Overview

URL bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
IP62.75.148.64
ASNAS8972 PlusServer AG
Location Germany
Report completed2019-04-15 11:33:19 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-15 2 bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420 Malware
2019-04-15 2 bullshift.net/media/bullshift.js Malware
2019-04-15 2 bullshift.net/random/4/128x128/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 62.75.148.64

Date UQ / IDS / BL URL IP
2019-05-26 15:22:58 +0200
0 - 0 - 3 bullshift.net/all/view/2017/07/twimg-debtvrfv (...) 62.75.148.64
2019-05-26 12:50:46 +0200
0 - 0 - 3 bullshift.net/all/view/2017/07/imrs-php 62.75.148.64
2019-04-25 10:55:12 +0200
0 - 1 - 3 bullshift.net/user/kuddman/view/2013/09/wallp (...) 62.75.148.64
2019-04-21 17:27:22 +0200
0 - 0 - 3 bullshift.net/user/Arcanastu/view/2013/10/tum (...) 62.75.148.64
2019-04-20 09:30:02 +0200
0 - 0 - 3 bullshift.net/all/view/2017/08/quing-gao 62.75.148.64
2019-04-19 12:09:54 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2014/01/imgur-ecuaqmu 62.75.148.64
2019-04-18 03:15:34 +0200
0 - 0 - 3 bullshift.net/all/view/2017/09/lily-cole-10273 62.75.148.64
2019-04-15 13:04:19 +0200
0 - 0 - 3 bullshift.net/user/WilmaWoscht/view/2017/07/i (...) 62.75.148.64
2019-04-15 04:01:04 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2015/09/imgur-ixo2ehl 62.75.148.64
2019-04-15 03:16:59 +0200
0 - 0 - 3 bullshift.net/user/C4rp3Di3m/view/2014/03/aka (...) 62.75.148.64

Last 10 reports on ASN: AS8972 PlusServer AG

Date UQ / IDS / BL URL IP
2019-07-01 11:37:28 +0200
0 - 0 - 0 luckylife2019.online/?u=4xfkaeg&o=8mrpkza&t=wp 62.75.230.116
2019-06-30 01:22:41 +0200
0 - 0 - 0 dates-one.com 85.25.208.132
2019-06-30 01:15:39 +0200
0 - 0 - 0 winyoursuperbonus1.com 85.25.107.72
2019-06-30 01:13:48 +0200
0 - 1 - 0 talonserinme.icu/?u=h2xkd0x&o=lxkgnum&t=48 85.25.252.199
2019-06-30 00:36:05 +0200
0 - 1 - 0 talonserinme.icu 85.25.252.199
2019-06-27 13:08:39 +0200
0 - 0 - 0 talonserinme.icu/?u=h2xkd0x&o=lxkgnum&t=320 85.25.252.199
2019-06-27 09:13:06 +0200
0 - 0 - 0 https://www.altstipendiaten.de/wp-content/upl (...) 188.138.106.73
2019-06-27 05:45:27 +0200
0 - 0 - 0 winyoursuperbonus1.com/?u=d29pte4&o=vx1wemd&m (...) 85.25.107.72
2019-06-26 14:42:44 +0200
0 - 0 - 0 85.25.159.200 85.25.159.200
2019-06-25 02:51:13 +0200
0 - 1 - 0 talonserinme.icu/ 85.25.252.199

Last 10 reports on domain: bullshift.net

Date UQ / IDS / BL URL IP
2019-05-26 15:22:58 +0200
0 - 0 - 3 bullshift.net/all/view/2017/07/twimg-debtvrfv (...) 62.75.148.64
2019-05-26 12:50:46 +0200
0 - 0 - 3 bullshift.net/all/view/2017/07/imrs-php 62.75.148.64
2019-04-25 10:55:12 +0200
0 - 1 - 3 bullshift.net/user/kuddman/view/2013/09/wallp (...) 62.75.148.64
2019-04-21 17:27:22 +0200
0 - 0 - 3 bullshift.net/user/Arcanastu/view/2013/10/tum (...) 62.75.148.64
2019-04-20 09:30:02 +0200
0 - 0 - 3 bullshift.net/all/view/2017/08/quing-gao 62.75.148.64
2019-04-19 12:09:54 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2014/01/imgur-ecuaqmu 62.75.148.64
2019-04-18 03:15:34 +0200
0 - 0 - 3 bullshift.net/all/view/2017/09/lily-cole-10273 62.75.148.64
2019-04-15 13:04:19 +0200
0 - 0 - 3 bullshift.net/user/WilmaWoscht/view/2017/07/i (...) 62.75.148.64
2019-04-15 04:01:04 +0200
0 - 0 - 3 bullshift.net/user/mh/view/2015/09/imgur-ixo2ehl 62.75.148.64
2019-04-15 03:16:59 +0200
0 - 0 - 3 bullshift.net/user/C4rp3Di3m/view/2014/03/aka (...) 62.75.148.64


JavaScript

Executed Scripts (12)


Executed Evals (0)


Executed Writes (4)

#1 JavaScript::Write (size: 262, repeated: 1) - SHA256: b8ab1be808edc98a451f3f33958bc19661fd2ee1137f29bd3842f27d20e35c75

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2013/10/imgur-jhoxwao" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2013/10/128x128/imgur-jhoxwao.jpg"
width = "126"
height = "126"
alt = "2013/10/imgur-jhoxwao"
title = "mh - 24. Oct 2013 15:23" / > < /a>
                                    

#2 JavaScript::Write (size: 279, repeated: 1) - SHA256: 5b66fd22187bf4aa4d223486699d36b5f09ebe119799bccb111d654f9769d907

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2015/01/gifyoutube-yxldeo" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2015/01/128x128/gifyoutube-yxldeo.jpg"
width = "126"
height = "126"
alt = "2015/01/gifyoutube-yxldeo"
title = "makki_s - 30. Jan 2015 18:36" / > < /a>
                                    

#3 JavaScript::Write (size: 299, repeated: 1) - SHA256: e005cd0129fa8a07366278f58583627bd7cfb4bf1efa07a11f4a3145f5083a9c

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2015/08/spacetelescope-potw1534a" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2015/08/128x128/spacetelescope-potw1534a.jpg"
width = "126"
height = "126"
alt = "2015/08/spacetelescope-potw1534a"
title = "vantor - 25. Aug 2015 20:38" / > < /a>
                                    

#4 JavaScript::Write (size: 244, repeated: 1) - SHA256: dc3bd4604e467a253e1d4091cf872fa6482c35513ff7ee28736298eb1908dd37

                                        < a class = "randomThumbs"
href = "http://bullshift.net/all/view/2017/07/p-o-g-o" > < img border = "0"
src = "http://bullshift.net/data/thumbs/2017/07/128x128/p-o-g-o.jpg"
width = "126"
height = "126"
alt = "2017/07/p-o-g-o"
title = "Ye - 10. Jul 2017 15:11" / > < /a>
                                    


HTTP Transactions (41)


Request Response
                                        
                                            GET /user/Nimbus1989/view/2013/12/stancenation-420 HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3191
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3191
Md5:    584ce268f04fdbe666ed259a06f09e53
Sha1:   ec09ed5a68b01fa051559a3b06108eec369a6c23
Sha256: 5ec3022e22fcd78aa986800b6df7e59bda49f3923acb02635c4d29417d5429c3

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /media/styles.css HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Last-Modified: Thu, 27 Jul 2017 10:10:29 GMT
Etag: "2301-55549c63498cd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2322
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2322
Md5:    56bce479b9c4763051b7fb86aed725ca
Sha1:   14165ece22246bcd29eb6da9335e037701e9360f
Sha256: 50c8ed8729f2d0d998878f10f1d1244d9c0b6220fd18024748c9f0846f0ef41c
                                        
                                            GET /media/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:25 GMT
Etag: "5644-51a46ea59ac50-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4383
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4383
Md5:    82ec84cae9cde2d4d93cea7888fd1edc
Sha1:   3008267dfaa61aa7aeb2261b4108b971a7488d6f
Sha256: 12ac5423b5c0cb9dfd4c3b3e6ad8d7f600af304facfd83baa7a2e4e51c34129f
                                        
                                            GET /media/bullshift.js HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:18 GMT
Etag: "3155-51a46e9ebf5eb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3886
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3886
Md5:    f795712876e86a30ef30300d90f1c69a
Sha1:   00c65e77ba6d5dcea1d2684977da6b02d4435ad9
Sha256: 28672805003ef6e9f2932649c7835170c9e3f1cfb5e85a4c96004346f1f3dfa9

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /media/favicon.ico HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:30 GMT
Etag: "cbe-51a46eaa8843d"
Accept-Ranges: bytes
Content-Length: 3262
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   3262
Md5:    86d86d15d5fc32f157e480b596b1453c
Sha1:   a05dd726dc937f4d8a68f55ddfb98a67345e37b1
Sha256: 83e44ee79ea4aaf36f5526101b3095c59deeb7bcbe20d49e3e5fba9eee7bc4e3
                                        
                                            GET /data/avatars/5228ac8a357ad.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 11:01:02 GMT
Etag: "680-51a46f020caed"
Accept-Ranges: bytes
Content-Length: 1664
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   1664
Md5:    82a5bc87933d1913200cad64be76af34
Sha1:   65c2e89f9f81cc5f4e1c73b20c31aa5a810ff4be
Sha256: 8d1e34a2ae6af3c1022bf2cd4ac9671bc2a54ada7be50f7992fd77fd43a26094
                                        
                                            GET /media/logo.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:17 GMT
Etag: "78df-51a46e9e0f95f"
Accept-Ranges: bytes
Content-Length: 30943
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 256 x 77, 8-bit/color RGBA, non-interlaced
Size:   30943
Md5:    eb59d91f07c5225f00cae4847119b411
Sha1:   c006d08ca990fa6a6317002f8de4d4b4803e3e16
Sha256: 83dd5de983cd677ac142344237b3de809b381e92f5d014da79fd2740e979464e
                                        
                                            GET /random/4/128x128/ HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 369
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   369
Md5:    3ea34f51eac5d242ccdac72b76f86b67
Sha1:   796370312cc84d919b6e3235280064d74e1d7afc
Sha256: 127683f4573d80a86aadf744327cf875d44c53fb625c659587e0ef59d130311b

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 15 Apr 2019 08:07:09 GMT
Expires: Mon, 15 Apr 2019 10:07:09 GMT
Last-Modified: Wed, 16 Jan 2019 20:01:45 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17543
Cache-Control: public, max-age=7200
Age: 5137


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17543
Md5:    a6ce90b9145f18e7a721eb3819daaaab
Sha1:   1c422016bd20a08535d2cc37448c498cf4a0f829
Sha256: 94fe45c14a2ce4fd5f1401c835e5d63111ebf89ff58e03d6b780592f02abf778
                                        
                                            GET /widgets/onejs?MarketPlace=US&adInstanceId=761299c9-296b-4853-8d56-f715e860b67c HTTP/1.1 
Host: z-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         143.204.55.120
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Content-Length: 7324
Connection: keep-alive
Date: Mon, 15 Apr 2019 01:16:27 GMT
Server: Server
Content-Encoding: gzip
charset: UTF-8
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=300,s-maxage=300,no-transform
Expires: Mon, 15 Apr 2019 01:21:27 GMT
Pragma: Public
Cneonction: close
Age: 29779
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ccF8Zqj95fchMNPx8QbT-rq7OmzRX729gFm_hpi7qmSUPwDuJcKrew==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   7324
Md5:    6a7f2948e274dbf06c7c4e04987a75e7
Sha1:   15754ad951bacceff9d4e05fbe742d26cf5e11cc
Sha256: 63f5828982bfc212c21c79aaa34f169f9467b9fa1823ac80319f1ba360e44a61
                                        
                                            GET /r/collect?v=1&_v=j73&a=1905237575&t=pageview&_s=1&dl=http%3A%2F%2Fbullshift.net%2Fuser%2FNimbus1989%2Fview%2F2013%2F12%2Fstancenation-420&ul=en-us&de=UTF-8&dt=BMW%20M3%20E46%20Achsbruch%20Stance%20-%20bullsh!ft%20-%20oh%20my%20god%20it%27s%20the%20funky%20shit&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=IEBAAAQ~&jid=1997912790&gjid=1052359082&cid=42520268.1555320768&tid=UA-43775658-1&_gid=1869376652.1555320768&_r=1&z=725907778 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Mon, 15 Apr 2019 09:32:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /media/color.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:18 GMT
Etag: "9c-51a46e9f6ee8f"
Accept-Ranges: bytes
Content-Length: 156
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 15 x 15, 8-bit colormap, non-interlaced
Size:   156
Md5:    3212e7ea57f59f83dcb6b4eb19c51776
Sha1:   9cfb56468a1b2846679abd7edb25e2d32a9a98d4
Sha256: 969878457d759f907953cc435c83dae3af8af00973db312d0cc9f284f2a91060
                                        
                                            GET /media/search.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:31 GMT
Etag: "108-51a46eabac430"
Accept-Ranges: bytes
Content-Length: 264
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 13 x 13, 8-bit colormap, non-interlaced
Size:   264
Md5:    9aaae365bd29188104217296ac053f3a
Sha1:   ccd634bcba7c6cad361d484110e296ea6a795b14
Sha256: cdebe9506b093bf89364c68b5aeb8c9eed7277c9719f22232724c42819a9d2dc
                                        
                                            GET /data/thumbs/2015/01/128x128/gifyoutube-yxldeo.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 14:46:00 GMT
Etag: "14eb-51a4a14aac0ce"
Accept-Ranges: bytes
Content-Length: 5355
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   5355
Md5:    0724c4966039aa755ad8953c9ac31de3
Sha1:   424b66856c96c81da0702d81bfeba98ef850ad67
Sha256: 949a122574802cd64d369451204156555718f0664f01389c4c29518f391925f7
                                        
                                            GET /data/thumbs/2015/08/128x128/spacetelescope-potw1534a.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 25 Aug 2015 20:38:21 GMT
Etag: "23d2-51e28b709299b"
Accept-Ranges: bytes
Content-Length: 9170
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   9170
Md5:    3990ad373d67eb7d2542158b6bebdf8c
Sha1:   f484aeb1d66aeaf1479a88399ebe221548207773
Sha256: 3c3668b0aaa764c5c1f1e9e035e6b99a3660f2f421cb4a282a71d083943e4bb7
                                        
                                            GET /data/thumbs/2013/10/128x128/imgur-jhoxwao.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 13:03:27 GMT
Etag: "e73-51a48a5efc77e"
Accept-Ranges: bytes
Content-Length: 3699
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   3699
Md5:    87e1d5b92311658e90ec64d3f78f3463
Sha1:   066704d319d18e6d1d786bdd8de00a8eff697520
Sha256: f58848f652bf9b123c6d8420a42d8d5f9cfa33e83574df8cf6d2206ba376a7de
                                        
                                            GET /data/thumbs/2017/07/128x128/p-o-g-o.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 15:11:15 GMT
Etag: "f8d-553f7fe81234e"
Accept-Ranges: bytes
Content-Length: 3981
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   3981
Md5:    73a93c8573083df9f8a24c04707054e3
Sha1:   8ccc1559f0470e887a6664c9e5fda8b152f3b548
Sha256: 34ab2084f94eb6e1c6825aecd7481dc9143a657c7b55987ae72dd809c2fe12bc
                                        
                                            GET /media/star-base.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:29 GMT
Etag: "268-51a46ea9d8f81"
Accept-Ranges: bytes
Content-Length: 616
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 100 x 20, 8-bit/color RGBA, non-interlaced
Size:   616
Md5:    f9e8fab50aaef3fc6590d923f232df52
Sha1:   8794ae867b33202758bc96a7c6b3fd552b1c9355
Sha256: 8e66d97fd6ee850b2bd0267ef397eaadd0038deb8693f8711934441ece4c5bf6
                                        
                                            GET /media/star-current.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:30 GMT
Etag: "30e-51a46eaac29d9"
Accept-Ranges: bytes
Content-Length: 782
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 100 x 20, 8-bit/color RGBA, non-interlaced
Size:   782
Md5:    1d3fe1b48cb9432ae243c402ff075334
Sha1:   7a7cae05fdf95048d8a728e34e5eae729931d145
Sha256: 30ebb06ef358127c92521ca702f16ef731e582047b46c6cea0bb123268c4ed79
                                        
                                            GET /media/star-rate.png HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/styles.css
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:19 GMT
Etag: "3e6-51a46ea01eb1b"
Accept-Ranges: bytes
Content-Length: 998
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 100 x 20, 8-bit/color RGBA, non-interlaced
Size:   998
Md5:    ab65e291dc333a802a92d6a8b28656e3
Sha1:   871d58eb21f1e236a69c0d07c25bf49b52b1ac81
Sha256: a54c71e5b19227c0876263f1b3b5eb012daf8abf615c8167fc3faaeff5c7ca0c
                                        
                                            GET /media/font-awesome/font/fontawesome-webfont.woff?v=3.2.1 HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/media/font-awesome/css/font-awesome.min.css
Cookie: _ga=GA1.2.42520268.1555320768; _gid=GA1.2.1869376652.1555320768; _gat=1

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 10:59:26 GMT
Etag: "aa34-51a46ea6bf414"
Accept-Ranges: bytes
Content-Length: 43572
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   43572
Md5:    b683029bafe0305ac2234038a03e1541
Sha1:   12f8c193902e99348493ace32e498031bf79b654
Sha256: 18e6b5ff511b90edf098e62ac45ed9d6673a3eee10165d0de4164d4d02a3a77f
                                        
                                            GET /e/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20 HTTP/1.1 
Host: rcm-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         52.46.132.238
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: Server
Date: Mon, 15 Apr 2019 09:32:48 GMT
Content-Length: 179
Connection: keep-alive
Location: https://rcm-na.amazon-adsystem.com/e/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20


--- Additional Info ---
Magic:  HTML document text
Size:   179
Md5:    743459ab1df88bf977dc5da8df945fc9
Sha1:   e72d31d9463a93a0b199017bb12e3a0900b1a47c
Sha256: a85d064fa58d2af7a57e3eb5b3241b762f601ab1af59db29f262daa0a6191125
                                        
                                            GET /x/getad?src=330&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22overwrite%22%3A%22false%22%2C%22div_name%22%3A%22amzn-assoc-ad-761299c9-296b-4853-8d56-f715e860b67c%22%2C%22tracking_id%22%3A%22product073a-20%22%2C%22ad_type%22%3A%22one_tag%22%2C%22marketplace%22%3A%22amazon%22%2C%22enable_geo_redirection%22%3A%22true%22%2C%22enable_auto_tagging%22%3A%22false%22%2C%22region%22%3A%22US%22%2C%22placement%22%3A%22adunit%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22product073a-20%22%2C%22slotNum%22%3A0%7D&u=http%3A%2F%2Fbullshift.net%2Fuser%2FNimbus1989%2Fview%2F2013%2F12%2Fstancenation-420&jscb=amzn_assoc_jsonp_callback_adunit_0 HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         52.94.232.33
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 09:32:47 GMT
Server: Server
Set-Cookie: ad-id=A_Xdn6xWlUTejQK0_DRfeeI; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2020 09:32:48 GMT; Path=/; HttpOnly
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=18
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6764
Md5:    1a07860342d760a349936b3d23bafb34
Sha1:   55dcbfeffdb5e144098db96fdbce690f2828ba37
Sha256: 6e7489fbb1f17041f047303dcfa427bb977c184b2847d37f5320af3de2a87849
                                        
                                            GET /data/images/2013/12/stancenation-420.jpg HTTP/1.1 
Host: bullshift.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         62.75.148.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 15 Apr 2019 09:32:46 GMT
Server: Apache
Last-Modified: Tue, 07 Jul 2015 11:17:32 GMT
Etag: "110fa4-51a472b27ae33"
Accept-Ranges: bytes
Content-Length: 1118116
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1118116
Md5:    ad7682ec3a9b42879623e11f365aa1bd
Sha1:   2f55e63bd11e3efa4bbcb666519a5fded75f90b9
Sha256: addd809e00640afc8db24a8613fd5866761df2e8e0d750a94f90f7698e079488
                                        
                                            GET /x/px/QgFHkvNiKYnR5U3YhQzwg_UAAAFqIFeGngEAAAFKAYpb98g/?assoc_payload=%7B%22totalDocWidth%22%3A1159%2C%22totalDocHeight%22%3A1295%2C%22logType%22%3A%22onetag_pageload%22%2C%22pageTitle%22%3A%22BMW%20M3%20E46%20Achsbruch%20Stance%20-%20bullsh!ft%20-%20oh%20my%20god%20it%27s%20the%20funky%20shit%22%2C%22numLinks%22%3A0%2C%22numAutoTaggedLinks%22%3A0%2C%22autoTaggingEnabled%22%3Afalse%2C%22geoRedirectEnabled%22%3Atrue%2C%22disableTransitTracking%22%3Afalse%2C%22numLinksATF%22%3A0%2C%22numLinksBTF%22%3A0%2C%22shortLinksInLivePool%22%3A%22%22%2C%22shortLinksInPage%22%3A%22%22%2C%22shortLinksInLivePoolCount%22%3A0%2C%22shortLinksInPageCount%22%3A0%2C%22shortLinksMatchCount%22%3A0%2C%22assocPayloadId%22%3A%22QgFHkvNiKYnR5U3YhQzwg_UAAAFqIFeGngEAAAFKAYpb98g%22%2C%22linkCode%22%3A%22w49%22%2C%22trackingId%22%3A%22product073a-20%22%2C%22refUrl%22%3A%22http%3A%2F%2Fbullshift.net%2Fuser%2FNimbus1989%2Fview%2F2013%2F12%2Fstancenation-420%22%7D HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
Cookie: ad-id=A_Xdn6xWlUTejQK0_DRfeeI

                                         
                                         52.94.232.33
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 15 Apr 2019 09:32:48 GMT
Server: Server
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 43
Vary: User-Agent
Keep-Alive: timeout=2, max=16
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102281
Date: Mon, 15 Apr 2019 09:32:49 GMT
Etag: "5cb3232a-1d7"
Expires: Tue, 16 Apr 2019 13:57:30 GMT
Last-Modified: Sun, 14 Apr 2019 12:10:18 GMT
Server: ECS (dcb/7EA2)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: wWEoPPG1nqzgaV8fCZtANrriWJeArv_Zo45TQ2tvYJt6Gr_FXquRpQ==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fa739f1dba43ef3598d88db803348b15
Sha1:   80923e05c3800d3b9ffb0b90a8dbed8b3b71e347
Sha256: e5be7b341a3f019e9032faf92f1f1743db767a4238c04b857616ce9406c9cdde
                                        
                                            GET /e/ir?l=w49&t=product073a-20&o=1&cb=1555320768314 HTTP/1.1 
Host: ir-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
Cookie: ad-id=A_Xdn6xWlUTejQK0_DRfeeI

                                         
                                         52.46.128.194
HTTP/1.1 200
Content-Type: image/gif
                                        
nnCoection: close
Content-Length: 42
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    accba0b69f352b4c9440f05891b015c5
Sha1:   9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
Sha256: 47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
                                        
                                            GET /1/action-impressions/1/OE/associates-adsystems/action/cm_:onejs_exec_time@v=11,aax_load_time@v=404,aax_load_time_one_tag@v=404,wdgt_load_time_invoke@v=441,wdgt_load_time_invoke_one_tag@v=437,wdgt_load_time_invoke_one_tag_NO@v=437?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=65f8ae93-d4ce-42d1-b2c8-5d3985662420&session=d204a6ee-0023-4a38-b327-5194d31a4b22 HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420
Cookie: ad-id=A_Xdn6xWlUTejQK0_DRfeeI

                                         
                                         52.94.225.95
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
x-amzn-RequestId: 6f94587f-5f61-11e9-8cc4-79e5545cf800
Date: Mon, 15 Apr 2019 09:32:49 GMT


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Mon, 15 Apr 2019 09:32:50 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.8/2018-10-18)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Id: LBKKArGokCfyE5Yya4CeTPQMSR-o1pFOXF4pX_e8B_xyymx4_ql1eg==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    11488a1cc52ad8c4529aaf1ed01f7aa9
Sha1:   7ab7868c2175809c8ed2d1a1f63ef3f8bab42f9d
Sha256: 18d90b54493b96e237a5bb7f5fb8672b32f8868c7c247d5ce977489dbd65e7d6
                                        
                                            GET /e/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20 HTTP/1.1 
Host: rcm-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         52.46.132.238
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Server
Date: Mon, 15 Apr 2019 09:32:50 GMT
Content-Length: 327
Connection: keep-alive
Location: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Vary: Accept-Encoding,X-Amzn-CDN-Cache,X-Amzn-AX-Treatment,User-Agent
Content-Encoding: gzip
x-amz-rid: CNQ1N75KFRRBTCVM49J4


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   327
Md5:    eeda2ce1d787bdae51ed53143eb6c245
Sha1:   7e6fb16867cf85f0da4e0439cd4adcf6cff8234d
Sha256: b3db54206ae8b62f42f8a03c68b23144bfb29e6db0258b96abc28155abb9e5c6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135788
Date: Mon, 15 Apr 2019 09:32:50 GMT
Etag: "5cb3a8c1-1d7"
Expires: Tue, 16 Apr 2019 23:15:58 GMT
Last-Modified: Sun, 14 Apr 2019 21:40:17 GMT
Server: ECS (dcb/7EEF)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ADmJ1Zqdd5N2Yj6CrBaEJ6XT9F4kg0EO-qWD9ppQmP2I7FF3THHD3g==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    543c365270ee569ff9cfd49837c58738
Sha1:   6593029740e69d9105fe05b462e88df0b2089a6c
Sha256: a59def874afc8f10498a469dc45f37654a30e6ca9f1357f0110f2c8f721e0b08
                                        
                                            GET /widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20 HTTP/1.1 
Host: ws-na.assoc-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bullshift.net/user/Nimbus1989/view/2013/12/stancenation-420

                                         
                                         176.32.99.76
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Mon, 15 Apr 2019 09:32:50 GMT
Server: Server
Cache-Control: must-revalidate
Pragma: no-cache
Expires: -1
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
charset: UTF-8
Access-Control-Allow-Origin: *
Vary: User-Agent
nnCoection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   45682
Md5:    a64eea10f168fa6094fd2de739a74763
Sha1:   108f84d31107fb3f6b924f08f40090f356623364
Sha256: 291655ccb1bc62858b30496c5565eccd4f65af19c214e265a433114e1c045ae4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=129336
Date: Mon, 15 Apr 2019 09:32:52 GMT
Etag: "5cb39f64-1d7"
Expires: Tue, 16 Apr 2019 21:28:27 GMT
Last-Modified: Sun, 14 Apr 2019 21:00:20 GMT
Server: ECS (ams/49C1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bd7c6f30af78326d3d1f0560bb3ca717
Sha1:   55afdc8656f6fc9500ae9e87e3df70e3d818c8fa
Sha256: 107fcac78a5395dcbedbce2e5e7848eb6bcad417112d70abaf8c0478e4fcc1f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=144346
Date: Mon, 15 Apr 2019 09:32:51 GMT
Etag: "5cb3d0b2-1d7"
Expires: Wed, 17 Apr 2019 01:38:37 GMT
Last-Modified: Mon, 15 Apr 2019 00:30:42 GMT
Server: ECS (lcy/1D68)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d4b8d7b13d83c6ad012f5316ff826def
Sha1:   c760b34c61f8afb1f0bced74aff03b65b2256cd4
Sha256: 49d37c5034298192348b1afe9d410557ef90a3e31acae2f9a19309e1bfe44bde
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.14.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=564202, public, no-transform, must-revalidate
Last-Modified: Sun, 14 Apr 2019 22:12:39 +00:00
Expires: Sun, 21 Apr 2019 22:12:39 +00:00
Date: Mon, 15 Apr 2019 09:32:51 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    336be39a7e91c6882f09480625bf3c5c
Sha1:   9b95cd89293af3f28b4d79434fc469e33ad63959
Sha256: b74e6be2a8585f1207b757e5518f94b31f3d661969957c71062857a77f3c9697
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144433
Date: Mon, 15 Apr 2019 09:32:51 GMT
Etag: "5cb3c036-1d7"
Expires: Wed, 17 Apr 2019 01:40:04 GMT
Last-Modified: Sun, 14 Apr 2019 23:20:22 GMT
Server: ECS (phd/FD5A)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: uo9D2FtCMe366575kRKw80rMPCtWpWyt_gqMkTJFbzuK8mdSsaTB2A==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d187f05c5a32cede8ef02f48a33cdeba
Sha1:   9a038eaf5baffde9db44920971ca05cfff05bc45
Sha256: 9824812f678a476469c5ecf2fc779d32206bb19c8ab34b98782468f181adabe0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.153
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170768
Date: Mon, 15 Apr 2019 09:32:51 GMT
Etag: "5cb4412f-1d7"
Expires: Wed, 17 Apr 2019 08:58:59 GMT
Last-Modified: Mon, 15 Apr 2019 08:30:39 GMT
Server: ECS (phd/FD5A)
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 0o-Wv_VwOjCPMsbjE9_AOyO7aqZfOlimIA4qGjatHD1wKlJm6amRIA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    02e6d89115cd468f2b542fb58c30bfd0
Sha1:   6f3307b75363cf81fb5292a66212221d0ebc22bf
Sha256: 955166172490398feb8d3a9b95cdb3c174608d889a7306a0b8776ff19b3ca429
                                        
                                            GET /images/G/01/sm/OverwatchA4/Associates_Overwatch_300x250._V505207380_.png HTTP/1.1 
Host: images-na.ssl-images-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20

                                         
                                         143.204.55.185
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 90408
Connection: keep-alive
Server: Server
Date: Tue, 17 Jul 2018 15:14:41 GMT
X-Amz-IR-Id: e5ade57d-5f8b-4792-9fcd-b54bb37ece39
Expires: Tue, 06 Jul 2038 02:07:44 GMT
Cache-Control: max-age=630720000,public
Access-Control-Allow-Origin: *
Last-Modified: Tue, 18 Jul 2017 22:44:10 GMT
Timing-Allow-Origin: https://www.amazon.com
Age: 24045907
X-Cache: Hit from cloudfront
Via: 1.1 f079cf7999e97a7d962121c7aebf2c3c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 7Z8_lupFO0tUlQ4AqWorwLgSLraAizlFqASfSBznVg1H_zV-_ghYlw==


--- Additional Info ---
Magic:  PNG image, 300 x 250, 8-bit/color RGB, non-interlaced
Size:   90408
Md5:    596b2ae3652c0b25ce11d72ff91f6d90
Sha1:   97d896a5894d9dc774fc50210c19d263502ff6ae
Sha256: f50b47c04ead53f3f94bcb6e8592d4f2647328c009d42c6a8c86840362d0bd7d
                                        
                                            GET /1/associates-ads/1/OP/r/json?cb=1555320771206&logType=banner_impressions&p=%7B%22mobile_supported%22%3A%22true%22%2C%22action%22%3A%22onload%22%2C%22adunit_type%22%3A%22banners%22%2C%22adunit_properties%22%3A%7B%22height%22%3A%22%24%7Bheight%7D%22%2C%22width%22%3A%22%24%7Bwidth%7D%22%2C%22category%22%3A%22%24%7Bcampaigns%7D%22%2C%22marketplace%22%3A%22amazon%22%2C%22link_id%22%3A%22%24%7Blinkid%7D%22%2C%22region%22%3A%22US%22%7D%2C%22logType%22%3A%22banner_impressions%22%7D HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Cookie: ad-id=A_Xdn6xWlUTejQK0_DRfeeI

                                         
                                         52.94.225.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
x-amzn-RequestId: 70c2ecda-5f61-11e9-9154-6b3f3478790e
Content-Length: 43
Date: Mon, 15 Apr 2019 09:32:51 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /1/associates-ads/1/OP/?cb=1555320771207&p=%7B%22program%22%3A%221%22%2C%22tag%22%3A%22product073a-20%22%2C%22linkCode%22%3A%22ur1%22%2C%22refUrl%22%3A%22http%3A%2F%2Fbullshift.net%2Fuser%2FNimbus1989%2Fview%2F2013%2F12%2Fstancenation-420%22%2C%22panda%22%3Atrue%7D HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Cookie: ad-id=A_Xdn6xWlUTejQK0_DRfeeI

                                         
                                         52.94.225.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
x-amzn-RequestId: 70bf91fa-5f61-11e9-bd79-d125ddeb6f58
Content-Length: 43
Date: Mon, 15 Apr 2019 09:32:51 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /e/ir?l=ur1&t=product073a-20&o=1&cb=1555320771208 HTTP/1.1 
Host: ir-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws-na.assoc-amazon.com/widgets/cm?o=1&p=12&l=ur1&category=twitchprime&banner=025E4WXKK5G4EXYGDD02&f=ifr&lc=pf4&linkID=9eaa49e8934d1b404cac182188e8b513&t=product073a-20&tracking_id=product073a-20
Cookie: ad-id=A_Xdn6xWlUTejQK0_DRfeeI

                                         
                                         52.46.128.194
HTTP/1.1 200
Content-Type: image/gif
                                        
Connection: close
Content-Length: 42
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    accba0b69f352b4c9440f05891b015c5
Sha1:   9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
Sha256: 47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292