Overview

URL knkzz.lyfd2xzauti9d8p.bapb.gdn/REI495slmGF.html
IP45.32.80.89
ASNAS20473 Choopa, LLC
Location Netherlands
Report completed2018-01-13 18:37:37 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-01-13 2 knkzz.lyfd2xzauti9d8p.bapb.gdn/REI495slmGF.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 45.32.80.89

Date UQ / IDS / BL URL IP
2018-01-23 09:58:11 +0100
0 - 0 - 2 jepzz.ouasflpydty21tf.bapb.gdn/ 45.32.80.89
2018-01-23 09:55:05 +0100
0 - 0 - 2 eidzz.lyfd2xzauti9d8p.bapb.gdn/ 45.32.80.89
2018-01-23 08:55:37 +0100
0 - 0 - 2 fu8zz.6hqk9cjhg.bapb.gdn/ 45.32.80.89
2018-01-23 07:54:51 +0100
0 - 0 - 2 rfvzz.lyfd2xzauti9d8p.bapb.gdn/ 45.32.80.89
2018-01-23 03:11:18 +0100
0 - 0 - 2 z3vzz.ouasflpydty21tf.bapb.gdn/ 45.32.80.89
2018-01-23 02:06:49 +0100
0 - 0 - 2 8dazz.ouasflpydty21tf.bapb.gdn/ 45.32.80.89
2018-01-22 16:03:57 +0100
0 - 0 - 2 x8nzz.ouasflpydty21tf.bapb.gdn/ 45.32.80.89
2018-01-22 08:56:26 +0100
0 - 0 - 2 qskzz.6hqk9cjhg.bapb.gdn/ 45.32.80.89
2018-01-22 06:26:22 +0100
2 - 0 - 1 tftzz.ouasflpydty21tf.bapb.gdn/HON949sweeps1D (...) 45.32.80.89
2018-01-22 06:26:21 +0100
0 - 0 - 2 tftzz.ouasflpydty21tf.bapb.gdn/ 45.32.80.89

Last 10 reports on ASN: AS20473 Choopa, LLC

Date UQ / IDS / BL URL IP
2018-10-18 08:34:23 +0200
2 - 0 - 0 www.ass1st.com/ 107.191.33.74
2018-10-18 07:45:46 +0200
0 - 0 - 0 devexpress.com 66.55.147.30
2018-10-18 07:43:21 +0200
0 - 0 - 0 devexpress.com 66.55.147.30
2018-10-18 05:25:53 +0200
2 - 0 - 0 ass1st.com/tag/joyful 107.191.33.74
2018-10-18 05:10:54 +0200
2 - 0 - 0 ass1st.com/tag/floorsex 107.191.33.74
2018-10-18 04:55:10 +0200
2 - 1 - 0 ass1st.com/fuck_my_ass/27798/Horny_Mom_Made_B (...) 107.191.33.74
2018-10-18 04:41:10 +0200
2 - 0 - 0 www.ass1st.com/fuck_my_ass/17080/Dont_Go_in_t (...) 107.191.33.74
2018-10-18 04:35:52 +0200
2 - 0 - 0 ass1st.com/fuck_my_ass/36574/Boy_Went_Quietly (...) 107.191.33.74
2018-10-18 04:21:29 +0200
2 - 2 - 0 www.ass1st.com/fuck_my_ass/41649/Hypnotized_H (...) 107.191.33.74
2018-10-18 04:01:49 +0200
2 - 0 - 0 www.ass1st.com/47584/Amateur_Hot_Ass_Girls_Fu (...) 107.191.33.74

No other reports on domain: bapb.gdn



JavaScript

Executed Scripts (24)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 884, repeated: 1) - SHA256: 8fcf61e7ebca9eb2f22e83313913df274c675015294f53841e3ae1cef79a994e

                                        < img height = "1"
width = "1"
border = "0"
alt = ""
src = "https://www.googleadservices.com/pagead/conversion/1038302480/?random=1515865419351&cv=8&fst=1515865419351&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&ref=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair"
style = "display:none" / >
                                    


HTTP Transactions (53)


Request Response
                                        
                                            GET /REI495slmGF.html HTTP/1.1 
Host: knkzz.lyfd2xzauti9d8p.bapb.gdn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         45.32.80.89
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 13 Jan 2018 17:43:38 GMT
Transfer-Encoding: chunked
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: ci_session=wjAmxLA0lV0WetjSDDOfz25QzA8cs0%2Bn%2BHS24TscCy6Ty0cS9gKg1qvuyKC1NDy9ESUEOezsqtPm6sILTWyOFd0vyPSAw8FoV8q0Ps%2FEowmQquiSB80HHiFzZ%2BxpaMSY0cb6x8c%2BNvogc2uV7DKgGtI1oB4j5fLH5uJEPOd5pUp%2FpsESIN9Ioy8JVQE4zIz%2B0tqQvpKhII%2FGgJLGZyeulZMy%2FmXcHBf2l4Qo1NNs9ZNP3B3ufV2wCSYz7n4EZQC73n8BE2uOXp9OioivA1cZUycerDzinC7Wj1rHGFkKfmD6bm3VhcISgbFvQBStJsD4Yf4wFI1g0NkHTzc%2F5IZ%2F%2FDlrAjFvMJWNWEVlpuUNGP5OXgt%2BN%2FTVrepdaDO4pkhe8XMOmU4Jk5gCrr62PVL7Va7HF2V6AavGfmBj18uYULQ%3D; expires=Sun, 14-Jan-2018 17:43:36 GMT; Max-Age=86400; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn click_id_mini7408-f889-11e7-bfaa-52d4135f64e6=4870761a-f889-11e7-87c6-bdfcae431b63 id=noid; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn SITE_ID=94054701; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn sov=94054701; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn tov=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn mov=pcproblems.mini; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn redid=0; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn campaign_id=0; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn gsid=0; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn pid=0; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn impid=mini7408-f889-11e7-bfaa-52d4135f64e6; expires=Sun, 14-Jan-2018 17:45:16 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn URI=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn cl=4870761a-f889-11e7-87c6-bdfcae431b63; expires=Sun, 14-Jan-2018 17:45:17 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn cl=4870761a-f889-11e7-87c6-bdfcae431b63; expires=Sun, 14-Jan-2018 17:45:17 GMT; Max-Age=86500; path=/; domain=.knkzz.lyfd2xzauti9d8p.bapb.gdn
X-Source: Mini
X-Sov: 94054701
X-Jump: REI495slmGF.html
X-Jump-Data: a:13:{s:2:"id";s:5:"33802";s:3:"geo";s:2:"GF";s:4:"name";s:14:"Reimage slm GF";s:6:"weight";s:3:"100";s:4:"slug";s:16:"REI495slmGF.html";s:11:"landingpage";s:111:"http://www.reimageplus.com/includes/router_land.php?tracking=YTZ&adgroup={S2S2}&context={S2S}&lpx=slm{noexit=1}";s:5:"subid";s:4:"MINI";s:8:"redirect";s:2:"JS";s:4:"type";s:3:"slm";s:8:"offer_id";s:0:"";s:7:"network";s:3:"495";s:7:"account";s:3:"614";s:3:"pos";s:3:"100";}
X-Jump-Redirect: http://www.reimageplus.com/includes/router_land.php?tracking=YTZ&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&context=4870761a-f889-11e7-87c6-bdfcae431b63&lpx=slm{noexit=1}
X-Jump-Vars: a:1:{i:0;a:2:{i:0;s:10:"{noexit=1}";i:1;s:8:"noexit=1";}}
X-Jump-To: http://www.reimageplus.com/includes/router_land.php?tracking=YTZ&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&context=4870761a-f889-11e7-87c6-bdfcae431b63&lpx=slm
Expires: Mon, 01 Jan 2001 00:00:00 GMT
Cache-Control: no-cache
Pragma: no-cache
Location: http://www.reimageplus.com/includes/router_land.php?tracking=YTZ&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&context=4870761a-f889-11e7-87c6-bdfcae431b63&lpx=slm


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /includes/router_land.php?tracking=YTZ&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&context=4870761a-f889-11e7-87c6-bdfcae431b63&lpx=slm HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:38:38 GMT
Location: /land/sqi/index.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; expires=Wed, 14-Mar-2018 17:38:38 GMT; path=/ _testcookie=test; expires=Sat, 13-Jan-2018 17:44:38 GMT; path=/ one_time_package=true; expires=Wed, 17-Jan-2018 17:38:38 GMT; path=/; domain=reimageplus.com _master_srcid_ytz=364; expires=Wed, 17-Jan-2018 17:38:38 GMT; path=/; domain=reimageplus.com _srcid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _srcid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ reward_ab=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com reward_ab=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ rmo=true; expires=Tue, 27-Feb-2018 17:38:38 GMT; path=/; domain=reimageplus.com marketnetwork_subid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com
Content-Length: 22


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    a0501a98ab1b294fd669c2ecd1b8c027
Sha1:   ecd8ceda437c617578af895ce922b9497f20938b
Sha256: cada81a8faf83daa504d843d0795ec58a6f77bd94a28345385cdb54cef383832
                                        
                                            GET /land/sqi/index.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Content-Security-Policy: script-src 'self' 'nonce-c87b01b3ffe6f79cdbc0a66a1bb5a94b' *.reimage.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Encoding: gzip
Content-Security-Policy: script-src 'self' 'nonce-c87b01b3ffe6f79cdbc0a66a1bb5a94b' *.reimage.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Date: Sat, 13 Jan 2018 17:38:38 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: PHPSESSID=o6ff37rf0ch22lscg0sjhseov7; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _testcookie=test; expires=Sat, 13-Jan-2018 17:44:38 GMT; path=/
X-Webkit-CSP: script-src 'self' 'nonce-c87b01b3ffe6f79cdbc0a66a1bb5a94b' *.reimage.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Length: 3971


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3971
Md5:    beb8360bfb4776c9dadaa66c411c604f
Sha1:   cd062431ab22419f591519b3c5ee9b542d265ec2
Sha256: c866116f143ae079feaedea6710c6bbff2185cb6229517f3ba47e7d03d86baa0
                                        
                                            GET /ajax/libs/jquery/1.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29839
Date: Sun, 10 Dec 2017 19:16:33 GMT
Expires: Mon, 10 Dec 2018 19:16:33 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 2932025


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29839
Md5:    9a9b2acb8c0cf46985e07996f688b43d
Sha1:   341c927be8f8344f30afb46d49ce6b5e3da62c7d
Sha256: 0b1e12a7712d7b092fd5e1b2724d6e248670ff82620ec75e24105b6b127e3ca8
                                        
                                            GET /land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true; PHPSESSID=o6ff37rf0ch22lscg0sjhseov7

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Content-Security-Policy: script-src 'self' 'nonce-fb3da7e9ef0a8a4a7b20c67a96da12c4' *.reimage.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Encoding: gzip
Content-Security-Policy: script-src 'self' 'nonce-fb3da7e9ef0a8a4a7b20c67a96da12c4' *.reimage.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Date: Sat, 13 Jan 2018 17:38:38 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm; expires=Wed, 14-Mar-2018 17:38:38 GMT; path=/ _testcookie=test; expires=Sat, 13-Jan-2018 17:44:38 GMT; path=/
X-Webkit-CSP: script-src 'self' 'nonce-fb3da7e9ef0a8a4a7b20c67a96da12c4' *.reimage.com *.websecurity.norton.com *.googleapis.com *.doubleclick.net *.ywxi.net *.inspectlet.com *.googleadservices.com privacy-policy.truste.com;object-src 'self' *.reimage.com *.reimageplus.com;frame-src 'self' *.reimage.com *.reimageplus.com *.mcafeesecure.com;img-src 'self' data: *.reimage.com *.reimageplus.com *.websecurity.norton.com *.scanalert.com *.googleadservices.com *.doubleclick.net *.ywxi.net *.google.com *.google.co.il privacy-policy.truste.com; cookie-scope reimageplus.com;
Content-Length: 7150


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7150
Md5:    c919ad28fe549f6ba2496f81415234c9
Sha1:   aa52e9ef5737af2418be6e2e8c45cbdf551bd26d
Sha256: 8495d3347221de87d13d10f74017066f440409ec241abf33aa4e8425af7c504a
                                        
                                            GET /meter/www.reimageplus.com/23.gif HTTP/1.1 
Host: images.scanalert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.85.240.72
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Content-Length: 4438
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 16:45:09 GMT
Expires: Sat, 13 Jan 2018 17:45:09 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Age: 3510
X-Cache: Hit from cloudfront
Via: 1.1 efc12fd327e76ab48012cf50cecfdff8.cloudfront.net (CloudFront)
X-Amz-Cf-Id: qEfhqOd_4UdUXIYfxRw8d5buTsYmpoqwg8MqzPNhVPQAhQX1iul6gw==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4438
Md5:    fa3d122c457d690ccf5362035a6e67c5
Sha1:   f671624c1a9d65489824fb31b0afcda0d726c266
Sha256: 2bebbc310173b08beb116460bfae710d2db178910a7e3f7b25cad3efe6d247cc
                                        
                                            GET /land/sqi/css/style.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true; PHPSESSID=o6ff37rf0ch22lscg0sjhseov7; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:38:38 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Mon, 24 Jul 2017 14:46:47 GMT
Content-Length: 2360


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2360
Md5:    907ac3f42d6cd96773694383ee1e43a9
Sha1:   fc613c19e8d6765398e7ac77d767764df20f91f6
Sha256: 80d2ed003ef10c811dcc1a072c6a94abf36559158bb1743039349b8bfd4114bb
                                        
                                            GET /website/newwebsite/lp/sqh/Win7.gif HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783273
Cache-Control: max-age=86400
Content-Length: 3059
X-HW: 1515865419.dop015.sk1.t,1515865419.cds006.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:33 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 60 x 62
Size:   3059
Md5:    72edefcd39d81e6d207b19834e6941ef
Sha1:   03e824da65cf1fbb8849c06df5fee4f753d3d8ce
Sha256: 41e53e6880391a2ffdcecfc04969e62ade0e3383c54aed8c281a3c5c122a5f3c
                                        
                                            GET /website/newwebsite/lp/sqh/page-header.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783260
Cache-Control: max-age=86400
Content-Length: 28164
X-HW: 1515865419.dop011.sk1.t,1515865419.cds036.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:20 GMT


--- Additional Info ---
Magic:  PNG image, 1484 x 34, 8-bit/color RGB, non-interlaced
Size:   28164
Md5:    72eb11363a557a2d01e4fc9e453e0d93
Sha1:   0bc01fa850199e45985fc2c05036c2daaea1cc19
Sha256: 104c8b1b981bed8968301cd28d4daf83d09dbc23b51a862ab6ebb9e59cc0f785
                                        
                                            GET /assets/styles/jquery.fancybox/jquery.fancybox-2.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true; PHPSESSID=o6ff37rf0ch22lscg0sjhseov7; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:38:38 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Connection: Keep-Alive
Content-Length: 1606


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1606
Md5:    39c87544233ef0fafef3816c7dc083d1
Sha1:   b5a214c16e29bb922d7dd247c8cd4ab32a48ec15
Sha256: e39857dbe26db2b9569d4ee2d3246135a51f76684c0caa76a4b7ba1d63f0b8ea
                                        
                                            GET /website/newwebsite/lp/sqh/patent.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783261
Cache-Control: max-age=86400
Content-Length: 9406
X-HW: 1515865419.dop015.sk1.t,1515865419.cds029.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:21 GMT


--- Additional Info ---
Magic:  PNG image, 95 x 43, 8-bit/color RGBA, interlaced
Size:   9406
Md5:    a325c56ac5095d3459a31023cbddaad8
Sha1:   77d2ce1eaa9775d901dc79a329d324c5f20f0e75
Sha256: 2e7c88199f79f7ee899df4333e85ea8959c6b156c1ea96dc0f0a1d3fe7d48f0e
                                        
                                            GET /website/newwebsite/lp/sqh/button_download_anim.gif HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783237
Cache-Control: max-age=86400
Content-Length: 13233
X-HW: 1515865419.dop011.sk1.t,1515865419.cds056.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:13:57 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 266 x 64
Size:   13233
Md5:    a415393521909e0c856acf0e00116630
Sha1:   6210356d1cd38ecf31de48c746a650418e41a520
Sha256: 031e1fb30c05d97c39bd6db7a4c99b4fd96fcfad71c9f2ffdffc8cd19e4012fe
                                        
                                            GET /website/newwebsite/lp/sqh/step2-bg-trans.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783268
Cache-Control: max-age=86400
Content-Length: 7025
X-HW: 1515865419.dop011.sk1.t,1515865419.cds061.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:28 GMT


--- Additional Info ---
Magic:  PNG image, 138 x 122, 8-bit/color RGBA, non-interlaced
Size:   7025
Md5:    d5ee2f43e2a023082f436ecbd1bdc481
Sha1:   fba3f6e488539af100ab96bac877064732320921
Sha256: 11d91f55b1674e173ddfe06eb57ae85fa33a6cff7af1302f507ac242d07a80d8
                                        
                                            GET /website/newwebsite/lp/sqh/step1-bg-trans.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783266
Cache-Control: max-age=86400
Content-Length: 3300
X-HW: 1515865419.dop015.sk1.t,1515865419.cds062.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:26 GMT


--- Additional Info ---
Magic:  PNG image, 58 x 90, 8-bit/color RGBA, non-interlaced
Size:   3300
Md5:    1d15fb682fe3dff47991aa9751a875b9
Sha1:   8eb2b2cf19fe82e7188aeee5ce0e9b9da1906103
Sha256: b8755dc875e0a34693d2a5d357d9bff4d5f19d7c2a2d5134dc628a3f61caf000
                                        
                                            GET /website/newwebsite/lp/sqh/box-bg.gif HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783236
Cache-Control: max-age=86400
Content-Length: 1854
X-HW: 1515865419.dop008.sk1.t,1515865419.cds047.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:13:56 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 5 x 187
Size:   1854
Md5:    8ff2fa6eb2a493a50bd5d1e62ca65aab
Sha1:   a417692e32fd2191007dbe0d720bd47f3944f5f5
Sha256: 29bb9c83e89d0bc33f498d269d352e39d2685903a1edf1f01b2b48f6830b10c8
                                        
                                            GET /website/newwebsite/lp/sqh/green_v.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783247
Cache-Control: max-age=86400
Content-Length: 1600
X-HW: 1515865419.dop006.sk1.t,1515865419.cds033.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:07 GMT


--- Additional Info ---
Magic:  PNG image, 17 x 18, 8-bit/color RGB, non-interlaced
Size:   1600
Md5:    2008cbae40db2b500152c7dafd984d93
Sha1:   b96943808ebecacadb2854638340c44ed81f5131
Sha256: 9d67b141e9910fc9573bb40f0da15b37a07f321f364b49d248dd04b051b94cfe
                                        
                                            GET /website/newwebsite/lp/sqh/left-line1.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783252
Cache-Control: max-age=86400
Content-Length: 1408
X-HW: 1515865419.dop011.sk1.t,1515865419.cds033.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:12 GMT


--- Additional Info ---
Magic:  PNG image, 19 x 18, 8-bit/color RGB, non-interlaced
Size:   1408
Md5:    51e96eb80b3315a78a3c263128863f80
Sha1:   298c6e6342d078787d2faed5a9c72fbb52b69608
Sha256: b331acc4c4aa2a03b8285ea5c5713d0fc0a1b8afab057511942b984af3a94c33
                                        
                                            GET /website/newwebsite/lp/sqh/left-line2.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783253
Cache-Control: max-age=86400
Content-Length: 1769
X-HW: 1515865419.dop015.sk1.t,1515865419.cds010.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:13 GMT


--- Additional Info ---
Magic:  PNG image, 20 x 20, 8-bit/color RGB, non-interlaced
Size:   1769
Md5:    f0cbc1f1348e5a7dd71117fff276b24c
Sha1:   2727805dff980bd62185470382b842811d4318fb
Sha256: b0eed672ea60ec55d4d9cf2d35704334217a77c07b6dcaadc8c5e6aa67cfedfd
                                        
                                            GET /website/newwebsite/lp/sqh/step-bg.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783269
Cache-Control: max-age=86400
Content-Length: 18292
X-HW: 1515865419.dop005.sk1.t,1515865419.cds028.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:29 GMT


--- Additional Info ---
Magic:  PNG image, 275 x 61, 8-bit/color RGB, non-interlaced
Size:   18292
Md5:    7b6e60e77c3654a847d5081395960cf5
Sha1:   c796375204359b947c6b62ebfbaccaaa7680b8b8
Sha256: 33c28e008ac3729e9b12dbc10be193b77e16a41a6c3693d4082858d3cba92e59
                                        
                                            GET /website/newwebsite/lp/sqh/left-line3.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783254
Cache-Control: max-age=86400
Content-Length: 1674
X-HW: 1515865419.dop008.sk1.t,1515865419.cds058.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:14 GMT


--- Additional Info ---
Magic:  PNG image, 19 x 20, 8-bit/color RGB, non-interlaced
Size:   1674
Md5:    39494baf3c541996c3b3bb06283fdb46
Sha1:   62ff085ad2b7373d5f11b5b069cd7a583d3e863f
Sha256: 4e23b54f1144c274b359d7ef5c60d49a82bd6e060896e6b5816a779fe0eb6cb1
                                        
                                            GET /website/newwebsite/lp/sqh/left-line4.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783255
Cache-Control: max-age=86400
Content-Length: 1694
X-HW: 1515865419.dop006.sk1.t,1515865419.cds036.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:15 GMT


--- Additional Info ---
Magic:  PNG image, 21 x 21, 8-bit/color RGB, non-interlaced
Size:   1694
Md5:    5e66342138a9e7fe493159cd1d022c7f
Sha1:   4644e410677f717a372309dcaec4e0040e0869f5
Sha256: 6ef1d9b7114972450bc65ef971b9f1b6bcda9a14dfdacd0d2eef5982ab13bbd6
                                        
                                            GET /website/newwebsite/lp/sqh/left-line5.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783256
Cache-Control: max-age=86400
Content-Length: 1491
X-HW: 1515865419.dop011.sk1.t,1515865419.cds041.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:16 GMT


--- Additional Info ---
Magic:  PNG image, 18 x 17, 8-bit/color RGB, non-interlaced
Size:   1491
Md5:    a59e741ab3d51d4e1e5ba30b0a7b29a8
Sha1:   8ceb645eaf53da45d0308de878c665ab9b2c6359
Sha256: 79c1403f2c097fe69db72c4a7f7200093781ee005dfd6c6cb2b4c6d6f10e389a
                                        
                                            GET /website/newwebsite/lp/sqh/free-scan.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783246
Cache-Control: max-age=86400
Content-Length: 2049
X-HW: 1515865419.dop015.sk1.t,1515865419.cds043.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:06 GMT


--- Additional Info ---
Magic:  PNG image, 30 x 24, 8-bit/color RGB, non-interlaced
Size:   2049
Md5:    8c7d05b98e6f2d5fbf1c60adffeea4f2
Sha1:   6149378a53addf1878bfaeab1b0e89c0c8db3b83
Sha256: 158bdf06a0618d1484c272c35bf6eeed158a9440ae9b12ac74dd66c7ba435dd8
                                        
                                            GET /website/newwebsite/lp/sqh/cloud.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783238
Cache-Control: max-age=86400
Content-Length: 2816
X-HW: 1515865419.dop006.sk1.t,1515865419.cds036.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:13:58 GMT


--- Additional Info ---
Magic:  PNG image, 46 x 38, 8-bit/color RGB, non-interlaced
Size:   2816
Md5:    37b3f2641ececb4eda59252b1a621eb7
Sha1:   5911bfd3a30a6b3b2d83ac8e9ffe631c0c4e5039
Sha256: c2ebc7735534bd0e5708bfae2406b4cfcdbdc7f6ab7bf8838aba82023383269c
                                        
                                            GET /website/newwebsite/lp/sqh/improve-pc.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783249
Cache-Control: max-age=86400
Content-Length: 1390
X-HW: 1515865419.dop008.sk1.t,1515865419.cds019.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:09 GMT


--- Additional Info ---
Magic:  PNG image, 25 x 25, 8-bit/color RGB, non-interlaced
Size:   1390
Md5:    a33103966c40c7af0394283801707874
Sha1:   e49748cd9d3b4966984dc25acd8a688828210390
Sha256: da2871c4669d112fb708df1920f01a6aefdd5f257ef87cdfd3b424fc8eb2be59
                                        
                                            GET /website/newwebsite/lp/sqh/repair-win.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/css/style.css

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1464783264
Cache-Control: max-age=86400
Content-Length: 2179
X-HW: 1515865419.dop005.sk1.t,1515865419.cds028.sk1.c
Last-Modified: Wed, 01 Jun 2016 12:14:24 GMT


--- Additional Info ---
Magic:  PNG image, 27 x 28, 8-bit/color RGB, non-interlaced
Size:   2179
Md5:    5851745de354765e2125f096e27ae2a2
Sha1:   c894df89fada34d309a6774ddc9babf725934ed6
Sha256: e51e18fcf47fa9b6b5bf724f6a9655c25a05d215afba827f205aaeb47642d87a
                                        
                                            GET /pagead/conversion.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 13 Jan 2018 17:43:39 GMT
Expires: Sat, 13 Jan 2018 17:43:39 GMT
Cache-Control: private, max-age=3600
Etag: 14508013532835460676
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 7077
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7077
Md5:    d5ba08b106d0586afe594b5e7beeee2b
Sha1:   f6862553b57d567656d862eadf66f8585339b1cc
Sha256: 5cb73221c093630951904128190acb167d17fc8af608bb604357c3b85bdbf25a
                                        
                                            GET /dc.js HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sat, 13 Jan 2018 16:42:00 GMT
Expires: Sat, 13 Jan 2018 18:42:00 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17097
Age: 3699
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17097
Md5:    e87394fa07bb9bd4a8e654e7038940f0
Sha1:   b0634dcf6cf8a79c053539aa127a6356463cfa2b
Sha256: 7d066315a55b9a3006b655cb7e9210daba369d9c56ad751f061612c4078d987a
                                        
                                            GET /assets/scripts/jquery.fancybox/jquery.fancybox-2.js HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true; PHPSESSID=o6ff37rf0ch22lscg0sjhseov7; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache/2.2.15 (CentOS)
Date: Sat, 13 Jan 2018 17:38:39 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Sun, 07 Jun 2015 06:06:18 GMT
Content-Length: 48716


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   48716
Md5:    932c065e6c0658681ca19a34d45981f4
Sha1:   7e10f6aba5d7bc1b21e0c62ba107ac5593c039d8
Sha256: 1a2da275a2f66503da340a4b38a064c5329d8b3f03eb057dee553786482c4874
                                        
                                            GET /website/newwebsite/lp/sys/reimage-repair-software-screen.en.png HTTP/1.1 
Host: cdnrep.reimage.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 13 Jan 2018 17:43:39 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: 1390487880
Cache-Control: max-age=86400
Content-Length: 38615
X-HW: 1515865419.dop015.sk1.t,1515865419.cds055.sk1.c
Last-Modified: Thu, 23 Jan 2014 14:38:00 GMT


--- Additional Info ---
Magic:  PNG image, 270 x 194, 8-bit/color RGB, non-interlaced
Size:   38615
Md5:    bee784d55ec18bbbb78d9cf551c0105f
Sha1:   e1b6cf0968e124fdc1089668a97c619c1a3ae0da
Sha256: ce64b3df68854a7dd3bc367bcd76ead89fec756099f139e8098597abc9172d8e
                                        
                                            GET /r/__utm.gif?utmwv=5.7.1dc&utms=1&utmn=983261574&utmhn=www.reimageplus.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Reimage%20Repair&utmhid=16632255&utmr=0&utmp=%2Fland%2Fsqi%2Findex_src.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&utmht=1515865419996&utmac=UA-24411584-1&utmcc=__utma%3D141870001.311526446.1515865420.1515865420.1515865420.1%3B%2B__utmz%3D141870001.1515865420.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1684724506&utmredir=3&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sat, 13 Jan 2018 17:43:40 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /js/1.js HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.85.240.31
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 185
Connection: keep-alive
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:34:31 GMT
Expires: Sat, 13 Jan 2018 18:34:31 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Age: 552
X-Cache: Hit from cloudfront
Via: 1.1 844de3d616579278fb702fc6b9b5c9a3.cloudfront.net (CloudFront)
X-Amz-Cf-Id: -AcoTENv3PW3plTdpDlJqWFAzIKTypjfsQv78mrERZ-79E54Wt_LVg==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   185
Md5:    4d812a3607e98ad0abbdf8a96036bfaf
Sha1:   3dc3f974d8694a091035641437b34edee2b36810
Sha256: b11d34e52eaea38c6e02687c6649cf608f2b9c156a6cb78d3be36141090580f6
                                        
                                            GET /js/host-loader.js?h=www.reimageplus.com HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.85.240.31
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 287
Connection: keep-alive
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:28:45 GMT
Expires: Sat, 13 Jan 2018 18:28:46 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Age: 896
X-Cache: Hit from cloudfront
Via: 1.1 844de3d616579278fb702fc6b9b5c9a3.cloudfront.net (CloudFront)
X-Amz-Cf-Id: SGjHzAVFpQr0GXJVj5ByAwOp0crUI0zckpjHdsnm_7PxsN7v-PrG5A==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   287
Md5:    4131bb3549afe5f05f6e8c9eb2244c60
Sha1:   7c2f3a4f1c9d606b9bf106d255d69b4b7a36a4f6
Sha256: d37913ce2052b4f60b1c88183b8e2df6718b692deb00567ef41fcdd4fd4edbba
                                        
                                            GET /js/host.js?v=20180111103801875617&h=reimageplus.com HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.85.240.31
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 2032
Connection: keep-alive
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:00:03 GMT
Expires: Sat, 13 Jan 2018 18:00:03 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Age: 2620
X-Cache: Hit from cloudfront
Via: 1.1 844de3d616579278fb702fc6b9b5c9a3.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Oy3TNIE07E7CdIM9f5Ayd7QN8C0u_Ogx9Lj4HNHnXp3R-P0MXUSnSA==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2032
Md5:    2245bc613ea6489264d57f59a36aa6e6
Sha1:   b7b4dbf7a586e00b3e2e1cff9f2874bb9a5fb896
Sha256: 3591b6badac6feb492fdfc5f0c47f5b6bf309327a4d730c7ebfeb8432ebfe4c2
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Jan 2018 17:43:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ceabca1335dd1241e48d0c9f57d39805
Sha1:   1347adb0404c692d313dd49c7d4b8b7a553102e9
Sha256: a83b082ccd68da4df05b6ed21eaefd5e4270519774d190bb71e526c8b985cb74
                                        
                                            GET /static/img/tm-float-bg-right-bottom.png HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.85.240.31
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Content-Length: 550
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Date: Sat, 14 Oct 2017 11:33:43 GMT
Etag: "Dvhx4vFj2uh"
Expires: Sun, 15 Oct 2017 11:33:44 GMT
Last-Modified: Sat, 22 Apr 2017 16:43:58 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Age: 22191
X-Cache: Hit from cloudfront
Via: 1.1 844de3d616579278fb702fc6b9b5c9a3.cloudfront.net (CloudFront)
X-Amz-Cf-Id: hoks4-nbWuRHtg0FL9SfR1VduaJhi2ItvBtZfW0Eu6f4_3ito1mjWw==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   550
Md5:    ed23dbfc5300b3f678a51fc624eee67f
Sha1:   1e9d77897cece332eb98cb89c05451195eeed2ee
Sha256: 6424276b916cc328aa6b20193e461cde11284748a1b0d845154dec4f1f5ad0ac
                                        
                                            GET /tm/img/float2-right.png?h=reimageplus.com&d=20180113 HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.85.240.31
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Content-Length: 10714
Connection: keep-alive
Cache-Control: public, max-age=86400, public
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 00:51:44 GMT
Expires: Sat, 13 Jan 2018 02:51:44 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Age: 60715
X-Cache: Hit from cloudfront
Via: 1.1 f46b6835a58763129c9d1db5dc3ef62f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: uqbYk6y7UT6wfmDRvSV_v2E0xUGF8CfeZI3uaeWIRPZecL74NDZfnQ==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   10714
Md5:    149dae4e816c3b30ce62d1e53c4043a4
Sha1:   cee245bc488d67c3ee9a5ad73d5542b29e915458
Sha256: 9f4b9dfea71a492924aa0e4ae86eef48ffca36d67dc3deec8c9bf695e2244419
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Jan 2018 17:43:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         52.85.243.214
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sat, 13 Jan 2018 17:43:40 GMT
Etag: "5a58e28a-1d7"
Expires: Mon, 15 Jan 2018 17:43:40 GMT
Last-Modified: Fri, 12 Jan 2018 16:30:02 GMT
Server: ECS (lga/13AD)
X-Cache: Miss from cloudfront
Via: 1.1 c7b77c915dff1aaf04e31040a3e9f3ed.cloudfront.net (CloudFront)
X-Amz-Cf-Id: uKGYZA3etI4LtbR1e1cWpmiwHGDg7liDS3eiePMAOssFqT8bUO7Qog==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    666e52ac8b259caaaf0cc6339890f721
Sha1:   5b58b16dada535674221df5e09f2714bc9684bfc
Sha256: 46eb25cdb51173100ff5d6e86c3f654bbce0ccd365b26f472469c68f768d5f0d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         52.85.243.218
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Sat, 13 Jan 2018 17:43:40 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.1/2016-04-26)
X-Cache: Miss from cloudfront
Via: 1.1 6e0da02f02a5cb102417e895dead977a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: t3ca2rHGDET-7Z_OK6u1LNNS_Pa6KsUVPRfXUAVOB0JX6yT5q4LyaA==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    775d8dbd21102e30822e7f6391553602
Sha1:   32642cabb04ca6e1f7fab5bdbc63b1953f3f4074
Sha256: d0631ee545a605dd84f4d708c462bed5523d3980f1c85135c0b5ea9acea5032f
                                        
                                            GET /pagead/conversion/1038302480/?random=1515865419351&cv=8&fst=1515865419351&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&ref=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 13 Jan 2018 17:43:40 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1038302480/?random=764411191&cv=8&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=TEVaWramFcGuYq6gsZgN
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /js/1.js HTTP/1.1 
Host: cdn.trustedsite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.85.240.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 3041
Connection: keep-alive
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:08:31 GMT
Expires: Sat, 13 Jan 2018 18:08:31 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Age: 2109
X-Cache: Hit from cloudfront
Via: 1.1 5fe72dc53026697b10c6bbb72b4a3144.cloudfront.net (CloudFront)
X-Amz-Cf-Id: lLbgnkuo6QaUcJqCqsxme7a3DAmCCDuoJmVRFC7qF4UN6fBvMBYh_g==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3041
Md5:    138544ad59c624cbfad944a771c2c080
Sha1:   99e6fb2dea286ba8a39095272b3c1d21c149d1f5
Sha256: a6d967f65693db79d302d04b7998611c807a5179811252f203dc9ab44846229b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Jan 2018 17:43:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4c7be77b0d84d8e3594fd5755a6b47db
Sha1:   7b89bf4caf939cf554c407dc899289e630dea63e
Sha256: 3aa3d217a40db1ba7054c6c4368e5c266a945569a5b80b2cfae26d2d45b50b3d
                                        
                                            GET /pagead/viewthroughconversion/1038302480/?random=764411191&cv=8&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=TEVaWramFcGuYq6gsZgN HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         172.217.21.162
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 13 Jan 2018 17:43:40 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/1038302480/?random=764411191&cv=8&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&is_vtc=1&random=2935088188
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 13-Jan-2018 17:58:40 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Jan 2018 17:43:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a927384986a4f55132c05921ac2126ea
Sha1:   4725f89ef1ba642bba9b3227de068d4ed9d260f7
Sha256: 4109271aa3416fd65ff5dda5a8d39a14e4d5a60bee45a39d7717987c7a754d96
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=491539, public, no-transform, must-revalidate
Last-Modified: Fri, 12 Jan 2018 10:14:07 GMT
Expires: Fri, 19 Jan 2018 10:14:07 GMT
Date: Sat, 13 Jan 2018 17:43:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    b782a360b93b63de361e0eb23543738a
Sha1:   19ceb6b5ff416f1c39920f7b9c5f13529ca5c471
Sha256: 19918dbd8a911df022890986ec165e3b9fdcc494a5e2cb2d5bb60f8d9e016249
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 13 Jan 2018 17:43:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   547
Md5:    2669960319310018d966648bec0745be
Sha1:   f30f5dc15f22086d4698af6a12a49b361f67a53e
Sha256: e4883a7817a0869a9569294b9bb5e262a80831be37f87c8fb21e664bdfa222c4
                                        
                                            GET /ads/user-lists/1038302480/?random=764411191&cv=8&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&ref=http://www.reimageplus.com/land/sqi/index.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm&tiba=Reimage%20Repair&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&is_vtc=1&random=2935088188&ipr=y&ulfeg=n HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         173.194.222.94
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 13 Jan 2018 17:43:41 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /trustedsite-public/host/reimageplus.com/client.js HTTP/1.1 
Host: s3-us-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         52.218.193.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: pDL3hF+38CaSoRjgJ2ZQLcVmcQ9O6ltDMqa6AT4uDZPUP+eQJ5zCS6llsm3ZWZNF73noK8Qs9zY=
x-amz-request-id: 43C48D38AD5D32D0
Date: Sat, 13 Jan 2018 17:43:42 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 14 Dec 2017 23:39:05 GMT
Etag: "2512dbfce66c208ca2b71c8d650ea29c"
Cache-Control: public, max-age=60
Content-Encoding: gzip
x-amz-version-id: mH6x2ExenS5iHtNY3mREggcCmKVlhXcC
Accept-Ranges: bytes
Content-Length: 118
Server: AmazonS3


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   118
Md5:    2512dbfce66c208ca2b71c8d650ea29c
Sha1:   2f8a81d1454ce3881a4f31adbc211273ffb78bbd
Sha256: 314a5bc43943e2afdbae97cf88f7dfc202cbfc53b27f06819545eab8f7f8bdca
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true; PHPSESSID=o6ff37rf0ch22lscg0sjhseov7; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm; __utma=141870001.311526446.1515865420.1515865420.1515865420.1; __utmb=141870001.1.10.1515865420; __utmc=141870001; __utmz=141870001.1515865420.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; trustedsite_session=1

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:38:41 GMT
Location: http://www.reimageplus.com/images/reimage.ico
Connection: Keep-Alive
Content-Length: 253


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   253
Md5:    89fbda29cd4758e3ab1f35468df805c2
Sha1:   337a11ad7f3201d716eafe475be4744c14579cb1
Sha256: aa3c8a7d131750c62a273230a83039796256fc9b9f7cb160de4b7e97a39af71d
                                        
                                            GET /images/reimage.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true; PHPSESSID=o6ff37rf0ch22lscg0sjhseov7; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm; __utma=141870001.311526446.1515865420.1515865420.1515865420.1; __utmb=141870001.1.10.1515865420; __utmc=141870001; __utmz=141870001.1515865420.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; trustedsite_session=1

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: Apache/2.2.15 (CentOS)
Date: Sat, 13 Jan 2018 17:38:41 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Mon, 30 Apr 2012 13:14:46 GMT
Content-Length: 894


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   894
Md5:    d0c2bd29933d303826e58db070e10832
Sha1:   1a6f18c55c3cd9ea9ff9485afc30c213a6aeefef
Sha256: 3af4842e79f2e783c9a73e19493a10164df5cf27e7e2fb67fb51b2f99d3b4d84
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=7B2901688BB4FEEF695AAD3E022D5E2B; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DYTZ%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26lpx%3Dslm; _testcookie=test; one_time_package=true; _master_srcid_ytz=364; rmo=true; PHPSESSID=o6ff37rf0ch22lscg0sjhseov7; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Fland%2Fsqi%2Findex.php%3Ftracking%3DYTZ%26banner%3Ddirect%26adgroup%3D4870761a-f889-11e7-87c6-bdfcae431b63%26ads_name%3Ddirect%26keyword%3Ddirect%26context%3D4870761a-f889-11e7-87c6-bdfcae431b63%26nms%3D1%26lpx%3Dslm; __utma=141870001.311526446.1515865420.1515865420.1515865420.1; __utmb=141870001.1.10.1515865420; __utmc=141870001; __utmz=141870001.1515865420.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; trustedsite_session=1

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 13 Jan 2018 17:38:41 GMT
Location: http://www.reimageplus.com/images/reimage.ico
Connection: Keep-Alive
Content-Length: 253


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   253
Md5:    89fbda29cd4758e3ab1f35468df805c2
Sha1:   337a11ad7f3201d716eafe475be4744c14579cb1
Sha256: aa3c8a7d131750c62a273230a83039796256fc9b9f7cb160de4b7e97a39af71d
                                        
                                            GET /getseal?host_name=www.reimageplus.com&size=S&use_flash=NO&use_transparent=NO&lang=en HTTP/1.1 
Host: seal.websecurity.norton.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/land/sqi/index_src.php?tracking=YTZ&banner=direct&adgroup=4870761a-f889-11e7-87c6-bdfcae431b63&ads_name=direct&keyword=direct&context=4870761a-f889-11e7-87c6-bdfcae431b63&nms=1&lpx=slm

                                         
                                         0.0.0.0
                                        


--- Additional Info ---