Overview

URL clicks.swpstrack.com/c/cR5/YDaF/bQ_LPbT_Ah_098DdSksJxy/W/FX6HP/e6f5c280
IP91.199.51.233
ASNAS47544 IQ PL Sp. z o.o.
Location Poland
Report completed2017-07-17 22:53:03 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 91.199.51.233


Last 10 reports on ASN: AS47544 IQ PL Sp. z o.o.

Date UQ / IDS / BL URL IP
2017-11-21 04:49:58 +0100
0 - 0 - 1 demo.ore.edu.pl/book1.php 46.248.168.49
2017-11-20 15:42:15 +0100
0 - 0 - 0 links.nordicsurveys.com/c/kEF/bq/1TIDJFI1Ubgn (...) 91.199.51.78
2017-11-19 12:02:47 +0100
0 - 0 - 0 www.get-money.pl/aktualno%C5%9Bci/finanse/kre (...) 86.111.242.129
2017-11-19 01:03:38 +0100
0 - 0 - 1 demo.ore.edu.pl/book1.php 46.248.168.49
2017-11-18 15:08:40 +0100
0 - 0 - 1 demo.ore.edu.pl/book1.php 46.248.168.49
2017-11-18 06:58:49 +0100
0 - 0 - 1 demo.ore.edu.pl/book1.php 46.248.168.49
2017-11-18 00:54:17 +0100
0 - 1 - 0 clicks.clkcupomdesconto.com/c/2B8/b8_/JykAR-R (...) 91.199.51.211
2017-11-17 11:05:13 +0100
0 - 6 - 0 links.mathworks.su/u/cPo/JH1zT7Upjh_SIR4qU0mh (...) 46.248.181.124
2017-11-16 19:18:09 +0100
0 - 2 - 0 dywany.top/ 46.248.186.63
2017-11-14 13:52:22 +0100
0 - 0 - 0 links.nordicsurveys.com/c/kEF/bv/1TIDJFI1Ubgn (...) 91.199.51.78

No other reports on domain: .



JavaScript

Executed Scripts (38)


Executed Evals (3)

#1 JavaScript::Eval (size: 371, repeated: 1) - SHA256: 40d4468ecc53109900872e18b44cdc6b722e16eaa3fcca6e380e1939f0d46c81

                                        ({
    "av": 77610,
    "at": 123,
    "bt": 0,
    "cm": 456834,
    "ch": 18590,
    "ck": {},
    "cr": 1584757,
    "di": "e7c63e9b3756482eb09adfc5ee15f78e",
    "dm": 1,
    "fc": 1859966,
    "fl": 2003066,
    "ip": "77.40.129.123",
    "nw": 9706,
    "pc": 0,
    "ec": 0,
    "pr": 82462,
    "rt": 2,
    "sa": "3",
    "sb": "i-0f96f7157b01056d3",
    "sp": 2892,
    "st": 70124,
    "uk": "899b8b90eaf040e79844d5b496648a7e",
    "zn": 160629,
    "ts": 1500324754208,
    "bf": true,
    "pn": "azk89851",
    "fq": 0
})
                                    

#2 JavaScript::Eval (size: 642, repeated: 1) - SHA256: 48922b46348a3d971df0d8aebec000db239dac40b602e534d0ee4fc34d8cb178

                                        var raw__52666 = '\x3cscript\x20type\x3d\x22text\x2fjavascript\x22\x20src\x3d\x22\x2f\x2fstatic\x2ecriteo\x2enet\x2fjs\x2fld\x2fpublishertag\x2ejs\x22\x3e\x3c\x2fscript\x3e\n\x3cdiv\x20id\x3d\x22crt\x2d477763\x22\x3e\x3c\x2fdiv\x3e\n\x3cscript\x20type\x3d\x22text\x2fjavascript\x22\x3e\nCriteo\x2eDisplayAd\x28\x7b\n\x20\x20\x20\x20\x22zoneid\x22\x3a\x20477763\x2c\n\x20\x20\x20\x20\x22containerid\x22\x3a\x20\x22crt\x2d477763\x22\x7d\x29\x3b\n\x3c\x2fscript\x3e';
var raw_command__48588 = function() {
    ados_loadFIframe('azk3901', raw__52666, 2003066, 250, 970, 0);
};
setTimeout(function() {
    azLoad('azk3901', raw_command__48588);
}, 100);
                                    

#3 JavaScript::Eval (size: 644, repeated: 1) - SHA256: ab22027a9b3a0497b70d8995ebebeeec748b095c864f0fc0e11861434c70853a

                                        var raw__56726 = '\x3cscript\x20type\x3d\x22text\x2fjavascript\x22\x20src\x3d\x22\x2f\x2fstatic\x2ecriteo\x2enet\x2fjs\x2fld\x2fpublishertag\x2ejs\x22\x3e\x3c\x2fscript\x3e\n\x3cdiv\x20id\x3d\x22crt\x2d477763\x22\x3e\x3c\x2fdiv\x3e\n\x3cscript\x20type\x3d\x22text\x2fjavascript\x22\x3e\nCriteo\x2eDisplayAd\x28\x7b\n\x20\x20\x20\x20\x22zoneid\x22\x3a\x20477763\x2c\n\x20\x20\x20\x20\x22containerid\x22\x3a\x20\x22crt\x2d477763\x22\x7d\x29\x3b\n\x3c\x2fscript\x3e';
var raw_command__85402 = function() {
    ados_loadFIframe('azk89851', raw__56726, 2003066, 250, 970, 0);
};
setTimeout(function() {
    azLoad('azk89851', raw_command__85402);
}, 100);
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 550, repeated: 1) - SHA256: 5e0115eda6fc459f416ea24620e6f6993f2fd25cf9c277928bc07d9ec01d56e5

                                        < !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd" > < html > < head > < style > div, iframe {
        top: 0;position: absolute;
    } < /style></head > < body style = "margin:0px;padding:0px;" > < script type = "text/javascript" >
    var divName = "azk89851";
var inFIF = true;
var inDapIF = true; < /script><script type="text/javascript
" src=" //static.criteo.net/js/ld/publishertag.js"></script>
< div id = "crt-477763" > < /div> < script type = "text/javascript" >
    Criteo.DisplayAd({
        "zoneid": 477763,
        "containerid": "crt-477763"
    }); < /script></body > < /html>
                                    


HTTP Transactions (90)


Request Response
                                        
                                            GET /c/cR5/YDaF/bQ_LPbT_Ah_098DdSksJxy/W/FX6HP/e6f5c280 HTTP/1.1 
Host: clicks.swpstrack.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.199.51.233
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Set-Cookie: TEMP_DATA=95f581a0-1332-4ca0-a4c4-b57d81529247; path=/ esg1=cR5/W/bQ_LPbT_Ah_098DdSksJxy/W/FX6HP/4a9ed834; path=/
Date: Mon, 17 Jul 2017 20:52:29 GMT
Content-Length: 574


--- Additional Info ---
Magic:  HTML document text
Size:   574
Md5:    3f0e73f01e16701cfdcc91dcce7aa440
Sha1:   a1067aea28f8cab52d912ec3d32dc1d9bed5adb5
Sha256: fe348e4c76ce42fec11f649e3e11dd0b5c70df28279a0eb697da08bc24fc36bb
                                        
                                            GET /css?family=Nunito:400,700,300 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Mon, 17 Jul 2017 20:52:30 GMT
Date: Mon, 17 Jul 2017 20:52:30 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   286
Md5:    667661dd4b917584982cb3835a30159a
Sha1:   0a4479fb4e508ed81b959676be8129f4ecb240f7
Sha256: 77f6b6707749c021a6acfca25ea35f9d73b2885518fa173694282b735bc93311
                                        
                                            GET /css?family=Oswald:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Mon, 17 Jul 2017 20:52:30 GMT
Date: Mon, 17 Jul 2017 20:52:30 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   256
Md5:    824a1caee724c4e11d9e0d574a7c478b
Sha1:   4b1e57fdfb8fb6505b9ba027e551d84f11ba99a2
Sha256: b6cb34fe4abed7635b0d9969e8ea8430c492f831cfe02654679fff823674c6d4
                                        
                                            GET /font-awesome/4.2.0/css/font-awesome.min.css HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         94.31.29.55
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 17 Jul 2017 20:52:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 26 Aug 2014 20:38:35 GMT
Etag: W/"feda974a77ea5783b8be673f142b7c88"
Server: NetDNA-cache/2.2
Expires: Thu, 12 Jul 2018 20:52:30 GMT
Cache-Control: max-age=31104000
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5530
Md5:    1db09558f7d48476ade00f32b0bfc3c4
Sha1:   55d440308310d872c0e714e3802ea0540ac0fe66
Sha256: bfcde5250ca026369f80eb42414e360d7634a21c52beb22497e2da6218f68e6c
                                        
                                            GET /statics/style-b86a6f9f-bd61-4e61-812f-6935c4328034.css HTTP/1.1 
Host: cdn.sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         54.230.14.132
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 12 Jul 2017 16:12:43 GMT
Last-Modified: Thu, 13 Oct 2016 12:26:41 GMT
Cache-Control: max-age=604800
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 448788
X-Cache: Hit from cloudfront
Via: 1.1 c0b5bcbd47f419797c2848b6172cc349.cloudfront.net (CloudFront)
X-Amz-Cf-Id: R9eSSHyis8L_JF5ArVRNftWs0JkkseQImfd5oQEsloe8TrlNVtjvVw==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2360
Md5:    2b9c24b60cccf5ddd1f2daf0a2175bfa
Sha1:   b647783baaad53d31b12753b0cd06e4e3501b124
Sha256: e3ca47ace3e30cd886aac7b8bb200101736ec1b224a78a8e3352d6c6807d1ad3
                                        
                                            GET /ajax/libs/twitter-bootstrap/3.2.0/css/bootstrap.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         104.19.193.102
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 17 Jul 2017 20:52:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Jun 2016 14:46:57 GMT
Expires: Sat, 07 Jul 2018 20:52:30 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 380015dbc32f86cd-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18497
Md5:    01a602fe4df19fac2d40914a156dc05a
Sha1:   5cbb77dd7c515564e875c32c9454586ba49dcb91
Sha256: 71573d172ea14ab86e6c890e96b132a30f1f0286cb4d3b7a4c0f676d89979e77
                                        
                                            GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         104.19.193.102
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 17 Jul 2017 20:52:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Jun 2016 14:42:33 GMT
Expires: Sat, 07 Jul 2018 20:52:30 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 380015dbc0d686a9-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29769
Md5:    ba04b7e04bb3df21f789da85bd2fa04b
Sha1:   f4ce118ffaa7478ea4a0d0cf59f3876540a4855b
Sha256: 8a3d15a5e426e3cfb7adbefb7e47d57db28ea1d3fed878638550674727b6124c
                                        
                                            GET /logo.png HTTP/1.1 
Host: cdn.sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         54.230.14.132
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 10660
Connection: keep-alive
Date: Fri, 14 Jul 2017 15:42:56 GMT
Last-Modified: Wed, 22 Oct 2014 19:58:15 GMT
Etag: "d4c6d84a1461edab6ed5fbb13bac78e4"
Accept-Ranges: bytes
Server: AmazonS3
Age: 77353
X-Cache: Hit from cloudfront
Via: 1.1 1abec445d34fa540bbe9637e90691aed.cloudfront.net (CloudFront)
X-Amz-Cf-Id: n3wEiSXi7yIhPvHQhEtyKa5siFjIPWqihjUOF5VRcsi0iJ85EjedGg==


--- Additional Info ---
Magic:  PNG image, 557 x 155, 8-bit/color RGBA, non-interlaced
Size:   10660
Md5:    d4c6d84a1461edab6ed5fbb13bac78e4
Sha1:   2217911e3da9fc40872c304524edd31978db7f8c
Sha256: 901c02882f34882b6a9c495a4a158c67417d9b023dc35b0c853c23083b4f3564
                                        
                                            GET /assets/2016/02/16/md5.min.js HTTP/1.1 
Host: cdn.sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         54.230.14.132
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 17 May 2017 22:52:53 GMT
Last-Modified: Tue, 16 Feb 2016 22:39:05 GMT
Cache-Control: max-age=604800
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 336150
X-Cache: Hit from cloudfront
Via: 1.1 c0b5bcbd47f419797c2848b6172cc349.cloudfront.net (CloudFront)
X-Amz-Cf-Id: sPXKLCfDRcFoUcRmICc-85MR4-CuZGfMT2fb97nQUgKQJ2G3rtCJZw==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1539
Md5:    8ff021d1e3143bfc937acc1d6a19d90b
Sha1:   44916714a7fc9080ae82633807e910b564145a45
Sha256: 3cce6595d7ed0c192227771518468ce839b933f6aae9e3bc31cc2b9187c105fb
                                        
                                            GET /js/2230610604.js HTTP/1.1 
Host: cdn.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         2.18.72.147
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
x-amz-id-2: dpwbZTCNVDNfgZWdv1nnp8J8fVpHlPmFl80RcICla69x1ZzVMU3VgkOQpDWFmiCFqpws/yh98dA=
x-amz-request-id: 1AC72F7B5F6A5055
Last-Modified: Thu, 13 Jul 2017 11:59:08 GMT
Etag: "7d6d379cfbd85bcab46d6fb1534873a0"
x-amz-meta-revision: 186
Content-Encoding: gzip
x-amz-version-id: FWEFWBXo20nN1Q.4MFz15077zxpiTaVo
Accept-Ranges: bytes
Content-Length: 66182
Server: AmazonS3
Vary: Accept-Encoding
Cache-Control: max-age=126
Date: Mon, 17 Jul 2017 20:52:30 GMT
Connection: keep-alive
Set-Cookie: cdn=http%3a%2f%2fakamai%3adsd%40cdn.optimizely.com%2fjs%2f2230610604.js; path=/; domain=.optimizely.com
Access-Control-Max-Age: 86400
Access-Control-Expose-Headers: x-amz-meta-revision
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, last modified: Thu Jul 13 13:59:06 2017, max compression
Size:   66182
Md5:    7d6d379cfbd85bcab46d6fb1534873a0
Sha1:   82ce187fc29377332d972b6f36cb61442c49e0aa
Sha256: f063c632094b84558f495717f968e5e69f19d37f66c4c0ab6ba834af30f39076
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:31 GMT
Server: Apache
Last-Modified: Fri, 14 Jul 2017 09:40:07 GMT
Expires: Fri, 21 Jul 2017 09:40:07 GMT
Etag: AD058B609DEDF3FE5CFE84201C65F5147F81347E
Cache-Control: max-age=304655,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    d0d9b5281af14b5b076988638617988a
Sha1:   ad058b609dedf3fe5cfe84201c65f5147f81347e
Sha256: ac1bfe29da5a501cebe4a60730a5a7ecfe8775f26e6f272d65988c692908d084
                                        
                                            GET /a-00ev.min.js HTTP/1.1 
Host: b-code.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         54.230.14.162
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 17 Jul 2017 20:52:31 GMT
Last-Modified: Fri, 09 Jun 2017 09:34:54 GMT
x-amz-version-id: 8ydsDRaZkHKD1lfm37Ud2Ll4mMmHHaeU
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 1fcad26913988e10fd175698baa6f474.cloudfront.net (CloudFront)
X-Amz-Cf-Id: N8Q5LBldsf8p83ccP67SmgzolOc968btLm1cqaEolLI4TxdeBD-YqQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7276
Md5:    55dfb2593f38f02f5d911ed287b70304
Sha1:   06425735d7e6c76a3b6de0ef5683d801720a8c61
Sha256: a9648db5c78f5af39d28774dbd1743a34f15db94534dbd890fd42f51542c14e0
                                        
                                            GET /grey-bg.gif HTTP/1.1 
Host: cdn.sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.sweepstakesalerts.com/statics/style-b86a6f9f-bd61-4e61-812f-6935c4328034.css
Cookie: optimizelyEndUserId=oeu1500324751209r0.22648415570786962; optimizelySegments=%7B%222222740355%22%3A%22ff%22%2C%222210750478%22%3A%22campaign%22%2C%222224610415%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttp%253A%252F%252Fsweepstakesalerts.com%252Fremarketing-processing-entry-path%253Fconfig%253DDEF4JM94HA%2526giveaway%253D5000%2526next%253Dremarketing-entry-confirmed-fullpage%2526first%253DPanda%2526utm_source%253DSA-ONSITE-GoogleAdWordsSA-5k%2526utm_medium%253Demail-es%2526utm_campaign%253DSA-6235%2526utm_term%253DOther%2526utm_content%253D17421%2526e%253D899b8b90eaf040e79844d5b496648a7e%2526email%253Dpanda%252540techni-core.com%2526last%253D%2526zip%253D%2526gender%253D%2526homeowner%253D%2526affid%253D1101%2526message_id%253D6235%2526yob%253D%26u%3Doeu1500324751209r0.22648415570786962%26wxhr%3Dtrue%26time%3D1500324751.224%26f%3D8478960797%26g%3D%22%5D

                                         
                                         54.230.14.132
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 50789
Connection: keep-alive
Date: Wed, 28 Jun 2017 09:43:49 GMT
Last-Modified: Wed, 22 Oct 2014 20:00:27 GMT
Etag: "da2938d7acf5305e0bba25da1af6395f"
Accept-Ranges: bytes
Server: AmazonS3
Age: 77354
X-Cache: Hit from cloudfront
Via: 1.1 1abec445d34fa540bbe9637e90691aed.cloudfront.net (CloudFront)
X-Amz-Cf-Id: wgj1NMqzHvUMn_dpKXD0JUCmuIQVU8HTj_SUfWSuc7ZcZ9ZWM7EfkQ==


--- Additional Info ---
Magic:  GIF image data, version 89a, 397 x 322
Size:   50789
Md5:    da2938d7acf5305e0bba25da1af6395f
Sha1:   eeecbff4df767854ab6863d55c51b99cf1e3fce6
Sha256: e96bfbaf2e9f1bc65b9ce23e023acedb5853facbf25402e75a13a85957a9fc03
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:31 GMT
Server: Apache
Last-Modified: Sat, 15 Jul 2017 22:05:35 GMT
Expires: Sat, 22 Jul 2017 22:05:35 GMT
Etag: D2DF6FDBE733AF9882257DBAD674EC8E360096E0
Cache-Control: max-age=435783,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    0e6a024f609441d25d1a1534d776afd4
Sha1:   d2df6fdbe733af9882257dbad674ec8e360096e0
Sha256: fefec1c183b572e3b275ea75f4ceec0f7f189b8cc6a90ed7a03943967259d17d
                                        
                                            GET /remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob= HTTP/1.1 
Host: sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.204.25.254
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.10.1
Date: Mon, 17 Jul 2017 20:55:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Cookie
X-Frame-Options: SAMEORIGIN
Set-Cookie: sessionid=mvcwrzno79vb81n2izhtg8kr4xz47i8c; expires=Mon, 31-Jul-2017 20:55:45 GMT; httponly; Max-Age=1209600; Path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12487
Md5:    dd04bfbd8c82ed4c279e52ff9baebf50
Sha1:   6d656ae90f3dfb8bbd0e1e1c08e47810ad7e0e3e
Sha256: 7b96f1899a954e0caea3a13113d14c293188429654a14665fad0bf68259a23f7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:32 GMT
Server: Apache
Last-Modified: Sat, 15 Jul 2017 22:05:35 GMT
Expires: Sat, 22 Jul 2017 22:05:35 GMT
Etag: 4E4ACF3FECC805D983BF31077922F677F3729442
Cache-Control: max-age=435782,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp31
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    352e6ea8ebd6d894187a469835298188
Sha1:   4e4acf3fecc805d983bf31077922f677f3729442
Sha256: 0fd389035d6dbd35c7cf42fc2b70b2c6f29a06ecdd66192741e4039bc05fe0af
                                        
                                            GET /ajax/libs/js-cookie/2.1.2/js.cookie.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         104.19.193.102
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 17 Jul 2017 20:52:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Jun 2016 14:42:34 GMT
Expires: Sat, 07 Jul 2018 20:52:32 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 380015e8f9bf86a9-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   894
Md5:    78558a0af38855bb333da5675adb93fd
Sha1:   190d88ad21d87059dcd0315583ec831e6b738c5b
Sha256: d3c54cd5c1b4f560344490e0e7a3f067a0772f568e0b86755c145c288d77085a
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 17 Jul 2017 19:31:35 GMT
Expires: Mon, 17 Jul 2017 21:31:35 GMT
Last-Modified: Tue, 06 Jun 2017 00:25:39 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 12343
Cache-Control: public, max-age=7200
Age: 4857


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12343
Md5:    3b6fd0342f2d611de1a19a9825be41c8
Sha1:   509935ecd4ab357ff19f57a8e94b4eb0ddc9d61b
Sha256: fa8b4948c750c32d20997c3b6901ea0cd507ae2e444447ad619ac461387f784c
                                        
                                            GET /top-bg.jpg HTTP/1.1 
Host: cdn.sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.sweepstakesalerts.com/statics/style-b86a6f9f-bd61-4e61-812f-6935c4328034.css
Cookie: optimizelyEndUserId=oeu1500324751209r0.22648415570786962; optimizelySegments=%7B%222222740355%22%3A%22ff%22%2C%222210750478%22%3A%22campaign%22%2C%222224610415%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttp%253A%252F%252Fsweepstakesalerts.com%252Fremarketing-processing-entry-path%253Fconfig%253DDEF4JM94HA%2526giveaway%253D5000%2526next%253Dremarketing-entry-confirmed-fullpage%2526first%253DPanda%2526utm_source%253DSA-ONSITE-GoogleAdWordsSA-5k%2526utm_medium%253Demail-es%2526utm_campaign%253DSA-6235%2526utm_term%253DOther%2526utm_content%253D17421%2526e%253D899b8b90eaf040e79844d5b496648a7e%2526email%253Dpanda%252540techni-core.com%2526last%253D%2526zip%253D%2526gender%253D%2526homeowner%253D%2526affid%253D1101%2526message_id%253D6235%2526yob%253D%26u%3Doeu1500324751209r0.22648415570786962%26wxhr%3Dtrue%26time%3D1500324751.224%26f%3D8478960797%26g%3D%22%5D

                                         
                                         54.230.14.132
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 22102
Connection: keep-alive
Date: Wed, 28 Jun 2017 09:43:50 GMT
Last-Modified: Wed, 22 Oct 2014 19:58:01 GMT
Etag: "7383bcd67f775e1c4f58b66c963e49b5"
Accept-Ranges: bytes
Server: AmazonS3
Age: 77354
X-Cache: Hit from cloudfront
Via: 1.1 c0b5bcbd47f419797c2848b6172cc349.cloudfront.net (CloudFront)
X-Amz-Cf-Id: pvaP_tERfsW5v5pc6RE3wLdkC9pn5ZxGxi7ZQ92_4Nbb5qHidLu9zA==


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   22102
Md5:    7383bcd67f775e1c4f58b66c963e49b5
Sha1:   05362adb22a31f80bcb8613507ca2afa69ecc147
Sha256: 89765ac96f3df4ff6a0aec8d9ecd9d63c9b1393949cc34b6650aecbbe1cc40d3
                                        
                                            GET /s/nunito/v8/TttUCfJ272GBgSKaOaD7Kj8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Nunito:400,700,300
Origin: http://sweepstakesalerts.com

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 23296
Date: Tue, 09 May 2017 09:38:26 GMT
Expires: Wed, 09 May 2018 09:38:26 GMT
Last-Modified: Thu, 08 Dec 2016 01:14:09 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 6002046


--- Additional Info ---
Magic:  data
Size:   23296
Md5:    9272d3c110f10ceab4e256e3005278ce
Sha1:   8120a5d2aa1294f7298eb47540a35b898a095ce2
Sha256: 93efc9fc1ba870f7df2aa7d1e0478bb296ac39a32500d4f17a1347884543de43
                                        
                                            GET /s/nunito/v8/0rdItLTcOd8TSMl72RUU5w.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Nunito:400,700,300
Origin: http://sweepstakesalerts.com

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 23120
Date: Tue, 09 May 2017 09:57:24 GMT
Expires: Wed, 09 May 2018 09:57:24 GMT
Last-Modified: Thu, 08 Dec 2016 01:12:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 6000908


--- Additional Info ---
Magic:  data
Size:   23120
Md5:    fb5bcbd731c0d013fe9a00562c5773aa
Sha1:   1bd44e5b3f1b921830428545bc18b62fa3dbfc49
Sha256: a34eed2045288db5f2004b0edf51b47afeef161c6c6f778e18940eb3f3da08f7
                                        
                                            GET /2.5.1/sp.js HTTP/1.1 
Host: d3kcgi2we1pbl4.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         54.230.15.88
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 68319
Connection: keep-alive
Date: Wed, 17 May 2017 22:00:29 GMT
Last-Modified: Wed, 29 Jul 2015 14:57:37 GMT
Etag: "8d588161c49974742fd0bde2c2562d51"
Accept-Ranges: bytes
Server: AmazonS3
Age: 73904
X-Cache: Hit from cloudfront
Via: 1.1 1abec445d34fa540bbe9637e90691aed.cloudfront.net (CloudFront)
X-Amz-Cf-Id: hPFdB73sizVITbIZXDqVJ7mT7_N5C6t5qPd4p4OwDD9V66AqnNntPA==


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   68319
Md5:    8d588161c49974742fd0bde2c2562d51
Sha1:   aedddd41cb6fdc00e06d4403cb785c4c32238192
Sha256: b95e4126bb3dfdc24dd8c8c626860866fca381d93a1c7e16c55b522ed32867eb
                                        
                                            GET /i?e=pv&tna=liveIntentPublisherTracker&p=web&aid=a-00ev&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&sid=1a703c59-0398-4dbc-a01c-21a60720dc34&tv=pub-1.3.0&url=http%3A%2F%2Fsweepstakesalerts.com%2Fremarketing-processing-entry-path%3Fconfig%3DDEF4JM94HA%26giveaway%3D5000%26next%3Dremarketing-entry-confirmed-fullpage%26first%3DPanda%26utm_source%3DSA-ONSITE-GoogleAdWordsSA-5k%26utm_medium%3Demail-es%26utm_campaign%3DSA-6235%26utm_term%3DOther%26utm_content%3D17421%26e%3D899b8b90eaf040e79844d5b496648a7e%26email%3Dpanda%2540techni-core.com%26last%3D%26zip%3D%26gender%3D%26homeowner%3D%26affid%3D1101%26message_id%3D6235%26yob%3D&page=SweepstakesAlerts.com%20-%20Processing%20Entry&eid=24f80176-e058-4836-b947-cd6f23bddadb HTTP/1.1 
Host: c.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         54.172.217.196
HTTP/1.1 302 Found
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Date: Mon, 17 Jul 2017 20:52:33 GMT
Location: http://c.liadm.com/i?e=pv&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&eid=24f80176-e058-4836-b947-cd6f23bddadb&url=http://sweepstakesalerts.com/remarketing-processing-entry-path?config%3DDEF4JM94HA%26giveaway%3D5000%26next%3Dremarketing-entry-confirmed-fullpage%26first%3DPanda%26utm_source%3DSA-ONSITE-GoogleAdWordsSA-5k%26utm_medium%3Demail-es%26utm_campaign%3DSA-6235%26utm_term%3DOther%26utm_content%3D17421%26e%3D899b8b90eaf040e79844d5b496648a7e%26email%3Dpanda%2540techni-core.com%26last%3D%26zip%3D%26gender%3D%26homeowner%3D%26affid%3D1101%26message_id%3D6235%26yob%3D&aid=a-00ev&tna=liveIntentPublisherTracker&page=SweepstakesAlerts.com+-+Processing+Entry&tv=pub-1.3.0&n3pc=true&p=web&sid=1a703c59-0398-4dbc-a01c-21a60720dc34
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Server: spray-can/1.3.3
Set-Cookie: lidid=268cf01e-7592-48ca-b03e-65a27e7694d5; Expires=Wed, 17 Jul 2019 20:52:33 GMT; Domain=.liadm.com; Path=/
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /ados.js HTTP/1.1 
Host: static.adzerk.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         104.17.29.15
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 17 Jul 2017 20:52:32 GMT
Content-Length: 7790
Connection: keep-alive
Set-Cookie: __cfduid=d4df1e63172051958d95c3e227fdc3e5e1500324752; expires=Tue, 17-Jul-18 20:52:32 GMT; path=/; domain=.adzerk.net; HttpOnly
x-amz-id-2: QqhUEHqxtGQHq+plyybjvi6Z+QbtEAebqZghCR5cteflxOB573pc+hkT0sS3mnzvNuUD1lACuFw=
x-amz-request-id: 06015AD86C25C667
Last-Modified: Mon, 13 Feb 2017 15:54:01 GMT
Etag: "94485777b8ece513a18b0e50466c6f55"
x-amz-meta-s3cmd-attrs: uid:1000/gname:micha/uname:micha/gid:1000/mode:33204/mtime:1487001240/atime:1487000623/md5:94485777b8ece513a18b0e50466c6f55/ctime:1487001240
Cache-Control: public, max-age=604800
Content-Encoding: gzip
x-amz-version-id: PoFgooiZK8WwBmvkNS5GwCL4tmnKqZEG
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Mon, 24 Jul 2017 20:52:32 GMT
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 380015e972f6872d-ARN


--- Additional Info ---
Magic:  gzip compressed data, was "ados.js", from Unix, last modified: Mon Feb 13 16:54:00 2017
Size:   7790
Md5:    94485777b8ece513a18b0e50466c6f55
Sha1:   1c22abc7d42450ed1c080470486b1045d9b1405d
Sha256: f7258e8c72926f5656286c7c5896ecef8242833f44f497232bd4da01ac078622
                                        
                                            GET /r/collect?v=1&_v=j56&a=211743180&t=pageview&_s=1&dl=http%3A%2F%2Fsweepstakesalerts.com%2Fremarketing-processing-entry-path%3Fconfig%3DDEF4JM94HA%26giveaway%3D5000%26next%3Dremarketing-entry-confirmed-fullpage%26first%3DPanda%26utm_source%3DSA-ONSITE-GoogleAdWordsSA-5k%26utm_medium%3Demail-es%26utm_campaign%3DSA-6235%26utm_term%3DOther%26utm_content%3D17421%26e%3D899b8b90eaf040e79844d5b496648a7e%26email%3Dpanda%2540techni-core.com%26last%3D%26zip%3D%26gender%3D%26homeowner%3D%26affid%3D1101%26message_id%3D6235%26yob%3D&ul=en-us&de=UTF-8&dt=SweepstakesAlerts.com%20-%20Processing%20Entry&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAEQAI~&jid=1158179372&gjid=1301956606&cid=1707022187.1500324753&tid=UA-46324972-3&_gid=800903092.1500324753&_r=1&z=1952658776 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         216.58.211.142
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-46324972-3&cid=1707022187.1500324753&jid=1158179372&_gid=800903092.1500324753&gjid=1301956606&_v=j56&z=1952658776
Access-Control-Allow-Origin: *
Date: Mon, 17 Jul 2017 20:52:33 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 419


--- Additional Info ---
Magic:  HTML document text
Size:   419
Md5:    b797818734a0a647a1858208b5c9c1f1
Sha1:   7fbe655eb0a220c3ebe29440f2eb40af4f151e16
Sha256: 8dab35c07a91bf79cf7e2e7cc21eb758340b0e99994436004d28d7b7b643ff2e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Mon, 17 Jul 2017 20:52:33 GMT
Etag: "596cf42e-1d7"
Expires: Mon, 24 Jul 2017 08:52:33 GMT
Last-Modified: Mon, 17 Jul 2017 17:30:22 GMT
Server: ECS (arn/45E4)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    28a631d1644f9a84119849fa4ce70e74
Sha1:   5deeb1ffbb01f8c129627dea393026c9e4da3524
Sha256: 3a4c99978d29b23e2883e109601cc93e38439a9d6d9930f1c537e7051fafb837
                                        
                                            GET /js/ld/ld.js HTTP/1.1 
Host: static.criteo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         178.250.2.74
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 20:52:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 18 Jul 2017 20:52:33 GMT
Cache-Control: max-age=86400, public
Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4281
Md5:    dc955f1eda16fae13a792b3da6ab61aa
Sha1:   ddf148e12d6a76ed4558d27afb946695d823baf9
Sha256: de421fdb9c483d3a9ee510fc6a19ae52fd6b94af549f8b82f58e3ff42ff80fc4
                                        
                                            GET /en_US/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         157.240.3.24
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: f406d799b195348d754e7a2ad615ee9f
Etag: "efa266d54eb579715ed3ee0cc04dff19"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15552000; preload; includeSubDomains
X-XSS-Protection: 0
Timing-Allow-Origin: *
X-Frame-Options: DENY
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Sat, 15 Jul 2017 14:38:52 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: nh+ugaKTS3NbUf1JpOhlJQ==
X-FB-Debug: UP1j7j4nA3Q9K1bvp6k2fpRxeByKC33S7OF92uxcl2dGN5pSEUv7KG4tNfQKs594keJtAEz+eV6lfrvxy2CyUQ==
Date: Mon, 17 Jul 2017 20:52:33 GMT
Connection: keep-alive
Content-Length: 63402


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   63402
Md5:    9e1fae81a2934b735b51fd49a4e86525
Sha1:   a5d9016af50da96b0d68ed34d24a1ea735cdfe2e
Sha256: 873b52099baf1fcc959d3ba701963e3babd5f35b15057a555173b2103871800d
                                        
                                            GET /dapi/collect HTTP/1.1 
Host: data.circulate.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         35.186.247.47
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Cache-Control: public, max-age=86400
Last-Modified: Thu, 02 Oct 2014 00:00:00 GMT
Date: Mon, 17 Jul 2017 20:52:33 GMT
Content-Length: 1571
Via: 1.1 google


--- Additional Info ---
Magic:  Emacs v18 byte-compiled Lisp data
Size:   1571
Md5:    dde9e18f8cd71942a492bd1af3c980bf
Sha1:   e67518267034da533341eed527f401a0e3ccb0b8
Sha256: 9d65335595bb6346195c8c83045f27079e1f6e72b017590cf0d77b7f1220b27e
                                        
                                            GET /js/awt_analytics.js?id=1xLXY HTTP/1.1 
Host: analytics.aweber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         204.194.222.24
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Vary: User-Agent, Accept-Encoding
Expires: Wed, 16 Aug 2017 20:52:33 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Last-Modified: Sat, 17 Jun 2017 17:48:55 GMT
Etag: "3081851212"
Accept-Ranges: bytes
Content-Length: 1644
Date: Mon, 17 Jul 2017 20:52:33 GMT
Set-Cookie: TS01e8fb5a=01c242c9b669d60bd13c6e78379033206445db97ffee81af06c893228ed407c2ea76d6b717; Path=/


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Sat Jun 17 19:48:55 2017
Size:   1644
Md5:    753b31a0265faa86387e6a8167bbf182
Sha1:   3b43607fea519c2b8acd1318db03aba24804fb46
Sha256: 63010fa16719963fe72a26aab6a4b7420d8a40e86e81a75bff698d3c7c1498e3
                                        
                                            GET /i?e=pv&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&eid=24f80176-e058-4836-b947-cd6f23bddadb&url=http://sweepstakesalerts.com/remarketing-processing-entry-path?config%3DDEF4JM94HA%26giveaway%3D5000%26next%3Dremarketing-entry-confirmed-fullpage%26first%3DPanda%26utm_source%3DSA-ONSITE-GoogleAdWordsSA-5k%26utm_medium%3Demail-es%26utm_campaign%3DSA-6235%26utm_term%3DOther%26utm_content%3D17421%26e%3D899b8b90eaf040e79844d5b496648a7e%26email%3Dpanda%2540techni-core.com%26last%3D%26zip%3D%26gender%3D%26homeowner%3D%26affid%3D1101%26message_id%3D6235%26yob%3D&aid=a-00ev&tna=liveIntentPublisherTracker&page=SweepstakesAlerts.com+-+Processing+Entry&tv=pub-1.3.0&n3pc=true&p=web&sid=1a703c59-0398-4dbc-a01c-21a60720dc34 HTTP/1.1 
Host: c.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Cookie: lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         54.172.217.196
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Date: Mon, 17 Jul 2017 20:52:34 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Server: spray-can/1.3.3
Set-Cookie: lidid=268cf01e-7592-48ca-b03e-65a27e7694d5; Expires=Wed, 17 Jul 2019 20:52:34 GMT; Domain=.liadm.com; Path=/
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            GET /ados?t=1500324753760&request={%22Placements%22:[{%22A%22:9706,%22S%22:70124,%22D%22:%22azk89851%22,%22ATA%22:[5,23,123,1578,4,2704,1587],%22Z%22:[160629],%22Properties%22:{%22AccountEmailDomain%22:%22techni-core.com%22,%22AccountEmail%22:%22panda@techni-core.com%22,%22Account_utm_source%22:%22SA-ONSITE-GoogleAdWordsSA-5k%22,%22Account_utm_campaign%22:%22SA-6235%22,%22Account_utm_term%22:%22Other%22,%22Account_utm_medium%22:%22email-es%22,%22Account_utm_content%22:%2217421%22,%22AccountFirst%22:%22Panda%22,%22AccountLast%22:%22%22,%22AccountCity%22:%22%22,%22AccountState%22:%22%22,%22AccountZip%22:%22%22,%22AccountYob%22:%22%22,%22AccountDob%22:%22%22,%22AccountAddress1%22:%22%22,%22AccountAddress2%22:%22%22,%22AccountGender%22:%22%22,%22AccountSourceAFFID%22:%221101%22,%22AccountVendor%22:%22%22,%22AccountIsHomeowner%22:%22%22,%22AccountMD5%22:%22899b8b90eaf040e79844d5b496648a7e%22,%22PathConfig%22:%22DEF4JM94HA%22,%22AccountIsDiabetes%22:%22%22,%22AccountIntentEducation%22:%22%22,%22AccountIntentTravel%22:%22%22,%22AccountIntentJobs%22:%22%22,%22AccountIntentHealthInsurance%22:%22%22,%22PathMessageId%22:%226235%22,%22PathVersionId%22:%22%22,%22PathEXVId%22:%22false%22,%22PCHIsEmailFound%22:%22%22}},{%22A%22:9706,%22S%22:70124,%22D%22:%22azk3901%22,%22ATA%22:[5,23,123,1578,4,2704,1587],%22Z%22:[160629],%22Properties%22:{%22AccountEmailDomain%22:%22techni-core.com%22,%22AccountEmail%22:%22panda@techni-core.com%22,%22Account_utm_source%22:%22SA-ONSITE-GoogleAdWordsSA-5k%22,%22Account_utm_campaign%22:%22SA-6235%22,%22Account_utm_term%22:%22Other%22,%22Account_utm_medium%22:%22email-es%22,%22Account_utm_content%22:%2217421%22,%22AccountFirst%22:%22Panda%22,%22AccountLast%22:%22%22,%22AccountCity%22:%22%22,%22AccountState%22:%22%22,%22AccountZip%22:%22%22,%22AccountYob%22:%22%22,%22AccountAddress1%22:%22%22,%22AccountAddress2%22:%22%22,%22AccountGender%22:%22%22,%22AccountSourceAFFID%22:%221101%22,%22AccountVendor%22:%22%22,%22AccountIsHomeowner%22:%22%22,%22AccountMD5%22:%22899b8b90eaf040e79844d5b496648a7e%22,%22PathConfig%22:%22DEF4JM94HA%22,%22AccountIsDiabetes%22:%22%22,%22AccountIntentEducation%22:%22%22,%22AccountIntentTravel%22:%22%22,%22AccountIntentJobs%22:%22%22,%22AccountIntentHealthInsurance%22:%22%22,%22PathMessageId%22:%226235%22,%22PathVersionId%22:%22%22,%22PathEXVId%22:%22false%22,%22PCHIsEmailFound%22:%22%22}}],%22UserKeyOverride%22:%22899b8b90eaf040e79844d5b496648a7e%22,%22Keywords%22:%22undefined%22,%22Referrer%22:%22%22,%22IsAsync%22:true} HTTP/1.1 
Host: engine.adzerk.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Cookie: __cfduid=d4df1e63172051958d95c3e227fdc3e5e1500324752

                                         
                                         23.23.97.192
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: accept, origin, content-type, content-length
Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS
Access-Control-Allow-Origin: undefined
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Date: Mon, 17 Jul 2017 20:52:34 GMT
Etag: W/"32bd-yB3jhThK+97jNNwih1OzAQ"
Expires: 0
Pragma: no-cache
Server: nginx/1.1.19
x-powered-by: adzerk bifrost/
x-served-by: engine-i-0f96f7157b01056d3
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3352
Md5:    746fa36bcf397dd922a6a5151243fdd1
Sha1:   cb68a92b17c0ebecc2e67c5921fd285b5eaba8c8
Sha256: aeafd786e957f485bc41c9b103bf224f4aee95ee12895911fcc0725166646e99
                                        
                                            GET /js/ld/publishertag.js HTTP/1.1 
Host: static.criteo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         178.250.2.74
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Mon, 17 Jul 2017 20:52:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 18 Jul 2017 20:52:34 GMT
Cache-Control: max-age=86400, public
Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13713
Md5:    7c9f1edd18e79050ce7835640c6330ab
Sha1:   2649ee62eeba8688040be3535454494abf6d84ce
Sha256: 8b45334c82c30fe41bbef6cde914f97b71099bc1a1bc3203899c52baa969c28f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Mon, 17 Jul 2017 20:52:34 GMT
Etag: "596ce888-1d7"
Expires: Mon, 24 Jul 2017 08:52:34 GMT
Last-Modified: Mon, 17 Jul 2017 16:40:40 GMT
Server: ECS (arn/459D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c25f663b669abbcb70d3fabb513d0dab
Sha1:   fdc7220bc1f895cfe5e42561dbcef45630737b65
Sha256: 6f187e378011a524b3847a1ef550e61c84504b864352a52ea950909094e034a4
                                        
                                            GET /s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__& HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Cookie: lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         52.86.23.125
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private, no-cache, max-age=0
Date: Mon, 17 Jul 2017 20:52:34 GMT
Etag: 1.61803398874
now: 20170717 20:52:34.480
Set-Cookie: _li_ss=MgUIBhDCBDIFCAkQwgQyBQgKEMIEMgUICxDCBDIFCAwQwgQyBQgNENEEMgUIdxDBBA; Max-Age=2592000; Expires=Wed, 16 Aug 2017 20:52:34 GMT; Path=/s
uuid: 0972576301b444ae87491f25e0d93b76
uuidv4: 09725763-01b4-44ae-8749-1f25e0d93b76
Content-Length: 1066
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1066
Md5:    38f1107361bfeb44a5436062b8174d9a
Sha1:   6cfc247c99f6284e6a6aee22ccd1cb851d8acc76
Sha256: e87d06e06ba337c3eb987f06f8ea937f56a2ced6af9854286d18ee1bebb75437
                                        
                                            GET /sync/img?mt_exid=36&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00ev%2F0%2F0972576301b444ae87491f25e0d93b76%3Fmpid%3D7156%26muid%3D%5BMM_UUID%5D HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         185.29.135.233
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Mon, 17 Jul 2017 20:52:34 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Cache-Control: no-cache
Set-Cookie: uuid=5f64596d-2392-4400-97bf-09e22610aa15; domain=.mathtag.com; path=/; expires=Tue, 14-Aug-2018 20:52:34 GMT
Location: http://sync.mathtag.com/sync/img?mt_exid=36&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00ev%2F0%2F0972576301b444ae87491f25e0d93b76%3Fmpid%3D7156%26muid%3D%5BMM_UUID%5D&mm_bnc&mm_bct
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.9.1 edd88a8 RELEASE cdg-pixel-x12
Expires: Mon, 17 Jul 2017 20:52:33 GMT


--- Additional Info ---
                                        
                                            GET /track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         54.247.166.89
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Mon, 17 Jul 2017 20:52:31 GMT
Location: http://match.adsrvr.org/track/cmb/generic?ttd_pid=liveintent&ttd_tpi=1
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=ab0545b0-862e-475a-9ab3-db5b160d3c24; domain=.adsrvr.org; expires=Tue, 17-Jul-2018 20:52:31 GMT; path=/ TDCPM=CAEYBSgCMgsIuo-wmI_YpjUQBTgB; domain=.adsrvr.org; expires=Tue, 17-Jul-2018 20:52:31 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 171
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   171
Md5:    d755120c0f7c870848580f0b71d70509
Sha1:   475ade50152710022dfc2fcb6d3ecc61493d2513
Sha256: a6c2716f50713df132dadf0a7aaa235f0e127efe855537232d420ee64074b00a
                                        
                                            GET /syncd?dsp_id=256&user_group=2&user_id=268cf01e-7592-48ca-b03e-65a27e7694d5&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00ev%2F0%2F0972576301b444ae87491f25e0d93b76%3Fmpid%3D5298%26muid%3D%24%7BBSW_UID%7D HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         35.187.165.193
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Mon, 17 Jul 2017 20:52:34 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: http://x.bidswitch.net/ul_cb/syncd?dsp_id=256&user_group=2&user_id=268cf01e-7592-48ca-b03e-65a27e7694d5&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00ev%2F0%2F0972576301b444ae87491f25e0d93b76%3Fmpid%3D5298%26muid%3D%24%7BBSW_UID%7D
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=29540616-2451-438c-8805-9dde0c3b87e9; path=/; expires=Tue, 17-Jul-2018 20:52:34 GMT; domain=.bidswitch.net tuuid_last_update=1500324754; path=/; expires=Tue, 17-Jul-2018 20:52:34 GMT; domain=.bidswitch.net c=1500324754; path=/; expires=Tue, 17-Jul-2018 20:52:34 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            GET /sync/img?mt_exid=36&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00ev%2F0%2F0972576301b444ae87491f25e0d93b76%3Fmpid%3D7156%26muid%3D%5BMM_UUID%5D&mm_bnc&mm_bct HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: uuid=5f64596d-2392-4400-97bf-09e22610aa15

                                         
                                         185.29.135.233
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Mon, 17 Jul 2017 20:52:34 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Cache-Control: no-cache
Location: http://i.liadm.com/s/e/a-00ev/0/0972576301b444ae87491f25e0d93b76?mpid=7156&muid=5f64596d-2392-4400-97bf-09e22610aa15
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.9.1 edd88a8 RELEASE cdg-pixel-x14
Set-Cookie: uuidc=Tul+PwDOTvHY7tOX5QVO7p3AbmQjlx9AFgyhbFql+/ao88EOi7h1gjESl3AmWVQz2hqayJzl++pg4DMuEqLqrdKtYI33+2yTrh5MBD4bkxw=; Expires=Tue, 14-Aug-18 20:52:34 GMT; Domain=.mathtag.com; Path=/
Expires: Mon, 17 Jul 2017 20:52:33 GMT


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:34 GMT
Expires: Fri, 21 Jul 2017 20:52:34 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a94b41816d933cd4933ef35a0b029401
Sha1:   b1215b4147727b6ee47a2f8930782e9ae10b9535
Sha256: 3349ecb7eef921269e169c96b65043dd354e6fc791ae381a859fc3a03fbb9687
                                        
                                            GET /track/cmb/generic?ttd_pid=liveintent&ttd_tpi=1 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: TDID=ab0545b0-862e-475a-9ab3-db5b160d3c24; TDCPM=CAEYBSgCMgsIuo-wmI_YpjUQBTgB

                                         
                                         54.247.166.89
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Mon, 17 Jul 2017 20:52:28 GMT
Location: http://p.liadm.com/match_g?bidder_id=44489&bidder_uuid=ab0545b0-862e-475a-9ab3-db5b160d3c24
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=ab0545b0-862e-475a-9ab3-db5b160d3c24; domain=.adsrvr.org; expires=Tue, 17-Jul-2018 20:52:29 GMT; path=/ TDCPM=CAESGQoKbGl2ZWludGVudBILCMbC8dL416Y1EAUYBSABKAIyCwi6j7CYj9imNRAFOAE.; domain=.adsrvr.org; expires=Tue, 17-Jul-2018 20:52:29 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 213
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   213
Md5:    749956c674b511918531f0bf69d39320
Sha1:   e5dbce76b86d1f4d10e748f8067f93557ad0a40c
Sha256: aebb9b0b541d5af83e3062e1cb34319a994d5db467706fd80d8907490c138885
                                        
                                            GET /ul_cb/syncd?dsp_id=256&user_group=2&user_id=268cf01e-7592-48ca-b03e-65a27e7694d5&redir=http%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-00ev%2F0%2F0972576301b444ae87491f25e0d93b76%3Fmpid%3D5298%26muid%3D%24%7BBSW_UID%7D HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: tuuid=29540616-2451-438c-8805-9dde0c3b87e9; tuuid_last_update=1500324754; c=1500324754

                                         
                                         35.187.165.193
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Mon, 17 Jul 2017 20:52:34 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: http://i.liadm.com/s/e/a-00ev/0/0972576301b444ae87491f25e0d93b76?mpid=5298&muid=29540616-2451-438c-8805-9dde0c3b87e9
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=29540616-2451-438c-8805-9dde0c3b87e9; path=/; expires=Tue, 17-Jul-2018 20:52:34 GMT; domain=.bidswitch.net tuuid_last_update=1500324754; path=/; expires=Tue, 17-Jul-2018 20:52:34 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=305549, public, no-transform, must-revalidate
Last-Modified: Fri, 14 Jul 2017 09:41:26 GMT
Expires: Fri, 21 Jul 2017 09:41:26 GMT
Date: Mon, 17 Jul 2017 20:52:34 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    feec02a24095e65e818da9ac640e9e31
Sha1:   e36d560928fdf1e3add590a2b0752d028f70b75f
Sha256: ceaf2a49bd504b714de50c1b7d29ba6a7065705c26778bf0078a167f1a48d737
                                        
                                            GET /dapi/data?type=html;sid=wgvosz;ea=sm1;hema=H1%3A7df0fbe6561eec63c6e7e651896defb793a3b43f%2CH2%3A73d86afeabdd030432bd41f8fb99be4fe725ed95%2CH3%3A521dd80fc72460998ec7dbc7150f04326f22051b%2CH4%3A899b8b90eaf040e79844d5b496648a7e%2CH5%3Ae6dc6be4ede9da421d1045e9bc6085c6%2CH6%3A2ced8850b2911e992725ec72d312fa94cf54cafcd539f50c84d903a4eb97bf07%2CH7%3Ab3716ecee1b37a4319bebbb09151899212f1dac5ea434a123bf53cb4c1f11d03;_t=1500324754246 HTTP/1.1 
Host: data.circulate.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         35.186.247.47
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Mon, 17 Jul 2017 20:52:34 GMT
Content-Length: 267
Via: 1.1 google


--- Additional Info ---
Magic:  HTML document text
Size:   267
Md5:    d2fb96b3116b454a7b0bb93d8e00c82f
Sha1:   19c5b6122cee80b447a7263b8771c8df7136c2ff
Sha256: 97aae863f05ca5b14086b6ebab7bc8e42825064d2e7b2d65b6e9e9f7d9cfdcd7
                                        
                                            GET /connect/xd_arbiter/r/XBwzv5Yrm_1.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         157.240.3.24
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sun, 15 Jul 2018 00:21:22 GMT
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: p8ptDyKRbjzE2Aa5IHTwlRtWwpbj9xCI8rpckw8SoMXPEJDfi+Peq/8d6Ej6UDjjid/Ksy9Wy7fjuFBRFAsFHQ==
Date: Mon, 17 Jul 2017 20:52:34 GMT
Connection: keep-alive
Content-Length: 14338


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14338
Md5:    88a454b1b00707b1361a10bb6035c70f
Sha1:   323cf30d47c0496e1726120b8ce32c3db75a6029
Sha256: 09d14a69f2ae6bea56d46238532f5e5b217a57d3ab71416bdbf0b9c600348b18
                                        
                                            GET /p/cm/liveintent HTTP/1.1 
Host: rtb-px.content.ad
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         34.200.17.87
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache, no-store
Date: Mon, 17 Jul 2017 20:52:34 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://rtb-px.content.ad/p/cm/liveintent?bounced=1
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Server: nginx/1.8.0
Set-Cookie: r_u=PZc54YsRXlC;Path=/;Domain=.content.ad;Expires=Tue, 17-Jul-2018 20:52:34 GMT
X-Backend-id: rtb-fe-us-e2
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /s HTTP/1.1 
Host: em.licasd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         54.210.24.67
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Cache-Control: no-store
Date: Mon, 17 Jul 2017 20:52:34 GMT
Location: /s?chkc=y
P3P: CP="NOI DSP COR NID DEVo PSAo PSDo OTPo OUR BUS UNI NAV"
Server: openresty
Set-Cookie: emchk=1500324754.d44a595403537c1b11a509de34e58ea3; Expires=Sat, 29-Jun-19 20:52:34 GMT; Path=/; Domain=em.licasd.com
Content-Length: 154
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /dmp/pixelSync?nid=12 HTTP/1.1 
Host: pixel-a.sitescout.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         209.15.36.34
HTTP/1.1 302 Found
                                        
Cache-Control: max-age=0,no-cache,no-store
Pragma: no-cache
Expires: Tue, 11 Oct 1977 12:34:56 GMT
P3P: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
Set-Cookie: ssi=620090ed-c67b-4f4b-b962-d2f2679bfed1; Domain=.sitescout.com; Expires=Tue, 17-Jul-2018 20:52:34 GMT; Path=/ _ssum=e30; Domain=.sitescout.com; Expires=Wed, 16-Aug-2017 20:52:34 GMT; Path=/
Location: http://p.liadm.com/match?bidder_id=2380&bidder_uuid=620090ed-c67b-4f4b-b962-d2f2679bfed1
Content-Length: 0
Date: Mon, 17 Jul 2017 20:52:34 GMT
Server: AC1.1


--- Additional Info ---
                                        
                                            GET /match_g?bidder_id=44489&bidder_uuid=ab0545b0-862e-475a-9ab3-db5b160d3c24 HTTP/1.1 
Host: p.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         52.44.132.225
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.7.10
Date: Mon, 17 Jul 2017 20:52:34 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: http://ib.adnxs.com/getuid?http%3A%2F%2Fi.liadm.com%2Fs%2F35539%3Fbidder_id%3D91218%26bidder_uuid%3D%24UID
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: rid_44489=ab0545b0-862e-475a-9ab3-db5b160d3c24; path=/; expires=Wed, 17-Jul-2019 20:52:34 GMT; domain=p.liadm.com rid_91218=; path=/; expires=Mon, 17-Jul-2017 20:53:34 GMT; domain=p.liadm.com


--- Additional Info ---
                                        
                                            GET /p/cm/liveintent?bounced=1 HTTP/1.1 
Host: rtb-px.content.ad
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: r_u=PZc54YsRXlC

                                         
                                         34.200.17.87
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache, no-store
Date: Mon, 17 Jul 2017 20:52:34 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://i.liadm.com/s/35571?bidder_id=100626&bidder_uuid=PZc54YsRXlC
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Server: nginx/1.8.0
Set-Cookie: r_liveintent_sync=GOB;Path=/;Domain=.content.ad;Expires=Tue, 17-Jul-2018 20:52:34 GMT
X-Backend-id: rtb-fe-us-e6
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /s/e/a-00ev/0/0972576301b444ae87491f25e0d93b76?mpid=5298&muid=29540616-2451-438c-8805-9dde0c3b87e9 HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: _li_ss=MgUIBhDCBDIFCAkQwgQyBQgKEMIEMgUICxDCBDIFCAwQwgQyBQgNENEEMgUIdxDBBA; lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         52.86.23.125
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store
Date: Mon, 17 Jul 2017 20:52:34 GMT
now: 20170717 20:52:34.861
uuid: ed21ea78a7224ecabd48c5d90bf02762
uuidv4: ed21ea78-a722-4eca-bd48-c5d90bf02762
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            GET /s?chkc=y HTTP/1.1 
Host: em.licasd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: emchk=1500324754.d44a595403537c1b11a509de34e58ea3

                                         
                                         54.210.24.67
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Cache-Control: no-store
Date: Mon, 17 Jul 2017 20:52:34 GMT
Location: http://i.liadm.com/s/e/0?mpid=0&muid=1500324754.d44a595403537c1b11a509de34e58ea3
Server: openresty
Content-Length: 154
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:55:15 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121961, public, no-transform, must-revalidate
Last-Modified: Mon, 17 Jul 2017 20:34:56 GMT
Expires: Wed, 19 Jul 2017 08:34:56 GMT
Etag: "ca8d636a0d65f87733af3467f88251c12a43f385"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    d710c26b539f23a0fc73d6fd90fc2ca7
Sha1:   ca8d636a0d65f87733af3467f88251c12a43f385
Sha256: 89eb1506aab155434f6516cb51cfc0b8d2289b03e77eaad9f7fe4b1139c1a2ac
                                        
                                            GET /event?a=2230610604&d=323873908&y=false&src=js&s2222740355=ff&s2210750478=campaign&s2224610415=false&tsent=1500324751.224&n=http%3A%2F%2Fsweepstakesalerts.com%2Fremarketing-processing-entry-path%3Fconfig%3DDEF4JM94HA%26giveaway%3D5000%26next%3Dremarketing-entry-confirmed-fullpage%26first%3DPanda%26utm_source%3DSA-ONSITE-GoogleAdWordsSA-5k%26utm_medium%3Demail-es%26utm_campaign%3DSA-6235%26utm_term%3DOther%26utm_content%3D17421%26e%3D899b8b90eaf040e79844d5b496648a7e%26email%3Dpanda%2540techni-core.com%26last%3D%26zip%3D%26gender%3D%26homeowner%3D%26affid%3D1101%26message_id%3D6235%26yob%3D&u=oeu1500324751209r0.22648415570786962&wxhr=true&time=1500324751.224&f=8478960797&g=&cx2=636ac60d HTTP/1.1 
Host: 2230610604.log.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Origin: http://sweepstakesalerts.com
Cookie: cdn=http%3a%2f%2fakamai%3adsd%40cdn.optimizely.com%2fjs%2f2230610604.js

                                         
                                         107.20.207.81
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, X-Requested-With, X-TS-AJAX-Request
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: http://sweepstakesalerts.com
Date: Mon, 17 Jul 2017 20:52:34 GMT
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Server: nginx
Set-Cookie: fixed_external_2230610604_end_user_id=; Domain=.optimizely.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=-1 end_user_id=oeu1500324751209r0.22648415570786962; Domain=.2230610604.log.optimizely.com; expires=Thu, 15 Jul 2027 20:52:34 GMT
Content-Length: 2
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Mon, 17 Jul 2017 20:52:35 GMT
Etag: "596cf8dd-1d7"
Expires: Mon, 24 Jul 2017 08:52:35 GMT
Last-Modified: Mon, 17 Jul 2017 17:50:21 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    04a8d678af3af74dc384f1b46c2bbf4c
Sha1:   a6d0e532b9143f7755c9266d68ff99887fdcf4ab
Sha256: 57139d2455091c9c8750c512897e8dffc461d4766c66321d6ffde44ae6090e93
                                        
                                            GET /i.gif?e=eyJhdiI6Nzc2MTAsImF0IjoxMjMsImJ0IjowLCJjbSI6NDU2ODM0LCJjaCI6MTg1OTAsImNrIjp7fSwiY3IiOjE1ODQ3NTcsImRpIjoiZTdjNjNlOWIzNzU2NDgyZWIwOWFkZmM1ZWUxNWY3OGUiLCJkbSI6MSwiZmMiOjE4NTk5NjYsImZsIjoyMDAzMDY2LCJpcCI6Ijc3LjQwLjEyOS4xMjMiLCJudyI6OTcwNiwicGMiOjAsImVjIjowLCJwciI6ODI0NjIsInJ0IjoyLCJzYSI6IjMiLCJzYiI6ImktMGY5NmY3MTU3YjAxMDU2ZDMiLCJzcCI6Mjg5Miwic3QiOjcwMTI0LCJ1ayI6Ijg5OWI4YjkwZWFmMDQwZTc5ODQ0ZDViNDk2NjQ4YTdlIiwiem4iOjE2MDYyOSwidHMiOjE1MDAzMjQ3NTQyMDgsImJmIjp0cnVlLCJwbiI6ImF6azg5ODUxIiwiZnEiOjB9&s=lT7k6LGThubZHm2bnhADn0aTvMg&uko=true HTTP/1.1 
Host: engine.adzerk.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Cookie: __cfduid=d4df1e63172051958d95c3e227fdc3e5e1500324752

                                         
                                         23.23.97.192
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: accept, origin, content-type, content-length
Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS
Access-Control-Allow-Origin: undefined
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 17 Jul 2017 20:52:34 GMT
Etag: W/"2b-B//0C13UlayirE4cP7xgqg"
Expires: 0
Pragma: no-cache
Server: nginx/1.1.19
x-powered-by: adzerk bifrost/
x-served-by: engine-i-0d0508ff276b22ea0
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /s/e/0?mpid=0&muid=1500324754.d44a595403537c1b11a509de34e58ea3 HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: _li_ss=MgUIBhDCBDIFCAkQwgQyBQgKEMIEMgUICxDCBDIFCAwQwgQyBQgNENEEMgUIdxDBBA; lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         52.86.23.125
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store
Date: Mon, 17 Jul 2017 20:52:35 GMT
now: 20170717 20:52:35.006
uuid: 5280cdc1a6ec425b88a811bbdf28a2fc
uuidv4: 5280cdc1-a6ec-425b-88a8-11bbdf28a2fc
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "c976f400ce3d353a4b6e9efaae7fb32e"
Expires: Mon, 17 Jul 2017 20:52:35 GMT
Date: Mon, 17 Jul 2017 20:52:35 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=10886400
P3P: CP="This is not a P3P policy! See https://support.google.com/accounts/answer/151657?hl=en for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=107=n1Ho6sfJUZDTJe_ZUnh3xwLGM0FiEHg9YD7k9edv2qFytC24_moswYZRTG2pN4frtUzk9p3MwEcftQDl6nXYv0belol6Fyg8Ymkze_K0zfOZvilnbeL_du7RXA03-Beb;Domain=.google.com;Path=/;Expires=Tue, 16-Jan-2018 20:52:35 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15995
Md5:    351c45b8b42689aa97333a6371ad4763
Sha1:   5c86b4a05dfaf7775f8d44568ad2031f0d649e18
Sha256: bbd1dd5558841126e47602f6b1324a068437009a275c39ccd2aa71df4d7dd30a
                                        
                                            GET /match?bidder_id=2380&bidder_uuid=620090ed-c67b-4f4b-b962-d2f2679bfed1 HTTP/1.1 
Host: p.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         52.44.132.225
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.7.10
Date: Mon, 17 Jul 2017 20:52:35 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: rid_2380=620090ed-c67b-4f4b-b962-d2f2679bfed1; path=/; expires=Wed, 17-Jul-2019 20:52:35 GMT; domain=p.liadm.com


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /s/e/a-00ev/0/0972576301b444ae87491f25e0d93b76?mpid=7156&muid=5f64596d-2392-4400-97bf-09e22610aa15 HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: _li_ss=MgUIBhDCBDIFCAkQwgQyBQgKEMIEMgUICxDCBDIFCAwQwgQyBQgNENEEMgUIdxDBBA; lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         52.86.23.125
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store
Date: Mon, 17 Jul 2017 20:52:34 GMT
now: 20170717 20:52:34.719
uuid: 9b95247ea3b142f68dd7584c3d3b0b71
uuidv4: 9b95247e-a3b1-42f6-8dd7-584c3d3b0b71
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=107=n1Ho6sfJUZDTJe_ZUnh3xwLGM0FiEHg9YD7k9edv2qFytC24_moswYZRTG2pN4frtUzk9p3MwEcftQDl6nXYv0belol6Fyg8Ymkze_K0zfOZvilnbeL_du7RXA03-Beb

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:35 GMT
Expires: Fri, 21 Jul 2017 20:52:35 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    37fea05d03943e910853a2e233293802
Sha1:   15314d7ec0d17fb919f2b70d2a74876dd708482f
Sha256: ff88728f281063989eff178210f6d6c2097bc955d6b1551c8a438fad5234ec4f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:35 GMT
Server: Apache
Last-Modified: Sun, 16 Jul 2017 14:13:00 GMT
Expires: Sun, 23 Jul 2017 14:13:00 GMT
Etag: 22D4EB93B0ABACBA36E8CB20F17951F55B708F2C
Cache-Control: max-age=493824,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    c149b5fac600c03ddb6fc40d1a2352d2
Sha1:   22d4eb93b0abacba36e8cb20f17951f55b708f2c
Sha256: 44cacc96e4bee9845145571a53f9b9739ae6d4334050612bb701afc84da467e6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:35 GMT
Server: Apache
Last-Modified: Sat, 15 Jul 2017 22:05:35 GMT
Expires: Sat, 22 Jul 2017 22:05:35 GMT
Etag: CAC3BB6725C4FEB91F0935C38DB35401DD3B4CC7
Cache-Control: max-age=435779,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    18aff7cfacaff18258021d4b96f9c999
Sha1:   cac3bb6725c4feb91f0935c38db35401dd3b4cc7
Sha256: ddff8e97376754c6448cd8cfaf36c8ca91c8fef5e0c24ac46224d0bea8afb588
                                        
                                            GET /v1/container/traverse-container.js?clientId=dc642372-5ae8-41a7-9346-70a4cf2e58b2 HTTP/1.1 
Host: static.traversedlp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         54.230.14.65
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Date: Sun, 16 Jul 2017 11:58:31 GMT
Etag: W/"4c8e-wQL5Vw5fd33gAcj0BhK+mw"
P3P: CP="CAO PSAo CONo OUR OTRo BUS PHY ONL UNI COM NAV DEM STA"
Server: nginx/1.8.1
Vary: Accept-Encoding
X-Cache: RefreshHit from cloudfront
Via: 1.1 386154a8b803e598d248a8fd5bf45785.cloudfront.net (CloudFront)
X-Amz-Cf-Id: AnuCcadFhSo8yud0vlDi5DCI6ucv-nq4w1aDhc1QtVpeG-J6PTCHUA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7477
Md5:    01475e314f52d3b19eb3035260f8a681
Sha1:   d34bbe7c3d78bcc2c65a646fb9b5ff86be2bc5ce
Sha256: cf173ef9ddae999939138cf86587fcceecde8bcf349fce74777a542c2926283c
                                        
                                            GET /impression.php/f2031cd1e018d74/?api_key=1473478729638421&lid=115&payload=%7B%22source%22%3A%22jssdk%22%7D HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         157.240.18.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin, Accept-Encoding
public-key-pins-report-only: max-age=500; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Encoding: gzip
X-FB-Debug: kD1SToWb79XyMN6U7sBLAs1ljOx6zJaOlBHYWxbCRkqarYEWTB0ECW0tMMJhc3EMaktDchONZDBsIi3Xw7Hixg==
Date: Mon, 17 Jul 2017 20:52:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57
Md5:    9539fdb766538c525a3e11e03853b8c9
Sha1:   cd658fd453cb9e7af5aede2e9c6050d81c0e2fdc
Sha256: 88882a6963e4a4313761bf5e5be68a015ec125c023fba749a9ec0aca7a9124af
                                        
                                            GET /s/35571?bidder_id=100626&bidder_uuid=PZc54YsRXlC HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: _li_ss=MgUIBhDCBDIFCAkQwgQyBQgKEMIEMgUICxDCBDIFCAwQwgQyBQgNENEEMgUIdxDBBA; lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         52.86.23.125
HTTP/1.1 303 See Other
                                        
Date: Mon, 17 Jul 2017 20:52:35 GMT
Location: http://trc.taboola.com/sg/liveintent/1/cm/
now: 20170717 20:52:35.122
Set-Cookie: _li_ss=MgUIBhDCBDIFCAkQwgQyBQgKEMIEMgUICxDCBDIFCAwQwgQyBQgNENEEMgUIdxDBBDIFCHkQwQQ; Max-Age=2592000; Expires=Wed, 16 Aug 2017 20:52:35 GMT; Path=/s lidid=268cf01e-7592-48ca-b03e-65a27e7694d5; Max-Age=63072000; Expires=Wed, 17 Jul 2019 20:52:35 GMT; Path=/; Domain=liadm.com
uuid: b6ac6bc537824f19a4115c6cda08f1cd
uuidv4: b6ac6bc5-3782-4f19-a411-5c6cda08f1cd
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-46324972-3&cid=1707022187.1500324753&jid=1158179372&_gid=800903092.1500324753&gjid=1301956606&_v=j56&z=1952658776 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         173.194.222.156
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-46324972-3&cid=1707022187.1500324753&jid=1158179372&_v=j56&z=1952658776
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Mon, 17 Jul 2017 20:52:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 367
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  HTML document text
Size:   367
Md5:    125d763b34d315b97b3a6e041e3884ae
Sha1:   952874957c5544c8173d3550e00a24fc39ea0327
Sha256: ca59f5ab638861df4223e394c5b1d27636dbf24dd6b7a71f90c2c8c12ca546a4
                                        
                                            GET /sg/liveintent/1/cm/ HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         151.101.86.2
HTTP/1.1 302 Found
                                        
Server: nginx/1.10.1
Set-Cookie: t_gid=75934375-f9b7-4eba-a15b-ee28382d31c6-tuct66a913;Path=/;Domain=.taboola.com;Expires=Tue, 17-Jul-2018 20:52:35 GMT taboola_usg=IhAKCmxpdmVpbnRlbnQSAggB;Path=/;Domain=.taboola.com;Expires=Tue, 17-Jul-2018 20:52:35 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://i.liadm.com/s/32441?bidder_id=88068&bidder_uuid=75934375-f9b7-4eba-a15b-ee28382d31c6-tuct66a913
Content-Length: 0
Accept-Ranges: bytes
Date: Mon, 17 Jul 2017 20:52:35 GMT
Via: 1.1 varnish
Connection: keep-alive
x-served-by: cache-bma7029-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1500324756.524984,VS0,VE29


--- Additional Info ---
                                        
                                            GET /event?a=38556&v=4.1.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dce%26m%3D%255B%255D&p2=e%3Dvh%26detag%3D1&p3=e%3Ddis&adce=1 HTTP/1.1 
Host: widget.criteo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         178.250.2.80
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Location: http://widget.us.criteo.com/event?a=38556&v=4.1.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dce%26m%3D%255B%255D&p2=e%3Dvh%26detag%3D1&p3=e%3Ddis&adce=1
Server: Microsoft-IIS/8.5
Set-Cookie: uid=02f54337-5cf9-4e8f-8b5e-0a0a8d488f07; domain=.criteo.com; expires=Tue, 17-Jul-2018 20:52:35 GMT; path=/
x-powered-by: ASP.NET
Date: Mon, 17 Jul 2017 20:52:35 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /event?a=38556&v=4.1.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dce%26m%3D%255B%255D&p2=e%3Dvh%26detag%3D1&p3=e%3Ddis&adce=1 HTTP/1.1 
Host: widget.us.criteo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Cookie: uid=02f54337-5cf9-4e8f-8b5e-0a0a8d488f07

                                         
                                         74.119.119.79
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: Microsoft-IIS/8.5
P3P: NON DSP COR CURa PSA PSD OUR BUS NAV STA
x-powered-by: ASP.NET
Date: Mon, 17 Jul 2017 20:52:35 GMT
Content-Length: 895


--- Additional Info ---
Magic:  ASCII text, with very long lines, with CRLF, LF line terminators
Size:   895
Md5:    c6b822db1aa7ac3fec31c9bbedc84a7f
Sha1:   de6d89f8d0e2793db9b6c8684805baadd3956c26
Sha256: 9e33be8c4dc246fb69d05b329409b65761848646e310ad057eeb7150ad911548
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         54.230.15.56
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Mon, 17 Jul 2017 20:52:35 GMT
Etag: "596cd229-1d7"
Expires: Mon, 24 Jul 2017 08:52:35 GMT
Last-Modified: Mon, 17 Jul 2017 15:05:13 GMT
Server: ECS (dca/2470)
X-Cache: Miss from cloudfront
Via: 1.1 5515890e7ce0a4b8eaa000066bc1c8f7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: rcf51s3Q4QldbVaXa-NcJVjLK_wshvOUt0WRmI-6adtvk6VFQwf3Eg==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d4d2c34570fab627d092cf1465f50438
Sha1:   44140ae68a479bacee632ea7109bee2a0ee6a48d
Sha256: 1e67901906f6c2df2f4874421101657ab4c4a9b065c22ccdd35e91dec069230d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         54.230.15.222
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Mon, 17 Jul 2017 20:52:36 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.1/2016-04-26)
X-Cache: Miss from cloudfront
Via: 1.1 fe16d0ba3573e280ebc5149806b84ef1.cloudfront.net (CloudFront)
X-Amz-Cf-Id: KMJ4astoRLJF_sHb0WxqGwELZh9J2zbQJJPql4EJKeIAO6Lw3UfAIg==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    a1d099efaa79d461deedb12167f1454e
Sha1:   9225ae8974cb8e168b75f13bcc9c2de665a73685
Sha256: 5aa2ffb940051592ed80f05b3d7f0141910d543b3e9b9741bba8133dbdcb2658
                                        
                                            GET /api/sync?it=4&it=4&it=4&iv=7df0fbe6561eec63c6e7e651896defb793a3b43f&iv=899b8b90eaf040e79844d5b496648a7e&iv=2ced8850b2911e992725ec72d312fa94cf54cafcd539f50c84d903a4eb97bf07&pid=7723 HTTP/1.1 
Host: pippio.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://data.circulate.com/dapi/data?type=html;sid=wgvosz;ea=sm1;hema=H1%3A7df0fbe6561eec63c6e7e651896defb793a3b43f%2CH2%3A73d86afeabdd030432bd41f8fb99be4fe725ed95%2CH3%3A521dd80fc72460998ec7dbc7150f04326f22051b%2CH4%3A899b8b90eaf040e79844d5b496648a7e%2CH5%3Ae6dc6be4ede9da421d1045e9bc6085c6%2CH6%3A2ced8850b2911e992725ec72d312fa94cf54cafcd539f50c84d903a4eb97bf07%2CH7%3Ab3716ecee1b37a4319bebbb09151899212f1dac5ea434a123bf53cb4c1f11d03;_t=1500324754246

                                         
                                         107.178.254.65
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Cache-Control: no-cache, no-store
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: did=M2lv0a8CedVqnUkr; Path=/; Domain=pippio.com; Expires=Tue, 17 Jul 2018 20:52:35 GMT didts=1500324755; Path=/; Domain=pippio.com; Expires=Tue, 17 Jul 2018 20:52:35 GMT pxrc=CJPHtMsFEgUIqBkQABIFCKkZEAA=; Path=/; Domain=pippio.com; Expires=Fri, 15 Sep 2017 20:52:35 GMT nnls=; Path=/; Domain=pippio.com; Expires=Fri, 15 Sep 2017 20:52:35 GMT
Timing-Allow-Origin: *
Date: Mon, 17 Jul 2017 20:52:35 GMT
Transfer-Encoding: chunked
Via: 1.1 google
Alt-Svc: clear


--- Additional Info ---
Magic:  ASCII text
Size:   2760
Md5:    ca2a7ee5c9496841dc60f3d77be78daf
Sha1:   6182ce90e214b49e4484bb7f072dcfc19c896fce
Sha256: bdcb1d368de7bc05a2e971bc7d77a6dfac2140c34db11010354cc119eea54e7a
                                        
                                            GET /connect/xd_arbiter/r/XBwzv5Yrm_1.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         157.240.3.24
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sun, 15 Jul 2018 00:21:22 GMT
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: p8ptDyKRbjzE2Aa5IHTwlRtWwpbj9xCI8rpckw8SoMXPEJDfi+Peq/8d6Ej6UDjjid/Ksy9Wy7fjuFBRFAsFHQ==
Date: Mon, 17 Jul 2017 20:52:35 GMT
Connection: keep-alive
Content-Length: 14338


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14338
Md5:    88a454b1b00707b1361a10bb6035c70f
Sha1:   323cf30d47c0496e1726120b8ce32c3db75a6029
Sha256: 09d14a69f2ae6bea56d46238532f5e5b217a57d3ab71416bdbf0b9c600348b18
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=107=n1Ho6sfJUZDTJe_ZUnh3xwLGM0FiEHg9YD7k9edv2qFytC24_moswYZRTG2pN4frtUzk9p3MwEcftQDl6nXYv0belol6Fyg8Ymkze_K0zfOZvilnbeL_du7RXA03-Beb

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:36 GMT
Expires: Fri, 21 Jul 2017 20:52:36 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    326650bdc843cab49d5298eddaf1c14d
Sha1:   0e9c40aa47c527acd7c42b4d1b95aa168f301bb1
Sha256: 2822f3fb65368a594cffd98ab441bea53ed1881636dc3e1b9e8e63087a24dfdc
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-46324972-3&cid=1707022187.1500324753&jid=1158179372&_v=j56&z=1952658776 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Cookie: NID=107=n1Ho6sfJUZDTJe_ZUnh3xwLGM0FiEHg9YD7k9edv2qFytC24_moswYZRTG2pN4frtUzk9p3MwEcftQDl6nXYv0belol6Fyg8Ymkze_K0zfOZvilnbeL_du7RXA03-Beb

                                         
                                         216.58.211.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 17 Jul 2017 20:52:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-46324972-3&cid=1707022187.1500324753&jid=1158179372&_v=j56&z=1952658776&slf_rd=1&random=2585335426
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: gp.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1415
Content-Transfer-Encoding: binary
Cache-Control: max-age=542321, public, no-transform, must-revalidate
Last-Modified: Mon, 17 Jul 2017 03:31:17 GMT
Expires: Mon, 24 Jul 2017 03:31:17 GMT
Date: Mon, 17 Jul 2017 20:52:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1415
Md5:    87dcba5f02e0cbaa4c61f7da52679f0d
Sha1:   0690b96150f005ebd964743e74e3878544911168
Sha256: f98b2e965cb969e0ca1eb8591ded286399b91bdfb0289aace99806ee464bd40e
                                        
                                            GET /api/sync?pid=0&m=CKs8EjMKLggEEAAaKDdkZjBmYmU2NTYxZWVjNjNjNmU3ZTY1MTg5NmRlZmI3OTNhM2I0M2YQ9ycaGgiTx7TLBRIECAAQABIFCKgZEAASBQipGRAA HTTP/1.1 
Host: pippio.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://data.circulate.com/dapi/data?type=html;sid=wgvosz;ea=sm1;hema=H1%3A7df0fbe6561eec63c6e7e651896defb793a3b43f%2CH2%3A73d86afeabdd030432bd41f8fb99be4fe725ed95%2CH3%3A521dd80fc72460998ec7dbc7150f04326f22051b%2CH4%3A899b8b90eaf040e79844d5b496648a7e%2CH5%3Ae6dc6be4ede9da421d1045e9bc6085c6%2CH6%3A2ced8850b2911e992725ec72d312fa94cf54cafcd539f50c84d903a4eb97bf07%2CH7%3Ab3716ecee1b37a4319bebbb09151899212f1dac5ea434a123bf53cb4c1f11d03;_t=1500324754246
Cookie: did=M2lv0a8CedVqnUkr; didts=1500324755; pxrc=CJPHtMsFEgUIqBkQABIFCKkZEAA=; nnls=

                                         
                                         107.178.254.65
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache, no-store
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: pxrc=CJPHtMsFEgQIABABEgUIqBkQABIFCKkZEAA=; Path=/; Domain=pippio.com; Expires=Fri, 15 Sep 2017 20:52:36 GMT
Timing-Allow-Origin: *
Date: Mon, 17 Jul 2017 20:52:36 GMT
Content-Length: 42
Via: 1.1 google
Alt-Svc: clear


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=107=n1Ho6sfJUZDTJe_ZUnh3xwLGM0FiEHg9YD7k9edv2qFytC24_moswYZRTG2pN4frtUzk9p3MwEcftQDl6nXYv0belol6Fyg8Ymkze_K0zfOZvilnbeL_du7RXA03-Beb

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 17 Jul 2017 20:52:37 GMT
Expires: Fri, 21 Jul 2017 20:52:37 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a5b0f7faccf969b59c24ccc8be1189d6
Sha1:   81efd421307b5fd278f50298225af28d2747a083
Sha256: 400633b62da4e5c17f3d3f9e443dc33da53cbd1f45b7fb14b7e5ae4151f45562
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-46324972-3&cid=1707022187.1500324753&jid=1158179372&_v=j56&z=1952658776&slf_rd=1&random=2585335426 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 17 Jul 2017 20:52:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /adscores/s.pixel?sid=9112289298&em=7df0fbe6561eec63c6e7e651896defb793a3b43f HTTP/1.1 
Host: aa.agkn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://data.circulate.com/dapi/data?type=html;sid=wgvosz;ea=sm1;hema=H1%3A7df0fbe6561eec63c6e7e651896defb793a3b43f%2CH2%3A73d86afeabdd030432bd41f8fb99be4fe725ed95%2CH3%3A521dd80fc72460998ec7dbc7150f04326f22051b%2CH4%3A899b8b90eaf040e79844d5b496648a7e%2CH5%3Ae6dc6be4ede9da421d1045e9bc6085c6%2CH6%3A2ced8850b2911e992725ec72d312fa94cf54cafcd539f50c84d903a4eb97bf07%2CH7%3Ab3716ecee1b37a4319bebbb09151899212f1dac5ea434a123bf53cb4c1f11d03;_t=1500324754246

                                         
                                         54.77.164.43
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 17 Jul 2017 20:52:37 GMT
Connection: close
Server: AAWebServer
P3P: policyref="http://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
Content-Length: 43


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    db04c7b378cb2db912c3ba8a5a774ee3
Sha1:   dee34bd86c3484d31002182aa2b7caa4699126b8
Sha256: 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
                                        
                                            GET /adscores/s.pixel?sid=9112289298&em=899b8b90eaf040e79844d5b496648a7e HTTP/1.1 
Host: aa.agkn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://data.circulate.com/dapi/data?type=html;sid=wgvosz;ea=sm1;hema=H1%3A7df0fbe6561eec63c6e7e651896defb793a3b43f%2CH2%3A73d86afeabdd030432bd41f8fb99be4fe725ed95%2CH3%3A521dd80fc72460998ec7dbc7150f04326f22051b%2CH4%3A899b8b90eaf040e79844d5b496648a7e%2CH5%3Ae6dc6be4ede9da421d1045e9bc6085c6%2CH6%3A2ced8850b2911e992725ec72d312fa94cf54cafcd539f50c84d903a4eb97bf07%2CH7%3Ab3716ecee1b37a4319bebbb09151899212f1dac5ea434a123bf53cb4c1f11d03;_t=1500324754246

                                         
                                         54.77.164.43
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 17 Jul 2017 20:52:37 GMT
Connection: close
Server: AAWebServer
P3P: policyref="http://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
Content-Length: 43


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    db04c7b378cb2db912c3ba8a5a774ee3
Sha1:   dee34bd86c3484d31002182aa2b7caa4699126b8
Sha256: 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sessionid=mvcwrzno79vb81n2izhtg8kr4xz47i8c; optimizelyEndUserId=oeu1500324751209r0.22648415570786962; optimizelySegments=%7B%222222740355%22%3A%22ff%22%2C%222210750478%22%3A%22campaign%22%2C%222224610415%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%5D; _sp_id=75e6ff00-d896-412d-af03-de6567a41903; _sp_ses=1a703c59-0398-4dbc-a01c-21a60720dc34; _ga=GA1.2.1707022187.1500324753; _gid=GA1.2.800903092.1500324753; _gat=1; _sp_ses.deff=*; _sp_id.deff=165adf2242618f58.1500324754.1.1500324754.1500324754.3c5a361e-7c92-4c37-a94d-a80db499c7f2; circulate=ok; traverse=ok

                                         
                                         54.204.25.254
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.10.1
Date: Mon, 17 Jul 2017 20:55:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Location: /


--- Additional Info ---
                                        
                                            GET /dis/dis.aspx?p=38556&cb=55243463018&ref=&sc_r=1176x885&sc_d=24 HTTP/1.1 
Host: dis.us.criteo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sweepstakesalerts.com/remarketing-processing-entry-path?config=DEF4JM94HA&giveaway=5000&next=remarketing-entry-confirmed-fullpage&first=Panda&utm_source=SA-ONSITE-GoogleAdWordsSA-5k&utm_medium=email-es&utm_campaign=SA-6235&utm_term=Other&utm_content=17421&e=899b8b90eaf040e79844d5b496648a7e&email=panda%40techni-core.com&last=&zip=&gender=&homeowner=&affid=1101&message_id=6235&yob=
Cookie: uid=02f54337-5cf9-4e8f-8b5e-0a0a8d488f07

                                         
                                         74.119.119.84
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache,no-cache
Pragma: no-cache,no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT,Mon, 26 Jul 1997 05:00:00 GMT
Server: Microsoft-IIS/8.5
P3P: CP='CUR ADM OUR NOR STA NID', CP='CUR ADM OUR NOR STA NID'
x-powered-by: ASP.NET
Date: Mon, 17 Jul 2017 20:52:36 GMT
Content-Length: 25


--- Additional Info ---
Magic:  exported SGML document text
Size:   25
Md5:    5654acde0dab7e38c0854bbeb7159260
Sha1:   3602602eca63622bd8c882c3623cc486c061d790
Sha256: 28246fc455ed80a6d38f2779e518e2fb49031680c01ae393a7cae3d04462daf0
                                        
                                            GET / HTTP/1.1 
Host: sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sessionid=mvcwrzno79vb81n2izhtg8kr4xz47i8c; optimizelyEndUserId=oeu1500324751209r0.22648415570786962; optimizelySegments=%7B%222222740355%22%3A%22ff%22%2C%222210750478%22%3A%22campaign%22%2C%222224610415%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%5D; _sp_id=75e6ff00-d896-412d-af03-de6567a41903; _sp_ses=1a703c59-0398-4dbc-a01c-21a60720dc34; _ga=GA1.2.1707022187.1500324753; _gid=GA1.2.800903092.1500324753; _gat=1; _sp_ses.deff=*; _sp_id.deff=165adf2242618f58.1500324754.1.1500324754.1500324754.3c5a361e-7c92-4c37-a94d-a80db499c7f2; circulate=ok; traverse=ok

                                         
                                         54.204.25.254
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.10.1
Date: Mon, 17 Jul 2017 20:55:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Cookie
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4071
Md5:    ea08c3f7844b05598b10634918894262
Sha1:   730150aef34e7cfd99e169956e5b6a9c1e2805fa
Sha256: 0c1c0daf6e3ff2c843e42d969624b089bb5a5d079efd7824e0e8fd6cf3333429
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sessionid=mvcwrzno79vb81n2izhtg8kr4xz47i8c; optimizelyEndUserId=oeu1500324751209r0.22648415570786962; optimizelySegments=%7B%222222740355%22%3A%22ff%22%2C%222210750478%22%3A%22campaign%22%2C%222224610415%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%5D; _sp_id=75e6ff00-d896-412d-af03-de6567a41903; _sp_ses=1a703c59-0398-4dbc-a01c-21a60720dc34; _ga=GA1.2.1707022187.1500324753; _gid=GA1.2.800903092.1500324753; _gat=1; _sp_ses.deff=*; _sp_id.deff=165adf2242618f58.1500324754.1.1500324754.1500324754.3c5a361e-7c92-4c37-a94d-a80db499c7f2; circulate=ok; traverse=ok

                                         
                                         54.204.25.254
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.10.1
Date: Mon, 17 Jul 2017 20:55:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Location: /


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: sweepstakesalerts.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sessionid=mvcwrzno79vb81n2izhtg8kr4xz47i8c; optimizelyEndUserId=oeu1500324751209r0.22648415570786962; optimizelySegments=%7B%222222740355%22%3A%22ff%22%2C%222210750478%22%3A%22campaign%22%2C%222224610415%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%5D; _sp_id=75e6ff00-d896-412d-af03-de6567a41903; _sp_ses=1a703c59-0398-4dbc-a01c-21a60720dc34; _ga=GA1.2.1707022187.1500324753; _gid=GA1.2.800903092.1500324753; _gat=1; _sp_ses.deff=*; _sp_id.deff=165adf2242618f58.1500324754.1.1500324754.1500324754.3c5a361e-7c92-4c37-a94d-a80db499c7f2; circulate=ok; traverse=ok

                                         
                                         54.204.25.254
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.10.1
Date: Mon, 17 Jul 2017 20:55:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Cookie
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4071
Md5:    ea08c3f7844b05598b10634918894262
Sha1:   730150aef34e7cfd99e169956e5b6a9c1e2805fa
Sha256: 0c1c0daf6e3ff2c843e42d969624b089bb5a5d079efd7824e0e8fd6cf3333429
                                        
                                            GET /cfcm.ashx?providerID=4001&extMatch=1&rcode=0 HTTP/1.1 
Host: li.pxl.ace.advertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /getuid?http%3A%2F%2Fi.liadm.com%2Fs%2F35539%3Fbidder_id%3D91218%26bidder_uuid%3D%24UID HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /s/32441?bidder_id=88068&bidder_uuid=75934375-f9b7-4eba-a15b-ee28382d31c6-tuct66a913 HTTP/1.1 
Host: i.liadm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://i.liadm.com/s/c/a-00ev?s=&cim=&ps=true&ls=true&duid=a-00ev--75e6ff00-d896-412d-af03-de6567a41903&domainSessionId=1a703c59-0398-4dbc-a01c-21a60720dc34&ppid=0&ci=0&version=sc-__VERSION__&
Cookie: _li_ss=MgUIBhDCBDIFCAkQwgQyBQgKEMIEMgUICxDCBDIFCAwQwgQyBQgNENEEMgUIdxDBBDIFCHkQwQQ; lidid=268cf01e-7592-48ca-b03e-65a27e7694d5

                                         
                                         0.0.0.0
                                        


--- Additional Info ---