Overview

URL bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
IP62.75.148.64
ASNAS8972 PlusServer AG
Location Germany
Report completed2019-04-15 13:04:19 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-15 2 bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11 Malware
2019-04-15 2 bullshift.net/media/bullshift.js Malware
2019-04-15 2 bullshift.net/random/4/128x128/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 62.75.148.64

Date UQ / IDS / BL URL IP
2019-04-25 10:55:12 +0200
0 - 1 - 3 bullshift.net/user/kuddman/view/2013/09/wallp (...) 62.75.148.64
2019-04-21 17:27:22 +0200
0 - 0 - 3 bullshift.net/user/Arcanastu/view/2013/10/tum (...) 62.75.148.64
2019-04-20 09:30:02 +0200
0 - 0 - 3 bullshift.net/all/view/2017/08/quing-gao 62.75.148.64
2019-04-19 12:09:54 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2014/01/imgur-ecuaqmu 62.75.148.64
2019-04-18 03:15:34 +0200
0 - 0 - 3 bullshift.net/all/view/2017/09/lily-cole-10273 62.75.148.64
2019-04-15 11:33:19 +0200
0 - 0 - 3 bullshift.net/user/Nimbus1989/view/2013/12/st (...) 62.75.148.64
2019-04-15 04:01:04 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2015/09/imgur-ixo2ehl 62.75.148.64
2019-04-15 03:16:59 +0200
0 - 0 - 3 bullshift.net/user/C4rp3Di3m/view/2014/03/aka (...) 62.75.148.64
2019-04-11 20:36:32 +0200
0 - 0 - 0 www.bullshift.net/data/images/2013/12/3c712f1 (...) 62.75.148.64
2019-04-04 09:53:18 +0200
0 - 0 - 3 bullshift.net/user/misan/view/2016/07/untitle (...) 62.75.148.64

Last 10 reports on ASN: AS8972 PlusServer AG

Date UQ / IDS / BL URL IP
2019-04-26 00:23:06 +0200
0 - 1 - 0 xn--lnetta-3ya.de/ 85.25.116.81
2019-04-25 23:20:15 +0200
0 - 0 - 6 dayjo.pymessoft.com/ 62.75.137.169
2019-04-25 22:30:05 +0200
0 - 0 - 1 jspigments.com/doc/preme/focus 188.138.102.5
2019-04-25 20:23:25 +0200
0 - 1 - 0 xn--lnettabrillenmode-22b.de/ 85.25.116.81
2019-04-25 17:16:11 +0200
0 - 0 - 1 loseturbo.de/ 188.138.122.81
2019-04-25 16:33:11 +0200
0 - 0 - 1 xn--w5byaa8iwbb.xn--15bv1db.com/ 85.25.198.248
2019-04-25 16:22:09 +0200
0 - 1 - 0 penpaper.ml/ 85.25.210.71
2019-04-25 13:23:24 +0200
0 - 1 - 0 xn--lnettabrillenmode-22b.de/ 85.25.116.81
2019-04-25 12:09:05 +0200
0 - 0 - 12 vv.vs-fr13478.level-cloud.com/ 62.75.242.81
2019-04-25 10:55:12 +0200
0 - 1 - 3 bullshift.net/user/kuddman/view/2013/09/wallp (...) 62.75.148.64

Last 10 reports on domain: bullshift.net

Date UQ / IDS / BL URL IP
2019-04-25 10:55:12 +0200
0 - 1 - 3 bullshift.net/user/kuddman/view/2013/09/wallp (...) 62.75.148.64
2019-04-21 17:27:22 +0200
0 - 0 - 3 bullshift.net/user/Arcanastu/view/2013/10/tum (...) 62.75.148.64
2019-04-20 09:30:02 +0200
0 - 0 - 3 bullshift.net/all/view/2017/08/quing-gao 62.75.148.64
2019-04-19 12:09:54 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2014/01/imgur-ecuaqmu 62.75.148.64
2019-04-18 03:15:34 +0200
0 - 0 - 3 bullshift.net/all/view/2017/09/lily-cole-10273 62.75.148.64
2019-04-15 11:33:19 +0200
0 - 0 - 3 bullshift.net/user/Nimbus1989/view/2013/12/st (...) 62.75.148.64
2019-04-15 04:01:04 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2015/09/imgur-ixo2ehl 62.75.148.64
2019-04-15 03:16:59 +0200
0 - 0 - 3 bullshift.net/user/C4rp3Di3m/view/2014/03/aka (...) 62.75.148.64
2019-04-11 20:36:32 +0200
0 - 0 - 0 www.bullshift.net/data/images/2013/12/3c712f1 (...) 62.75.148.64
2019-04-04 09:53:18 +0200
0 - 0 - 3 bullshift.net/user/misan/view/2016/07/untitle (...) 62.75.148.64


JavaScript

Executed Scripts (12)


Executed Evals (0)


Executed Writes (4)

#1 JavaScript::Write (size: 262, repeated: 1) - SHA256: 5f357403fb70925153383c24ce333956389fce5da1f1ba460cb15a732bbd5a55

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2014/02/imgur-xshug4h" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2014/02/128x128/imgur-xshug4h.jpg"
width = "126"
height = "126"
alt = "2014/02/imgur-xshug4h"
title = "mh - 19. Feb 2014 22:08" / > < /a>
                                    

#2 JavaScript::Write (size: 250, repeated: 1) - SHA256: dcecd33aa508ef5430f2dd84ca4ef896b5522a9564e58e934d0f3768a5418148

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2014/05/al-73015" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2014/05/128x128/al-73015.jpg"
width = "126"
height = "126"
alt = "2014/05/al-73015"
title = "atlas - 23. May 2014 14:28" / > < /a>
                                    

#3 JavaScript::Write (size: 269, repeated: 1) - SHA256: 6633d40d8b4e7568a9d1d65053c7bbd2e243f780824b06bc7e05d57406c42e05

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2014/12/imgur-onik79g" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2014/12/128x128/imgur-onik79g.jpg"
width = "126"
height = "126"
alt = "2014/12/imgur-onik79g"
title = "MisterMuh - 16. Dec 2014 00:07" / > < /a>
                                    

#4 JavaScript::Write (size: 302, repeated: 1) - SHA256: 894b7ea5da25b29383bebdb0b8e0fd225a44febc1c9b97616ad72cc43d8fb3c4

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2015/05/acidcow-acid-picdump-67" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2015/05/128x128/acidcow-acid-picdump-67.jpg"
width = "126"
height = "126"
alt = "2015/05/acidcow-acid-picdump-67"
title = "Sirslothalot - 28. May 2015 12:37" / > < /a>
                                    


HTTP Transactions (45)


Request Response
                                        
                                            GET /user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11 HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 11:03:47 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3490
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3490
Md5:    c5bdb065311e5636e7c65ac32ec27c09
Sha1:   1d8db27dc3fc1a76b52200a273e2059a16f47ae9
Sha256: 6112c3c31de721d39ac2284d31e6d3a4aaef1db6149e0356c55732218b32eb2a

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /media/styles.css HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 15 Apr 2019 11:03:47 GMT
Server: Apache
Last-Modified: Thu, 27 Jul 2017 10:10:29 GMT
Etag: "2301-55549c63498cd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2322
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2322
Md5:    56bce479b9c4763051b7fb86aed725ca
Sha1:   14165ece22246bcd29eb6da9335e037701e9360f
Sha256: 50c8ed8729f2d0d998878f10f1d1244d9c0b6220fd18024748c9f0846f0ef41c
                                        
                                            GET /media/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 15 Apr 2019 11:03:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:25 GMT
Etag: "5644-51a46ea59ac50-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4383
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4383
Md5:    82ec84cae9cde2d4d93cea7888fd1edc
Sha1:   3008267dfaa61aa7aeb2261b4108b971a7488d6f
Sha256: 12ac5423b5c0cb9dfd4c3b3e6ad8d7f600af304facfd83baa7a2e4e51c34129f
                                        
                                            GET /media/bullshift.js HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 15 Apr 2019 11:03:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:18 GMT
Etag: "3155-51a46e9ebf5eb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3886
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3886
Md5:    f795712876e86a30ef30300d90f1c69a
Sha1:   00c65e77ba6d5dcea1d2684977da6b02d4435ad9
Sha256: 28672805003ef6e9f2932649c7835170c9e3f1cfb5e85a4c96004346f1f3dfa9

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /media/favicon.ico HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Mon, 15 Apr 2019 11:03:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:30 GMT
Etag: "cbe-51a46eaa8843d"
Accept-Ranges: bytes
Content-Length: 3262
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   3262
Md5:    86d86d15d5fc32f157e480b596b1453c
Sha1:   a05dd726dc937f4d8a68f55ddfb98a67345e37b1
Sha256: 83e44ee79ea4aaf36f5526101b3095c59deeb7bcbe20d49e3e5fba9eee7bc4e3
                                        
                                            GET /data/avatars/5227994cdb1c5.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 11:01:26 GMT
Etag: "700-51a46f191a63f"
Accept-Ranges: bytes
Content-Length: 1792
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   1792
Md5:    118d605c3b88350b3ec2f548e9526e75
Sha1:   653aaaaa99e5c1e220c70ea4a39cfc5988a7de52
Sha256: 7df0872e09f9d0ae485362a7ddddb5309090ce718f2c2fcb45ebfe308661dec3
                                        
                                            GET /media/logo.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:17 GMT
Etag: "78df-51a46e9e0f95f"
Accept-Ranges: bytes
Content-Length: 30943
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 256 x 77, 8-bit/color RGBA, non-interlaced
Size:   30943
Md5:    eb59d91f07c5225f00cae4847119b411
Sha1:   c006d08ca990fa6a6317002f8de4d4b4803e3e16
Sha256: 83dd5de983cd677ac142344237b3de809b381e92f5d014da79fd2740e979464e
                                        
                                            GET /data/avatars/593db617de7f1.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Apache
Last-Modified: Sun, 11 Jun 2017 21:28:55 GMT
Etag: "4f7-551b5e3c6763a"
Accept-Ranges: bytes
Content-Length: 1271
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   1271
Md5:    5ffb0c4b85c5ed01a4ec1d83bbdaba2d
Sha1:   a6ee6cda6c41e8b595095d60f1d6a8cccc7c3f51
Sha256: ab5e59c36e7b892e48aab12ce40e9f3c433040b9723e0d61d54e485cad42ad56
                                        
                                            GET /random/4/128x128/ HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 360
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   360
Md5:    97095ef767a715df47381120315dcf28
Sha1:   75376e574703e1cbb3d9d208f01897d435231d98
Sha256: 8e7ed4a1e6ddb96956fafce8940d33bb4a5bc5a4cc2b1b942217f40eb04ee079

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /data/avatars/54b3a389ae3fc.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 11:01:26 GMT
Etag: "512-51a46f18e00a3"
Accept-Ranges: bytes
Content-Length: 1298
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   1298
Md5:    18bda951db3f4dd63f1020ffb399febc
Sha1:   4e9a4dfac6983d730f7399b3e7c38e289b1250d7
Sha256: 0783213204ae71df8bbccc771fec2f6587600c47944215667fcb1bbc3ec2d603
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 15 Apr 2019 10:16:54 GMT
Expires: Mon, 15 Apr 2019 12:16:54 GMT
Last-Modified: Wed, 16 Jan 2019 20:01:45 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17543
Age: 2814
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17543
Md5:    a6ce90b9145f18e7a721eb3819daaaab
Sha1:   1c422016bd20a08535d2cc37448c498cf4a0f829
Sha256: 94fe45c14a2ce4fd5f1401c835e5d63111ebf89ff58e03d6b780592f02abf778
                                        
                                            GET /widgets/onejs?MarketPlace=US&adInstanceId=761299c9-296b-4853-8d56-f715e860b67c HTTP/1.1 
Host: z-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         143.204.55.120
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Content-Length: 7324
Connection: keep-alive
Date: Mon, 15 Apr 2019 01:16:27 GMT
Server: Server
Content-Encoding: gzip
charset: UTF-8
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=300,s-maxage=300,no-transform
Expires: Mon, 15 Apr 2019 01:21:27 GMT
Pragma: Public
Cneonction: close
Age: 35241
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: NOeIQOLjI07b64e3598inJ-o7CRSAOG-OIXY_HApX7lSQzChII2GEw==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   7324
Md5:    6a7f2948e274dbf06c7c4e04987a75e7
Sha1:   15754ad951bacceff9d4e05fbe742d26cf5e11cc
Sha256: 63f5828982bfc212c21c79aaa34f169f9467b9fa1823ac80319f1ba360e44a61
                                        
                                            GET /data/images/2017/07/iksdeh-1499383528-502f2a3031e93e11.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Apache
Last-Modified: Wed, 12 Jul 2017 00:51:26 GMT
Etag: "2a900-5541437426a11"
Accept-Ranges: bytes
Content-Length: 174336
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   174336
Md5:    2ef47f1c6abc91d17067741b7ee497c6
Sha1:   4eb16c6003b063e7903ca816379410f532fce900
Sha256: 8a8b6ae202d72d4975cd68ebbe832806a6f4f11272e7d712cc38d196895d5e9b
                                        
                                            GET /r/collect?v=1&_v=j73&a=1823581638&t=pageview&_s=1&dl=http%3A%2F%2Fbullshift.net%2Fuser%2FWilmaWoscht%2Fview%2F2017%2F07%2Fiksdeh-1499383528-502f2a3031e93e11&ul=en-us&de=UTF-8&dt=lil%20redhead%20freckles%20-%20bullsh!ft%20-%20oh%20my%20god%20it%27s%20the%20funky%20shit&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=IEBAAAQ~&jid=786378529&gjid=663288680&cid=80024315.1555326229&tid=UA-43775658-1&_gid=2016725051.1555326229&_r=1&z=1408619566 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Mon, 15 Apr 2019 11:03:48 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /media/color.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:18 GMT
Etag: "9c-51a46e9f6ee8f"
Accept-Ranges: bytes
Content-Length: 156
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 15 x 15, 8-bit colormap, non-interlaced
Size:   156
Md5:    3212e7ea57f59f83dcb6b4eb19c51776
Sha1:   9cfb56468a1b2846679abd7edb25e2d32a9a98d4
Sha256: 969878457d759f907953cc435c83dae3af8af00973db312d0cc9f284f2a91060
                                        
                                            GET /media/search.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:31 GMT
Etag: "108-51a46eabac430"
Accept-Ranges: bytes
Content-Length: 264
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 13 x 13, 8-bit colormap, non-interlaced
Size:   264
Md5:    9aaae365bd29188104217296ac053f3a
Sha1:   ccd634bcba7c6cad361d484110e296ea6a795b14
Sha256: cdebe9506b093bf89364c68b5aeb8c9eed7277c9719f22232724c42819a9d2dc
                                        
                                            GET /data/thumbs/2014/05/128x128/al-73015.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 14:53:02 GMT
Etag: "197e-51a4a2ddd5fbf"
Accept-Ranges: bytes
Content-Length: 6526
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   6526
Md5:    7c04cbd7204e9f0d9b0976b55ecab695
Sha1:   956763b93716e2deb516acc7463d2cfa247e6dc9
Sha256: c18a7afdb057c1c16124bda55dd55f999efca0dbe77dbdfbf988cea082ebe908
                                        
                                            GET /data/thumbs/2015/05/128x128/acidcow-acid-picdump-67.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 14:40:43 GMT
Etag: "1c8c-51a4a01c466f5"
Accept-Ranges: bytes
Content-Length: 7308
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7308
Md5:    ffb713cb2ce326b8ccb77cf78bbf8775
Sha1:   6e7361f61bf707edb03fc85cfd0d92426bce6159
Sha256: 021a008f165cada2ff2bbf1f2ca6db12e6b2b772d94140039c8d740f5f2609cb
                                        
                                            GET /data/thumbs/2014/12/128x128/imgur-onik79g.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 15:18:30 GMT
Etag: "11eb-51a4a88efb042"
Accept-Ranges: bytes
Content-Length: 4587
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   4587
Md5:    917a02836deefa221a50a132d2aab2ea
Sha1:   127af1f6316d4265a0042a2b4de3475445172af6
Sha256: e0ca77e766faec8a612cad049833ace9e135dacb287e3cfbd93c32d00288a441
                                        
                                            GET /data/thumbs/2014/02/128x128/imgur-xshug4h.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 14:59:36 GMT
Etag: "1bd8-51a4a45585228"
Accept-Ranges: bytes
Content-Length: 7128
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7128
Md5:    6b9a56356d4c3e707e99dab2c33db60f
Sha1:   48ceb6b31b4d41f1ce7ad10d333ae0f88a06d979
Sha256: 94296774fd2568fd0d4d341b26688042ec8d503144af994d1f2f2a1b4dbd9e0b
                                        
                                            GET /media/star-base.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:29 GMT
Etag: "268-51a46ea9d8f81"
Accept-Ranges: bytes
Content-Length: 616
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 100 x 20, 8-bit/color RGBA, non-interlaced
Size:   616
Md5:    f9e8fab50aaef3fc6590d923f232df52
Sha1:   8794ae867b33202758bc96a7c6b3fd552b1c9355
Sha256: 8e66d97fd6ee850b2bd0267ef397eaadd0038deb8693f8711934441ece4c5bf6
                                        
                                            GET /media/star-current.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:30 GMT
Etag: "30e-51a46eaac29d9"
Accept-Ranges: bytes
Content-Length: 782
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 100 x 20, 8-bit/color RGBA, non-interlaced
Size:   782
Md5:    1d3fe1b48cb9432ae243c402ff075334
Sha1:   7a7cae05fdf95048d8a728e34e5eae729931d145
Sha256: 30ebb06ef358127c92521ca702f16ef731e582047b46c6cea0bb123268c4ed79
                                        
                                            GET /media/star-rate.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:19 GMT
Etag: "3e6-51a46ea01eb1b"
Accept-Ranges: bytes
Content-Length: 998
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 100 x 20, 8-bit/color RGBA, non-interlaced
Size:   998
Md5:    ab65e291dc333a802a92d6a8b28656e3
Sha1:   871d58eb21f1e236a69c0d07c25bf49b52b1ac81
Sha256: a54c71e5b19227c0876263f1b3b5eb012daf8abf615c8167fc3faaeff5c7ca0c
                                        
                                            GET /media/font-awesome/font/fontawesome-webfont.woff?v=3.2.1 HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/font-awesome/css/font-awesome.min.css
Cookie: _ga=GA1.2.80024315.1555326229; _gid=GA1.2.2016725051.1555326229; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:26 GMT
Etag: "aa34-51a46ea6bf414"
Accept-Ranges: bytes
Content-Length: 43572
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   43572
Md5:    b683029bafe0305ac2234038a03e1541
Sha1:   12f8c193902e99348493ace32e498031bf79b654
Sha256: 18e6b5ff511b90edf098e62ac45ed9d6673a3eee10165d0de4164d4d02a3a77f
                                        
                                            GET /e/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20 HTTP/1.1 
Host: rcm-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         52.46.132.238
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: Server
Date: Mon, 15 Apr 2019 11:03:49 GMT
Content-Length: 179
Connection: keep-alive
Location: https://rcm-na.amazon-adsystem.com/e/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20


--- Additional Info ---
Magic:  HTML document text
Size:   179
Md5:    743459ab1df88bf977dc5da8df945fc9
Sha1:   e72d31d9463a93a0b199017bb12e3a0900b1a47c
Sha256: a85d064fa58d2af7a57e3eb5b3241b762f601ab1af59db29f262daa0a6191125
                                        
                                            GET /x/getad?src=330&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22overwrite%22%3A%22false%22%2C%22div_name%22%3A%22amzn-assoc-ad-761299c9-296b-4853-8d56-f715e860b67c%22%2C%22tracking_id%22%3A%22product073a-20%22%2C%22ad_type%22%3A%22one_tag%22%2C%22marketplace%22%3A%22amazon%22%2C%22enable_geo_redirection%22%3A%22true%22%2C%22enable_auto_tagging%22%3A%22false%22%2C%22region%22%3A%22US%22%2C%22placement%22%3A%22adunit%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22product073a-20%22%2C%22slotNum%22%3A0%7D&u=http%3A%2F%2Fbullshift.net%2Fuser%2FWilmaWoscht%2Fview%2F2017%2F07%2Fiksdeh-1499383528-502f2a3031e93e11&jscb=amzn_assoc_jsonp_callback_adunit_0 HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         72.21.206.141
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 11:03:48 GMT
Server: Server
Set-Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2020 11:03:49 GMT; Path=/; HttpOnly
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 6727
Keep-Alive: timeout=2, max=18
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6727
Md5:    df1c2479b5ad1425f3ca0acaa43a1284
Sha1:   f4502c5387c3bc3dd10b0c0d6eb118145af1b5ad
Sha256: 416b457f43cb43c8ca0fca6477b9213e655f2467d91d4622cee12f2aaf603972
                                        
                                            GET /x/px/QnS4Qnm9k6pBC18h0J5QWpAAAAFqIKra_AEAAAFKAV6TRcc/?assoc_payload=%7B%22totalDocWidth%22%3A1159%2C%22totalDocHeight%22%3A1423%2C%22logType%22%3A%22onetag_pageload%22%2C%22pageTitle%22%3A%22lil%20redhead%20freckles%20-%20bullsh!ft%20-%20oh%20my%20god%20it%27s%20the%20funky%20shit%22%2C%22numLinks%22%3A1%2C%22numAutoTaggedLinks%22%3A0%2C%22autoTaggingEnabled%22%3Afalse%2C%22geoRedirectEnabled%22%3Atrue%2C%22disableTransitTracking%22%3Afalse%2C%22numLinksATF%22%3A0%2C%22numLinksBTF%22%3A1%2C%22shortLinksInLivePool%22%3A%22%22%2C%22shortLinksInPage%22%3A%22%22%2C%22shortLinksInLivePoolCount%22%3A0%2C%22shortLinksInPageCount%22%3A0%2C%22shortLinksMatchCount%22%3A0%2C%22assocPayloadId%22%3A%22QnS4Qnm9k6pBC18h0J5QWpAAAAFqIKra_AEAAAFKAV6TRcc%22%2C%22linkCode%22%3A%22w49%22%2C%22trackingId%22%3A%22product073a-20%22%2C%22refUrl%22%3A%22http%3A%2F%2Fbullshift.net%2Fuser%2FWilmaWoscht%2Fview%2F2017%2F07%2Fiksdeh-1499383528-502f2a3031e93e11%22%7D HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         72.21.206.141
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: Server
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 43
Vary: User-Agent
Keep-Alive: timeout=2, max=18
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /1/action-impressions/1/OE/associates-adsystems/action/cm_:onejs_exec_time@v=4,aax_load_time@v=285,aax_load_time_one_tag@v=285,wdgt_load_time_invoke@v=315,wdgt_load_time_invoke_one_tag@v=314,wdgt_load_time_invoke_one_tag_NO@v=314?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=c8485d1c-1325-4bd0-9a04-d0d48d000855&session=347f56e1-7df6-4b1b-83b4-88b6a3044f5d HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         52.94.225.95
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
x-amzn-RequestId: 25b2d925-5f6e-11e9-9154-6b3f3478790e
Date: Mon, 15 Apr 2019 11:03:49 GMT


--- Additional Info ---
                                        
                                            GET /e/ir?l=w49&t=product073a-20&o=1&cb=1555326229315 HTTP/1.1 
Host: ir-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         52.94.229.212
HTTP/1.1 200
Content-Type: image/gif
                                        
nnCoection: close
Content-Length: 42
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    accba0b69f352b4c9440f05891b015c5
Sha1:   9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
Sha256: 47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102281
Date: Mon, 15 Apr 2019 11:03:49 GMT
Etag: "5cb3232a-1d7"
Expires: Tue, 16 Apr 2019 15:28:30 GMT
Last-Modified: Sun, 14 Apr 2019 12:10:18 GMT
Server: ECS (phd/FD6D)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: eGs0HlqkQdsMnf4BTgmaNIyYiu7G5kNui5esSMvc9c5xZ0lGvYPE5Q==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fa739f1dba43ef3598d88db803348b15
Sha1:   80923e05c3800d3b9ffb0b90a8dbed8b3b71e347
Sha256: e5be7b341a3f019e9032faf92f1f1743db767a4238c04b857616ce9406c9cdde
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.149
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Mon, 15 Apr 2019 11:03:49 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.8/2018-10-18)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zoC43a3lBkz8ZjkljPpDCOvrnvu9BlJGuknKWfSRnMnPkcH6Ll5Vsw==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    37f1880725263e5f4491ef0505df952d
Sha1:   f85ad394f640574a7efd8d5b1f644c51290182de
Sha256: db0692410a659b7c2a62e225d561c1d2c492d576251b1603a440dbd1b7a23471
                                        
                                            GET /e/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20 HTTP/1.1 
Host: rcm-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         52.46.132.238
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Server
Date: Mon, 15 Apr 2019 11:03:50 GMT
Content-Length: 327
Connection: keep-alive
Location: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Vary: Accept-Encoding,X-Amzn-CDN-Cache,X-Amzn-AX-Treatment,User-Agent
Content-Encoding: gzip
x-amz-rid: B733AJ7JDZ96CAC6M6JR


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   327
Md5:    eeda2ce1d787bdae51ed53143eb6c245
Sha1:   7e6fb16867cf85f0da4e0439cd4adcf6cff8234d
Sha256: b3db54206ae8b62f42f8a03c68b23144bfb29e6db0258b96abc28155abb9e5c6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=124677
Date: Mon, 15 Apr 2019 11:03:50 GMT
Etag: "5cb3a8c0-1d7"
Expires: Tue, 16 Apr 2019 21:41:47 GMT
Last-Modified: Sun, 14 Apr 2019 21:40:16 GMT
Server: ECS (phd/FD58)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: _LdZg9Jb92uK1SiGVv1jgY99I21PgisK7RpzfjPlRvXDD-Aed7Jglw==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    543c365270ee569ff9cfd49837c58738
Sha1:   6593029740e69d9105fe05b462e88df0b2089a6c
Sha256: a59def874afc8f10498a469dc45f37654a30e6ca9f1357f0110f2c8f721e0b08
                                        
                                            GET /widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20 HTTP/1.1 
Host: ws-na.assoc-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11

                                         
                                         176.32.99.76
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 11:03:50 GMT
Server: Server
Cache-Control: must-revalidate
Pragma: no-cache
Expires: -1
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
charset: UTF-8
Access-Control-Allow-Origin: *
Vary: User-Agent
nnCoection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   45682
Md5:    a64eea10f168fa6094fd2de739a74763
Sha1:   108f84d31107fb3f6b924f08f40090f356623364
Sha256: 291655ccb1bc62858b30496c5565eccd4f65af19c214e265a433114e1c045ae4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=131584
Date: Mon, 15 Apr 2019 11:03:50 GMT
Etag: "5cb39f64-1d7"
Expires: Tue, 16 Apr 2019 23:36:54 GMT
Last-Modified: Sun, 14 Apr 2019 21:00:20 GMT
Server: ECS (lcy/1D22)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bd7c6f30af78326d3d1f0560bb3ca717
Sha1:   55afdc8656f6fc9500ae9e87e3df70e3d818c8fa
Sha256: 107fcac78a5395dcbedbce2e5e7848eb6bcad417112d70abaf8c0478e4fcc1f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=136958
Date: Mon, 15 Apr 2019 11:03:50 GMT
Etag: "5cb3d0b4-1d7"
Expires: Wed, 17 Apr 2019 01:06:28 GMT
Last-Modified: Mon, 15 Apr 2019 00:30:44 GMT
Server: ECS (lcy/1D69)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d4b8d7b13d83c6ad012f5316ff826def
Sha1:   c760b34c61f8afb1f0bced74aff03b65b2256cd4
Sha256: 49d37c5034298192348b1afe9d410557ef90a3e31acae2f9a19309e1bfe44bde
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.14.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=558629, public, no-transform, must-revalidate
Last-Modified: Sun, 14 Apr 2019 22:12:39 +00:00
Expires: Sun, 21 Apr 2019 22:12:39 +00:00
Date: Mon, 15 Apr 2019 11:03:51 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    336be39a7e91c6882f09480625bf3c5c
Sha1:   9b95cd89293af3f28b4d79434fc469e33ad63959
Sha256: b74e6be2a8585f1207b757e5518f94b31f3d661969957c71062857a77f3c9697
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=134047
Date: Mon, 15 Apr 2019 11:03:51 GMT
Etag: "5cb3c035-1d7"
Expires: Wed, 17 Apr 2019 00:17:58 GMT
Last-Modified: Sun, 14 Apr 2019 23:20:21 GMT
Server: ECS (dcb/7EC8)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: k9dX0-MnqSy4_liWvpvHwSQ_cV6DQgt-I56JWPHPawEJth9Th7cC7w==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d187f05c5a32cede8ef02f48a33cdeba
Sha1:   9a038eaf5baffde9db44920971ca05cfff05bc45
Sha256: 9824812f678a476469c5ecf2fc779d32206bb19c8ab34b98782468f181adabe0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164617
Date: Mon, 15 Apr 2019 11:03:52 GMT
Etag: "5cb4412e-1d7"
Expires: Wed, 17 Apr 2019 08:47:29 GMT
Last-Modified: Mon, 15 Apr 2019 08:30:38 GMT
Server: ECS (dcb/7F17)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: nJDjC45qEM-WyEibRPGfrcKzqDASHN6Z1iYc1rErEH20fYwXZoWhhg==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    02e6d89115cd468f2b542fb58c30bfd0
Sha1:   6f3307b75363cf81fb5292a66212221d0ebc22bf
Sha256: 955166172490398feb8d3a9b95cdb3c174608d889a7306a0b8776ff19b3ca429
                                        
                                            GET /images/G/01/sm/OverwatchA4/Associates_Overwatch_300x250._V505207380_.png HTTP/1.1 
Host: images-na.ssl-images-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20

                                         
                                         143.204.55.185
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 90408
Connection: keep-alive
Server: Server
Date: Tue, 17 Jul 2018 15:14:41 GMT
X-Amz-IR-Id: e5ade57d-5f8b-4792-9fcd-b54bb37ece39
Expires: Tue, 06 Jul 2038 02:07:44 GMT
Cache-Control: max-age=630720000,public
Access-Control-Allow-Origin: *
Last-Modified: Tue, 18 Jul 2017 22:44:10 GMT
Timing-Allow-Origin: https://www.amazon.com
Age: 24051367
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Id: SYimXj8d4RmgZLulfShIYwq7x5-MnTPO89kUYuK9pAmKzIIo7olKwQ==


--- Additional Info ---
Magic:  PNG image, 300 x 250, 8-bit/color RGB, non-interlaced
Size:   90408
Md5:    596b2ae3652c0b25ce11d72ff91f6d90
Sha1:   97d896a5894d9dc774fc50210c19d263502ff6ae
Sha256: f50b47c04ead53f3f94bcb6e8592d4f2647328c009d42c6a8c86840362d0bd7d
                                        
                                            GET /1/associates-ads/1/OP/?cb=1555326230843&p=%7B%22program%22%3A%221%22%2C%22tag%22%3A%22product073a-20%22%2C%22linkCode%22%3A%22ur1%22%2C%22refUrl%22%3A%22http%3A%2F%2Fbullshift.net%2Fuser%2FWilmaWoscht%2Fview%2F2017%2F07%2Fiksdeh-1499383528-502f2a3031e93e11%22%2C%22panda%22%3Atrue%7D HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         52.94.225.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
x-amzn-RequestId: 27508427-5f6e-11e9-9154-6b3f3478790e
Content-Length: 43
Date: Mon, 15 Apr 2019 11:03:51 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /1/associates-ads/1/OP/r/json?cb=1555326230842&logType=banner_impressions&p=%7B%22mobile_supported%22%3A%22true%22%2C%22action%22%3A%22onload%22%2C%22adunit_type%22%3A%22banners%22%2C%22adunit_properties%22%3A%7B%22height%22%3A%22%24%7Bheight%7D%22%2C%22width%22%3A%22%24%7Bwidth%7D%22%2C%22category%22%3A%22%24%7Bcampaigns%7D%22%2C%22marketplace%22%3A%22amazon%22%2C%22link_id%22%3A%22%24%7Blinkid%7D%22%2C%22region%22%3A%22US%22%7D%2C%22logType%22%3A%22banner_impressions%22%7D HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         52.94.225.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
x-amzn-RequestId: 274f23ff-5f6e-11e9-ae02-353a98cb7ea5
Content-Length: 43
Date: Mon, 15 Apr 2019 11:03:51 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /e/ir?l=ur1&t=product073a-20&o=1&cb=1555326230844 HTTP/1.1 
Host: ir-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         52.94.229.212
HTTP/1.1 200
Content-Type: image/gif
                                        
Connection: close
Content-Length: 42
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    accba0b69f352b4c9440f05891b015c5
Sha1:   9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
Sha256: 47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
                                        
                                            GET /e/ir?l=w61&t=&o=1&cb=15553262323750 HTTP/1.1 
Host: ir-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         52.94.229.212
HTTP/1.1 200
Content-Type: image/gif
                                        
nnCoection: close
Content-Length: 42
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    accba0b69f352b4c9440f05891b015c5
Sha1:   9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
Sha256: 47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
                                        
                                            GET /x/px/QnS4Qnm9k6pBC18h0J5QWpAAAAFqIKra_AEAAAFKAV6TRcc/?assoc_payload=%7B%22destinationURL%22%3A%22https%3A%2F%2Fimages-na.ssl-images-amazon.com%2Fimages%2FI%2F41M0U0oHTFL.jpg%22%2C%22slotNum%22%3A0%2C%22atfInFirstLoad%22%3Afalse%2C%22posX%22%3A336.5%2C%22posY%22%3A951.7000122070312%2C%22logType%22%3A%22onetag_textlink%22%2C%22assocPayloadId%22%3A%22QnS4Qnm9k6pBC18h0J5QWpAAAAFqIKra_AEAAAFKAV6TRcc%22%2C%22linkCode%22%3A%22w61%22%2C%22trackingId%22%3A%22%22%2C%22refUrl%22%3A%22http%3A%2F%2Fbullshift.net%2Fuser%2FWilmaWoscht%2Fview%2F2017%2F07%2Fiksdeh-1499383528-502f2a3031e93e11%22%7D HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/WilmaWoscht/view/2017/07/iksdeh-1499383528-502f2a3031e93e11
Cookie: ad-id=AxPbSBGQIkBHuBD0VaESYk4

                                         
                                         72.21.206.141
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 15 Apr 2019 11:03:52 GMT
Server: Server
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 43
Vary: User-Agent
Keep-Alive: timeout=2, max=19
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7