeKq_7Pg51oMnvJnuRFYAGgdvJ1aGAt4emAaAGIagHpr4b2AcA0ggFCIBhEAE%26num%3D1%26sig%3DAOD64_23sLtnNGQRTr0RQP-fYNIoK6HRSQ%26client%3Dca-pub-5919730405305472%26adurl%3D" > < /script><span id="te-clearads-js-tradedesk01cont1"><script type="text/javascript
" src="
https: //choices.truste.com/ca?pid=tradedesk01&aid=tradedesk01&cid=hdzy6dl_yzxg83o_53zum91a&c=tradedesk01cont1&js=pmw0&w=300&h=250&sid=0"></script></span><script src="https://tpc.googlesyndication.com/pagead/js/r20171108/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCVI6PUEcLWqy3GM7yvALvooXgBpqnvvBNjpKgjlfAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTkxOTczMDQwNTMwNTQ3MqAB2obz6APIAQmoAwGqBJQBT9AlOk8qPPEU5Q2Ol3mtXGue8tGm4TrlmX_J0bZGUUa5V-m8XYo3eBQrQwOJsaFvIrGJnIFz5gmyRd5NTWhCpNXcmjWslMV5XHD8GUdmQLYsGaIbIxWgZhHrx-6Q9i5BZmkH46uwWBqR3I7I_5sTKvRNMIC8g5Hap8htqZbBJZDOykGY5qEeKq_7Pg51oMnvJnuRFYAGgdvJ1aGAt4emAaAGIagHpr4b2AcA0ggFCIBhEAE\x26sigh\x3d33ywEMIl4zk","UEcLWt24E4617gSX-YqICA","CKyfqsfpvtcCFU45Twodb1EBbA",true,true,true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171108/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BtbkhUEcLWqy3GM7yvALvooXgBgCOkqCOVwAAEAE4AcgBCaAGIdIIBQiAYRAB','',1795008180,true,'la\x3d0\x26alp\x3dai\x26alh\x3d1564679635\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dBtbkhUEcLWqy3GM7yvALvooXgBgCOkqCOVwAAEAE4AcgBCaAGIdIIBQiAYRAB');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171108/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,0,1,0,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CKyfqsfpvtcCFU45Twodb1EBbA"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB/SURBVBjTbZCBDQAhCAPLBt1/2ldsAc2jMRJPKAX+I05gr84A5us6yZEFzG7I2X7h4pgwKys6K04aPjlqDyUxlFSQj26Ize3a2Vmqdxxa7cNXzevuumqEVipTii4hlHC27vPJ0z4OpiWcLkiSm7SDlBQMOmQIcNfuHpeDMSf8AOqmBUCcNiqFAAAAAElFTkSuQmCC') !important"></div></body></html>
                                    

#10 JavaScript::Write (size: 67, repeated: 3) - SHA256: 53153812815c2ae70a875ad1057c8b0920a0c9b4189b8bedffd75b9126d633cd

                                        < div id = 'compute_visibility_helper'
width = '0px'
height = '0px' > < /div>
                                    

#11 JavaScript::Write (size: 56, repeated: 1) - SHA256: ff7c9a98f53086ddccffb813baa8dd11ba2223aa4fb271259d928bbdaa88007c

                                        < html > < body onload = "window.avCallback();" > < /body></html >
                                    

#12 JavaScript::Write (size: 326, repeated: 1) - SHA256: a6b148f6a928a59ff4ed3acb187382945f2c66e018a6fad38eaad7fc9c15157b

                                        < html > < body > < div id = "state" >
    < script type = "text/javascript" >
    try {
        window.parent.__backTracker22c63ed115df40afbba97707b8352d44({
            state: {
                __backtracker: {
                    "action": "exit",
                    "id": "1510688596036-0",
                    "time": 1510688596036,
                    "url": "http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/"
                }
            }
        })
    } catch (e) {} < /script> < /div></body > < /html>
                                    

#13 JavaScript::Write (size: 330, repeated: 1) - SHA256: 7df9b07ed5defea2af01deb03f1aa77b46431ce11004bb4103c5b1ab0ff31b4f

                                        < html > < body > < div id = "state" >
    < script type = "text/javascript" >
    try {
        window.parent.__backTracker22c63ed115df40afbba97707b8352d44({
            state: {
                __backtracker: {
                    "action": "site-top",
                    "id": "1510688596041-1",
                    "time": 1510688596041,
                    "url": "http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/"
                }
            }
        })
    } catch (e) {} < /script> < /div></body > < /html>
                                    

#14 JavaScript::Write (size: 10609, repeated: 1) - SHA256: 6f03f970047766cc90d743f5d2398e590983a87bf653d941398e2dc67a331b77

                                        < html > < head > < script >
    var inDapIF = true; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < script > (function() {
    var aa = "function" == typeof Object.create ? Object.create : function(a) {
            var b = function() {};
            b.prototype = a;
            return new b
        },
        l;
    if ("function" == typeof Object.setPrototypeOf) l = Object.setPrototypeOf;
    else {
        var n;
        a: {
            var ba = {
                    a: !0
                },
                q = {};
            try {
                q.__proto__ = ba;
                n = q.a;
                break a
            } catch (a) {}
            n = !1
        }
        l = n ? function(a, b) {
            a.__proto__ = b;
            if (a.__proto__ !== b) throw new TypeError(a + " is not extensible");
            return a
        } : null
    }
    var t = l,
        u = this,
        v = function(a, b) {
            a = a.split(".");
            var c = u;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        },
        w = Date.now || function() {
            return +new Date
        };
    var x = document,
        y = window;
    var ca = Array.prototype.forEach ? function(a, b) {
        Array.prototype.forEach.call(a, b, void 0)
    } : function(a, b) {
        for (var c = a.length, d = "string" == typeof a ? a.split("") : a, e = 0; e < c; e++) e in d && b.call(void 0, d[e], e, a)
    };
    var z = function(a) {
        z[" "](a);
        return a
    };
    z[" "] = function() {};
    var A = function(a) {
            try {
                var b;
                if (b = !!a && null != a.location.href) a: {
                    try {
                        z(a.foo);
                        b = !0;
                        break a
                    } catch (c) {}
                    b = !1
                }
                return b
            } catch (c) {
                return !1
            }
        },
        B = function(a, b) {
            for (var c in a) Object.prototype.hasOwnProperty.call(a, c) && b.call(void 0, a[c], c, a)
        };
    var da;
    da = /^true$/.test("");
    var ea = function(a, b, c) {
        a.addEventListener ? a.addEventListener(b, c, void 0) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var fa = function(a, b) {
        a.google_image_requests || (a.google_image_requests = []);
        var c = a.document.createElement("img");
        c.src = b;
        a.google_image_requests.push(c)
    };
    var ha = !!window.google_async_iframe_id,
        C = ha && window.parent || window;
    var E = function(a) {
            return {
                visible: 1,
                hidden: 2,
                prerender: 3,
                preview: 4,
                unloaded: 5
            }[a.webkitVisibilityState || a.mozVisibilityState || a.visibilityState || ""] || 0
        },
        ia = function(a) {
            var b;
            a.mozVisibilityState ? b = "mozvisibilitychange" : a.webkitVisibilityState ? b = "webkitvisibilitychange" : a.visibilityState && (b = "visibilitychange");
            return b
        };
    var F = null,
        G = !1,
        I = function() {
            this.g = x;
            this.o = y;
            this.j = !1;
            this.h = this.l = null;
            this.i = [];
            this.m = [];
            G ? this.h = w() : 3 == E(this.g) ? (this.h = w(), ka(this)) : H(this)
        },
        H = function(a) {
            if (!a.j) {
                a.j = !0;
                for (var b = 0; b < a.i.length; ++b) a.u.apply(a, a.i[b]);
                a.i = [];
                for (b = 0; b < a.m.length; ++b) a.o.setTimeout(a.m[b], 0);
                a.m = []
            }
        },
        ka = function(a) {
            var b = function() {
                if (3 != E(a.g)) {
                    H(a);
                    var b = ia(a.g);
                    if (b && a.l) {
                        var c = a.g,
                            f = a.l;
                        c.removeEventListener ? c.removeEventListener(b, f, void 0) : c.detachEvent && c.detachEvent("on" + b, f)
                    }
                }
            };
            F && (b = F("di::vch", b));
            a.l = b;
            var c = ia(a.g);
            c && ea(a.g, c, b)
        };
    I.prototype.u = function(a) {
        this.o.rvdt = this.h ? w() - this.h : 0;
        fa(this.o, a)
    };
    I.g = void 0;
    I.h = function() {
        return I.g ? I.g : I.g = new I
    };
    var J = function(a, b, c) {
        c = void 0 === c ? {} : c;
        this.error = a;
        this.context = b.context;
        this.line = b.line || -1;
        this.msg = b.message || "";
        this.file = b.file || "";
        this.id = b.id || "jserror";
        this.meta = c
    };
    var la = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
        ma = function(a, b) {
            this.g = a;
            this.h = b
        },
        na = function(a, b) {
            this.url = a;
            this.s = !!b;
            this.depth = null
        };
    var K = function() {
            this.i = "&";
            this.j = !1;
            this.h = {};
            this.l = 0;
            this.g = []
        },
        oa = function(a, b) {
            var c = {};
            c[a] = b;
            return [c]
        },
        qa = function(a, b, c, d, e) {
            var f = [];
            B(a, function(a, m) {
                (a = pa(a, b, c, d, e)) && f.push(m + "=" + a)
            });
            return f.join(b)
        },
        pa = function(a, b, c, d, e) {
            if (null == a) return "";
            b = b || "&";
            c = c || ",$";
            "string" == typeof c && (c = c.split(""));
            if (a instanceof Array) {
                if (d = d || 0, d < c.length) {
                    for (var f = [], g = 0; g < a.length; g++) f.push(pa(a[g], b, c, d + 1, e));
                    return f.join(c[d])
                }
            } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(qa(a, b, c, d, e + 1)) : "...";
            return encodeURIComponent(String(a))
        },
        L = function(a, b, c, d) {
            a.g.push(b);
            a.h[b] = oa(c, d)
        },
        sa = function(a, b, c, d) {
            b = b + "//" + c + d;
            var e = ra(a) - d.length - 0;
            if (0 > e) return "";
            a.g.sort(function(a, b) {
                return a - b
            });
            d = null;
            c = "";
            for (var f = 0; f < a.g.length; f++)
                for (var g = a.g[f], m = a.h[g], k = 0; k < m.length; k++) {
                    if (!e) {
                        d = null == d ? g : d;
                        break
                    }
                    var h = qa(m[k], a.i, ",$");
                    if (h) {
                        h = c + h;
                        if (e >= h.length) {
                            e -= h.length;
                            b += h;
                            c = a.i;
                            break
                        } else a.j && (c = e, h[c - 1] == a.i && --c, b += h.substr(0, c), c = a.i, e = 0);
                        d = null == d ? g : d
                    }
                }
            a = "";
            null != d && (a = c + "trn=" + d);
            return b + a + ""
        },
        ra = function(a) {
            var b = 1,
                c;
            for (c in a.h) b = c.length > b ? c.length : b;
            return 3997 - b - a.i.length - 1
        };
    var ta = function(a, b, c, d) {
        if (Math.random() < (d || a.g)) try {
            if (c instanceof K) var e = c;
            else e = new K, B(c, function(a, b) {
                var c = e,
                    d = c.l++;
                a = oa(b, a);
                c.g.push(d);
                c.h[d] = a
            });
            var f = sa(e, a.j, a.h, a.i + b + "&");
            f && fa(u, f)
        } catch (g) {}
    };
    var M = null;
    var ua = function() {
            var a = u.performance;
            return a && a.now && a.timing ? Math.floor(a.now() + a.timing.navigationStart) : w()
        },
        va = function() {
            var a = u.performance;
            return a && a.now ? a.now() : null
        };
    var wa = function(a, b, c) {
        this.label = a;
        this.type = b;
        this.value = c;
        this.duration = 0;
        this.uniqueId = this.label + "_" + this.type + "_" + Math.random();
        this.slotId = void 0
    };
    var N = u.performance,
        xa = !!(N && N.mark && N.measure && N.clearMarks),
        P = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a;
            if (a = xa) {
                if (null === M) {
                    M = "";
                    try {
                        var b = u.top.location.hash;
                        if (b) {
                            var c = b.match(/\bdeid=([\d,]+)/);
                            M = c ? c[1] : ""
                        }
                    } catch (d) {}
                }
                a = M;
                a = !!a.indexOf && 0 <= a.indexOf("1337")
            }
            return a
        }),
        ya = function() {
            var a = Q;
            this.h = [];
            this.i = a || u;
            var b = null;
            a && (a.google_js_reporting_queue = a.google_js_reporting_queue || [], this.h = a.google_js_reporting_queue, b = a.google_measure_js_timing);
            this.g = P() || (null != b ? b : 1 > Math.random())
        },
        za = function(a) {
            a && P() && (N.clearMarks("goog_" + a.uniqueId + "_start"), N.clearMarks("goog_" + a.uniqueId + "_end"))
        };
    ya.prototype.start = function(a, b) {
        if (!this.g) return null;
        var c = va() || ua();
        a = new wa(a, b, c);
        b = "goog_" + a.uniqueId + "_start";
        P() && N.mark(b);
        return a
    };
    var Ba = function() {
            var a = R;
            this.i = Aa;
            this.j = this.h;
            this.g = void 0 === a ? null : a
        },
        Ca = function(a, b, c, d) {
            try {
                if (a.g && a.g.g) {
                    var e = a.g.start(b.toString(), 3);
                    var f = c();
                    var g = a.g;
                    c = e;
                    if (g.g && "number" == typeof c.value) {
                        var m = va() || ua();
                        c.duration = m - c.value;
                        var k = "goog_" + c.uniqueId + "_end";
                        P() && N.mark(k);
                        g.g && g.h.push(c)
                    }
                } else f = c()
            } catch (h) {
                g = !0;
                try {
                    za(e), g = a.j.call(a, b, new S(V(h), h.fileName, h.lineNumber), void 0, d)
                } catch (p) {
                    a.h(217, p)
                }
                if (!g) throw h;
            }
            return f
        },
        W = function(a, b, c) {
            var d = Da;
            return function(e) {
                for (var f = [], g = 0; g < arguments.length; ++g) f[g - 0] = arguments[g];
                return Ca(d, a, function() {
                    return b.apply(void 0, f)
                }, c)
            }
        };
    Ba.prototype.h = function(a, b, c, d, e) {
        e = e || "jserror";
        try {
            var f = new K;
            f.j = !0;
            L(f, 1, "context", a);
            b.error && b.meta && b.id || (b = new S(V(b), b.fileName, b.lineNumber));
            b.msg && L(f, 2, "msg", b.msg.substring(0, 512));
            b.file && L(f, 3, "file", b.file);
            0 < b.line && L(f, 4, "line", b.line);
            var g = b.meta || {};
            if (d) try {
                d(g)
            } catch (T) {}
            b = [g];
            f.g.push(5);
            f.h[5] = b;
            g = u;
            b = [];
            var m = null;
            do {
                d = g;
                if (A(d)) {
                    var k = d.location.href;
                    m = d.document && d.document.referrer || null
                } else k = m, m = null;
                b.push(new na(k || ""));
                try {
                    g = d.parent
                } catch (T) {
                    g = null
                }
            } while (g && d != g);
            k = 0;
            for (var h = b.length - 1; k <= h; ++k) b[k].depth = h - k;
            d = u;
            if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (k = 1; k < b.length; ++k) {
                var p = b[k];
                p.url || (p.url = d.location.ancestorOrigins[k - 1] || "", p.s = !0)
            }
            var O = new na(u.location.href, !1);
            h = null;
            var U = b.length - 1;
            for (p = U; 0 <= p; --p) {
                var r = b[p];
                !h && la.test(r.url) && (h = r);
                if (r.url && !r.s) {
                    O = r;
                    break
                }
            }
            r = null;
            var Ga = b.length && b[U].url;
            0 != O.depth && Ga && (r = b[U]);
            var D = new ma(O, r);
            D.h && L(f, 6, "top", D.h.url || "");
            L(f, 7, "url", D.g.url || "");
            ta(this.i, e, f, c)
        } catch (T) {
            try {
                ta(this.i, e, {
                    context: "ecmserr",
                    rctx: a,
                    msg: V(T),
                    url: D.g.url
                }, c)
            } catch (Ha) {}
        }
        return !0
    };
    var V = function(a) {
            var b = a.toString();
            a.name && -1 == b.indexOf(a.name) && (b += ": " + a.name);
            a.message && -1 == b.indexOf(a.message) && (b += ": " + a.message);
            if (a.stack) {
                a = a.stack;
                var c = b;
                try {
                    -1 == a.indexOf(c) && (a = c + "\n" + a);
                    for (var d; a != d;) d = a, a = a.replace(/((https?:\/..*\/)[^\/:]*:\d+(?:.|\n)*)\2/, "$1");
                    b = a.replace(/\n */g, "\n")
                } catch (e) {
                    b = c
                }
            }
            return b
        },
        S = function(a, b, c) {
            J.call(this, Error(a), {
                message: a,
                file: void 0 === b ? "" : b,
                line: void 0 === c ? -1 : c
            })
        },
        X = S;
    X.prototype = aa(J.prototype);
    X.prototype.constructor = X;
    if (t) t(X, J);
    else
        for (var Y in J)
            if ("prototype" != Y)
                if (Object.defineProperties) {
                    var Ea = Object.getOwnPropertyDescriptor(J, Y);
                    Ea && Object.defineProperty(X, Y, Ea)
                } else X[Y] = J[Y];
    X.v = J.prototype;
    var Aa, Da;
    if (ha && !A(C)) {
        var Z = "." + x.domain;
        try {
            for (; 2 < Z.split(".").length && !A(C);) x.domain = Z = Z.substr(Z.indexOf(".") + 1), C = window.parent
        } catch (a) {}
        A(C) || (C = window)
    }
    var Q = C,
        R = new ya,
        Fa = function() {
            if (!Q.google_measure_js_timing) {
                var a = R;
                a.g = !1;
                a.h != a.i.google_js_reporting_queue && (P() && ca(a.h, za), a.h.length = 0)
            }
        };
    Aa = new function() {
        var a = void 0 === a ? y : a;
        this.j = "http:" === a.location.protocol ? "http:" : "https:";
        this.h = "pagead2.googlesyndication.com";
        this.i = "/pagead/gen_204?id=";
        this.g = .01
    };
    Da = new Ba;
    "complete" == Q.document.readyState ? Fa() : R.g && ea(Q, "load", function() {
        Fa()
    });
    F = function(a, b, c) {
        return W(a, b, c)
    };
    G = da;
    v("vu", W("vu", function(a) {
        a = a.replace("&amp;", "&");
        var b = /(google|doubleclick).*\/pagead\/adview/.test(a),
            c = I.h();
        if (b) {
            b = "&vis=" + E(c.g);
            var d = a.indexOf("&adurl");
            a = -1 == d ? a + b : a.substring(0, d) + b + a.substring(d)
        }
        c.j ? c.u(a) : c.i.push([a])
    }, void 0));
    v("vv", W("vv", function() {
        G && H(I.h())
    }, void 0));
}).call(this); < /script><script>vu("https:/ / securepubads.g.doubleclick.net / pcs / view ? xai\ x3dAKAOjssc2u8kxuWhrCV81w6dCw3srUF4bqQSU7TFdXAhdFTR7la6yIWT_ca9z6KCeD1je2WN8lF7HRSYBYLjqZxwClKiW4C3zuqYa6sOQu - gS53D6JC_W2GUFFRWbAMu6GGCZKxT8XkVDwcNP_gmZs - 8 ivnLM3Ru_Nxv1aXfD7Tv_GqafmjQ5frXPxAHRZE5emQxrRDSKdcH0MDMJY8NHe7j4jZVMMWWsWfZ1kzgi1Lvqn9CEdRTSp9BBGf_JFIgPrWFtP3v_w5RBVTjsxgw3ueGUzbPEnZ6O7hp\ x26sig\ x3dCg0ArKJSzFc0iTvvPyiSEAE\ x26urlfix\ x3d1\ x26adurl\ x3d ")</script><script type="
text / javascript ">
var crid = "434594251";
parent._mNDetails.show(crid, window); < /script> < script src = "https://tpc.googlesyndication.com/pagead/js/r20171108/r20110914/activeview/osd_listener.js" > < /script><script type="text/javascript
">osdlfm(-1,'','B5SKNUEcLWo_5MpGM6gT8m4SABQAAAAAQATgByAEJwAIC4AIA4AQBoAYW0ggFCIBhEAE','',1473161893,true,'ud\x3d1\x26la\x3d0\x26alp\x3dxai\x26alh\x3d1178224229\x26',3,'CAASBORoZmo','https://pagead2.googlesyndication.com/pcs/activeview?xai\x3dAKAOjstDw3r4m3X_VWegsASnj4cqzcEziUa7RAmqmCbru_2c8n62TqXzu7NKATsle1kPjBDx4ghgx82LpcidzACPrMD55sVfJrajE5I\x26sig\x3dCg0ArKJSzJ4NE4a3vt6gEAE');</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"
googMsgType ":"
adpnt "}','*');}</script><div style="
bottom: 0;
right: 0;
width: 300 px;
height: 250 px;
background: initial!important;
position: absolute!important;
max - width: 100 % !important;
max - height: 100 % !important;
pointer - events: none!important;
image - rendering: -moz - crisp - edges!important;
z - index: 2147483647;
background - image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB9SURBVBjTbZEBDoAwCAPLD/r/17pRKG6KyQzxwLMC/xUqrCumA5hP++z7ppIVXV0SZJ4b7c503PTsnu5lUjMycZGXN4qFzLWbrZsWbBrl3AOiS1gWVGuTaMq0Rdg+Q5dC6GXHV1Jrc8opTDDfBG01ecOZH/+ltkrf1hPLqgfPEgVidBnUsAAAAABJRU5ErkJggg==') !important "></div></body></html>
                                    

#15 JavaScript::Write (size: 352, repeated: 1) - SHA256: 2d0fb419c6d628f6e8014e1bc2e09b8330ce45e09c1a14dcb8e84be73273dbd8

                                        < iframe frameborder = "0"
allowtransparency = "true"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
width = "0"
hspace = "0"
vspace = "0"
height = "0"
style = "height:0px;width:0px"
src = "https://ads.pubmatic.com/AdServer/js/showad.js#PIX&kdntuid=1&SPug=true&p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D&it=0&np=0" > < /iframe>
                                    

#16 JavaScript::Write (size: 289, repeated: 1) - SHA256: a59348ea38a505274f6f88b9ee370c2f9ff55f966acd1a8542d209170951148c

                                        < iframe frameborder = "0"
allowtransparency = "true"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
width = "0"
hspace = "0"
vspace = "0"
height = "0"
style = "height:0px;width:0px;display:none;"
src = "https://router.infolinks.com/dyn/usersync?pmuservalue=63B4AFAE-918D-4EF5-9ECF-FFE914025054" > < /iframe>
                                    

#17 JavaScript::Write (size: 1401, repeated: 1) - SHA256: fa6f98e5a11695c6753dc373c5bd6a65cb32a5a7e0fc2e97e3f02229b6346bde

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "370"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5919730405305472&amp;output=html&amp;h=280&amp;slotname=3123702620&amp;adk=1795008180&amp;adf=807048394&amp;w=370&amp;fwrn=4&amp;lmt=1510688589&amp;loeid=38893313&amp;rafmt=1&amp;format=370x280&amp;url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;adsid=NT&amp;dt=1510688590947&amp;bpp=33&amp;fdt=45&amp;idt=287&amp;shv=r20171108&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=4301208494374&amp;frm=20&amp;ga_vid=1245908999.1510688592&amp;ga_sid=1510688592&amp;ga_hid=1970594101&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=592&amp;ady=374&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=62710011%2C62710014%2C38893303%2C21061122&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=839"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#18 JavaScript::Write (size: 155, repeated: 1) - SHA256: c5f586c222914cfb552a7147c1a239badce627110fefb17d12ccde3d59d251a5

                                        < iframe marginwidth = '0'
marginheight = '0'
scrolling = 'NO'
frameborder = '0'
height = '250'
width = '100%'
id = '_mN_main_434594251_0'
style = 'display:none;' > < /iframe>
                                    

#19 JavaScript::Write (size: 230, repeated: 1) - SHA256: 0450af531d313801af84901ec43d7cbef3215b6aceeb69fc00e4e269f7970b23

                                        < iframe src = 'https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#20 JavaScript::Write (size: 210, repeated: 1) - SHA256: 5f53405b62a3bd639987c71b898430b0b0eae3f9900e97c459677dfabf5208d9

                                        < iframe src = 'https://geo-um.btrll.com/v1/map_pixel/partner/1895.png'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#21 JavaScript::Write (size: 315, repeated: 1) - SHA256: d113f20f473bc68c807f46bb8780143f97cfe948c569c2be23df476d9766ecb4

                                        < iframe src = 'https://pubmatic-match.dotomi.com/pubmatic/match?rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xNTc2ODAw&piggybackCookie='
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#22 JavaScript::Write (size: 360, repeated: 1) - SHA256: fb9a2a458b3c55c57832cfbcd4aea53c7d04d3174b5be2d477d4b5e54e526f89

                                        < iframe src = 'https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA%3D%26piggybackCookie%3D%24%7BUSER_ID%7D'
width = '0'
height = '0'
frameborder = '0'
vspace = '0'
hspace = '0'
scrolling = 'no'
marginwidth = '0'
marginheight = '0'
allowtransparency = 'true' > < /iframe>
                                    

#23 JavaScript::Write (size: 236, repeated: 1) - SHA256: 377c4685762a05f000b214f1402e10e393e19c84c85681402b6d694500b6cc77

                                        < img width = '0'
height = '0'
src = 'https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]' / >
                                    

#24 JavaScript::Write (size: 200, repeated: 1) - SHA256: 9110ae5f7d165d3d7d37a1d70925b61e074be00d4e9a99da366a1aac5ae2d4f6

                                        < img width = '0'
height = '0'
src = 'https://p.rfihub.com/cm?in=1&pub=224&getuid=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw%26piggybackCookie%3D%24UID' / >
                                    

#25 JavaScript::Write (size: 182, repeated: 1) - SHA256: a2cab6c3efa3e144161da1824dbed42f5a078c3a9dc64a01e069094e8dd4b48d

                                        < img width = '0'
height = '0'
src = 'https://sync.mathtag.com/sync/img?mt_exid=3&redir=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D27%26partnerUID%3D%5BMM_UUID%5D' / >
                                    

#26 JavaScript::Write (size: 363, repeated: 1) - SHA256: 732d3c6597e39c4a38ab0db3f2f3ed04aec03251db9f604132802133cebc1b10

                                        < script language = "javascript"
type = "text/javascript"
id = "_mN_dy_434594251"
src = "http://contextual.media.net/fcmdynet.js?&cid=8CU3F87CL&cpcd=Ls-_BIqkwML9VVZt5CGDYw%3D%3D&crid=434594251&size=300x250&cc=NO&vif=1&requrl=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&nse=3&vi=1510688590362523968&lw=1&ugd=4&re=1&hlt=1&dfp=1&rtbs=1" > < /script>
                                    

#27 JavaScript::Write (size: 54, repeated: 1) - SHA256: e92dcda63f8bd3f927cc9026c3c11b745b4329c2664d58f2bda78e936854b479

                                        < script src = "//us-ads.openx.net/w/1.0/jstag" > < /script>
                                    

#28 JavaScript::Write (size: 179, repeated: 1) - SHA256: c36af19a9d689dc652cca81adc5ff6ac90f1707e05a05770999de34865de16cb

                                        < script type = "text/javascript"
src = "https://image6.pubmatic.com/AdServer/PugMaster?rnd=69385371&p=60809&s=0&a=0&ptask=ALL&np=0&fp=0&mpc=0&spug=1&coppa=0&sec=1&kdntuid=1" > < /script>
                                    

#29 JavaScript::Write (size: 214, repeated: 1) - SHA256: c2ceac77d8717aefd8961f303d139b76397c93bdd50c6d5309eda98e289ca937

                                        < script type = "text/javascript" >
    (function() {
        var hookId = location.search.substring(location.search.indexOf('?') + 8);
        top.postMessage(JSON.stringify({
            'message': 'FALLBACK',
            'hookId': hookId
        }), '*');
    })(); < /script>
                                    

#30 JavaScript::Write (size: 374, repeated: 1) - SHA256: c79dd06737614a749da9c78bfb54a1eda31bddaed626f2b14d1cb4e516ac694c

                                        < script type = 'text/javascript'
id = 'ox_acj_3489184258'
src = 'http://us-ads.openx.net/w/1.0/acj?o=3489184258&callback=OX_3489184258&ju=http%3A//freebiesfrenzy.com/sign-up/2017/06/30/peng630/&jr=&auid=537253288&dims=1176x754&adxy=0%2C0&res=1176x885x24&plg=swf%2Cpdf%2Cwmp%2Cshk%2Cpm&ch=UTF-8&tz=-60&ws=0x0&ifr=1&tws=1176x754'
onerror = 'OX_3489184258_onAdRequestError()' > < /script>
                                    

#31 JavaScript::Write (size: 875, repeated: 1) - SHA256: 5f2bb58da8230eaad40e85648e03f761f86e41cf7d4d7f3b15ec115bf453cb42

                                        < script type = 'text/javascript'
id = 'ox_acj_795496814'
src = 'http://us-ads.openx.net/w/1.0/acj?o=795496814&callback=OX_795496814&ju=http%3A//freebiesfrenzy.com/sign-up/2017/06/30/peng630/&jr=http%3A//freebiesfrenzy.com/sign-up/2017/06/30/peng630/&auid=538041896&dims=&adxy=&res=1176x885x24&plg=swf%2Cpdf%2Cwmp%2Cshk%2Cpm&ch=UTF-8&tz=-60&ws=300x250&ifr=1&r=http%3A//rt3010.infolinks.com/action/clk.htm%3Frid%3D59483c1a-b42d-46d2-b8b6-583220f3dbd6%26bdc%3D1%26midx%3D0%26rts%3D1510688594930%26vt%3D0%26clk_t%3DonWin%26jsv%3D1609.003.ab.1610.012%26prod_t%3Dc%26cv%3D0%26sdata%3D8%2520week%26scs%3DiFDMLz_F7t%26rsd%3DPRbl2tcsq-OrmBHTOtDbOUXORNCOgxxrJQ0TTyMjZzS9uBBLrbts3BkQC_kUyNYRcVpLNLB80WS-zQZWsaYeUDkEQEkXXt8GBvUDo9BsYn6BNqhnOSGuQjRBdhNSIf5blTNWcGo4GHnb6gplrS5VOdP9QF2FTHsk%26rsk%3D74%26rcs%3DZYOr3XeT4ztj0w40HcX1Sw%26rurl%3D'
onerror = 'OX_795496814_onAdRequestError()' > < /script>
                                    


HTTP Transactions (269)


Request Response
                                        
                                            GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.209.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33018
Date: Wed, 08 Nov 2017 11:17:19 GMT
Expires: Thu, 08 Nov 2018 11:17:19 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 548750


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33018
Md5:    d67fea647a9ff0d912549d69cf963267
Sha1:   3fae503c55d45fa707de03bd42c31f564e20e91c
Sha256: 9307813f2ee3a1a6e08a02829d6dd7a1652c4f8db7882416bb7859bbebc593bc
                                        
                                            GET /sign-up/2017/06/30/peng630/ HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
X-Powered-By: PHP/5.5.38
X-Pingback: http://freebiesfrenzy.com/sign-up/xmlrpc.php
Link: <http://freebiesfrenzy.com/sign-up/wp-json/>; rel="https://api.w.org/", <http://freebiesfrenzy.com/sign-up/?p=74409>; rel=shortlink
Content-Length: 24852
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:09 GMT
X-Varnish: 1349990502
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   24852
Md5:    87e6ff943c7d4ce760b1492162bec754
Sha1:   a92a55627b9a5a75d705163df1fc5d16efe43680
Sha256: 223376bee5162c6d2b8b75a734b05e9a83de2607027e63734f6f84c33839533f
                                        
                                            GET /js/ld/publishertag.js HTTP/1.1 
Host: static.criteo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         178.250.0.74
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Tue, 14 Nov 2017 19:43:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a00736a-ef13"
Expires: Wed, 15 Nov 2017 19:43:09 GMT
Cache-Control: max-age=86400, public
Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17307
Md5:    60f4e488db66cdaed261d0cc6c36ccd8
Sha1:   8cf264f98cb37a4d05d175b2fea8f23dc5e3c4f0
Sha256: 488575f53a510e21f19031fe3f98d8d8eada1cd8f12c60b15a42af94eac1223b
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/custom.css HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Fri, 24 Aug 2012 11:53:17 GMT
Etag: "55dacb-171-4c8019f1f6540"
Content-Length: 369
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:09 GMT
X-Varnish: 1349990520 1349989316
Age: 107
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   369
Md5:    910dfb9eabf9a8550c0ec90530a62541
Sha1:   b753ba263efa285d39d5298a7f6123741bd95c27
Sha256: 8429a1ad1c1e0fa438640b9f01c78edae1c5f96a2a9495756498dfdef715406b
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/style.css HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Mon, 23 Jul 2012 06:17:33 GMT
Etag: "55dac9-3baf-4c57933865940"
Content-Length: 15279
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:09 GMT
X-Varnish: 1349990518 1349989313
Age: 107
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  Lisp/Scheme program text
Size:   15279
Md5:    61a72487c1fe2d61c0d1b8bdbbbf0a9d
Sha1:   b38412bb933244a4bf5e6494500665bf9ea2c7b6
Sha256: 0eb1e802a6e85ab8a31742392ff93c2e5fccb8f60015144832d5666cf2b232b7
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/layout.css HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Sat, 01 Nov 2014 22:27:48 GMT
Etag: "55dacd-4477-506d39f96098b"
Content-Length: 17527
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:09 GMT
X-Varnish: 1349990519 1349989314
Age: 107
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  Lisp/Scheme program text
Size:   17527
Md5:    a92073b7664f7641b72c9eb3bae010e7
Sha1:   86e0c34308ebbd89306ed9f25ebc7c82422bd104
Sha256: 98825719f7ffa6e12b01369004fcb58ba0cd37167f30975badd9a18fe8aa85fe
                                        
                                            GET /e-201746.js HTTP/1.1 
Host: stats.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         192.0.78.26
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 14 Nov 2017 19:43:10 GMT
Content-Length: 178
Connection: keep-alive
Location: https://stats.wordpress.com/e-201746.js
X-ac: 3.arn _dca


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /js/infolinks_main.js?pid=2210098&wsid=0 HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         104.16.231.152
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 14 Nov 2017 19:43:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; expires=Wed, 14-Nov-18 19:43:10 GMT; path=/; domain=.infolinks.com; HttpOnly
Last-Modified: Mon, 13 Nov 2017 23:17:12 GMT
Etag: W/"c99-55de5786d3d26"
Cache-Control: max-age=3600
Expires: Tue, 14 Nov 2017 17:35:52 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc754783a24285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2021
Md5:    2fe956088960c1906cd0c90b9e1659c7
Sha1:   b6c2aa4c5fb80fec7b9670a4d7cdb07d678aa5d1
Sha256: aac5a88e54daf788a3895d4871ff810c1176c80ffa21f628dd87000103de92b9
                                        
                                            GET /pagead/show_ads.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 14 Nov 2017 19:43:10 GMT
Expires: Tue, 14 Nov 2017 19:43:10 GMT
Cache-Control: private, max-age=3600
Etag: 4195998014063843633
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 17890
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17890
Md5:    bfa877419273576b847fe64480740282
Sha1:   572c7fa588443dbc5cb80ebb50991b1a1b677123
Sha256: 4701e278916169e82bd3c9d042377e1988acc25d1bff578c12ac126ad64c52c9
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 14 Nov 2017 19:43:10 GMT
Expires: Tue, 14 Nov 2017 19:43:10 GMT
Cache-Control: private, max-age=3600
Etag: 13600419700103279051
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25017
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25017
Md5:    d89542049140502912236875e968c34b
Sha1:   6c438bf9e658e30a024c1cd424e89561c5f3a613
Sha256: 49828d9f009701e3dd86540b7b048c4628733c455b5f3bce695dc8e1cda9dc59
                                        
                                            GET /wp-content/themes/freebiesfrenzy/images/fb.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Mon, 20 Aug 2012 16:09:40 GMT
Etag: "5dde57-db8-4c7b4bca7d900"
Content-Length: 3512
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990533
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 34 x 31, 8-bit/color RGBA, interlaced
Size:   3512
Md5:    7ad41fdae5922d3f8a4ff937ab5491d5
Sha1:   b6f8bdcfb8ef0828a3bf180f094677cba4a461db
Sha256: 3c3804dedfa2ce7a3682d07a8511b1fa0856a3a213ccb72dba1fb3f26fde7d3b
                                        
                                            GET /wp-content/themes/freebiesfrenzy/images/tw.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Mon, 20 Aug 2012 16:09:40 GMT
Etag: "5dde7f-e48-4c7b4bca7d900"
Content-Length: 3656
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990534
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 34 x 31, 8-bit/color RGBA, interlaced
Size:   3656
Md5:    1ed7604dd31dc82ec64e171d2fc241cf
Sha1:   ed39a693f58e6e07a2ab717d04d7668d41a8556c
Sha256: a63c091f2f714bc49c447912d428225c36bb84601252d648fcc692fef07cb23f
                                        
                                            GET /a-00cf.min.js HTTP/1.1 
Host: b-code.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         54.230.62.222
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 14 Nov 2017 02:30:15 GMT
Last-Modified: Thu, 09 Nov 2017 11:12:42 GMT
Cache-Control: public, max-age=86400
x-amz-version-id: 0R0aUbWdU1OHTR.jmNNNl2fCfWtGAVrL
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 585
X-Cache: Hit from cloudfront
Via: 1.1 943ab292a0096b706fe263560805857e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: hLDBFnapAV7E9il9D2rmLVCM0NfOkedJOICzEMDls4sQqwjGbfzDgA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7659
Md5:    97d101206e46e1c7b69d9b7d62b04fcb
Sha1:   9bceeebdf39dd3031b656afe11aa99966a8c9f3a
Sha256: 83cf3cb4e163659f7889ad58ca645ce61bbef7dd057658f8e296fd18ff248c6a
                                        
                                            GET /sign-up/wp-includes/js/wp-emoji-release.min.js?ver=4.4.12 HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Fri, 06 May 2016 20:28:45 GMT
Etag: "55d591-848c-532324e3a7175"
Content-Length: 33932
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990531
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   33932
Md5:    b22ca0bb06142d867f03bd0d89642997
Sha1:   a9f118e35a8cb3a586a7741d63e3c3c7397838b5
Sha256: 40f0f2b6fb558157e1f065445b213802aae1d65e46cf436098844f0347cafb46
                                        
                                            GET /js/copush.min.js HTTP/1.1 
Host: copush.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         52.72.211.131
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 19:43:10 GMT
Etag: W/"5a090854-e363"
Last-Modified: Mon, 13 Nov 2017 02:49:56 GMT
Server: nginx/1.10.1
Vary: Accept-Encoding
Content-Length: 13031
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13031
Md5:    3ee45e1745ccab999670797530eb51ec
Sha1:   4757a9037349d6f87f24938362c00d7e78a5608c
Sha256: 7c4dc648c08bab22a6f43ceeb3c740159db8b5c55a72ec080812b6518c9dc7c0
                                        
                                            GET /sign-up/wp-includes/js/comment-reply.min.js?ver=4.4.12 HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Sun, 14 Feb 2016 00:51:19 GMT
Etag: "55f1f3-436-52bb04c610d6a"
Content-Length: 1078
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990535
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1078
Md5:    56bc2726d829207bfa802f957aac0791
Sha1:   5bf5c0a61359d8784c950b059e013aceea0d42f1
Sha256: 1b1ca0f15010e0124bd4ca481404643c88f7eda1b276e9554d0ed83fb45b7e30
                                        
                                            GET /wp-content/themes/freebiesfrenzy/images/gog.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Mon, 20 Aug 2012 16:09:40 GMT
Etag: "5dde5d-918-4c7b4bca7d900"
Content-Length: 2328
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990536
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 34 x 31, 8-bit/color RGBA, interlaced
Size:   2328
Md5:    4498c26185d6b6ef62df3a43a0ce171e
Sha1:   dba74a5814be35261bdd6e1cb8ef21128359e61d
Sha256: 20a71776880fc888518b3b09bf7fcd4acb60a4ce821ed36339307a51e6b1d793
                                        
                                            GET /sign-up/wp-includes/js/wp-embed.min.js?ver=4.4.12 HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Fri, 06 May 2016 20:28:45 GMT
Etag: "55d58f-57b-532324e3a7175"
Content-Length: 1403
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990537
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1403
Md5:    0203f8b4d98102d02f6a569c40a47d7b
Sha1:   ddbaca6c9c625beb5e018af6626fc12fea0d889e
Sha256: 892ecb8e84801900fbec1f9f340f9dd7d53a6444079d82dda76d41581c501891
                                        
                                            GET /wp-content/themes/freebiesfrenzy/images/yt.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Mon, 20 Aug 2012 16:09:39 GMT
Etag: "5dde82-ac3-4c7b4bc9896c0"
Content-Length: 2755
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990539
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 34 x 31, 8-bit/color RGBA, interlaced
Size:   2755
Md5:    ddefd097b1e065f95369f1bd33b9e5c6
Sha1:   d78984ad9217ee9ef86b3cbc5e468da4d7d71639
Sha256: 8ed9958858bc7ab175d68ee40dccfe2b61e952ddb63a8101ba5e01fd6b7e921e
                                        
                                            GET /button/buttons.js HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=259200
Content-Encoding: gzip
Etag: W/"59fa1aeb-d8e8"
Expires: Fri, 17 Nov 2017 19:41:05 GMT
Server: nginx/1.10.2
Content-Length: 15124
Date: Tue, 14 Nov 2017 19:43:10 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15124
Md5:    fdbbb35c19583794d2cb78b08869c036
Sha1:   d11f177b28d0a610cce7567d8855e9cd056122d8
Sha256: 4bccf677e060f7343b0588168fee503300967034b6c9ce928b4ca1ce63b298ff
                                        
                                            GET /button/async-buttons.js HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=259200
Content-Encoding: gzip
Etag: W/"59fa1b37-168f0"
Expires: Fri, 17 Nov 2017 19:40:50 GMT
Server: nginx/1.10.2
Content-Length: 19113
Date: Tue, 14 Nov 2017 19:43:10 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19113
Md5:    238601876a73319afad500520182b85b
Sha1:   ee0ef8f0a48a0e2c0f21b6a215a9fb421c14f159
Sha256: fb57972a4efe83471092b169f4ec067f79f473207216be002bfd23b504c01206
                                        
                                            GET /sign-up/wp-content/plugins/wp-post-navigator/assets/type1/2.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Thu, 13 Nov 2014 02:32:49 GMT
Etag: "53e8bb-396-507b454126a0c"
Content-Length: 918
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990547
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   918
Md5:    970e81abf9b31979c0e46682f0f95b64
Sha1:   de6433d4f3ee3b0b3c2b854658ba7768d52b7f6d
Sha256: 47bd756cde2fcdb56937ed4ee71ac61a468300f83e3b8521a89841a2e34d9ac2
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/images/logo.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Sat, 06 Apr 2013 06:19:30 GMT
Etag: "55dacf-a068-4d9ab2fb70080"
Content-Length: 41064
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990532
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 180 x 146, 8-bit/color RGBA, non-interlaced
Size:   41064
Md5:    6e01385649eddb2c336f95455afcb094
Sha1:   b9fc625a6719989218960a5c0362a719e3e2a45d
Sha256: 1d314761e9c8d5666c6ded35507caab1cdda0b4ddfa6d8b498d9b849e0deade7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:10 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=118121, public, no-transform, must-revalidate
Last-Modified: Tue, 14 Nov 2017 18:15:28 GMT
Expires: Thu, 16 Nov 2017 06:15:28 GMT
Etag: "e4c3535884d964a0e805b49047991eb9e7c4e2ad"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    b5ec355f5f94076702cedb0e0db7717b
Sha1:   e4c3535884d964a0e805b49047991eb9e7c4e2ad
Sha256: 3aff87a4da441a689b46774baf51bc63daa58aeb7dcf4ddbf4a0373be5688ae5
                                        
                                            GET /sign-up/wp-content/plugins/wp-post-navigator/assets/type1/1.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Thu, 13 Nov 2014 02:32:49 GMT
Etag: "53e8ba-2d9-507b454126a0c"
Content-Length: 729
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990546
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   729
Md5:    49112cab3c9b60d0c3f645a60e91e1b7
Sha1:   7e0ffa775e70fd1d5d47660b99a31afc03c94272
Sha256: 859a442f5472f92f6e8eee2ae6788b203efcafc2938bdabd6cf6f49ce9da7e86
                                        
                                            GET /sign-up/wp-content/plugins/wp-mobile-edition/assets/images/switch.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Sun, 14 Feb 2016 00:50:46 GMT
Etag: "5fd467-592-52bb04a6acc6b"
Content-Length: 1426
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990548
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 50 x 20, 8-bit/color RGBA, non-interlaced
Size:   1426
Md5:    9eca72e410d1b6754857ed3285f46e8b
Sha1:   9aca22a6cb0b6866247b25366b17c4a4c982040d
Sha256: de07962c3db454eff893f564b561917d5df4f5ca9b79411e1ba4b7c45b5f796f
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/base.css HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Wed, 23 Oct 2013 17:24:32 GMT
Etag: "55f322-1864-4e96bca523400"
Accept-Ranges: bytes, bytes
Content-Length: 6244
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990551
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C program text
Size:   6244
Md5:    3621dbea3886044528fe9911c3ef952e
Sha1:   8ca5e9591b701d44aac70d998e57bd5d68545e41
Sha256: 2fc94a9f32844684c892c9bbcf99af92f3aac008e7a90b2f3e4c1612748da809
                                        
                                            GET /sign-up/wp-content/uploads/2017/06/penguins630.jpg HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Fri, 30 Jun 2017 12:25:59 GMT
Etag: "61fd51-7cd6-5532c850882b5"
Content-Length: 31958
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990544
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   31958
Md5:    26a7a4ee8bfd836dd0bffa7ef9d556e4
Sha1:   6f67e2337102d4a65e375fd66c1d632ae1e10ece
Sha256: e32ebfe99c188f34cea480df16efd2ead7c6012988b34e29411a898756ac233e
                                        
                                            GET /nmedianet.js?cid=8CU3F87CL HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: Apache
X-MNET-H: E
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Tue, 14 Nov 2017 19:43:10 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:10 GMT
Content-Length: 36662
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   36662
Md5:    027cb96b3095816985dc4ea311718940
Sha1:   341b1f60a7bbc487604333a917a2329c8c613297
Sha256: 9a1098814af93bb36a469d0fa59b884fadb56b09478632a50925323fb1f804c1
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/themes/blue.css HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Wed, 25 Jul 2012 07:04:20 GMT
Etag: "55db45-707-4c5a216848500"
Accept-Ranges: bytes, bytes
Content-Length: 1799
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990553
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   1799
Md5:    cde7cbf33e3d88f799e685ab20ffaca4
Sha1:   36303dcbc5db4b8d20d7a35de915ac99d8495932
Sha256: d1842c33e84a7a471f7af32706c389bb71e6226722b702f48c7affe1f1cc16c5
                                        
                                            GET /e-201746.js HTTP/1.1 
Host: stats.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         192.0.78.26
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 14 Nov 2017 19:43:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5a09fff8-3297"
Expires: Wed, 14 Nov 2018 19:43:10 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-ac: 3.arn _dca
Strict-Transport-Security: max-age=15552000


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2895
Md5:    a62e5a9f7e07ea4d467b5514e699c920
Sha1:   3e67c04b962aa2b8432513bc844c0db5ccacd3db
Sha256: 9735fd50e3be6589f20127553fbfa4a00aabe5df0985607a410be4b9393e1b4d
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis//images/nav.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Thu, 30 May 2013 13:15:09 GMT
Etag: "55daf4-30dc-4ddef49a03140"
Accept-Ranges: bytes, bytes
Content-Length: 12508
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990555
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 879 x 80, 8-bit/color RGBA, non-interlaced
Size:   12508
Md5:    844d1665587b74f3321cf4703675470d
Sha1:   c460cece0e246eff12ab2544e352d14e10c59af6
Sha256: 08c6dc31ee419bdd620a7a80c75d6cd9367be2144fda907649117fb2577370ec
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:10 GMT
Expires: Sat, 18 Nov 2017 19:43:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    404386ee5f5cdb845a84d07408a1a074
Sha1:   865c34beca7ed886736766c6954b8865b0b7e935
Sha256: e00709c05ed82a090180d824f7523ee5db1282727e018960adc03a27524c4be9
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/lib/images/dot-ddd.gif HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/wp-content/themes/thesis_182/custom/layout.css
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Wed, 22 Feb 2012 16:18:28 GMT
Etag: "55db98-31-4b98fe0b0fd00"
Accept-Ranges: bytes, bytes
Content-Length: 49
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990556
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    c6e5cf05168114a944ebe4b589f05f52
Sha1:   946a20c7aa45d54c6f1723f9beef42ccfaf2b9a0
Sha256: 6b3804a3697b27baaa90c642726b902470d2968eff67b0c610a49f6126ade62f
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/images/bk-header.jpg HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/base.css
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Sat, 06 Apr 2013 13:07:24 GMT
Etag: "55dae8-541-4d9b0e27a9b00"
Accept-Ranges: bytes, bytes
Content-Length: 1345
Date: Tue, 14 Nov 2017 19:43:10 GMT
X-Varnish: 1349990557
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1345
Md5:    cd1e3d9c6200653ae91b95fcae91ee34
Sha1:   9c429ad240583b1f2343000f48236548e9db5ebc
Sha256: 4b907c35b2e0f98301410ffa75f127810727eb734bcc6be2057e1a4dab04a65a
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:10 GMT
Expires: Sat, 18 Nov 2017 19:43:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /InterYield/bindevent.do?e=click&affiliate=eliteweb&subid=SW&ecpm=0&debug=false&snoozeMinutes=3&adCountIntervalHours=24&maxAdCountsPerInterval=1&pop=under&attributionDisabled=true&endpoint=http%3A%2F%2Finteryield.td553.com HTTP/1.1 
Host: interyield.td553.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         104.16.2.104
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dcabc23d216e0b96d6d467c474c8ac3141510688590; expires=Wed, 14-Nov-18 19:43:10 GMT; path=/; domain=.td553.com; HttpOnly
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform, pre-check=0, post-check=0, private
Pragma: no-cache
P3P: CP='IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA'
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Language: en-US
Content-Encoding: gzip
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc754785634255-OSL


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1289
Md5:    b79dc063a84041e555cee381efec984e
Sha1:   2627f8665edbee9e0991924e5ccf8816041db119
Sha256: 0c3d61d57a2defe8b33b52c012faf8ae2614b1985c580bb6c9671d4ccf21a8b1
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:10 GMT
Expires: Sat, 18 Nov 2017 19:43:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    48cb62e68e982f0b85ed6671d2365656
Sha1:   eb759064b95db37bd7ee82fad1cfd184d9ed1ea6
Sha256: 0d6fd9680cecfaa3cee81da6b6cdff581c8c3ace36581913446c51e08ba02584
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:10 GMT
Expires: Sat, 18 Nov 2017 19:43:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6b8df898873de8e6fd0dc549f747e21a
Sha1:   acb34ac3447e6f3cc8c2f0ace4c4120f7ea91714
Sha256: c24085d475c1ac496a01f4ad671f040f0f93ecd713b57585127851b9778dd1a0
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=536986, public, no-transform, must-revalidate
Last-Modified: Tue, 14 Nov 2017 00:50:10 GMT
Expires: Tue, 21 Nov 2017 00:50:10 GMT
Date: Tue, 14 Nov 2017 19:43:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    4de03576e9416c587bec3f1c83e8d9c3
Sha1:   7e803bf8912b1a8d74779306169db4f383516cef
Sha256: 1083d3d337138ac311b21305d5d9dc6b4c3c26f94628b2ceba66d790fc0964bd
                                        
                                            GET /pub-config/r20160913/ca-pub-5919730405305472.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 14 Nov 2017 11:03:34 GMT
Expires: Tue, 14 Nov 2017 23:03:34 GMT
Last-Modified: Mon, 13 Nov 2017 21:47:49 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 31176
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /adsid/integrator.js?domain=freebiesfrenzy.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 19:43:10 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=freebiesfrenzy.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 19:43:10 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis//images/grey-navseps.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1

                                         
                                         64.91.254.4
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
X-Powered-By: PHP/5.5.38
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Location: http://freebiesfrenzy.com/sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/images/grey-navseps.png
Content-Length: 0
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:11 GMT
X-Varnish: 1349990554
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pagead/js/r20171108/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 14 Nov 2017 19:43:11 GMT
Expires: Tue, 14 Nov 2017 19:43:11 GMT
Cache-Control: private, max-age=1209600
Etag: 14897946533898315353
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67416
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67416
Md5:    c626577e4124fb6410e404a4e6430b73
Sha1:   e1fa20af286bd91571d3f638ec0104377d9f6134
Sha256: f57511831d09734aa02756df13d7bc89a943ed31bcd5811b57f5f10acec436a6
                                        
                                            GET /px.gif?ch=2&rn=1 HTTP/1.1 
Host: a.mnet-ad.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         91.135.34.32
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
Last-Modified: Wed, 19 Jul 2017 10:11:12 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: max-age=15737
Expires: Wed, 15 Nov 2017 00:05:28 GMT
Date: Tue, 14 Nov 2017 19:43:11 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   43
Md5:    6f1d74c7168076c7666246504a8c03f2
Sha1:   00656377deb1a4393e0cf0055385b08b2b81b46c
Sha256: 8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde
                                        
                                            GET /px.gif?ch=1&rn=1 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
Last-Modified: Wed, 19 Jul 2017 10:11:12 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: max-age=543720
Expires: Tue, 21 Nov 2017 02:45:11 GMT
Date: Tue, 14 Nov 2017 19:43:11 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   43
Md5:    6f1d74c7168076c7666246504a8c03f2
Sha1:   00656377deb1a4393e0cf0055385b08b2b81b46c
Sha256: 8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde
                                        
                                            GET /tag/js/gpt.js HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Content-Length: 72463
Date: Tue, 14 Nov 2017 19:43:11 GMT
Expires: Tue, 14 Nov 2017 19:43:11 GMT
Cache-Control: private, max-age=900, stale-while-revalidate=3600
Etag: "1510684214517668"
X-Content-Type-Options: nosniff
Link: <https://securepubads.g.doubleclick.net>; rel=preconnect
Server: sffe
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   72463
Md5:    27c2d9ee0a1947654c4b49b8b0678d57
Sha1:   9bf086f883564ca0fdd3887b7a3d267e9b2e227d
Sha256: 88eb7396f68ee7c8c8fb417624c2919fcb3a1262d3ceee843f529a9d3910b99b
                                        
                                            GET /bidexchange.js?cid=8CUEJ7059 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: Apache
Set-Cookie: visitor-id=1536901910021979000V10; Expires=Wed, 14 Nov 2018 19:43:11 GMT; domain=.media.net; Path=/;
X-MNET-H: E
P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Tue, 14 Nov 2017 19:43:11 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:11 GMT
Content-Length: 1039
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1039
Md5:    91e8e0eb11335371eba43879d1dba376
Sha1:   18ee316f15e0b1ee67de8a55d1d9e15cc498837f
Sha256: 78872f484e89beb2320265662df7a80b39b968f5c792fe1c300ef46f56128f07
                                        
                                            GET /rtbspub?&prid=8PRHGG6T9&cid=8CU3F87CL&crid=434594251&size=300x250&rp=3.00&vi=1510688590362523968&ugd=4&requrl=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&useAppData=1&hlt=1&tr=0.2763226530936511 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache
X-MNET-HL2: E
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Tue, 14 Nov 2017 19:43:11 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:11 GMT
Content-Length: 738
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   738
Md5:    35a9f86bed3d22f64a418c3236a74af1
Sha1:   3cd95f84de389576e2e40acad30db2d0cc3b8968
Sha256: 119422ba7136f50a26d6e175e8e9904e1194c479db6250b1b59205fdce48ccc5
                                        
                                            GET /checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache
Set-Cookie: visitor-id=1536901910021985000V10; Expires=Wed, 14 Nov 2018 19:43:11 GMT; domain=.media.net; Path=/;
X-MNET-HL2: E
P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=27146
Expires: Wed, 15 Nov 2017 03:15:37 GMT
Date: Tue, 14 Nov 2017 19:43:11 GMT
Content-Length: 4045
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4045
Md5:    964aa0e431af61053b2a64447b482ecd
Sha1:   0cef9a349e882addf738ab2a26a44013aa33f11a
Sha256: 90e7c597d77130f7b2335e522a41aaad3ba02ef0672d83ff662ec86fc3feb272
                                        
                                            GET /bping.php?prid=8PRHGG6T9&cid=8CU3F87CL&crid=434594251&vi=1510688590362523968&ugd=4&lf=6&requrl=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&kwrf=&cc=NO&sc=&vsid=undefined&r=1510688591058&lper=100&hvsid=00001510688591056012945002195776 HTTP/1.1 
Host: lg1.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
Content-Length: 35
Expires: Tue, 14 Nov 2017 19:43:11 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:11 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   35
Md5:    1999e39306fd1f40771738a876009394
Sha1:   15361c8444c509b66256e01e311a2676dac95739
Sha256: 0915fad60bc9b61b6dcd82d05da7ec4bc0232a647e75b8507c3cba6d4d6602f9
                                        
                                            GET /fcmdynet.js?&cid=8CU3F87CL&cpcd=Ls-_BIqkwML9VVZt5CGDYw%3D%3D&crid=434594251&size=300x250&cc=NO&vif=1&requrl=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&nse=3&vi=1510688590362523968&lw=1&ugd=4&re=1&hlt=1&dfp=1&rtbs=1 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: Apache
Set-Cookie: visitor-id=1536901910021928000V10; Expires=Wed, 14 Nov 2018 19:43:11 GMT; domain=.media.net; Path=/;
X-MNET-HL2: E
P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=300
Expires: Tue, 14 Nov 2017 19:48:11 GMT
Date: Tue, 14 Nov 2017 19:43:11 GMT
Content-Length: 11994
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   11994
Md5:    b8b8e2c46a106ea81e19d71436553125
Sha1:   8c313cdea6b8084828e7fa7dcd59382643da9e5a
Sha256: ca1e06c653a07265fbb5e5c44cffb3ce5f4d480c0608583ae36b982a090e827a
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/images/grey-navseps.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1; session_depth=freebiesfrenzy.com%3D1%7C434594251%3D1

                                         
                                         64.91.254.4
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
X-Powered-By: PHP/5.5.38
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Link: <http://freebiesfrenzy.com/sign-up/wp-json/>; rel="https://api.w.org/"
Content-Length: 18689
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:11 GMT
X-Varnish: 1349990565
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   18689
Md5:    b7fc0ab840259347c3b4bfb8dab7d135
Sha1:   a7c286cacfd1bb6ea48d3a67bbb9019594a15e20
Sha256: ca88edad73322a50546f065cdca36c245e33cc9803fd2149dd65d92a3691008d
                                        
                                            GET /log?logid=kfk&evtid=flog&cid=8CUEJ7059&r=2&a=1&td=&vsid=&cc=NO&requrl=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&td=adsvurl%3Dhttp%3A%2F%2F172.16.201.90%3A8001%2Fadserving%2Fadservingview%2F8CUEJ7059%2F%3Fdn%3Dall%26cc%3DNO%26ugd%3Ddesktop%26reqid%3D20494bcf-75a3-48c8-8ef6-7a3f7190d765 HTTP/1.1 
Host: qsearch.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021979000V10

                                         
                                         91.135.34.136
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
Access-Control-Allow-Origin: *
Content-Length: 35
Expires: Tue, 14 Nov 2017 19:43:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   35
Md5:    1999e39306fd1f40771738a876009394
Sha1:   15361c8444c509b66256e01e311a2676dac95739
Sha256: 0915fad60bc9b61b6dcd82d05da7ec4bc0232a647e75b8507c3cba6d4d6602f9
                                        
                                            GET /pagead/html/r20171108/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Mon, 13 Nov 2017 17:31:18 GMT
Expires: Mon, 27 Nov 2017 17:31:18 GMT
Etag: 1844729265854807198
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6789
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 94314
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6789
Md5:    294fc0121e8314d99d6a182d9df9a5cb
Sha1:   b38387df84d5750d63ab498f528540b087b36178
Sha256: 144a71c79ee1e3a690ae74448dbe0d4db6cf22b7ef04b9aa7e0b7f631a3cfa0c
                                        
                                            GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&r=http%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D2%26vsid%3D1536901910021985000V10%26type%3Dopx%26ovsid%3D HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1

                                         
                                         173.241.240.143
HTTP/1.1 302 Moved Temporarily
                                        
Set-Cookie: i=157bf9d3-6c25-4a38-91a6-cbac0ea9c851|1510688592; Version=1; Expires=Wed, 14-Nov-2018 19:43:12 GMT; Max-Age=31536000; Domain=.openx.net; Path=/
Server: OXGW/11.155.7
P3P: CP="CUR ADM OUR NOR STA NID"
Location: http://us-u.openx.net/w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&r=http%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D2%26vsid%3D1536901910021985000V10%26type%3Dopx%26ovsid%3D
Date: Tue, 14 Nov 2017 19:43:12 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /static/an/usersyncup-an.html HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590

                                         
                                         104.16.231.152
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 14 Nov 2016 12:31:04 GMT
Cache-Control: max-age=2592000
Expires: Thu, 14 Dec 2017 15:46:55 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc7555b1994285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   531
Md5:    b569328bbe519f2d9ddb6bf31bfafcd7
Sha1:   dffce5c9aed285c47b85a0d0cf2bfb98a19c8c22
Sha256: a61f8a9fd133a37c313978c9de14683e321b242a72e3fa414b07eee356065237
                                        
                                            GET /bh/rtset?pid=560210&ev=1&rurl=http%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D2%26vsid%3D1536901910021985000V10%26type%3Dppt%26ovsid%3D%25%25VGUID%25%25 HTTP/1.1 
Host: bh.contextweb.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1

                                         
                                         151.101.112.166
HTTP/1.1 302 Found
                                        
P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Set-Cookie: V=G7UMlRukldV9;Path=/;Domain=.contextweb.com;Expires=Fri, 09-Nov-2018 19:43:12 GMT;Max-Age=31104000 V=ryD9XidgLGJT;Path=/;Domain=.contextweb.com;Expires=Fri, 09-Nov-2018 19:43:12 GMT;Max-Age=31104000 pb_rtb_ev=3-jf2|7Fl.0.1;Path=/;Domain=.contextweb.com;Expires=Wed, 14-Nov-2018 19:43:12 GMT;Max-Age=31536000 sto-id-20480-bh=DIANNMAKJABP; Domain=contextweb.com; Expires=Tue, 14-Nov-2017 19:58:12 GMT; Path=/
Expires: -1
CW-Server: ams-bh01
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
Location: http://contextual.media.net/cksync.html?cs=2&vsid=1536901910021985000V10&type=ppt&ovsid=ryD9XidgLGJT&ev=1&pid=560210
Server: Jetty(9.4.6.v20170531)
Transfer-Encoding: chunked
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:12 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-hhn1527-HHN
X-Cache: MISS
X-Cache-Hits: 0


--- Additional Info ---
                                        
                                            GET /pagead/js/r20171108/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 13 Nov 2017 14:13:38 GMT
Expires: Mon, 27 Nov 2017 14:13:38 GMT
Etag: 4704686864894352291
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29470
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 106174
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29470
Md5:    ccccb075378ca70c241e9ce1ceff0cff
Sha1:   add6947bd8506e93552028e27d7affbdf89bb9af
Sha256: 61e03d3d3274f3290f53842ef4dc0e93c2dfca33b357a9027de0d106c77095a8
                                        
                                            GET /w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&r=http%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D2%26vsid%3D1536901910021985000V10%26type%3Dopx%26ovsid%3D HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: i=157bf9d3-6c25-4a38-91a6-cbac0ea9c851|1510688592

                                         
                                         173.241.240.143
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Vary: Accept
Set-Cookie: i=157bf9d3-6c25-4a38-91a6-cbac0ea9c851|1510688592; Version=1; Expires=Wed, 14-Nov-2018 19:43:12 GMT; Max-Age=31536000; Domain=.openx.net; Path=/
Server: OXGW/11.155.7
P3P: CP="CUR ADM OUR NOR STA NID"
Location: http://contextual.media.net/cksync.php?cs=2&vsid=1536901910021985000V10&type=opx&ovsid=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970
Date: Tue, 14 Nov 2017 19:43:12 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /embed.js HTTP/1.1 
Host: freebiesfrenzymembers.disqus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         151.101.112.134
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: Varnish
Location: https://freebiesfrenzymembers.disqus.com/embed.js
Cache-Control: public, max-age=31536000
Content-Length: 219
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: close
Strict-Transport-Security: max-age=300; includeSubdomains
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect


--- Additional Info ---
Magic:  HTML document text
Size:   219
Md5:    6b22a8f71ae72ac4b781cff49386dfa9
Sha1:   a8e7202517458752851aeb18c9fb770e931fec34
Sha256: 186d5321baf20106cb6361d9ec524b818d876d773a5bd9dd5530ae5889d74be3
                                        
                                            GET /js/1609.003.ab.1610.012/ice.js HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590

                                         
                                         104.16.231.152
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 14 Nov 2017 19:43:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 13 Nov 2017 15:07:57 GMT
Etag: W/"8801c-55ddea2b31267"
Cache-Control: max-age=2592000
Expires: Thu, 14 Dec 2017 19:12:16 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc7555f20d4297-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   158147
Md5:    33ef3a90654dc74e863c02105da9916e
Sha1:   b634a67f168097c93d11e6d9253b8c331086ea3f
Sha256: 23fb0d36adbb228c83cc09215fb6a97de0bb4652ab0f5336a5357d3d3ee1007a
                                        
                                            GET /adsid/integrator.js?domain=freebiesfrenzy.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 19:43:12 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /kbb.php?cme=Jhv3iRKtcIXnip7c9MCQh_I7VVO2KmwIX_BbHun1MQcW7Nj2stiar7NOwwiHNUM6y3jj9TfyqdY1jo9uUfbhR2ALItH4N45YJzCQ8ZvLi9IqhmvZ9pY2Hcwn_QdlOekax2EJkQc1qzI%3D%7C%7CNDHRnZ9Gz3KXlI-i9OnZqQ%3D%3D%7C5gDUJdTGiJzedmq9hanWYg%3D%3D%7CN7fu2vKt8_s%3D%7CFcl4VLL-IaL66CD3I4vf4jDs6HVWwiFNwZDV5mKMwIssEhaCy7IY3guQvVbLepR7LCGKlq2T6wk%3D%7CsRBSg3CPSiQ%3D%7C&srp=ZPL-DvhZL6sQHMsZnBlBF4tvXFDL-wbH8t2hgIHUh3l19CKWfA6Vd2CWZF_PbE9_&klp=zqX7dQzVwMRuAF5GuEwH3DDkBavsrkByu38lIIJxljgs7J1fcuuFdMEyG1tAijg26YXXSkFBGqQYzURlvJ3WI_pCvVAAPHN5llS5ieQXEkAOzku66vus10DOnXVPIaBZZM60o3-9YDPHeBDxadHlDzCci58TI1WhJTN1Jc2cMaJ6BhpOx9PB8HF0sQMRXd8D3vuXb--9OdhMfu9n2TjqAx5QviZ-kSd0NAewpWi95AzkbaOvJUditNwsoYVVOz5UoUcgWHvnaUM%3D&nse=3&bid=195032&cb=resultPageUtil.kwdRandmzn[%271510688590362523968%27] HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021928000V10; data=|||||||||||||||||||||

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: Apache
X-MNET-KBB: E2
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Tue, 14 Nov 2017 19:43:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:12 GMT
Content-Length: 511
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   511
Md5:    da513261d6b2faad97d7c5527f82283e
Sha1:   b315a30277c9c37cc14a725cacad75ede0031f52
Sha256: f3ce9890693da25d2d48a9a7ac9fd279ff6ee16e5e77c896af24e781fb9f8380
                                        
                                            GET /sync/user?cb=CACHE_BUSTER&pid=m14328&url=http%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D2%26vsid%3D1536901910021985000V10%26type%3Dc1x%26ovsid%3D%24C1XUID HTTP/1.1 
Host: sync.c1exchange.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1

                                         
                                         18.216.114.70
HTTP/1.1 302 Found
                                        
Location: http://pixel.mathtag.com/sync/img?redir=http://sync.c1exchange.com%2Fsync%2Fuser%3Fk%3Dmmuuid%26v%3D%5BMM_UUID%5D%26no_iframe%3D1%26pid%3Dm14328%26s%3DaHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA%3D%3D
Set-Cookie: uid=9EFD424EF9D341BB82B64D5926E94B28;Expires=Wed, 14-Nov-2018 19:43:15 GMT;domain= .c1exchange.com;path=/;
X-RID: 9c8535bd-5183-48cd-aab1-734a5e22d471
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /mediamain.html?&cid=8CU3F87CL&cpcd=Ls-_BIqkwML9VVZt5CGDYw%3D%3D&crid=434594251&pid=8POSF2GM3&size=300x250&cpnet=yVb1sHm-0KIh29BOFTjjrC2CRQi6BSP2lX6tX2JKGec%3D&cme=Jhv3iRKtcIXnip7c9MCQh_I7VVO2KmwIX_BbHun1MQcW7Nj2stiar7NOwwiHNUM6y3jj9TfyqdY1jo9uUfbhR2ALItH4N45YJzCQ8ZvLi9IqhmvZ9pY2Hcwn_QdlOekax2EJkQc1qzI%3D%7C%7CNDHRnZ9Gz3KXlI-i9OnZqQ%3D%3D%7C5gDUJdTGiJzedmq9hanWYg%3D%3D%7CN7fu2vKt8_s%3D%7CFcl4VLL-IaL66CD3I4vf4jDs6HVWwiFNwZDV5mKMwIssEhaCy7IY3guQvVbLepR7LCGKlq2T6wk%3D%7CsRBSg3CPSiQ%3D%7C&cc=NO&bf=0&vif=1&nse=3&bid=195032&vi=1510688590362523968&lw=1&ugd=4&ib=0&nb=1 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache
X-MNET-HL3: E
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=300
Expires: Tue, 14 Nov 2017 19:48:12 GMT
Date: Tue, 14 Nov 2017 19:43:12 GMT
Content-Length: 12420
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   12420
Md5:    882d65973ad9125d122d1b4bb98a9fae
Sha1:   b833932c90f1e35b03d80771ce269e507f4f5cc8
Sha256: c338392127a4e308c906437119bdf6e7c5af732e7deea0b5d40da04d0a734729
                                        
                                            GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FFreebiesFrenzy&width=185&height=88&colorscheme=light&show_faces=true&border_color&stream=false&header=false&appId=220912941266360 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         31.13.91.36
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FFreebiesFrenzy&width=185&height=88&colorscheme=light&show_faces=true&border_color&stream=false&header=false&appId=220912941266360
X-FB-Debug: ISbJBGSeD5IyEQa3GckHCOR/LabmJAEuV0RjL79LSW2sJ3OSJ4fxPJ/rHpRK4N68ge/1jriCc+VEmwf3W3Fmjg==
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /hmmaster.js?cid=8CU3F87CL&p=cm&v=3.0.2&hm=1&sm=1&alt=1&adt=1 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021928000V10; data=|||||||||||||||||||||

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=300
Date: Tue, 14 Nov 2017 19:43:12 GMT
Content-Length: 12808
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   12808
Md5:    dba835835c481af44b83f6d395c40c19
Sha1:   ad5ec7190ea0d40cc04801a74e80f8a9521149a2
Sha256: 562f6b6b86519c3dbdd8906e42063a776a06107f70bfbca378d3707323c97b8f
                                        
                                            GET /pagead/ads?client=ca-pub-5919730405305472&output=html&h=280&slotname=3123702620&adk=1795008180&adf=807048394&w=370&fwrn=4&lmt=1510688589&loeid=38893313&rafmt=1&format=370x280&url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1510688590947&bpp=33&fdt=45&idt=287&shv=r20171108&cbv=r20170110&saldr=aa&correlator=4301208494374&frm=20&ga_vid=1245908999.1510688592&ga_sid=1510688592&ga_hid=1970594101&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=592&ady=374&biw=1159&bih=754&abxe=1&eid=62710011%2C62710014%2C38893303%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=839 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 19:43:12 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 14-Nov-2017 19:58:12 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 14 Nov 2017 19:43:12 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6972
Md5:    1139f6c7bf51c76e1c34ae44defd02e8
Sha1:   204e256b8c0f2c229e1cefad8cb13c27a7ba6a29
Sha256: 415fedb7e621b8e956caae40d1c7276ed1e5298a57c1876e9b1369c0d0536b29
                                        
                                            GET /count.js HTTP/1.1 
Host: freebiesfrenzymembers.disqus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         151.101.112.134
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: Varnish
Location: https://freebiesfrenzymembers.disqus.com/count.js
Cache-Control: public, max-age=31536000
Content-Length: 219
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: close
Strict-Transport-Security: max-age=300; includeSubdomains
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect


--- Additional Info ---
Magic:  HTML document text
Size:   219
Md5:    6b22a8f71ae72ac4b781cff49386dfa9
Sha1:   a8e7202517458752851aeb18c9fb770e931fec34
Sha256: 186d5321baf20106cb6361d9ec524b818d876d773a5bd9dd5530ae5889d74be3
                                        
                                            GET /_js/ajs.js HTTP/1.1 
Host: cdn2.lockerdome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         54.230.62.147
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
Etag: "4537-1510354920000"
Date: Sat, 11 Nov 2017 00:38:34 GMT
Cache-Control: public, max-age=86400
Last-Modified: Fri, 10 Nov 2017 23:02:00 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 68676
X-Cache: Hit from cloudfront
Via: 1.1 927a3427ba81af10648ebd16775e720d.cloudfront.net (CloudFront)
X-Amz-Cf-Id: jPntke98JX71QLKI4deX0VYYPuRi65IGUeED2YCI2rKjMdSNqG91uQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1983
Md5:    a404d6eb0b59d85aedb19611e6ca6bff
Sha1:   5bf5d30c472000758147af9d4bbe863628bbe201
Sha256: b812dc662ae9daf51d3b4c42c4cddd3b5b431ba55486c99cde85e77d3358ff13
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=392036, public, no-transform, must-revalidate
Last-Modified: Sun, 12 Nov 2017 08:33:42 GMT
Expires: Sun, 19 Nov 2017 08:33:42 GMT
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    5fdeb5e42da313efef50ae4a8a08cc79
Sha1:   45f33d94dd777b27871a0854ff97cefbeed1052c
Sha256: e9ba110dc2cf97676760b88110e4874daf2cdf1df80f77517f8fef1b8a925dfa
                                        
                                            GET /sync/img?redir=http://sync.c1exchange.com%2Fsync%2Fuser%3Fk%3Dmmuuid%26v%3D%5BMM_UUID%5D%26no_iframe%3D1%26pid%3Dm14328%26s%3DaHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA%3D%3D HTTP/1.1 
Host: pixel.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1

                                         
                                         104.123.117.161
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Content-Length: 0
Cache-Control: no-cache
Location: http://pixel.mathtag.com/sync/img?redir=http://sync.c1exchange.com%2Fsync%2Fuser%3Fk%3Dmmuuid%26v%3D%5BMM_UUID%5D%26no_iframe%3D1%26pid%3Dm14328%26s%3DaHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA%3D%3D&mm_bnc&mm_bct
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.19.0 3a17b0a release cdg-pixel-x1
Expires: Tue, 14 Nov 2017 19:43:11 GMT
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive
Set-Cookie: uuid=33885a0b-40bf-4900-b2f5-aa919be582b6; domain=.mathtag.com; path=/; expires=Wed, 12-Dec-2018 19:43:12 GMT


--- Additional Info ---
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/images/bg-posts.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/base.css
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1; session_depth=freebiesfrenzy.com%3D1%7C434594251%3D1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Wed, 22 Feb 2012 16:19:02 GMT
Etag: "55dae7-9b-4b98fe2b7c980"
Accept-Ranges: bytes, bytes
Content-Length: 155
Date: Tue, 14 Nov 2017 19:43:12 GMT
X-Varnish: 1349990573
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 1 x 38, 8-bit/color RGB, non-interlaced
Size:   155
Md5:    b615cf2119b10717f8fc6ee45a420016
Sha1:   4bd6e5fe6884ce26ff666e13534a0b27b3014fd3
Sha256: 06041f678731d9292168e1030ab84e08f0545e8d70949632c8230b45387fcd75
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/themes/images/blue-bgtop.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/themes/blue.css
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1; session_depth=freebiesfrenzy.com%3D1%7C434594251%3D1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Sat, 21 Jul 2012 18:08:33 GMT
Etag: "55db52-b0c-4c55ae6938a40"
Accept-Ranges: bytes, bytes
Content-Length: 2828
Date: Tue, 14 Nov 2017 19:43:12 GMT
X-Varnish: 1349990574
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 1 x 35, 8-bit/color RGBA, non-interlaced
Size:   2828
Md5:    bbb77a685bcde8ac52f78985ff1ebb0d
Sha1:   00df62c5ca5e0810eefda0cffc51b7fa8568ad53
Sha256: 553aa0f2b7160ab1d4a19e6eb3c382cba9284e9d70bd4c6123ea7e1a2f4c57ba
                                        
                                            GET /cksync.html?cs=2&vsid=1536901910021985000V10&type=ppt&ovsid=ryD9XidgLGJT&ev=1&pid=560210 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Server: Apache
Content-Length: 31
Set-Cookie: data-p=ryD9XidgLGJT~~2;Expires=Tue, 30 Oct 2018 19:43:12 GMT;path=/;domain=.media.net
P3P: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
Vary: Accept-Encoding
Expires: Tue, 14 Nov 2017 19:43:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   31
Md5:    471e407d67d763ca3473bc0b5b1bbfb6
Sha1:   c474148cbf2264b462cbad81ecaba059d3afd4c8
Sha256: f8785fcff7e2370fc1cecbafece8d8e003d3d5ac283a8571ddfbee31499c6f8a
                                        
                                            GET /videoAds.js?cid=8CU3F87CL&crid=661184511&dn=freebiesfrenzy.com HTTP/1.1 
Host: adservetx.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Set-Cookie: visitor-id=1536901910021923000V10; Expires=Wed, 14 Nov 2018 19:43:11 GMT; domain=.media.net; Path=/;
Vary: Accept-Encoding
P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
Content-Encoding: gzip
Cache-Control: max-age=258
Expires: Tue, 14 Nov 2017 19:47:29 GMT
Date: Tue, 14 Nov 2017 19:43:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   41853
Md5:    d81fe1a106a15f20d37db33d6831029e
Sha1:   0e1e65c3878cc1c90e20959e6f1e20e9b00e84d3
Sha256: 3ffe4ce7309f25e7536d01ffecd0776fc005aabe66d5a12ff09ab36038f605ca
                                        
                                            GET /sync/img?redir=http://sync.c1exchange.com%2Fsync%2Fuser%3Fk%3Dmmuuid%26v%3D%5BMM_UUID%5D%26no_iframe%3D1%26pid%3Dm14328%26s%3DaHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA%3D%3D&mm_bnc&mm_bct HTTP/1.1 
Host: pixel.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: uuid=33885a0b-40bf-4900-b2f5-aa919be582b6

                                         
                                         104.123.117.161
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Content-Length: 0
Cache-Control: no-cache
Location: http://sync.c1exchange.com/sync/user?k=mmuuid&v=33885a0b-40bf-4900-b2f5-aa919be582b6&no_iframe=1&pid=m14328&s=aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA==
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.19.0 3a17b0a release cdg-pixel-x13
Expires: Tue, 14 Nov 2017 19:43:11 GMT
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive
Set-Cookie: uuidc=1dQdxy/ddQZXQ351dlLG/95IGDK/Zqy73utj4YoAbZYaU9X9H1JQX14uG8LUtaplEczkq8T0K+M9ZgdpWi+GmWJRVadY+TVVscLGFneTwN4=; Expires=Wed, 12-Dec-18 19:43:12 GMT; Domain=.mathtag.com; Path=/


--- Additional Info ---
                                        
                                            GET /gsd?evt=afterGSD&pid=2210098&wsid=0&pdom=freebiesfrenzy.com&purl=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&jsv=1609.003.ab.1610.012&_cb=15106885926510 HTTP/1.1 
Host: router.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590

                                         
                                         104.16.231.152
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: max-age=0
P3P: CP="NON DSP NID OUR COR"
Set-Cookie: cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc; Domain=infolinks.com; Expires=Thu, 14-Nov-2019 19:43:12 GMT; Path=/
Via: 1.1 google
Server: cloudflare-nginx
CF-RAY: 3bdc7558d3a14279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   262
Md5:    cd13c67920a1169e975c5cae37d6fd77
Sha1:   45883f4d4ebde33df6d4250ac7b9dbffd88f42c5
Sha256: f0fd598bedf3400e3083c5472e0f02a691f58b16ca36b7a7bc2bfdf4b8dbf281
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:12 GMT
Server: Apache
Last-Modified: Mon, 13 Nov 2017 15:26:28 GMT
Expires: Mon, 20 Nov 2017 15:26:28 GMT
Etag: E90D7915CB8D8F5571313FA4050233A25E740F1D
Cache-Control: max-age=502395,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp14
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    be7f652e7da0a27dc380693f0f172e21
Sha1:   e90d7915cb8d8f5571313fa4050233a25e740f1d
Sha256: af4a408ede2e5e7f85437737cb1bd09ffb8324f438c725fcff27d42e48266d5c
                                        
                                            GET /cksync.php?cs=2&vsid=1536901910021985000V10&type=opx&ovsid=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
Content-Length: 46
Set-Cookie: data-o=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970~~2;Expires=Tue, 13 Nov 2018 19:43:12 GMT;path=/;domain=.media.net
P3P: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
Expires: Tue, 14 Nov 2017 19:43:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   46
Md5:    2b3926102ae959b5840a515efdc8af98
Sha1:   6674f6938731741005c6a2af568fd65a752b24f6
Sha256: 579a172ca2c700734ebcfa06d105a134f31ec2357660e58e0874cfdee8472fd4
                                        
                                            GET /g.gif?blog=53399545&v=ext&post=74409&host=freebiesfrenzy.com&ref=&rand=0.18382468307484945 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         192.0.76.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 14 Nov 2017 19:43:13 GMT
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /mapuid?member=3251&user=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://resources.infolinks.com/static/an/usersyncup-an.html

                                         
                                         37.252.172.27
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Tue, 14 Nov 2017 19:43:15 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fmapuid%3Fmember%3D3251%26user%3D2ad5e525-0e06-4916-9b1d-a8dcac5e36bc
AN-X-Request-Uuid: 6002e7fb-f2bb-4226-b04e-4b0e0c34e183
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Wed, 15-Nov-2017 19:43:15 GMT; Domain=.adnxs.com; HttpOnly uuid2=6498344755793828076; Path=/; Max-Age=7776000; Expires=Mon, 12-Feb-2018 19:43:15 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 153.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.79:80


--- Additional Info ---
                                        
                                            GET /dc.js HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: test_cookie=CheckForPermission

                                         
                                         64.233.162.154
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Tue, 14 Nov 2017 18:10:13 GMT
Expires: Tue, 14 Nov 2017 20:10:13 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17097
Cache-Control: public, max-age=7200
Age: 5580


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17097
Md5:    e87394fa07bb9bd4a8e654e7038940f0
Sha1:   b0634dcf6cf8a79c053539aa127a6356463cfa2b
Sha256: 7d066315a55b9a3006b655cb7e9210daba369d9c56ad751f061612c4078d987a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Server: Apache
Last-Modified: Mon, 13 Nov 2017 11:43:12 GMT
Expires: Mon, 20 Nov 2017 11:43:12 GMT
Etag: 38AECE6488FC634407F671B09894726B2AB6AAD0
Cache-Control: max-age=488998,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp7
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    c3ee58e7a1c03ea5799eac0b7af6bd96
Sha1:   38aece6488fc634407f671b09894726b2ab6aad0
Sha256: c3b7de2e10883ec6e6a031115df42f210fc4adbe19c5ea2887d29d89b3c6369a
                                        
                                            GET /bounce?%2Fmapuid%3Fmember%3D3251%26user%3D2ad5e525-0e06-4916-9b1d-a8dcac5e36bc HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://resources.infolinks.com/static/an/usersyncup-an.html
Cookie: sess=1; uuid2=6498344755793828076

                                         
                                         37.252.172.27
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Tue, 14 Nov 2017 19:43:15 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 3e69918e-2f1d-493e-942b-a53d39d73066
Set-Cookie: anj=dTM7k!M4/8DYRWSF']wIg2GU%rbC_N!]tbPB*SQLOsH`E.g3VsOCoiS; Path=/; Max-Age=7776000; Expires=Mon, 12-Feb-2018 19:43:15 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 15-Nov-2017 19:43:15 GMT; Domain=.adnxs.com; HttpOnly uuid2=6498344755793828076; Path=/; Max-Age=7776000; Expires=Mon, 12-Feb-2018 19:43:15 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 153.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.132:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /sync/user?k=mmuuid&v=33885a0b-40bf-4900-b2f5-aa919be582b6&no_iframe=1&pid=m14328&s=aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA== HTTP/1.1 
Host: sync.c1exchange.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: uid=9EFD424EF9D341BB82B64D5926E94B28

                                         
                                         18.216.114.70
HTTP/1.1 302 Found
                                        
Location: http://bh.contextweb.com/bh/rtset?pid=561242&ev=1&daaqp=1&rurl=http://sync.c1exchange.com%2Fsync%2Fuser%3Fk%3Dppuuid%26v%3D%25%25VGUID%25%25%26pid%3Dm14328%26s%3DaHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA
Set-Cookie: mmuuid=33885a0b-40bf-4900-b2f5-aa919be582b6;Expires=Wed, 14-Nov-2018 19:43:13 GMT;domain= .c1exchange.com;path=/;
X-RID: 341a1200-1142-453e-bd16-5e00cf51645a
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /r/__utm.gif?utmwv=5.7.1dc&utms=1&utmn=824743381&utmhn=freebiesfrenzy.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=FREE%20Plush%20Penguin%20From%20Penguins%20For%20Everyone&utmhid=1970594101&utmr=-&utmp=%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&utmht=1510688593265&utmac=UA-2227731-18&utmcc=__utma%3D17615214.1245908999.1510688592.1510688592.1510688592.1%3B%2B__utmz%3D17615214.1510688593.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=479722279&utmredir=3&utmu=qAAAAAAAAAAAAAAAAAQAAAAE~ HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: test_cookie=CheckForPermission

                                         
                                         64.233.162.154
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Tue, 14 Nov 2017 19:43:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            OPTIONS /action/doq.htm?pcode=utf-8&r=15106885929951 HTTP/1.1 
Host: rt3010.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://freebiesfrenzy.com
Access-Control-Request-Method: POST

                                         
                                         104.16.230.152
HTTP/1.1 200 OK
Content-Type: text/plain;charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: __cfduid=d244addf59ec81b14894359d5920b780e1510688593; expires=Wed, 14-Nov-18 19:43:13 GMT; path=/; domain=.infolinks.com; HttpOnly
X-Application-Context: application:prod
Access-Control-Allow-Origin: http://freebiesfrenzy.com
Vary: Origin
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Cache-Control: no-cache,no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
Server: cloudflare-nginx
CF-RAY: 3bdc755b526542a9-OSL


--- Additional Info ---
                                        
                                            GET /bh/rtset?pid=561242&ev=1&daaqp=1&rurl=http://sync.c1exchange.com%2Fsync%2Fuser%3Fk%3Dppuuid%26v%3D%25%25VGUID%25%25%26pid%3Dm14328%26s%3DaHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA HTTP/1.1 
Host: bh.contextweb.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: V=ryD9XidgLGJT; pb_rtb_ev=3-jf2|7Fl.0.1; sto-id-20480-bh=DIANNMAKJABP

                                         
                                         151.101.112.166
HTTP/1.1 302 Found
                                        
P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Set-Cookie: V=ryD9XidgLGJT;Path=/;Domain=.contextweb.com;Expires=Fri, 09-Nov-2018 19:43:13 GMT;Max-Age=31104000 pb_rtb_ev=3-jf2|7VZ.0.1|7Fl.0.1;Path=/;Domain=.contextweb.com;Expires=Wed, 13-Dec-2017 19:43:13 GMT;Max-Age=2505600
Expires: -1
CW-Server: ams-bh01
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
Location: http://sync.c1exchange.com/sync/user?k=ppuuid&v=ryD9XidgLGJT&pid=m14328&s=aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA
Server: Jetty(9.4.6.v20170531)
Transfer-Encoding: chunked
Accept-Ranges: bytes
Date: Tue, 14 Nov 2017 19:43:13 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-hhn1524-HHN
X-Cache: MISS
X-Cache-Hits: 0


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Server: Apache
Last-Modified: Mon, 13 Nov 2017 11:43:12 GMT
Expires: Mon, 20 Nov 2017 11:43:12 GMT
Etag: 6F15D70331A2933F6ECD99291D030B2E4ADCB2D8
Cache-Control: max-age=488998,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp7
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f72d96d14294cadcc7fdedfb5c81044e
Sha1:   6f15d70331a2933f6ecd99291d030b2e4adcb2d8
Sha256: 3dc2787bf96a195e82489b3a58b9bb523d69de45de845dfb3f80cc5b28f0d03b
                                        
                                            GET /sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/themes/images/footerbg.png HTTP/1.1 
Host: freebiesfrenzy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/wp-content/themes/thesis_182/custom/skins/tt-easythesis/themes/blue.css
Cookie: __unam=48aca6e-15fbc0e89df-3366beb5-1; session_depth=freebiesfrenzy.com%3D1%7C434594251%3D1

                                         
                                         64.91.254.4
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
Last-Modified: Mon, 23 Jul 2012 06:01:10 GMT
Etag: "55db59-1e052-4c578f8eef580"
Accept-Ranges: bytes, bytes
Content-Length: 122962
Date: Tue, 14 Nov 2017 19:43:12 GMT
X-Varnish: 1349990575
Age: 0
Via: 1.1 varnish
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 246 x 425, 8-bit/color RGBA, non-interlaced
Size:   122962
Md5:    c3a2dc2c06fb903497b0c8dbc47f9746
Sha1:   86d5fd6c8fa8a38e17b2afbab2c0a526a05ce9c7
Sha256: c22ecd5934d1b17f00a41063a9ae617e4d129411040e45758a6d9f15f3f25a87
                                        
                                            GET /i?e=pv&tna=liveIntentPublisherTracker&p=web&aid=a-00cf&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&sid=88e37e6b-6dda-4dcb-ad7d-19b412552351&tv=pub-1.6.1&url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&page=FREE%20Plush%20Penguin%20From%20Penguins%20For%20Everyone&eid=d02e8bd4-9331-4cb0-b6d0-a628559c42b2 HTTP/1.1 
Host: c.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         52.200.114.135
HTTP/1.1 302 Found
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Date: Tue, 14 Nov 2017 19:43:13 GMT
Location: http://c.liadm.com/i?e=pv&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&eid=d02e8bd4-9331-4cb0-b6d0-a628559c42b2&url=http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/&aid=a-00cf&tna=liveIntentPublisherTracker&page=FREE+Plush+Penguin+From+Penguins+For+Everyone&tv=pub-1.6.1&n3pc=true&p=web&sid=88e37e6b-6dda-4dcb-ad7d-19b412552351
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Server: spray-can/1.3.3
Set-Cookie: lidid=d890333f-bd26-4181-bb03-d74fc96e19ee; Expires=Thu, 14 Nov 2019 19:43:13 GMT; Domain=.liadm.com; Path=/
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=CVI6PUEcLWqy3GM7yvALvooXgBpqnvvBNjpKgjlfAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTkxOTczMDQwNTMwNTQ3MqAB2obz6APIAQmoAwGqBJQBT9AlOk8qPPEU5Q2Ol3mtXGue8tGm4TrlmX_J0bZGUUa5V-m8XYo3eBQrQwOJsaFvIrGJnIFz5gmyRd5NTWhCpNXcmjWslMV5XHD8GUdmQLYsGaIbIxWgZhHrx-6Q9i5BZmkH46uwWBqR3I7I_5sTKvRNMIC8g5Hap8htqZbBJZDOykGY5qEeKq_7Pg51oMnvJnuRFYAGgdvJ1aGAt4emAaAGIagHpr4b2AcA0ggFCIBhEAE&sigh=_fz79g-2Tmw&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5919730405305472&output=html&h=280&slotname=3123702620&adk=1795008180&adf=807048394&w=370&fwrn=4&lmt=1510688589&loeid=38893313&rafmt=1&format=370x280&url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1510688590947&bpp=33&fdt=45&idt=287&shv=r20171108&cbv=r20170110&saldr=aa&correlator=4301208494374&frm=20&ga_vid=1245908999.1510688592&ga_sid=1510688592&ga_hid=1970594101&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=592&ady=374&biw=1159&bih=754&abxe=1&eid=62710011%2C62710014%2C38893303%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=839
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 14 Nov 2017 19:43:12 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUksUOxnYon_Jnko7lmjJZkzhoKHWW3wy0BcAlsQPBgN84DEPgDmgvBJ0bWi; expires=Thu, 14-Nov-2019 19:43:12 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 14 Nov 2017 19:43:12 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trustwave.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         91.135.34.136
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 638
Date: Tue, 14 Nov 2017 19:43:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   638
Md5:    61d1aa3c856410475b9356ed4042bd14
Sha1:   bc543e706ecc7efabebeb0f6249351424af5f428
Sha256: 44604b6501fd90cf257ca12c19d0d41b54c0a6519cecd6b772997e402dc5d0f9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trustwave.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.136
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 1684
Date: Tue, 14 Nov 2017 19:43:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1684
Md5:    a503ac8b30e052756dc03d1e8331406d
Sha1:   fb3d6097af126f6be1a9b0e1c595b47f20ad5293
Sha256: 0a8bda75a97f7c4695b2dd18ba688c787313b0bee9423672692a253350754fd8
                                        
                                            GET /sync/user?k=ppuuid&v=ryD9XidgLGJT&pid=m14328&s=aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA HTTP/1.1 
Host: sync.c1exchange.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: uid=9EFD424EF9D341BB82B64D5926E94B28; mmuuid=33885a0b-40bf-4900-b2f5-aa919be582b6

                                         
                                         18.216.114.70
HTTP/1.1 302 Found
                                        
Location: http://x.bidswitch.net/sync?ssp=c1x&pidS=m14328-c1x-aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA
Set-Cookie: ppuuid=ryD9XidgLGJT;Expires=Wed, 14-Nov-2018 19:43:13 GMT;domain= .c1exchange.com;path=/;
X-RID: 6970ddde-1bcd-47ed-87ef-94a73dccefd8
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /Code/player/smclient_min.js?server=production&cv=&sellerId=google&campaignId=yzxg83o&PUBLISHER_ID=ul911xn&smcreativeid=144617015&declaredurl=freebiesfrenzy.com&cb=721577&click=http%3A%2F%2Finsight.adsrvr.org%2Ftrack%2Fclk%3Fimp%3D6c483fb3-dc96-4e3b-b20b-0237150e14f4%26ag%3Dyzxg83o%26sfe%3Dc42c750%26sig%3Dyi4I7jrkHIinsuNvKXM6fKM6WFuS6U2f85OwDaFb0pw.%26crid%3D53zum91a%26cf%3D177800%26fq%3D0%26td_s%3Dfreebiesfrenzy.com%26rcats%3D%26mcat%3D%26mste%3D%26mfld%3D2%26mssi%3D%26mfsi%3Dbwyy2zfa8v%26sv%3Dgoogle%26uhow%3D68%26agsa%3D%26rgco%3DNorway%26rgre%3DOslo%2520County%26rgme%3D%26rgci%3DOslo%26rgz%3D0001%26dt%3DPC%26osf%3DWindows%26os%3DWindows7%26br%3DFirefox%26svpid%3Dpub-5919730405305472%26rlangs%3Den%26mlang%3D%26did%3D%26rcxt%3DOther%26tmpc%3D-2%26vrtd%3D%26osi%3D%26osv%3D%26daid%3D%26dnr%3D0%26vpb%3D%26svsc%3D%26dur%3D%26crrelr%3D%26npt%3D%26svscid%3Dpub-5919730405305472%26mdl%3DFirefox%2520-%2520Windows%26atst%3D0%26r%3Dhttps://adclick.g.doubleclick.net/aclk%3Fsa%3Dl%26ai%3DCVI6PUEcLWqy3GM7yvALvooXgBpqnvvBNjpKgjlfAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTkxOTczMDQwNTMwNTQ3MqAB2obz6APIAQmoAwGqBJQBT9AlOk8qPPEU5Q2Ol3mtXGue8tGm4TrlmX_J0bZGUUa5V-m8XYo3eBQrQwOJsaFvIrGJnIFz5gmyRd5NTWhCpNXcmjWslMV5XHD8GUdmQLYsGaIbIxWgZhHrx-6Q9i5BZmkH46uwWBqR3I7I_5sTKvRNMIC8g5Hap8htqZbBJZDOykGY5qEeKq_7Pg51oMnvJnuRFYAGgdvJ1aGAt4emAaAGIagHpr4b2AcA0ggFCIBhEAE%26num%3D1%26sig%3DAOD64_23sLtnNGQRTr0RQP-fYNIoK6HRSQ%26client%3Dca-pub-5919730405305472%26adurl%3D HTTP/1.1 
Host: cloud.selectmedia.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5919730405305472&output=html&h=280&slotname=3123702620&adk=1795008180&adf=807048394&w=370&fwrn=4&lmt=1510688589&loeid=38893313&rafmt=1&format=370x280&url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1510688590947&bpp=33&fdt=45&idt=287&shv=r20171108&cbv=r20170110&saldr=aa&correlator=4301208494374&frm=20&ga_vid=1245908999.1510688592&ga_sid=1510688592&ga_hid=1970594101&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=592&ady=374&biw=1159&bih=754&abxe=1&eid=62710011%2C62710014%2C38893303%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=839

                                         
                                         107.178.253.132
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
X-GUploader-UploadID: AEnB2UrqEQi5aak76aPEDMZRgRHKszi_NcrgDdmOe3X36uSUKgGmlAiXCUn9UGl3IziXGjeFCiJQ3_lkjMvHop9FvMwzCAV0xA
Expires: Tue, 14 Nov 2017 19:57:53 GMT
Date: Tue, 14 Nov 2017 18:57:53 GMT
Last-Modified: Thu, 09 Nov 2017 14:18:52 GMT
Etag: "0632a94f3c7c9eb53567a95180be3319"
x-goog-generation: 1510237132487136
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 35509
x-goog-hash: crc32c=UODw7w==, md5=BjKpTzx8nrU1Z6lRgL4zGQ==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Content-Length: 35509
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, withCredentials: true
Server: UploadServer
Age: 2720
Cache-Control: public, max-age=3600
Alt-Svc: clear


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   35509
Md5:    0632a94f3c7c9eb53567a95180be3319
Sha1:   53ee0169ea074bf40f660ad5486adc88f80948ed
Sha256: e299abd36a6707ba84497b5afaeb4ea1cc2c018a79ee73631c0aac20c4be9b43
                                        
                                            GET /i?e=pv&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&eid=d02e8bd4-9331-4cb0-b6d0-a628559c42b2&url=http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/&aid=a-00cf&tna=liveIntentPublisherTracker&page=FREE+Plush+Penguin+From+Penguins+For+Everyone&tv=pub-1.6.1&n3pc=true&p=web&sid=88e37e6b-6dda-4dcb-ad7d-19b412552351 HTTP/1.1 
Host: c.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: lidid=d890333f-bd26-4181-bb03-d74fc96e19ee

                                         
                                         52.200.114.135
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Date: Tue, 14 Nov 2017 19:43:13 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Server: spray-can/1.3.3
Set-Cookie: lidid=d890333f-bd26-4181-bb03-d74fc96e19ee; Expires=Thu, 14 Nov 2019 19:43:13 GMT; Domain=.liadm.com; Path=/
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            POST /action/doq.htm?pcode=utf-8&r=15106885929951 HTTP/1.1 
Host: rt3010.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Content-Length: 2059
Origin: http://freebiesfrenzy.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.16.230.152
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=df91aa6734d53fbd2e60b374f0de3e42d1510688593; expires=Wed, 14-Nov-18 19:43:13 GMT; path=/; domain=.infolinks.com; HttpOnly cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc; Domain=infolinks.com; Expires=Thu, 14-Nov-2019 19:43:13 GMT; Path=/
X-Application-Context: application:prod
Access-Control-Allow-Origin: http://freebiesfrenzy.com
Vary: Origin
Access-Control-Allow-Credentials: true
Cache-Control: no-cache,no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NON DSP NID OUR COR"
Content-Language: en-US
Server: cloudflare-nginx
CF-RAY: 3bdc755c52be42a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   779
Md5:    27331cae50e631b7d80d66be156f200c
Sha1:   bb680943e593525d5de5abe5ae9c35fdc4acbcca
Sha256: 4d931f89372b76a447006940fee4e235256a079879f1244d8941aafd49cae612
                                        
                                            GET /static/quantcast/quantcast.js HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc

                                         
                                         104.16.231.152
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 14 Nov 2016 12:31:09 GMT
Etag: W/"189-5414203ba5304"
Cache-Control: max-age=2592000
Expires: Thu, 14 Dec 2017 15:57:59 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc755e945b4285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   282
Md5:    8226230aea8764c5bcb64be83b60db9e
Sha1:   a99c15326a6c8880c06f81be92c8e9c700c384f5
Sha256: 80106924270da35279f50091b674aa2539ab3c42b1d519038b8bcd34885d2478
                                        
                                            GET /static/skins/loader.gif HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc

                                         
                                         104.16.231.152
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Content-Length: 962
Connection: keep-alive
Cache-Control: max-age=2592000
Cf-Bgj: imgq:85
Cf-Polished: origSize=1631
Etag: "65f-54142035d0066"
Expires: Thu, 14 Dec 2017 16:01:15 GMT
Last-Modified: Mon, 14 Nov 2016 12:31:03 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3bdc755e94df4297-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 30 x 30
Size:   962
Md5:    d817e8fd864b84f7d546807d800588ea
Sha1:   6a66609f160ee1640b0d0eddd5fdd96a95a1c4ef
Sha256: e3b8ee13d35110d7006bc5c5147ee0a0c6c3e1f26b2f246b8d5e57edf4f6b97b
                                        
                                            GET /p1.0-SNAPSHOT.139%2C711.do&a=true&e=click&ab=false HTTP/1.1 
Host: interyield.td553.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=dcabc23d216e0b96d6d467c474c8ac3141510688590

                                         
                                         104.16.2.104
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
Etag: W/"595142-1510328914000"
Last-Modified: Fri, 10 Nov 2017 15:48:34 GMT
Content-Language: en-US
Content-Encoding: gzip
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc755b6708429d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   101507
Md5:    b9fad58180faed506be5422c621ef1fd
Sha1:   d6386b81678a3a193c292a37e9fc73a53da619f6
Sha256: 89f8b24fadc3fbb4cc3d36df4d693e006a421becf427017b90f615af03918e75
                                        
                                            GET /static/skins/variant/intext/1/btn.png.png HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc

                                         
                                         104.16.231.152
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc75604131426d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   200
Md5:    89cd29e42c7fafad3d9ce7ed2300dbaf
Sha1:   9ba1f314092f50ae5dfb09c7c38df2964ff3b5a2
Sha256: e5d12c9335b102f53a8bf9f9aba6fc69c10a37adc82c560cc86698473a1afa88
                                        
                                            GET /static/skins/variant/intext/1/hdr-btns.png.png HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc

                                         
                                         104.16.231.152
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc756044e14285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   207
Md5:    d95190534694931a27d5539e2298a1be
Sha1:   d5128c79fb4474064965302503bc60967f9d1b2a
Sha256: 09ebb1be19f95db2242fd0f21de0a0df149383608456d8de2d4634b9b4efe394
                                        
                                            GET /static/skins/variant/intext/1/loading.gif.png HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc

                                         
                                         104.16.231.152
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc7560460a4279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   208
Md5:    2869fbbae4972f934749903541fd3b61
Sha1:   b579570a136465ce9ae356de8e9026d741c606b9
Sha256: 216c679e4336fc0423f6bb7705fbef294d67b7859e7b0b009ebffd80847564df
                                        
                                            GET /quant.js HTTP/1.1 
Host: edge.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         91.135.34.122
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Last-Modified: Thu, 25 May 2017 20:26:55 GMT
Accept-Ranges: bytes
Content-Length: 5458
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: private, max-age=86400
Expires: Wed, 15 Nov 2017 19:43:13 GMT
Date: Tue, 14 Nov 2017 19:43:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, was "quant.min.js", from Unix, last modified: Fri Apr 28 00:50:56 2017
Size:   5458
Md5:    cce1e5cdade201139c4d113078d26d74
Sha1:   63afb7b77e7806f60aa2dc681933add1354fcea6
Sha256: bbcee65263cc43a1a863c95825c4ec7855acb416c4337ddd291796b4c1a8e4b6
                                        
                                            GET /sync?ssp=c1x&pidS=m14328-c1x-aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1

                                         
                                         35.189.222.7
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Tue, 14 Nov 2017 19:43:13 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: http://x.bidswitch.net/ul_cb/sync?ssp=c1x&pidS=m14328-c1x-aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=e77fd431-aa92-4e3f-baa1-0e3cbb9566e0; path=/; expires=Wed, 14-Nov-2018 19:43:13 GMT; domain=.bidswitch.net tuuid_last_update=1510688593; path=/; expires=Wed, 14-Nov-2018 19:43:13 GMT; domain=.bidswitch.net c=1510688593; path=/; expires=Wed, 14-Nov-2018 19:43:13 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            GET /static/skins/loader-bg.png HTTP/1.1 
Host: resources.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc

                                         
                                         104.16.231.152
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 14 Nov 2017 19:43:13 GMT
Content-Length: 1228
Connection: keep-alive
Cache-Control: max-age=2592000
Cf-Bgj: imgq:85
Cf-Polished: pngoptimizer, origSize=1488
Etag: "5d0-541420359b4a6"
Expires: Thu, 14 Dec 2017 12:28:43 GMT
Last-Modified: Mon, 14 Nov 2016 12:31:03 GMT
Vary: Accept
Via: 1.1 google
CF-Cache-Status: HIT
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3bdc756044e04285-OSL


--- Additional Info ---
Magic:  PNG image, 30 x 30, 8-bit/color RGBA, non-interlaced
Size:   1228
Md5:    6e32b9209fc30d7c528acf09bf9f2641
Sha1:   4e2ba9ffdf95373d5409aed066426a001cd06ff4
Sha256: dc30cb9fb30142b69341207a3a938f6411bac218600648081c427a303e219123
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 14 Nov 2017 19:43:14 GMT
Etag: "5a0adf86-1d7"
Expires: Thu, 16 Nov 2017 19:43:14 GMT
Last-Modified: Tue, 14 Nov 2017 12:20:22 GMT
Server: ECS (arn/469D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8e5066af64317d8d05f47a57ffce3a15
Sha1:   2bf66b837cf0419dd668d4737acf35e2aa6574b0
Sha256: 5037a129ec0a1aeb8409bed12123fc2eb60ba601451b58232f16af4a51ba43fc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 14 Nov 2017 19:43:14 GMT
Etag: "5a0af043-1d7"
Expires: Thu, 16 Nov 2017 19:43:14 GMT
Last-Modified: Tue, 14 Nov 2017 13:31:47 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e2a3a6ef125a54b1b9a8c7adbe8d841f
Sha1:   f2666affc0eaa2b0d296631d84da2c07eebb8ecc
Sha256: e0621f2452ece70041193b84601d5e2aa04faddd97e857940c38ce0d57f6d309
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 14 Nov 2017 19:43:14 GMT
Etag: "5a0ae913-1d7"
Expires: Thu, 16 Nov 2017 19:43:14 GMT
Last-Modified: Tue, 14 Nov 2017 13:01:07 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bceb152a82ddbba57e3aebfb6ca35737
Sha1:   dfa3c688ef9751791b5026c3ec46641d8ebc2528
Sha256: bfe4595269382404f373010e4037cb98fbef46abcabf569f120b480402ae25a9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 14 Nov 2017 19:43:14 GMT
Etag: "5a0ad6f9-1d7"
Expires: Thu, 16 Nov 2017 19:43:14 GMT
Last-Modified: Tue, 14 Nov 2017 11:43:53 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8763a978ac8dd75f4a9b2d02a063e6eb
Sha1:   7dcc295d036198c100dd40966ce5274bee1a67c7
Sha256: 20e5f81add850b1bf4e5c363a6f8873109a20064152b77481ebf92796352e716
                                        
                                            GET /ul_cb/sync?ssp=c1x&pidS=m14328-c1x-aHR0cDovL2NvbnRleHR1YWwubWVkaWEubmV0L2Nrc3luYy5waHA_Y3M9MiZ2c2lkPTE1MzY5MDE5MTAwMjE5ODUwMDBWMTAmdHlwZT1jMXgmb3ZzaWQ9JEMxWFVJRA HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://contextual.media.net/checksync.php?&cv=31&cs=2&&cid=8CU3F87CL&vsSync=1
Cookie: tuuid=e77fd431-aa92-4e3f-baa1-0e3cbb9566e0; tuuid_last_update=1510688593; c=1510688593

                                         
                                         35.189.222.7
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.0
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 43
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=e77fd431-aa92-4e3f-baa1-0e3cbb9566e0; path=/; expires=Wed, 14-Nov-2018 19:43:14 GMT; domain=.bidswitch.net tuuid_last_update=1510688594; path=/; expires=Wed, 14-Nov-2018 19:43:14 GMT; domain=.bidswitch.net


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /bid/feedback/google?iid=6c483fb3-dc96-4e3b-b20b-0237150e14f4&crid=53zum91a&wp=WgtHUAAGG6wKTzlOAAFRbwI5s6xzKHo85kGmmA&aid=1&wpc=USD&sfe=c42c750&puid=&tdid=&pid=ul911xn&ag=yzxg83o&sig=yi4I7jrkHIinsuNvKXM6fKM6WFuS6U2f85OwDaFb0pw.&cf=177800&fq=0&td_s=freebiesfrenzy.com&rcats=&mcat=&mste=&mfld=2&mssi=&mfsi=bwyy2zfa8v&uhow=68&agsa=&rgco=Norway&rgre=Oslo%20County&rgme=&rgci=Oslo&rgz=0001&svbttd=1&dt=PC&osf=Windows&os=Windows7&br=Firefox&rlangs=en&mlang=&svpid=pub-5919730405305472&did=&rcxt=Other&lat=59.905000&lon=10.748700&tmpc=-2&daid=&vp=0&osi=&osv=&bp=0.1&mdl=Firefox%20-%20Windows&dur=&crrelr=&atst=0 HTTP/1.1 
Host: eur-ukp.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5919730405305472&output=html&h=280&slotname=3123702620&adk=1795008180&adf=807048394&w=370&fwrn=4&lmt=1510688589&loeid=38893313&rafmt=1&format=370x280&url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1510688590947&bpp=33&fdt=45&idt=287&shv=r20171108&cbv=r20170110&saldr=aa&correlator=4301208494374&frm=20&ga_vid=1245908999.1510688592&ga_sid=1510688592&ga_hid=1970594101&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=592&ady=374&biw=1159&bih=754&abxe=1&eid=62710011%2C62710014%2C38893303%2C21061122&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=839

                                         
                                         83.222.246.254
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: -1
Server: Microsoft-IIS/8.5
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Set-Cookie: TDID=aa49c3bd-d5c2-4653-b4a5-1f77a4c10379; domain=.adsrvr.org; expires=Wed, 14-Nov-2018 19:43:14 GMT; path=/ TDCPM=CAEYBTgBQgQiAggB; domain=.adsrvr.org; expires=Wed, 14-Nov-2018 19:43:14 GMT; path=/
Date: Tue, 14 Nov 2017 19:43:13 GMT
Connection: close
Content-Length: 807


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   807
Md5:    18b3e43abad26bdac6f4cea944777b62
Sha1:   5848cd0aca8d9fc92d8449b13f829cc1f6cd310a
Sha256: 3ca19e57c9a2465ae4df271316ba4d29e7ff7f113a2a2c5297780c0b7a0ac09d
                                        
                                            GET /gampad/ads?gdfp_req=1&correlator=474153880735137&output=json_html&callback=googletag.impl.pubads.callbackProxy1&impl=fif&eid=21061346%2C108809103%2C21060362%2C21061149&sc=0&sfv=1-0-13&iu=%2F45361917%2F8CU3F87CL-434594251-FF_ATF_Sitewide&sz=300x250&scp=crid%3D434594251%26mnet_segment%3D3.00%26mnet_variant%3D0%26pub_domain%3Dfreebiesfrenzy.com%26mnet_cc%3DNO&eri=4&cookie_enabled=1&lmt=-3600&dt=1510688591979&ea=0&frm=23&biw=1159&bih=754&isw=300&ish=250&oid=3&adx=592&ady=1321&adk=1473161893&gut=v2&ifi=1&ifk=3269009586&u_tz=60&u_his=1&u_java=true&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&flash=10.0.45&nhd=1&url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&top=freebiesfrenzy.com&icsg=0&std=32&vrg=168&ga_vid=1448351482.1510688592&ga_sid=1510688592&ga_hid=653187590 HTTP/1.1 
Host: securepubads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Google-LineItem-Id: 731828837
Google-Creative-Id: 33134140517
Google-MediationGroup-Id: -2
Google-MediationTag-Id: -2
Date: Tue, 14 Nov 2017 19:43:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 14-Nov-2017 19:58:12 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5737
Md5:    3b773af138a332a38140fd5870458e32
Sha1:   4271b00a3546820b011f4f4b5e04faa0ea02e80a
Sha256: 1093ccff5b80d166848829fb7afda3dea666efdb91b86b158f9fd4e8e944b1b4
                                        
                                            GET /action/dcl.htm?rid=59483c1a-b42d-46d2-b8b6-583220f3dbd6&jsv=1609.003.ab.1610.012&capara=%7B%22mode%22%3A%22default%22%2C%22markers%22%3A1%7D HTTP/1.1 
Host: rt3010.infolinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=d7ef17c63b1aaa6d35e4f6d2991258ce81510688590; cuid=2ad5e525-0e06-4916-9b1d-a8dcac5e36bc

                                         
                                         104.16.230.152
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 0
Connection: keep-alive
X-Application-Context: application:prod
Cache-Control: no-cache,no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Server: cloudflare-nginx
CF-RAY: 3bdc756053cd4267-OSL


--- Additional Info ---
                                        
                                            GET /ph80AqfzHmFm141Z0MTKqt0USTbPiiynuxoK4qO14G2Zbsmx88l.do?callback=AA3wFFoT.getSnoozing&affiliate=eliteweb&subid=SW&adCountIntervalHours=24&maxAdCountsPerInterval=1&protocol=http&fulldomain=freebiesfrenzy.com&domain=freebiesfrenzy.com&documentdomain=freebiesfrenzy.com&title=FREE%20Plush%20Penguin%20From%20Penguins%20For%20Everyone&fullcleantitle=FREE%20Plush%20Penguin%20From%20Penguins%20For%20Everyone&secUntilMidnight=11807&metakeywords=&pop=under&check=true&attributionDisabled=true&adultdisabled=undefined&iyd=true&ref= HTTP/1.1 
Host: interyield.td553.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: __cfduid=dcabc23d216e0b96d6d467c474c8ac3141510688590

                                         
                                         104.16.2.104
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
                                        
Date: Tue, 14 Nov 2017 19:43:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform, pre-check=0, post-check=0, private
Pragma: no-cache
P3P: CP='IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA'
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3bdc756050bc429d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   122
Md5:    bd131fe16996bb33329060569487fa30
Sha1:   52d464d65fe6a53461f33480612d69e1fa6bf2b8
Sha256: cb12a790dbe85d477bd0fc268423ee1e57969bb57cb73843b71994280ffee42d
                                        
                                            GET /s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false& HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: lidid=d890333f-bd26-4181-bb03-d74fc96e19ee

                                         
                                         54.152.7.35
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private, no-cache, max-age=0
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 19:43:14 GMT
Etag: 1.61803398874
Set-Cookie: _li_ss=MgUIBhC6BTIFCAkQugUyBQgKELoFMgUICxC6BTIFCAwQugUyBQgNEKwFMgUIdxC5BQ; Max-Age=2592000; Expires=Thu, 14 Dec 2017 19:43:14 GMT; Path=/s
Vary: Accept-Encoding
Content-Length: 671
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   671
Md5:    10bae751b23421263608b6c964a56948
Sha1:   25634a7d97ce0dcede650c7e84e3dfe04b471e54
Sha256: 3e58032f8230a807e2ca0f6e1688be85b8071f36de1d6ad1f2843cb6bef3dd4f
                                        
                                            GET /count.js HTTP/1.1 
Host: freebiesfrenzymembers.disqus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         151.101.112.134
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx
Last-Modified: Fri, 13 Oct 2017 21:33:51 GMT
Etag: "59e1313f-367"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 16 Nov 2017 05:46:45 GMT
Cache-Control: max-age=2592000
P3P: CP="DSP IDC CUR ADM DELi STP NAV COM UNI INT PHY DEM"
Content-Length: 871
Date: Tue, 14 Nov 2017 19:43:14 GMT
Age: 2469388
Connection: keep-alive
Strict-Transport-Security: max-age=300; includeSubdomains
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   871
Md5:    a487039f9b553cb4f6928743872234e9
Sha1:   b3d835075d1983a8c2fe716285d173fcc3708f9c
Sha256: 364f622ba24e063adcee84f132da53c6e6071745f04a00d10937663deb24b822
                                        
                                            GET /log?logid=kfk&evtid=rtbstl&url=http%3A%2F%2Ffreebiesfrenzy.com%2Fsign-up%2F2017%2F06%2F30%2Fpeng630%2F&domain=freebiesfrenzy.com&size=300x250&ext_user_id=0&iid=0&auction_id=40ebb1eb5b3443bd8bee1c6900113495&ip=77.40.129.123&crid=434594251&b4b=9.72&b56001b=0.0&b56002b=0.0&b9b=3.0&bc=3.0&rtbW=9&app_dis=0&cc=NO&bname=&bid_type=-1&bmlevel=0&mnet_segment=3.00&cmw=9&dfp=1&source=2&dt=4 HTTP/1.1 
Host: qsearch-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         91.135.34.91
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
Access-Control-Allow-Origin: *
Content-Length: 35
Expires: Tue, 14 Nov 2017 19:43:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   35
Md5:    1999e39306fd1f40771738a876009394
Sha1:   15361c8444c509b66256e01e311a2676dac95739
Sha256: 0915fad60bc9b61b6dcd82d05da7ec4bc0232a647e75b8507c3cba6d4d6602f9
                                        
                                            GET /pagead/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 14 Nov 2017 18:47:50 GMT
Expires: Tue, 14 Nov 2017 19:47:50 GMT
Etag: 4704686864894352291
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29470
X-XSS-Protection: 1; mode=block
Age: 3324
Cache-Control: public, max-age=3600


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29470
Md5:    ccccb075378ca70c241e9ce1ceff0cff
Sha1:   add6947bd8506e93552028e27d7affbdf89bb9af
Sha256: 61e03d3d3274f3290f53842ef4dc0e93c2dfca33b357a9027de0d106c77095a8
                                        
                                            POST / HTTP/1.1 
Host: sg.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1697
Content-Transfer-Encoding: binary
Cache-Control: max-age=340980, public, no-transform, must-revalidate
Last-Modified: Sat, 11 Nov 2017 18:23:23 GMT
Expires: Sat, 18 Nov 2017 18:23:23 GMT
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1697
Md5:    58f32518411751caecf325f84cc9dd34
Sha1:   9571957392d8c954c1370001b6ccced76b4cf19a
Sha256: 5cf09290375d4f62739cffab4ad9faabf6728c1f7995de6b6ee4f1b6e688c295
                                        
                                            GET /dmp/pixelSync?nid=12&rurl=http%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D HTTP/1.1 
Host: pixel-a.sitescout.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&

                                         
                                         66.155.71.149
HTTP/1.1 302 Found
                                        
Cache-Control: max-age=0,no-cache,no-store
Pragma: no-cache
Expires: Tue, 11 Oct 1977 12:34:56 GMT
P3P: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
Set-Cookie: ssi=cf350f21-64d2-4276-ae32-9411eaffd1aa; Domain=.sitescout.com; Expires=Wed, 14-Nov-2018 19:43:14 GMT; Path=/ _ssum=e30; Domain=.sitescout.com; Expires=Thu, 14-Dec-2017 19:43:14 GMT; Path=/
Location: http://i.liadm.com/s/35758?bidder_id=2380&bidder_uuid=cf350f21-64d2-4276-ae32-9411eaffd1aa
Content-Length: 0
Date: Tue, 14 Nov 2017 19:43:14 GMT
Server: AC1.1


--- Additional Info ---
                                        
                                            GET /sync/img?mt_exid=36&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00cf%2F0%2F58ccb6e2a9e248a6ad835c2e0af95cd7%3Fmpid%3D7156%26muid%3D%5BMM_UUID%5D HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&
Cookie: uuid=33885a0b-40bf-4900-b2f5-aa919be582b6; uuidc=1dQdxy/ddQZXQ351dlLG/95IGDK/Zqy73utj4YoAbZYaU9X9H1JQX14uG8LUtaplEczkq8T0K+M9ZgdpWi+GmWJRVadY+TVVscLGFneTwN4=

                                         
                                         185.29.133.199
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Cache-Control: no-cache
Location: http://i.liadm.com/s/e/a-00cf/0/58ccb6e2a9e248a6ad835c2e0af95cd7?mpid=7156&muid=33885a0b-40bf-4900-b2f5-aa919be582b6
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.19.0 3a17b0a release zrh-pixel-x2
Expires: Tue, 14 Nov 2017 19:43:13 GMT


--- Additional Info ---
                                        
                                            GET /track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&
Cookie: TDID=aa49c3bd-d5c2-4653-b4a5-1f77a4c10379; TDCPM=CAEYBTgBQgQiAggB

                                         
                                         176.34.228.163
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Tue, 14 Nov 2017 19:43:13 GMT
Location: http://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=aa49c3bd-d5c2-4653-b4a5-1f77a4c10379
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=aa49c3bd-d5c2-4653-b4a5-1f77a4c10379; domain=.adsrvr.org; expires=Wed, 14-Nov-2018 19:43:13 GMT; path=/ TDCPM=CAESGQoKbGl2ZWludGVudBILCLDmlJ6_6NU1EAUYASABKAIyCwiw3pfL1ejVNRAFOAFaCmxpdmVpbnRlbnRgAg..; domain=.adsrvr.org; expires=Wed, 14-Nov-2018 19:43:13 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 213
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   213
Md5:    09e37c80de97e17a08d96e55ab6e4f11
Sha1:   627c60752298e74310ac0c38924a077e351b211b
Sha256: 5e65ae1746783e9b51ec9e6941e11e993de763648f639e4dba868de16b4efed5
                                        
                                            GET /embed.js HTTP/1.1 
Host: freebiesfrenzymembers.disqus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         151.101.112.134
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: openresty
X-Service: router
Content-Encoding: gzip
Content-Length: 18600
Date: Tue, 14 Nov 2017 19:43:14 GMT
Age: 0
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: private, max-age=60
Strict-Transport-Security: max-age=300; includeSubdomains
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18600
Md5:    98769ad7ecbba1e7e7ca5c9e7be24b9b
Sha1:   d096610a02d847763b65689f94823b6974f0cc89
Sha256: 3688c405c7da5d59ccdc8b47ff09d3bf20ac462a4fc30763b44fd96e6795348b
                                        
                                            GET /syncd?dsp_id=256&user_group=2&user_id=d890333f-bd26-4181-bb03-d74fc96e19ee&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00cf%2F0%2F58ccb6e2a9e248a6ad835c2e0af95cd7%3Fmpid%3D5298%26muid%3D%24%7BBSW_UID%7D HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&
Cookie: tuuid=e77fd431-aa92-4e3f-baa1-0e3cbb9566e0; tuuid_last_update=1510688594; c=1510688593

                                         
                                         35.189.222.7
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: http://i.liadm.com/s/e/a-00cf/0/58ccb6e2a9e248a6ad835c2e0af95cd7?mpid=5298&muid=e77fd431-aa92-4e3f-baa1-0e3cbb9566e0
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /AdServer/js/user_sync.html?p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D HTTP/1.1 
Host: ads.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         88.221.73.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Wed, 15 Nov 2017 06:28:23 GMT
Last-Modified: Wed, 04 May 2016 13:21:07 GMT
Etag: "fa11bb-2fc-53204193150f1"
Cache-Control: max-age=172800
Server: Apache/2.2.15 (CentOS)
Accept-Ranges: bytes
Content-Encoding: gzip
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Content-Length: 460
Date: Tue, 14 Nov 2017 19:43:12 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   460
Md5:    aba43fadee9b7ddf2ebf7e1112eb0c36
Sha1:   13a5c9862f4b432371f1addf46751b31b0304a42
Sha256: ea01f032479ea220d14698610eb4991878d8c4debcbec3a85ca58d728e5c7ddd
                                        
                                            GET /__media__/pics/800015191/tran.png HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||; data-p=ryD9XidgLGJT~~2; data-o=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970~~2

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Apache
Last-Modified: Mon, 25 Aug 2014 14:25:08 GMT
Accept-Ranges: bytes
Content-Length: 107
Cache-Control: max-age=1209600
Expires: Tue, 28 Nov 2017 19:43:14 GMT
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, interlaced
Size:   107
Md5:    a95bd5a12d403483983f71dd1b7813f7
Sha1:   b58f41f46d62898e10ceb922b8fed52253ac34de
Sha256: dfa1028a74436c56e0ee1367812c0ee599d6814ec4a3079ca9b9afffba949e26
                                        
                                            GET /__media__/js/util/nrr.js?v=58 HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||; data-p=ryD9XidgLGJT~~2; data-o=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970~~2

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1209600
Expires: Tue, 28 Nov 2017 19:43:14 GMT
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 18208
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18208
Md5:    c360b7671152a1ff4864664c0e2db56c
Sha1:   1e61bd7cff6db30391f22598430695eebf5cc245
Sha256: f62397df6d2edb0572080c547cbe00d7a2b54991eacbb60cfd64bddb526e038b
                                        
                                            GET /__media__/js/AdChoices.png HTTP/1.1 
Host: res.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||; data-p=ryD9XidgLGJT~~2; data-o=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970~~2

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 4097
Last-Modified: Thu, 02 Apr 2015 09:23:32 GMT
Etag: "551d0a94-1001"
Accept-Ranges: bytes
Cache-Control: public, max-age=506492
Expires: Mon, 20 Nov 2017 16:24:46 GMT
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 75 x 15, 8-bit/color RGBA, non-interlaced
Size:   4097
Md5:    617c962488b52feebaeb545cfefaa3b1
Sha1:   f658ffd982751492fe426ee4624c1105408034d7
Sha256: 1e9a9ba24042f2effe58a5d585f70a7bc4b917e60ddcb9a780ad03817a78381f
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1033
Content-Transfer-Encoding: binary
Cache-Control: max-age=316206, public, no-transform, must-revalidate
Last-Modified: Sat, 11 Nov 2017 11:29:05 GMT
Expires: Sat, 18 Nov 2017 11:29:05 GMT
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1033
Md5:    8537e555344d3be2fb8f3116f1cca8f5
Sha1:   72e39ef60b6b4a38609c5d329df439502b8fdff0
Sha256: 550e1f91b17eb9df6a62eeb517511290f7323cba49da5ce8feefb2631de71d66
                                        
                                            GET /p/cm/liveintent HTTP/1.1 
Host: rtb-px.content.ad
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&

                                         
                                         34.198.101.250
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache, no-store
Date: Tue, 14 Nov 2017 19:43:14 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://rtb-px.content.ad/p/cm/liveintent?bounced=1
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Server: nginx/1.8.0
Set-Cookie: r_u=g1BH8kKrLEm;Path=/;Domain=.content.ad;Expires=Wed, 14-Nov-2018 19:43:14 GMT
X-Backend-id: rtb-fe-us-e3
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /AdServer/js/showad.js HTTP/1.1 
Host: ads.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=60809&predirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fusersync%3Fpmuservalue%3D

                                         
                                         88.221.73.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Wed, 15 Nov 2017 05:26:20 GMT
Last-Modified: Wed, 20 Sep 2017 05:48:49 GMT
Etag: "fa1a57-7442-5599887a69127"
Cache-Control: max-age=172736, public
Server: Apache/2.2.15 (CentOS)
Accept-Ranges: bytes
Content-Encoding: gzip
Set-Cookie: KTPCACOOKIE=YES; domain=.pubmatic.com; path=/; max-age=7776000;
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Content-Length: 11590
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11590
Md5:    54a63289b3316ddc765b9e6166f2e18a
Sha1:   53914a58ef4cf1e66c2cc618a467867349bf6d80
Sha256: eabaeb4f2e2a9965d73d357b82f54b07212279ba915262f6356434905c52b120
                                        
                                            GET /pxj?bidder=96&seg=2535736&action=incr_cm_freq() HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: sess=1; uuid2=6498344755793828076; anj=dTM7k!M4/8DYRWSF']wIg2GU%rbC_N!]tbPB*SQLOsH`E.g3VsOCoiS

                                         
                                         37.252.172.27
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Tue, 14 Nov 2017 19:43:16 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: afa00a28-0ffd-4aa0-bed3-7b352ce78e44
Set-Cookie: anj=dTM7k!M4/8DYRWSF']wIg2GU%rbC_N!]taq8iYXJ).8'y!*0dl!2)^HN/kUP; Path=/; Max-Age=7776000; Expires=Mon, 12-Feb-2018 19:43:16 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 15-Nov-2017 19:43:16 GMT; Domain=.adnxs.com; HttpOnly uuid2=6498344755793828076; Path=/; Max-Age=7776000; Expires=Mon, 12-Feb-2018 19:43:16 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 153.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.19:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /s?l=d890333f-bd26-4181-bb03-d74fc96e19ee&f=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2 HTTP/1.1 
Host: em.licasd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&

                                         
                                         52.22.180.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 154
Connection: keep-alive
Server: openresty
Set-Cookie: emchk=1510688594.b557b7c1aa61c496bff4bb2784519795; Expires=Sun, 27-Oct-19 19:43:14 GMT; Path=/; Domain=em.licasd.com
P3P: CP="NOI DSP COR NID DEVo PSAo PSDo OTPo OUR BUS UNI NAV"
Location: /s?l=d890333f-bd26-4181-bb03-d74fc96e19ee&f=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&chkc=y
Cache-Control: no-store


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /s/35758?bidder_id=2380&bidder_uuid=cf350f21-64d2-4276-ae32-9411eaffd1aa HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&
Cookie: _li_ss=MgUIBhC6BTIFCAkQugUyBQgKELoFMgUICxC6BTIFCAwQugUyBQgNEKwFMgUIdxC5BQ; lidid=d890333f-bd26-4181-bb03-d74fc96e19ee

                                         
                                         54.152.7.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store
Date: Tue, 14 Nov 2017 19:43:14 GMT
Set-Cookie: lidid=d890333f-bd26-4181-bb03-d74fc96e19ee; Max-Age=63072000; Expires=Thu, 14 Nov 2019 19:43:14 GMT; Path=/; Domain=liadm.com
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            GET /s/35759?bidder_id=44489&bidder_uuid=aa49c3bd-d5c2-4653-b4a5-1f77a4c10379 HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&
Cookie: _li_ss=MgUIBhC6BTIFCAkQugUyBQgKELoFMgUICxC6BTIFCAwQugUyBQgNEKwFMgUIdxC5BQ; lidid=d890333f-bd26-4181-bb03-d74fc96e19ee

                                         
                                         54.152.7.35
HTTP/1.1 303 See Other
                                        
Date: Tue, 14 Nov 2017 19:43:14 GMT
Location: http://trc.taboola.com/sg/liveintent/1/cm/
Set-Cookie: _li_ss=MgUIBhC6BTIFCAkQugUyBQgKELoFMgUICxC6BTIFCAwQugUyBQgNEKwFMgUIdxC5BTIFCHkQuQU; Max-Age=2592000; Expires=Thu, 14 Dec 2017 19:43:14 GMT; Path=/s lidid=d890333f-bd26-4181-bb03-d74fc96e19ee; Max-Age=63072000; Expires=Thu, 14 Nov 2019 19:43:14 GMT; Path=/; Domain=liadm.com
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /s/e/a-00cf/0/58ccb6e2a9e248a6ad835c2e0af95cd7?mpid=7156&muid=33885a0b-40bf-4900-b2f5-aa919be582b6 HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&
Cookie: _li_ss=MgUIBhC6BTIFCAkQugUyBQgKELoFMgUICxC6BTIFCAwQugUyBQgNEKwFMgUIdxC5BQ; lidid=d890333f-bd26-4181-bb03-d74fc96e19ee

                                         
                                         54.152.7.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            GET /cfcm.ashx?providerID=4001&extMatch=1&rcode=0 HTTP/1.1 
Host: li.pxl.ace.advertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00cf?s=&cim=&ps=true&ls=true&duid=a-00cf--9ec109f4-daa7-47e1-b14e-2cf172fc1cd2&domainSessionId=88e37e6b-6dda-4dcb-ad7d-19b412552351&ppid=0&ci=0&ld=0&ldm=0&version=sc-__VERSION__&nosync=false&

                                         
                                         149.174.28.143
HTTP/1.1 302 Found
                                        
Cache-Control: private, no-cache, max-age=0
Pragma: no-cache
Expires: Tue, 14 Nov 2017 19:43:14 GMT
Location: /cfcm.ashx?providerID=4001&extMatch=1&rcode=0&ctst=1
Server: Microsoft-IIS/7.5
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
X-AspNet-Version: 4.0.30319
Set-Cookie: ACID=qk000015106885940033; domain=advertising.com; expires=Thu, 14-Nov-2019 19:43:14 GMT; path=/ APID=0a42d916-c974-11e7-9742-d89d672c91b3; domain=advertising.com; expires=Thu, 15-Nov-2018 19:43:14 GMT; path=/
X-Powered-By: ASP.NET
Date: Tue, 14 Nov 2017 19:43:14 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /rtbs/pixel?key=9%3A%3A20171114%3A%3A19%3A%3ANO%3A%3A10.6.3.1_7017&value=300&bid=9&country=NO&cid=8CU3F87CL&crid=434594251&domain=freebiesfrenzy.com&size=300x250&buyerid=null HTTP/1.1 
Host: opt-east.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||; data-p=ryD9XidgLGJT~~2; data-o=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970~~2

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Content-Length: 43
Expires: Tue, 14 Nov 2017 19:43:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    db04c7b378cb2db912c3ba8a5a774ee3
Sha1:   dee34bd86c3484d31002182aa2b7caa4699126b8
Sha256: 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
                                        
                                            GET /ybnca/exchangenotify?aid=null&domain=freebiesfrenzy.com&price=3.0&cgid=1002069&cid=84963&rid=2224619&url=&cc=NO&td=&lid=&t=1510688591365 HTTP/1.1 
Host: opt.media.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/
Cookie: visitor-id=1536901910021923000V10; data=|||||||||||||||||||||; data-p=ryD9XidgLGJT~~2; data-o=0efbaf15-6ea2-4f2f-a83f-7d2ad8616970~~2

                                         
                                         23.56.3.183
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Content-Length: 43
Expires: Tue, 14 Nov 2017 19:43:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 14 Nov 2017 19:43:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    db04c7b378cb2db912c3ba8a5a774ee3
Sha1:   dee34bd86c3484d31002182aa2b7caa4699126b8
Sha256: 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
                                        
                                            GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fan-usersync%3Fuser_id%3D%24UID HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://freebiesfrenzy.com/sign-up/2017/06/30/peng630/

                                         
                                         37.252.172.27
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Tue, 14 Nov 2017 19:43:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT