Overview

URL imgserve.net/img-5495b0af9fb96.html
IP104.27.170.91
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-10-17 10:08:28 CEST
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.170.91

Date UQ / IDS / BL URL IP
2018-11-16 21:25:56 +0100
2 - 1 - 2 imgserve.net/img-54bfbce96f24a.html 104.27.170.91
2018-11-15 10:40:04 +0100
2 - 1 - 2 imgserve.net/img-547565868f825.html 104.27.170.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af03b425.html 104.27.170.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.170.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5197c3755eecd.html 104.27.170.91
2018-11-12 18:26:19 +0100
2 - 1 - 1 imgserve.net/img-536ad1a395425.html 104.27.170.91
2018-11-05 07:03:30 +0100
2 - 0 - 2 imgserve.net/img-54c64c324d6bc.html 104.27.170.91
2018-11-05 04:04:00 +0100
2 - 0 - 1 imgserve.net/img-520ff6461bbc8.html 104.27.170.91
2018-11-04 20:09:10 +0100
2 - 0 - 2 imgserve.net/img-54caf1eb9d099.html 104.27.170.91
2018-11-04 04:56:26 +0100
2 - 0 - 1 imgserve.net/img-54d0daf1d6f0e.html 104.27.170.91

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-11-17 04:10:00 +0100
0 - 0 - 0 www.soft222.com/tag/%e3%81%b6%e3%81%84%e3%81% (...) 104.27.153.250
2018-11-17 04:03:40 +0100
0 - 0 - 0 Shnvme.com 104.27.189.200
2018-11-17 04:02:47 +0100
0 - 0 - 2 carapacetattoo.com/wp-admin/moheal/outlookebu.htm 104.24.99.253
2018-11-17 03:53:45 +0100
0 - 0 - 0 https://pastebin.com/ 104.20.209.21
2018-11-17 03:48:56 +0100
0 - 0 - 1 https://www.thephillyegotist.com/member-work/ (...) 104.18.52.22
2018-11-17 03:48:24 +0100
0 - 0 - 0 https://pastebin.com/BrTDgriz 104.20.209.21
2018-11-17 03:48:12 +0100
0 - 1 - 1 https://short1231.top/shortenerlogin.html 104.28.0.252
2018-11-17 03:47:07 +0100
0 - 1 - 0 https://new-applicationsad-phone-dev.pw/5c9f4 (...) 104.24.111.77
2018-11-17 03:41:56 +0100
0 - 1 - 0 https://new-applicationsad-phone-dev.pw/46c09 (...) 104.24.111.77
2018-11-17 03:26:18 +0100
0 - 2 - 0 https://etodoro.ga/mypush1/index-redir3-adult (...) 104.18.41.212

Last 10 reports on domain: imgserve.net

Date UQ / IDS / BL URL IP
2018-11-16 21:25:56 +0100
2 - 1 - 2 imgserve.net/img-54bfbce96f24a.html 104.27.170.91
2018-11-15 10:40:04 +0100
2 - 1 - 2 imgserve.net/img-547565868f825.html 104.27.170.91
2018-11-15 04:11:18 +0100
2 - 1 - 1 imgserve.net/img-5312b02a2c55f.html 104.27.171.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af03b425.html 104.27.170.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af15fe0f.html 104.27.171.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.170.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5197c3755eecd.html 104.27.170.91
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-12 18:26:19 +0100
2 - 1 - 1 imgserve.net/img-536ad1a395425.html 104.27.170.91


JavaScript

Executed Scripts (23)


Executed Evals (0)


Executed Writes (20)

#1 JavaScript::Write (size: 11, repeated: 1) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#2 JavaScript::Write (size: 6, repeated: 16) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 171, repeated: 1) - SHA256: 36322bcbb4699084d0174101db60be0f78fc8ccc1c0e7a79d243151b8476845d

                                        < a href = "http://kmylvwo5.com/tracker_clicks.php?a=1142&c=12470&b=36377&_t=1539763677"
id = "ad_link"
target = "_blank" > Check This FREE PORN Site Before It 's BANNED Forever</a>
                                    

#4 JavaScript::Write (size: 531, repeated: 1) - SHA256: 7d2d38598f68117ebcd9f5c1ade0f4257314f28eb510c9a4ccaf6276dc048d0d

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763677739" > < /iframe>
                                    

#5 JavaScript::Write (size: 531, repeated: 1) - SHA256: d308aabdf5a250fd58fa1e14cd37e9aa5881d641d4363927cdaec4543c5a7ec1

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763677845" > < /iframe>
                                    

#6 JavaScript::Write (size: 531, repeated: 1) - SHA256: 9822531a4b3a56f16009775471d412275f6ffca2d672dd78fbe4ab899e2d9fce

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763677917" > < /iframe>
                                    

#7 JavaScript::Write (size: 531, repeated: 1) - SHA256: 109d7d3c2e6703ef4f75e8e653a00621970e7971c0f065dbcfa35ab835b9e0b0

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678006" > < /iframe>
                                    

#8 JavaScript::Write (size: 531, repeated: 1) - SHA256: 2ae7d3f8ada89e255e1944e49beaa8c099fc191a1b9236da7242c0761e0b2870

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678050" > < /iframe>
                                    

#9 JavaScript::Write (size: 531, repeated: 1) - SHA256: 44d7631735b3e27f67796ba570d2f841826ca6228dc7edacb40aecff450db3a4

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678109" > < /iframe>
                                    

#10 JavaScript::Write (size: 531, repeated: 1) - SHA256: 75054173701c7d7478a2d298d858455b855c95e96e751f1bb62d0ab775cd6145

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678162" > < /iframe>
                                    

#11 JavaScript::Write (size: 531, repeated: 1) - SHA256: a80d7cfe0a190f49a1c57ddfdb3a9951c9eadc2b24d0a122fa6fee749093eb1b

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678206" > < /iframe>
                                    

#12 JavaScript::Write (size: 531, repeated: 1) - SHA256: 847a34d29fd0e1d61f35d6fb978a4a09f560163f12e597f421934d3e211b29e1

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678331" > < /iframe>
                                    

#13 JavaScript::Write (size: 531, repeated: 1) - SHA256: a877d25215ef45a6c72e15bdc12e0bfcac65a337cfaa43163039856826598e08

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679251" > < /iframe>
                                    

#14 JavaScript::Write (size: 531, repeated: 1) - SHA256: b2b45b14cd7b3b53f7b8a238cd5dc10ec8730cf33d348dd88a054ca94b1918ee

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679335" > < /iframe>
                                    

#15 JavaScript::Write (size: 531, repeated: 1) - SHA256: c54ed95c5dc121cf55797f3c769df3787a3534c9e6318e801270f7c7097cf920

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679378" > < /iframe>
                                    

#16 JavaScript::Write (size: 531, repeated: 1) - SHA256: ad64ee1f23a0c4b6b50585cb7c10dcc7d41adeb5e5804f1ff0281ae887266c36

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679418" > < /iframe>
                                    

#17 JavaScript::Write (size: 531, repeated: 1) - SHA256: 72bf0f36711dccf8a1e0cc0f76a92fa9bbc18330e456d8b1efe2310f4547908a

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679458" > < /iframe>
                                    

#18 JavaScript::Write (size: 531, repeated: 1) - SHA256: f75aae31a213018ee788bf4267b0daf159a78cb8e5e2c0d6d1f47ec65c5e2933

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679498" > < /iframe>
                                    

#19 JavaScript::Write (size: 531, repeated: 1) - SHA256: d5c4b3c2ac875c6f3a0d4a73050b899caa2c1b6d0473ee785599437cc4b24da2

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679537" > < /iframe>
                                    

#20 JavaScript::Write (size: 90, repeated: 1) - SHA256: 61ce44bd7c96e39d8c918341fb0e29d5f042379576cc3dc152f2798136d33f2c

                                        < script type = 'text/javascript'
src = 'http://5gl1x9qc.com/d/a/1142.php?ext=js&_t=64522873694
                                    


HTTP Transactions (79)


Request Response
                                        
                                            GET /img-5495b0af9fb96.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:07:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; expires=Thu, 17-Oct-19 08:07:56 GMT; path=/; domain=.imgserve.net; HttpOnly refererx=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; path=/ viewer=db3d40b2fb0804d36bfedf5be9e51061; expires=Wed, 17-Oct-2018 09:07:56 GMT; path=/; domain=.imgserve.net viewerid=5495b0af9fb96; expires=Wed, 17-Oct-2018 09:07:56 GMT; path=/; domain=.imgserve.net imagen3=1; expires=Thu, 18-Oct-2018 08:07:56 GMT
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: cloudflare
CF-RAY: 46b1463f51b742a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9579
Md5:    3c941499c10832912dfd630c1cae2fa9
Sha1:   a764f9498a0258f64a319636ac66c372069ba01e
Sha256: 8b6a84c80d6254e60626fc83fecc03abafd974172b1ac5760751fedba417907a
                                        
                                            GET /css/styles.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 08:07:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 13 Jan 2015 07:23:52 GMT
Etag: W/"54b4c808-fceb"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:56 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14642923342a3-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16363
Md5:    cdae48c2d228c78bcc72c4c0895ad283
Sha1:   a83d7527c3a8f3683094ff25f11ce7d76cfe0841
Sha256: c14d3811da0f79fcd55bc1af6daed9a29cfb6b7622b81f090a230a11ab08a090
                                        
                                            GET /js/jquery-1.7.1.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:07:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:20 GMT
Etag: W/"51ae97f4-16eac"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:56 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14642c7be427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33223
Md5:    797e5aeed7a915aa9423119040979407
Sha1:   1287bebc61e72f65aa726faeb9a27485a38b9707
Sha256: 4f74858d849a6a197bbf30d7bdb6003ae954f55c757c95aeaea94071fdff710c
                                        
                                            GET /css/smoothness/jquery-ui-1.8.18.custom.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 08:07:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:43 GMT
Etag: W/"51ae9a27-833b"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:56 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1464397f4427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7335
Md5:    8c3ae5f2631058b80fb6f6d84342ecd0
Sha1:   888aa2afe402561fe03a98b94b2abd7d48d69efd
Sha256: f9da0fc48c829ebfeb5079da87520156bd8e8f14d2ba4f3bdf4488fc49bba9d1
                                        
                                            GET /js/jquery-ui-1.8.18.custom.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:07:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:27 GMT
Etag: W/"51ae97fb-335f7"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:56 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14643925a42a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   52155
Md5:    1c8b6494b85c448273f83a2814226e0e
Sha1:   f7713dd0a26d0cfaa051020b2b37d589414c45f1
Sha256: fec6535c94fe5fb5604068322a6a43b16ea598c98415d8fe05fc54e8176021a7
                                        
                                            GET /css/img/logo.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:56 GMT
Content-Length: 21186
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:28 GMT
Etag: "52c2-4de5e76c8b600"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:56 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b146447028427f-OSL


--- Additional Info ---
Magic:  PNG image, 280 x 80, 8-bit/color RGBA, non-interlaced
Size:   21186
Md5:    0f2ef79913ef0d8ab7b994bb7c5fe9fe
Sha1:   a9f53968b43919d2db7f1ce7033a9f41a6d5ade3
Sha256: 5bf1fff11cc2949712da86d18ed92bef598cbdda2ab57f0d5e98357152e28667
                                        
                                            GET /css/img/pig.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:56 GMT
Content-Length: 821
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:30 GMT
Etag: "335-4de5e76e73a80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:56 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14644728642a3-OSL


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   821
Md5:    603b3f482f950ea6ecbe3f02e4527d51
Sha1:   cc218bdf4d001f3db5482e6290e3d2ba13969ca0
Sha256: 4a96458a5a569e653a34eeb335eafe180e28129ac00125392ee5bec392ccbb3d
                                        
                                            GET /css/img/menubutton.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Content-Length: 3494
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:29 GMT
Etag: "da6-4de5e76d7f840"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:57 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14645a3d542c1-OSL


--- Additional Info ---
Magic:  PNG image, 150 x 40, 8-bit/color RGBA, non-interlaced
Size:   3494
Md5:    d1394f343c66e133faf085d089c7994b
Sha1:   a4064bd855e37c837ca0071416244e20dea5a1fa
Sha256: ad28f482b6f4e37eeafc726c5d2058da03cf848a3397d09d25773ea6a6fe32ad
                                        
                                            GET /jquery/text.js?_t=Math.floor(Math.random()*99999999999) HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         104.16.194.215
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d4db846dcd720676abd1c35785aa0bf0c1539763677; expires=Thu, 17-Oct-19 08:07:57 GMT; path=/; domain=.5gl1x9qc.com; HttpOnly
Last-Modified: Wed, 29 Mar 2017 18:20:04 GMT
Etag: W/"58dbfad4-1c9"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:57 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14645e6f0426d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    ce46a3c0de343339a689c89866261e07
Sha1:   15d7033005f8313d87ee7fc0c01ff04cfbc0408e
Sha256: 046a2434ac8093105cc19850e70be73d6d08b2ec52df39aa9df28e8e9503b606
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 14 Oct 2018 01:21:33 GMT
Etag: 5E911FA3F0AB2E44C9C4C034FC9FF70F18C81503
X-OCSP-Responder-ID: rmdccaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=320612
Expires: Sun, 21 Oct 2018 01:11:29 GMT
Date: Wed, 17 Oct 2018 08:07:57 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ee4cbc28a1495826fa71ae4ccbbf9862
Sha1:   5e911fa3f0ab2e44c9c4c034fc9ff70f18c81503
Sha256: 928f4a7dbcee4d73b7d15eb621806ce80e33b5dbcc561609928ece97c70648a3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 424B413FCAD941C040D692B87CDE897F59DB16AA
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=133762
Expires: Thu, 18 Oct 2018 21:17:19 GMT
Date: Wed, 17 Oct 2018 08:07:57 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    83c72f9ab989986ef6becba8e433c7ac
Sha1:   424b413fcad941c040d692b87cde897f59db16aa
Sha256: 88fa386cbec8abadec656da6ae494781daa1a1c8d14dc768376fc7ede025432e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: E8581583C2803974EDDB983E5584CDB37B4F9E14
X-OCSP-Responder-ID: rmdccaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=133791
Expires: Thu, 18 Oct 2018 21:17:48 GMT
Date: Wed, 17 Oct 2018 08:07:57 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5e712a8f20f0ae131a32a41f82c55b67
Sha1:   e8581583c2803974eddb983e5584cdb37b4f9e14
Sha256: 65e0f33f70b334d388d92507b68dacbf8b7390892e3cb264962501c2836b9e79
                                        
                                            GET /images/big/2014/12/20/5495b0af9fb53.jpg HTTP/1.1 
Host: s11.imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Content-Length: 777913
Connection: keep-alive
Last-Modified: Sat, 20 Dec 2014 17:26:03 GMT
Etag: "5495b12b-bdeb9"
Expires: Sat, 14 Oct 2028 08:07:57 GMT
Cache-Control: public, max-age=315360000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14645e1f542b5-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   777913
Md5:    bb377d071f770f8a6a2208f0967dcef2
Sha1:   dd140c57f4cf553259fad9c508bf74410d118fb7
Sha256: b2c6c69fa0e42bef2954d1379e0fd57bb634d1fd94b818d2dd01b1c7a1392c9d
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         104.20.209.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d3e4ecd14e1a83c1aaf195420ec3ab7e91539763677; expires=Thu, 17-Oct-19 08:07:57 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Mon, 15 Oct 2018 11:58:03 GMT
Etag: W/"5bc480cb-423b4"
Expires: Wed, 17 Oct 2018 16:07:57 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b146494b344267-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   70162
Md5:    b6bb44f95a22a27e8b92d2ccbc591524
Sha1:   b5f4bf87301fb5291d70f392758d9c56ae374cc3
Sha256: e32b7829c99619bfa2c1de9e1ed9e9e515863b2d094e86c629c67c7350e8c96d

Alerts:
  urlquery:
    - Crypto currency mining script
                                        
                                            GET /css/img/bg2.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/styles.css
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Content-Length: 7637
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:23 GMT
Etag: "1dd5-4de5e767c6ac0"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:57 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b14649d11a427f-OSL


--- Additional Info ---
Magic:  PNG image, 2247 x 190, 8-bit colormap, non-interlaced
Size:   7637
Md5:    8388f9f5ebca3dd2c58b44f190687497
Sha1:   44678688ae09eb0b35eaef09f83771165d1104cb
Sha256: de57f5342874c0d1e33353e7e42b61134d2aab7cb52d1929e115b44049d5f525
                                        
                                            GET /imgs-5495b0af9fb96.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b14649d35742a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   393
Md5:    683d975f0afd4979f56ee8c21b4218a3
Sha1:   629952f74abdbbe8094b0640c79206544c7feb7a
Sha256: 844bce032ed8712745d47fd2ae04d63efdeeda3f9451b7249d1e200fe52216bd
                                        
                                            GET /image-5495b0af9fb96.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b14649d47a42c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /adserver.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b14649f5934279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /view.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46b14649e11c427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763677739 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddbae7d4.586810152084716635%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:57 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25; expires=Thu, 18-Oct-2018 08:07:57 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   815
Md5:    b2bfd6052065a59850874882097307e6
Sha1:   b8ad000636f3ade851b3b042c383b5ac9cd0c684
Sha256: bc5644258425ef8269bc3471ef590cef8bec019c471ffe11911c99b66301445a
                                        
                                            GET /z/775519059 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         104.24.121.232
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d3c9fee3ea44caa33fdd4cb4e3ff9c2811539763677; expires=Thu, 17-Oct-19 08:07:57 GMT; path=/; domain=.tweowhvrim.review; HttpOnly
Location: https://tweowhvrim.review/z/775519059
Server: cloudflare
CF-RAY: 46b1464a7137427f-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   245
Md5:    99f50241a1adc488caddb00e123fcabb
Sha1:   346852cfe4c93389e12aa00c64cd8c5233b33564
Sha256: 0afe4a5777c0cae75c630c160c29869e7c0e38014ca7073557fda8a6925b54a1
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763677845 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:57 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25; expires=Thu, 18-Oct-2018 08:07:57 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   815
Md5:    b2bfd6052065a59850874882097307e6
Sha1:   b8ad000636f3ade851b3b042c383b5ac9cd0c684
Sha256: bc5644258425ef8269bc3471ef590cef8bec019c471ffe11911c99b66301445a
                                        
                                            GET /library/118525/dde2a8175f69cc1595b9ed4dc0f6c5082874c8c6.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763677739
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddbae7d4.586810152084716635%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:07:57 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1539004789"
Cache-Control: max-age=86400
Content-Length: 289013
Last-Modified: Mon, 08 Oct 2018 13:19:49 GMT
X-HW: 1539763677.dop001.sk1.t,1539763677.cds002.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   289013
Md5:    b8550547ab2ca456ffc064233738e3dd
Sha1:   dde2a8175f69cc1595b9ed4dc0f6c5082874c8c6
Sha256: 9c77ec22018d72409583d47a1556100e8236ce120849a4159edc09b56df0c472
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /d/a/1142.php?ext=js&_t=64522873694 HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d4db846dcd720676abd1c35785aa0bf0c1539763677

                                         
                                         104.16.194.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: tr_az=m%255B0%255D%3D10%26m%255B1%255D%3D1142%26d%255B0%255D%3D17%26d%255B1%255D%3D1142; expires=Fri, 19-Oct-2018 08:07:57 GMT; Max-Age=172800 tr_a=m%255B0%255D%3D10%26m%255B1%255D%3D36377%26d%255B0%255D%3D17%26d%255B1%255D%3D36377; expires=Fri, 19-Oct-2018 08:07:57 GMT; Max-Age=172800
Content-Encoding: gzip
Server: cloudflare
CF-RAY: 46b1464ac777426d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   196
Md5:    c6150613b5107fc4994fbc31a4639b00
Sha1:   cead17217538a0f336852119e1e8a99ad9b9f317
Sha256: 4ae82db4f0a450647784d323b5e744f76a503e1e16ef3b9eaf4c68e0b692c239
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 15 Oct 2018 06:17:38 GMT
Etag: 732F14FEBD09ACC614C1D08ABDC9D4FF7186BC36
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 278
Cache-Control: public, no-transform, must-revalidate, max-age=424734
Expires: Mon, 22 Oct 2018 06:06:52 GMT
Date: Wed, 17 Oct 2018 08:07:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   278
Md5:    58279d330a7756734a389b4a2cf552cd
Sha1:   732f14febd09acc614c1d08abdc9d4ff7186bc36
Sha256: 0c45ef8b0b0a8021bc28e51b81788c3c3587b61a6e6a3f4561368cb9889cf664
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 81BA3F7F2D06068D6A1DEE440E749D321E073BFD
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 313
Cache-Control: public, no-transform, must-revalidate, max-age=133753
Expires: Thu, 18 Oct 2018 21:17:11 GMT
Date: Wed, 17 Oct 2018 08:07:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   313
Md5:    5b1a178dc2ebf50f750216ca7402f74b
Sha1:   81ba3f7f2d06068d6a1dee440e749d321e073bfd
Sha256: ede2d28fbd261789543608426fdfb751321f4f9cbc7b951a81e7ff3a48c670d8
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678109 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:58 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9CK%B42%B2%AA%CE%B422%B5005%B1%B0N%B42%B1%AA.%06%12J%19%99%25%C5J%D6%99V%86%D6%60nIfn%2A%98kjlinflfn%0E%14%B7%B0R%CAI%2C.%C1%2Aghn%A5%94%9CXP%90%99%97%1E%9FV%94ZX%9A%9A%97%5C%A9%041%CC%D0%C4%C4%40%C9%BA%16h%AD%91%B9%81%99%89%11%09%D6Z%E0%B1%D6%828kk%01.%85FE; expires=Thu, 18-Oct-2018 08:07:58 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   689
Md5:    cf6bca268a1ad7df9f817e19dfd56e70
Sha1:   eb4590e2c0f5cb34053061ce5929e1b812cf668b
Sha256: dee1bb9dbd5c6a8b10497d497b4ef74773ae50687fd7f281c384d489ddb6d6d4
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/530318/a059fb6c8330f74784db9a7c5ad19ccde1f89e07.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678109
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9CK%B42%B2%AA%CE%B422%B5005%B1%B0N%B42%B1%AA.%06%12J%19%99%25%C5J%D6%99V%86%D6%60nIfn%2A%98kjlinflfn%0E%14%B7%B0R%CAI%2C.%C1%2Aghn%A5%94%9CXP%90%99%97%1E%9FV%94ZX%9A%9A%97%5C%A9%041%CC%D0%C4%C4%40%C9%BA%16h%AD%91%B9%81%99%89%11%09%D6Z%E0%B1%D6%828kk%01.%85FE

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1520955008"
Cache-Control: max-age=86400
Content-Length: 23106
Last-Modified: Tue, 13 Mar 2018 15:30:08 GMT
X-HW: 1539763678.dop001.sk1.t,1539763678.cds040.sk1.c


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23106
Md5:    b068b72a430d8a6518c1b8ad1bf40230
Sha1:   a059fb6c8330f74784db9a7c5ad19ccde1f89e07
Sha256: 3b0ae64bc817e6de50cf1b62811b9d347509d90da967880f8f3e3d3e73eb1639
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27%D0%D4%B4%F50%21b%B5Pbi%1F%21%DD%3D%A9%DF%7E%06f%1E%3C%87%1C%2Ba%A7%0CS%D2X%87%12kn%80%85J%06K%C8%ED%AB%85%B6%F0%AA%12%83%EEE%AFu%EB%06au%B9%FCn%5C%23x%97%12%C5y%9C%8E%B0%9F%21%FA%0B%BE3.%25%03%7B%DF%0F%ABi%24%25

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /z/775519059 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d3c9fee3ea44caa33fdd4cb4e3ff9c2811539763677

                                         
                                         104.24.121.232
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Apr 2018 23:09:55 GMT
Etag: W/"26f0-56a4fc9445fbb"
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46b1464c79a64255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2690
Md5:    11e8d1cb4e37f10e66c40c28833656ac
Sha1:   70f389d5ca18684e72d27a86d7e9fbbd61407053
Sha256: 66b115902ebc0a0136cd5d57816d9d7d7482d828af79d168b19ec7bdcd36149c
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678206 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9CK%B42%B2%AA%CE%B422%B5005%B1%B0N%B42%B1%AA.%06%12J%19%99%25%C5J%D6%99V%86%D6%60nIfn%2A%98kjlinflfn%0E%14%B7%B0R%CAI%2C.%C1%2Aghn%A5%94%9CXP%90%99%97%1E%9FV%94ZX%9A%9A%97%5C%A9%041%CC%D0%C4%C4%40%C9%BA%16h%AD%91%B9%81%99%89%11%09%D6Z%E0%B1%D6%828kk%01.%85FE

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:58 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd; expires=Thu, 18-Oct-2018 08:07:58 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   667
Md5:    481e20cccf877a3347f1e7f8ba1c4c09
Sha1:   de391746e3298240a04aca5b5b71f2814508c2c1
Sha256: ff6788986c7df31ce9dec8709baa608ec23b0f3579a8de7933b25d631f2d9791
                                        
                                            GET /templates/images/background-right.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/servegimg.png
CF-Cache-Status: EXPIRED
Expires: Wed, 17 Oct 2018 12:07:58 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1464ce3d742a3-OSL


--- Additional Info ---
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9CK%B42%B2%AA%CE%B422%B5005%B1%B0N%B42%B1%AA.%06%12J%19%99%25%C5J%D6%99V%86%D6%60nIfn%2A%98kjlinflfn%0E%14%B7%B0R%CAI%2C.%C1%2Aghn%A5%94%9CXP%90%99%97%1E%9FV%94ZX%9A%9A%97%5C%A9%041%CC%D0%C4%C4%40%C9%BA%16h%AD%91%B9%81%99%89%11%09%D6Z%E0%B1%D6%828kk%01.%85FE

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /templates/images/background-left.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/hostsgimg.png
CF-Cache-Status: EXPIRED
Expires: Wed, 17 Oct 2018 12:07:58 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1464d14e242c1-OSL


--- Additional Info ---
                                        
                                            GET /css/smoothness/images/ui-icons_454545_256x240.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Content-Length: 4369
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:06 GMT
Etag: "1111-4de5e790c8b80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:58 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1464da62e4279-OSL


--- Additional Info ---
Magic:  PNG image, 256 x 240, 8-bit colormap, non-interlaced
Size:   4369
Md5:    119dd0c2e94ad689de873ef39fd43e6e
Sha1:   1ab19df782d0b8491fc21c1edf7b20941624dd34
Sha256: cb36e80beaf2a527d463da552a5c679a46c4ff8c881318a194bb0ccb61cb2d5c
                                        
                                            GET /css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Content-Length: 105
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:02 GMT
Etag: "69-4de5e78cf8280"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:58 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1464da1c6427f-OSL


--- Additional Info ---
Magic:  PNG image, 1 x 400, 8-bit/color RGBA, non-interlaced
Size:   105
Md5:    e5a8f32e28fd5c27bf0fed33c8a8b9b5
Sha1:   7e5c99e9f0113ba6b63c2bb408b8347191316cda
Sha256: f0e6cd91b837d5c5644d026e5ffeccd907953317cd5c0f689901733afda260b2
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 17 Oct 2018 07:27:52 GMT
Expires: Wed, 17 Oct 2018 09:27:52 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 2406
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Content-Length: 178
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:01 GMT
Etag: "b2-4de5e78c04040"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 12:07:58 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1464e276942bb-OSL


--- Additional Info ---
Magic:  PNG image, 40 x 100, 8-bit/color RGBA, non-interlaced
Size:   178
Md5:    8692e6efddf882acbff144c38ea7dfdf
Sha1:   a9bb131c4acff0d07fa7b7f21bef05179c28d13b
Sha256: 39ab7ccd9f4e82579da78a9241265df288d8eb65dbbd7cf48aed2d0129887df5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /swidget/servegimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         67.202.94.86
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/31.png


--- Additional Info ---
                                        
                                            GET /swidget/hostsgimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         67.202.94.86
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/58.png


--- Additional Info ---
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=959599971&utmhn=imgserve.net&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x737&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=ImgServe.net%20%7C%20Earn%20Money%20Sharing%20Images&utmhid=2065789248&utmr=-&utmp=%2Fimg-5495b0af9fb96.html&utmht=1539763679216&utmac=UA-40347884-1&utmcc=__utma%3D120226704.62995775.1539763678.1539763678.1539763678.1%3B%2B__utmz%3D120226704.1539763678.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=210795393&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Wed, 17 Oct 2018 08:07:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /library/530318/7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678206
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:07:58 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705623"
Cache-Control: max-age=86400
Content-Length: 296015
Last-Modified: Tue, 19 Dec 2017 17:47:03 GMT
X-HW: 1539763678.dop001.sk1.t,1539763678.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   296015
Md5:    3ddb8167820e977615a641bc6a1eb2bd
Sha1:   7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f
Sha256: 3d5072cf06330fd3372e63fb73246718457b179b5cc2fae904f5ec09998d9c03
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /small/00/58.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:59 GMT
Content-Length: 320
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-140"
Expires: Thu, 18 Oct 2018 08:07:59 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   320
Md5:    a146949330856688605cedc413138f02
Sha1:   c4c4d74992d27c5f5123c6474fd89a5833a43129
Sha256: 0dcb555558dcaf690599fe55045870af2a7a30ea10d39666ffa591ddfd796b32
                                        
                                            GET /small/00/31.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 08:07:59 GMT
Content-Length: 316
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-13c"
Expires: Thu, 18 Oct 2018 08:07:59 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   316
Md5:    69651fcea09b07d975a4a91adc1891bc
Sha1:   c71f56b61f67d7370856b3c15a8a1398cbf93b5b
Sha256: 4fbd3640e161cbfca19bfaed7dcd2f0e6fce9dc8c3c75e926c68ccf0258eb23e
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678006 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CFQ%0A%C3+%0C%06%E0%BB%E4%04F%A3%B1%F10C%8A%DB%84%AEt%D3%3D%8C%D2%BBO%BA%D7%AE%B4%2F%81%3F%3F%E4%23Q%8C%CCY%B4%F5%CA%92%0FQH%E6%D2%06%DCs-%10%B2%60Xc%CD%8F%B4Fk%3Av%C61%B7%BD%17%18b%A9%9B%1D%B2%40%1F%A7%29%8F%B7%CB%F5%95%9E%EF4%F6%1F%F8%1DC%22%05ai%ACf%E5Ho%B0%FA%0F%EBw%D8%EE0%8Bl%15%BA%13%DF%EE%B1%FE%18%BB%7C%01%90%D6hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    00e5b9197764081b7c3abcb6b6704da8
Sha1:   b54a542800aa9d75c6d95fe7b91595d54f9216a0
Sha256: 5c08282391858368012a7c96725553c4a9bbcb7b7bf127d6f1bf91a78317577a
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763677917 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    f30c6b7909fb28fc076e0c449d6c2cda
Sha1:   50b8eefdcccc81923dc674e47c6369fd1d36d1e4
Sha256: 471d6b842f07f8e484452a798dcac2192c7c4c2390a123897e45fcbb41e09914
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678050 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   668
Md5:    29be314cc7265fed7880b3b2532851b8
Sha1:   be8de35feb14fa5d42d68a10beec63235a4584ff
Sha256: 27eb60167c7e9c62c2c0e1f388d1d0fc472e8f2e0431e7e0fcd5503021dec9cc
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679335 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   668
Md5:    29be314cc7265fed7880b3b2532851b8
Sha1:   be8de35feb14fa5d42d68a10beec63235a4584ff
Sha256: 27eb60167c7e9c62c2c0e1f388d1d0fc472e8f2e0431e7e0fcd5503021dec9cc
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679378 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   666
Md5:    96e6f0d6609dfac8626da1f5739af99c
Sha1:   f7f684001897858b399151e6f7a2929f836b3f7a
Sha256: b3554405e20ad629b0639abdb9121df2ab47c0cad639956128ccb1ff2b772332
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679251 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CFQ%0A%C3+%0C%06%E0%BB%E4%04F%A3%B1%F10C%8A%DB%84%AEt%D3%3D%8C%D2%BBO%BA%D7%AE%B4%2F%81%3F%3F%E4%23Q%8C%CCY%B4%F5%CA%92%0FQH%E6%D2%06%DCs-%10%B2%60Xc%CD%8F%B4Fk%3Av%C61%B7%BD%17%18b%A9%9B%1D%B2%40%1F%A7%29%8F%B7%CB%F5%95%9E%EF4%F6%1F%F8%1DC%22%05ai%ACf%E5Ho%B0%FA%0F%EBw%D8%EE0%8Bl%15%BA%13%DF%EE%B1%FE%18%BB%7C%01%90%D6hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    00e5b9197764081b7c3abcb6b6704da8
Sha1:   b54a542800aa9d75c6d95fe7b91595d54f9216a0
Sha256: 5c08282391858368012a7c96725553c4a9bbcb7b7bf127d6f1bf91a78317577a
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678331 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    f30c6b7909fb28fc076e0c449d6c2cda
Sha1:   50b8eefdcccc81923dc674e47c6369fd1d36d1e4
Sha256: 471d6b842f07f8e484452a798dcac2192c7c4c2390a123897e45fcbb41e09914
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679418 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%DB%B4%E9%C3H%19U%03%3A%A6%AD%07%91%BD%BBu%BB%8E%B1%5D%BC%04%FE%04%F2%256%FC%11%D6%D6%2Bk%7CL%BF%2Cm%C0Uj%81%28%8Cq%CE%2A%F7%3C%A7%ED%02%B9%CE%11%B5%BDg%B8%A5RWoH%0C%7D%1AG%19.%A7%F33%3F%5Ey%E8%DF%B0%3CCc%14%C4%A9%B1%9A%943%FA%00%EB7X%BF%9BE%B2%0A%DD%DFYM%A8%0F%B1a%83%0D%FB%D8%E9%0B%CE%0C%8A%84; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   674
Md5:    74947b8331dfa407515beace9d6f0ee0
Sha1:   fd44fb7af7e68445b4c350a4f609579e01a724bf
Sha256: 56206535ad540ef5c7efc24d9764ae71af4d76b24af7e5d0e71db8bcbea6549a
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678162 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%95%CFQ%0A%C3+%0C%06%E0%BB%E4%04F%A3%B1%F10C%8A%DB%84%AEt%D3%3D%8C%D2%BBO%BA%D7%AE%B4%2F%81%3F%3F%E4%23Q%8C%CCY%B4%F5%CA%92%0FQH%E6%D2%06%DCs-%10%B2%60Xc%CD%8F%B4Fk%3Av%C61%B7%BD%17%18b%A9%9B%1D%B2%40%1F%A7%29%8F%B7%CB%F5%95%9E%EF4%F6%1F%F8%1DC%22%05ai%ACf%E5Ho%B0%FA%0F%EBw%D8%EE0%8Bl%15%BA%13%DF%EE%B1%FE%18%BB%7C%01%90%D6hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   691
Md5:    00e5b9197764081b7c3abcb6b6704da8
Sha1:   b54a542800aa9d75c6d95fe7b91595d54f9216a0
Sha256: 5c08282391858368012a7c96725553c4a9bbcb7b7bf127d6f1bf91a78317577a
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679458 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%CD%0A%C20%0C%C0%F1w%C9%13%F4%2BM%9A%3E%8C%94Q%B5%A0c%DAz%10%D9%BB%5B%E7U%C6v%F1%12%F8%27%90_%12%27%AF%22%06Y%A1%E3%98%3EY%FB%80si%15b%11%1D%97l%E5%9A%97D%1B%C8%5BO%D4%F7%2CpI%B5%FD%BCi%12%18%D24%95%F1t8%DE%F3%ED%91%C7%E1%09%DFg%DA9%05q%EE%AC%21%E5%9D%D9%C1%F2%0A%CB%9BYM%A8%B4%FF%3B%8Bl%3D%AB%1DlXa%C36v%7E%03%D3%04%8A%8F; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   658
Md5:    d86f227a6f2687fc622bce60a2714f0a
Sha1:   73fca9c39f851bd8f2c53ff4ae29bbe4c16dfec9
Sha256: 329dfb4054d3fb990687b986887ad6814d63e4a7813f02000d65b4e310236c56
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679498 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   735
Md5:    a878b2b255f104fa213fef9d9f65618c
Sha1:   01b995285a547ca0f05b91c4d8cd2b3e205c05a5
Sha256: 83cc564e32e12cfb603e0492416d394b3225a17304ecfd88605b9d4f804f4129
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679537 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-5495b0af9fb96.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CDM%0A%021%0C%05%E0%BB%E4%04M%FF%12%D3%C3H%19%EAL%40%87%D1%D6%85%0Csw%CB%B8%15%D1%8D%9B%C0%CB%83%F7eq%B2%AA%D8%C0%26xNY%BC%AC%B5%1F%98%B4UH%2A%98%F6%D8%F4R%F6%18%DC%81%A2%8BD%FD%CF%02%E7%5C%DB%DB%0EI%60%C8%CB%A2%F3x%3C%DD%CA%F5%5E%E6%E1%01%AF1%F4%DE%40%DA%3Ak%C9Do%7F%60%F9%03%CB_%B3H%C1%60%FC%2F%BB%3D%01%8Fdhd

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 08:07:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; expires=Fri, 16-Oct-2020 08:07:59 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf; expires=Thu, 18-Oct-2018 08:07:59 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    f30c6b7909fb28fc076e0c449d6c2cda
Sha1:   50b8eefdcccc81923dc674e47c6369fd1d36d1e4
Sha256: 471d6b842f07f8e484452a798dcac2192c7c4c2390a123897e45fcbb41e09914
                                        
                                            GET /library/546258/8fc34ca2ff7cbabf952762120722529c02145e52.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679418
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%DB%B4%E9%C3H%19U%03%3A%A6%AD%07%91%BD%BBu%BB%8E%B1%5D%BC%04%FE%04%F2%256%FC%11%D6%D6%2Bk%7CL%BF%2Cm%C0Uj%81%28%8Cq%CE%2A%F7%3C%A7%ED%02%B9%CE%11%B5%BDg%B8%A5RWoH%0C%7D%1AG%19.%A7%F33%3F%5Ey%E8%DF%B0%3CCc%14%C4%A9%B1%9A%943%FA%00%EB7X%BF%9BE%B2%0A%DD%DFYM%A8%0F%B1a%83%0D%FB%D8%E9%0B%CE%0C%8A%84

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:07:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1521013017"
Cache-Control: max-age=86400
Content-Length: 70715
Last-Modified: Wed, 14 Mar 2018 07:36:57 GMT
X-HW: 1539763679.dop015.sk1.t,1539763679.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   70715
Md5:    3d30f9f55cfb7f5235fccb8f96e7f457
Sha1:   8fc34ca2ff7cbabf952762120722529c02145e52
Sha256: 0a066fc2d9726bc00e2c43d6211f9fb5a52e60c927ed46c00d24d1afc694c182
                                        
                                            GET /library/530318/3205d638d43d508b2c7b8af14ac66485a51374e9.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679378
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:07:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705627"
Cache-Control: max-age=86400
Content-Length: 478744
Last-Modified: Tue, 19 Dec 2017 17:47:07 GMT
X-HW: 1539763679.dop006.sk1.t,1539763679.cds049.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   478744
Md5:    c90eb3444b30f50466b6183e5177ac56
Sha1:   3205d638d43d508b2c7b8af14ac66485a51374e9
Sha256: a375b1a82e66c73244b5e8d5fd1fd77ded12de71eff98fdb766305606707684c
                                        
                                            GET /library/148652/abebc689b3631d40e7a8d6f83fa558a681dbe108.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679498
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CD%CD%0A%C20%0C%C0%F1w%C9%13%F4%2BM%9A%3E%8C%94Q%B5%A0c%DAz%10%D9%BB%5B%E7U%C6v%F1%12%F8%27%90_%12%27%AF%22%06Y%A1%E3%98%3EY%FB%80si%15b%11%1D%97l%E5%9A%97D%1B%C8%5BO%D4%F7%2CpI%B5%FD%BCi%12%18%D24%95%F1t8%DE%F3%ED%91%C7%E1%09%DFg%DA9%05q%EE%AC%21%E5%9D%D9%C1%F2%0A%CB%9BYM%A8%B4%FF%3B%8Bl%3D%AB%1DlXa%C36v%7E%03%D3%04%8A%8F

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:07:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1506441177"
Cache-Control: max-age=86400
Content-Length: 704110
Last-Modified: Tue, 26 Sep 2017 15:52:57 GMT
X-HW: 1539763679.dop003.sk1.t,1539763679.cds055.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   704110
Md5:    5e8880da4b02e8ecb41b55b6568b80e5
Sha1:   abebc689b3631d40e7a8d6f83fa558a681dbe108
Sha256: d6daecc67022e42ff2dab79b16b9eca2fb9b032211438367fac8fa55ea344d92
                                        
                                            GET /library/581670/0b23e18287f56a3fbad40450d12c0cf1ca309488.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763679458
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%BD%CD%CD%0A%C20%0C%C0%F1w%C9%13%F4%2BM%9A%3E%8C%94Q%B5%A0c%DAz%10%D9%BB%5B%E7U%C6v%F1%12%F8%27%90_%12%27%AF%22%06Y%A1%E3%98%3EY%FB%80si%15b%11%1D%97l%E5%9A%97D%1B%C8%5BO%D4%F7%2CpI%B5%FD%BCi%12%18%D24%95%F1t8%DE%F3%ED%91%C7%E1%09%DFg%DA9%05q%EE%AC%21%E5%9D%D9%C1%F2%0A%CB%9BYM%A8%B4%FF%3B%8Bl%3D%AB%1DlXa%C36v%7E%03%D3%04%8A%8F

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:07:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753184"
Cache-Control: max-age=86400
Content-Length: 236450
Last-Modified: Fri, 05 Oct 2018 15:26:24 GMT
X-HW: 1539763679.dop013.sk1.t,1539763679.cds036.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   236450
Md5:    3d3bae169bcebefae9f037502c7165b3
Sha1:   0b23e18287f56a3fbad40450d12c0cf1ca309488
Sha256: bf7296e106c806aa980df5bc403beaf092cafb87fa9ccad757b740ff1ff126af
                                        
                                            GET /library/530318/b1b992e28cb2dd59c8af9c880871e5478002ac0e.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-5495b0af9fb96.html&dt=1539763678050
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6edddd507e8.593636102248089062%22%3B%7D; impressions=x%9C%9D%CDK%0A%C30%0C%04%D0%BB%E8%04%FE%C8%96%22%1F%A6%98%E0%A6%866%A4%B5%BB%28%21w%8FI%B7%21%A4%DD%08F%03%F3%A2X%99%B3%18%C7%CA%21%87%28%28si%07n%B9%16%08Yt%D8b%CD%8F%B4Eg%3B%F2%D6%13%B5%3F%0B%DCc%A9%BB%9D%26%81%3ENS%1E%87%CB%F5%95%9E%EF4%F6%1F%F8%8EiD%05ai%AC%21%E5%D1%FC%C0%F2%01%CB%A7YMNi%BF%C3%9A%3F%D8%EE%1C%BB%AC%8F%E8hf

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 08:07:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705625"
Cache-Control: max-age=86400
Content-Length: 326567
Last-Modified: Tue, 19 Dec 2017 17:47:05 GMT
X-HW: 1539763679.dop001.sk1.t,1539763679.cds003.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   326567
Md5:    9b7fe1be99cb649d0b893c86ff9ea496
Sha1:   b1b992e28cb2dd59c8af9c880871e5478002ac0e
Sha256: a9064aa832aad0685a0081bc8b6af0e7b188f7a360d9cf0c5114837e5b80b062
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d9a3f1da6c55d4ebf8c0efb711c98eb6f1539763676; PHPSESSID=bf193b755f06ef27a34846f8d45b0d36; viewer=db3d40b2fb0804d36bfedf5be9e51061; viewerid=5495b0af9fb96; imagen3=1; __utma=120226704.62995775.1539763678.1539763678.1539763678.1; __utmb=120226704.1.10.1539763678; __utmc=120226704; __utmz=120226704.1539763678.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         104.27.170.91
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 17 Oct 2018 08:08:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:42:49 GMT
Etag: W/"51ae9799-47c"
CF-Cache-Status: REVALIDATED
Expires: Wed, 24 Oct 2018 08:08:00 GMT
Cache-Control: public, max-age=604800
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46b1465a558e42a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   921
Md5:    06ee4e4a98828888549e3ed7693dd78c
Sha1:   ef954a19b195cce9f07d6ef1efb08e295aa81baf
Sha256: 281e819159c678c2a170900b0d6d584fab10d46613c3567dd8b5c31ea93b8eb6
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html

                                         
                                         104.24.125.110
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 08:08:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=db2357b2f767a0506caf81ff05a2a5d581539763680; expires=Thu, 17-Oct-19 08:08:00 GMT; path=/; domain=.popmyads.com; HttpOnly
Location: https://popmyads.com/x/pma
Server: cloudflare
CF-RAY: 46b1465b159d4273-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   234
Md5:    f93c41ecf56596dfaff243d71b6315ce
Sha1:   348380cff5f286fd99bf74d71f37bcb0fbf3e95f
Sha256: ab246188c1c38fdd6b1b5e721ef8d14caa305028bc6b79fe314e316d6407323d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 280
Last-Modified: Wed, 17 Oct 2018 00:33:15 GMT
Etag: 606784539D1DA9E4E64876580B05AB24DDBF618C
X-OCSP-Responder-ID: rmdccaocsp28
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
Cache-Control: public, no-transform, must-revalidate, max-age=577204
Expires: Wed, 24 Oct 2018 00:28:04 GMT
Date: Wed, 17 Oct 2018 08:08:00 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   280
Md5:    77de95a16ac267190c7630906eb877fa
Sha1:   606784539d1da9e4e64876580b05ab24ddbf618c
Sha256: aa00a3245795f4401006380e0f696da104cfa723068e808d467ab61f39969a88
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-5495b0af9fb96.html
Cookie: __cfduid=db2357b2f767a0506caf81ff05a2a5d581539763680

                                         
                                         104.24.125.110
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 08:08:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.1.16
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46b1465c69864297-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26897
Md5:    74df32e7c9729cc21ddb00e044c8a808
Sha1:   919daf6d75fd32b4ca59cc29a331cb0078373bce
Sha256: 2e99678de740ec7d0b2f6080245ecc6b0a764a463dd1e858ef1d95b6892ff84a