Overview

URL acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
IP151.101.85.108
ASNAS6983 Earthlink, Inc.
Location United States
Report completed2017-07-20 17:46:48 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 151.101.85.108

Date UQ / IDS / BL URL IP
2017-08-17 13:32:52 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-08-13 11:15:44 +0200
0 - 0 - 0 acdn.adnxs.com 151.101.85.108
2017-08-12 22:54:53 +0200
0 - 0 - 0 acdn.adnxs.com 151.101.85.108
2017-08-02 17:08:25 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-07-23 03:03:31 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-07-21 17:10:56 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108

Last 10 reports on ASN: AS6983 Earthlink, Inc.

Date UQ / IDS / BL URL IP
2017-08-23 00:53:55 +0200
0 - 0 - 1 https://s4dfc82e1c3116edb.jimcontent.com/down (...) 151.101.86.2
2017-08-23 00:49:59 +0200
0 - 0 - 0 https://bandcamp.com/what-happened-to-monday- (...) 151.101.129.28
2017-08-23 00:34:39 +0200
0 - 0 - 0 https://bandcamp.com/vico-c-la-vida-del-filos (...) 151.101.193.28
2017-08-23 00:20:02 +0200
0 - 0 - 1 https://es.scribd.com/document/80879717/NORMA (...) 151.101.86.152
2017-08-23 00:16:58 +0200
0 - 0 - 0 https://www.reddit.com/6vej6g 151.101.85.140
2017-08-23 00:15:31 +0200
0 - 0 - 0 lifehacker.com 151.101.1.34
2017-08-23 00:07:16 +0200
0 - 0 - 0 https://bandcamp.com/floyd-mayweather-jr-vs-c (...) 151.101.193.28
2017-08-23 00:04:23 +0200
0 - 0 - 0 https://bandcamp.com/face-off-game-face-seaso (...) 151.101.193.28
2017-08-22 23:59:15 +0200
0 - 0 - 0 https://bandcamp.com/putlocker-logan-lucky-fu (...) 151.101.65.28
2017-08-22 23:56:37 +0200
0 - 0 - 0 https://bandcamp.com/homicide-hunter-lt-joe-k (...) 151.101.1.28

No other reports on domain: .



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (31)


Request Response
                                        
                                            GET /ib/static/usersync/v3/async_usersync.html HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         151.101.85.108
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.9.13
Last-Modified: Fri, 20 May 2016 02:07:09 GMT
Etag: W/"573e714d-3e3"
Expires: Tue, 01 Aug 2017 18:36:49 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: e0a1bb88354655bae6b4f44be1ff58238053e5563770e29e0e433e905ee66055
Content-Length: 506
Accept-Ranges: bytes
Date: Thu, 20 Jul 2017 15:46:15 GMT
Age: 30488965
Connection: keep-alive
X-Served-By: cache-jfk1022-JFK, cache-bma7027-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 15807647
X-Timer: S1500565575.255651,VS0,VE0
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   506
Md5:    b5df0fbc24b9c2e120c7adb1cd618f25
Sha1:   8ced45952c9a51b4e6689cd886e556719fa077b5
Sha256: 54020af72caa42494902c2e0d1fc011e0228df93d5531ef2f820af61528b3b63
                                        
                                            GET /async_usersync?cbfn=AN_async_load HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         185.33.223.215
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:17 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DAN_async_load
AN-X-Request-Uuid: 21a6ecf4-cae5-4884-95f9-94a779a4144c
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.68:80


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         151.101.85.108
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.9.13
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: 18c539ebc7ce97f994fcf35e270c019862b74f51f2b492807013e1380f831d87
Content-Length: 131
Accept-Ranges: bytes
Date: Thu, 20 Jul 2017 15:46:15 GMT
Age: 0
Connection: keep-alive
X-Served-By: cache-jfk8120-JFK, cache-bma7027-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 2, 0
X-Timer: S1500565576.525938,VS0,VE94
Vary: Accept-Encoding
Cache-Control: max-age=86400


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131
Md5:    dbd39d618a16ab9672e552b893252fca
Sha1:   28bc431e15c1600107964839b42f7ce64e950d2b
Sha256: e11172086458e56e39339a642c8f5709d94c467fd9b4f0fe2efb6582781b88ec
                                        
                                            GET /bounce?%2Fasync_usersync%3Fcbfn%3DAN_async_load HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085

                                         
                                         185.33.223.215
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:17 GMT
Content-Length: 1332
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: fbd20902-8b24-4213-bcd2-7fc668145570
Set-Cookie: anj=dTM7k!M4.wgjZ%3ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_Nxy-eD2a.5$C=gdq%]lle.AB-^(5gC6Yf7#a'Kf/eTTQ-#5q[!AWxvk398<; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.174:80


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1332
Md5:    66773cd05de1315109aa68d0f458dc9b
Sha1:   151328a8ee8c753c9bf86da69a83a213fcab3359
Sha256: 7104a71f251f1ba82921a151682f69ecd258a7d074c084dc7909e84a83593e4b
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&uid=2538009099740048085 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm=&google_sc=&uid=2538009099740048085&google_tc=
Date: Thu, 20 Jul 2017 15:46:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 323
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 20-Jul-2017 16:01:15 GMT; path=/; domain=.doubleclick.net


--- Additional Info ---
Magic:  HTML document text
Size:   323
Md5:    17506ee51dc8a7e75f62ea52cb62520d
Sha1:   158d746434a0b906ff4a24004e9e76bbf3ae99fa
Sha256: 5b876a49f09a8d871ecf499bac808e7af7c0f0de0e01f3178a46a838b3f85e5c
                                        
                                            GET /pixel?google_nid=appnexus&google_cm=&google_sc=&uid=2538009099740048085&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://ib.adnxs.com/setuid?entity=101&uid=2538009099740048085&code=CAESEBDEGbC5jGbEiO6TunOimww&google_cver=1
Date: Thu, 20 Jul 2017 15:46:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 317
X-XSS-Protection: 1; mode=block
Set-Cookie: id=27bceb24532f180c||t=1500565575|et=730|cs=002213fd4885ff68e104c40853; expires=Sat, 20-Jul-2019 15:46:15 GMT; path=/; domain=.doubleclick.net test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUkXh4xK6rtPxs8LYxI7rWoXUupaJXYuPnv5IyiDQlChZom3LsFoHQ; expires=Sat, 20-Jul-2019 15:46:15 GMT; path=/; domain=.doubleclick.net; HttpOnly


--- Additional Info ---
Magic:  HTML document text
Size:   317
Md5:    83de1c74636f65e2536cfc27cd4dc5de
Sha1:   71e3f20911b577517f592ac03e2d8bfb0494d432
Sha256: 0d7a35528d2ff4ce6178def96a242512788d485be98399982265863f7882d75e
                                        
                                            GET /tap.php?v=4894&nid=1986&put=2538009099740048085 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         213.19.162.90
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=4894&nid=1986&put=2538009099740048085
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Thu, 20 Jul 2017 15:46:15 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /t/v2/sync?tagid=V2_4265&src.visitorId=2538009099740048085 HTTP/1.1 
Host: odr.mookie1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         52.58.217.57
HTTP/1.1 302 Found
Content-Type: text/plain; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 20 Jul 2017 15:46:15 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://global.ib-ibi.com/image.sbxx?go=298769&pid=541&xid=11394670007315896604
P3P: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC",policyref="/w3c/p3p.xml"
Pragma: no-cache
Set-Cookie: id=11394670007315896604; Domain=.mookie1.com; Expires=Sun, 19-Aug-2018 15:46:15 GMT; Path=/ mdata=1|11394670007315896604|1500565575859; Domain=.mookie1.com; Expires=Sun, 19-Aug-2018 15:46:15 GMT; Path=/
X-Application-Context: application
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /setuid?entity=101&uid=2538009099740048085&code=CAESEBDEGbC5jGbEiO6TunOimww&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4.wgjZ%3ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_Nxy-eD2a.5$C=gdq%]lle.AB-^(5gC6Yf7#a'Kf/eTTQ-#5q[!AWxvk398<

                                         
                                         185.33.223.215
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:17 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 25aa42b5-5ac8-423a-aa53-3584f47efec2
Set-Cookie: anj=dTM7k!M4/bdWIy(ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_M:greD1W+044)d+]UgQnu-/wGrxM[oM8AS*2lYfX>(sn2t^oMnVApDD.)v!nx+:r$PJs52j@c?%<5P<Zm5pMobM/4iB@V39'G/2!@EHS=.4j$; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.15:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /c.gif?anx_uid=2538009099740048085&Red3=MSAN_pd HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         13.107.21.200
HTTP/1.1 302 Redirect
                                        
Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Location: http://m.adnxs.com/seg?add=5159620&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D226%26user%3D0EEA898D98076BDD3BA383489C076894%3B%26redir%3Dhttp%253A%252F%252Fm.adnxs.com%252Fmapuid%253Fmember%253D280%2526user%253D0EEA898D98076BDD3BA383489C076894%253B
Server: Microsoft-IIS/10.0
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Set-Cookie: ANONCHK=1; domain=c.bing.com; expires=Thu, 20-Jul-2017 15:56:15 GMT; path=/; MUID=0EEA898D98076BDD3BA383489C076894; domain=.bing.com; expires=Tue, 14-Aug-2018 15:46:15 GMT; path=/; MR=0; domain=c.bing.com; expires=Tue, 16-Jan-2018 15:46:15 GMT; path=/; MUIDB=1E7C88FAFFC86229370C823FFE2C6395; path=/; httponly; expires=Sat, 20-Jul-2019 15:46:15 GMT
X-Powered-By: ASP.NET
X-MSEdge-Ref: Ref A: D36C4F6A15574F318A3002D9D2B1B8F4 Ref B: STOSCHEDGE0214 Ref C: 2017-07-20T15:46:15Z
Date: Thu, 20 Jul 2017 15:46:15 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /tap.php?cookie_redirect=1&v=4894&nid=1986&put=2538009099740048085 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: c=1

                                         
                                         213.19.162.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: fyU7VcpkV5W88HqoZxW9Fw
Set-Cookie: rpb=4894%3D1; Domain=.rubiconproject.com; Expires=Sat, 19-Aug-2017 15:46:15 GMT; Path=/ put_1986=2538009099740048085; Domain=.rubiconproject.com; Expires=Sat, 19-Aug-2017 14:59:59 GMT; Path=/ rpx=4894%3D66175%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Sat, 19-Aug-2017 15:46:15 GMT; Path=/ khaos=J5CM00JZ-H-HA58; Domain=.rubiconproject.com; Expires=Fri, 19-Jan-2018 03:46:15 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Thu, 20 Jul 2017 15:46:15 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=432554, public, no-transform, must-revalidate
Last-Modified: Tue, 18 Jul 2017 15:51:48 GMT
Expires: Tue, 25 Jul 2017 15:51:48 GMT
Date: Thu, 20 Jul 2017 15:46:15 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    21c7d7ea35f4c590223a156bbad91916
Sha1:   50321eb6c66489defbc9e4ab9395314003f0210d
Sha256: 70a4200278af1e3ded90243327cd2d221dacc57273a25e7f6e2a1dc41b90733e
                                        
                                            GET /cm?in=1&pub=345&userid=2538009099740048085 HTTP/1.1 
Host: p.rfihub.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         185.31.128.207
HTTP/1.1 302 Found
                                        
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAAAOMSNjQwMTCzMDY2NzAxNbI0tjC0NBXiM9R1K4t3M6hMcrXINswAAFv3fvIlAAAA;Path=/;Domain=.rfihub.com smd=H4sIAAAAAAAAALPiNTQ1MDA1MzU1N7U0MAUAp5AuIg8AAAA;Path=/;Domain=.rfihub.com;Expires=Tue, 14-Aug-2018 15:46:15 GMT rud=H4sIAAAAAAAAAOMSNjQwMTCzMDY2NzAxNbI0tjC0NBXiM9R1K4t3M6hMcrXINsyQ4jU0NTAwNTM1NTe1NDAFAC0a8x40AAAA;Path=/;Domain=.rfihub.com;Expires=Tue, 14-Aug-2018 15:46:15 GMT euds=H4sIAAAAAAAAABMSNjI1tjAwsDSwtDQ3MTAwsTCwMAUAlD2HSBUAAAA;Path=/;Domain=.rfihub.com eud=H4sIAAAAAAAAABMSNjI1tjAwsDSwtDQ3MTAwsTCwMI3iNTQ1MDA1MzU1N7U0MJ3FiMoHAHXxT_Q0AAAA;Path=/;Domain=.rfihub.com;Expires=Tue, 14-Aug-2018 15:46:15 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://ib.adnxs.com/pxj?bidder=18&seg=378601&action=setuids('1040683370452938195','');&redir=
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /sync/img?mt_exid=13&mt_exuid=2538009099740048085&redir=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D8%26code%3D%5Buuid%5D HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         185.29.133.199
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Thu, 20 Jul 2017 15:46:15 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Cache-Control: no-cache
Set-Cookie: uuid=49295971-d047-4d00-ac81-57b3b5536b13; domain=.mathtag.com; path=/; expires=Fri, 17-Aug-2018 15:46:15 GMT
Location: http://sync.mathtag.com/sync/img?mt_exid=13&mt_exuid=2538009099740048085&redir=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D8%26code%3D%5Buuid%5D&mm_bnc&mm_bct
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.9.1 edd88a8 RELEASE zrh-pixel-x3
Expires: Thu, 20 Jul 2017 15:46:14 GMT


--- Additional Info ---
                                        
                                            GET /track/cmf/generic?ttd_pid=appnexus&ttd_tpi=1&ttd_puid=2538009099740048085 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         54.246.115.141
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 20 Jul 2017 15:46:02 GMT
Location: http://match.adsrvr.org/track/cmb/generic?ttd_pid=appnexus&ttd_tpi=1&ttd_puid=2538009099740048085
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=51cd8e56-1902-4b4a-869e-0d03f5e3a813; domain=.adsrvr.org; expires=Fri, 20-Jul-2018 15:46:02 GMT; path=/ TDCPM=CAEYBSgCMgsIyP7q_qTkpzUQBTgB; domain=.adsrvr.org; expires=Fri, 20-Jul-2018 15:46:02 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 225
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   225
Md5:    75acf3b35159d3efef8b812920bcca3f
Sha1:   d6a44541c141d39fa220f3b9e30cd89c71be376e
Sha256: 8effd01ccd1cc92805eaf62efd5102176ace79f9fca6ef28ad09c7032dd4fe95
                                        
                                            GET /pxj?bidder=18&seg=378601&action=setuids(%271040683370452938195%27,%27%27);&redir= HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bdWIy(ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_M:greD1W+044)d+]UgQnu-/wGrxM[oM8AS*2lYfX>(sn2t^oMnVApDD.)v!nx+:r$PJs52j@c?%<5P<Zm5pMobM/4iB@V39'G/2!@EHS=.4j$

                                         
                                         185.33.223.215
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:17 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: c46c0698-b5cf-44a5-849b-59b0a912d876
Set-Cookie: anj=dTM7k!M4/bdWIy(ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_M:greD1W+044)d+]UgQnu-/wGrxM[oM8AS*2lYfX>(sn2t^oMnVApDD.)v!nx+:r$PJs52j@c?%<5P<Zm5pMobM/4iB@V39'G/2!@EHS=.4j$; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.174:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /sync/img?mt_exid=13&mt_exuid=2538009099740048085&redir=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D8%26code%3D%5Buuid%5D&mm_bnc&mm_bct HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: uuid=49295971-d047-4d00-ac81-57b3b5536b13

                                         
                                         185.29.133.199
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Thu, 20 Jul 2017 15:46:15 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Cache-Control: no-cache
Location: http://ib.adnxs.com/setuid?entity=8&code=49295971-d047-4d00-ac81-57b3b5536b13
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.9.1 edd88a8 RELEASE zrh-pixel-x13
Set-Cookie: uuidc=qUK832+h8xVsoF3wc90inZlXBVhQ2EuEkakWS/8OwkpknpPj+ObLRxh7wk+S3XFVIt2LpEb51nga5DbL6MTRupzYV/9KZod8Ysl2SHAb2U8=; Expires=Fri, 17-Aug-18 15:46:15 GMT; Domain=.mathtag.com; Path=/
Expires: Thu, 20 Jul 2017 15:46:14 GMT


--- Additional Info ---
                                        
                                            GET /dis/usersync.aspx?r=7&p=3&cp=appnexus&cu=1&url=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D52%26code%3D%7Bcriteo_userid%7D%26seg%3D5311899 HTTP/1.1 
Host: dis.criteo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         178.250.0.76
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: Microsoft-IIS/8.5
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
X-Powered-By: ASP.NET
Date: Thu, 20 Jul 2017 15:46:15 GMT
Content-Length: 43


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /track/cmb/generic?ttd_pid=appnexus&ttd_tpi=1&ttd_puid=2538009099740048085 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: TDID=51cd8e56-1902-4b4a-869e-0d03f5e3a813; TDCPM=CAEYBSgCMgsIyP7q_qTkpzUQBTgB

                                         
                                         54.246.115.141
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 20 Jul 2017 15:46:02 GMT
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=51cd8e56-1902-4b4a-869e-0d03f5e3a813; domain=.adsrvr.org; expires=Fri, 20-Jul-2018 15:46:02 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwjooqHSjuSnNRAFGAU4AUIEIgIIAQ..; domain=.adsrvr.org; expires=Fri, 20-Jul-2018 15:46:02 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 70
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   70
Md5:    58a7930cd4577fc33c35828c271eab8f
Sha1:   406e57f86dc101e10f3a57be1e2f7b93c4580474
Sha256: 8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
                                        
                                            GET /seg?add=5159620&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D226%26user%3D0EEA898D98076BDD3BA383489C076894%3B%26redir%3Dhttp%253A%252F%252Fm.adnxs.com%252Fmapuid%253Fmember%253D280%2526user%253D0EEA898D98076BDD3BA383489C076894%253B HTTP/1.1 
Host: m.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bdWIy(ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_M:greD1W+044)d+]UgQnu-/wGrxM[oM8AS*2lYfX>(sn2t^oMnVApDD.)v!nx+:r$PJs52j@c?%<5P<Zm5pMobM/4iB@V39'G/2!@EHS=.4j$

                                         
                                         185.33.222.62
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:17 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://m.adnxs.com/mapuid?member=226&user=0EEA898D98076BDD3BA383489C076894;&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D280%26user%3D0EEA898D98076BDD3BA383489C076894%3B
AN-X-Request-Uuid: 47c9581a-c204-4ed0-ae35-334af9f68976
Set-Cookie: anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fss0=Mde3%$sa5f]]SYg<^K]0ZwXZO40TAj>nbTv%VwQoIW)'-#/dG*OFZVj<??19@<GTZaq9ja^Th>C'_JVB`9-OW8%CJTCbuFgxK'tw'nI?g9>[s6112u!dhjkIsp(jn]kPNIi=ZM>o@o.7?F.d3C7aRRH?$I%o%m@%nrv:=tEzS; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 218.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.27:80


--- Additional Info ---
                                        
                                            GET /setuid?entity=8&code=49295971-d047-4d00-ac81-57b3b5536b13 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bdWIy(ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_M:greD1W+044)d+]UgQnu-/wGrxM[oM8AS*2lYfX>(sn2t^oMnVApDD.)v!nx+:r$PJs52j@c?%<5P<Zm5pMobM/4iB@V39'G/2!@EHS=.4j$

                                         
                                         185.33.223.215
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:18 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 26980ff1-9e0b-4ee7-a2a9-00ddbf9fb531
Set-Cookie: anj=dTM7k!M40uDv<yXF']wIg2C'!D/$iD!A#F3.FoAc=:_)V=nhkpCk%X67J0Oz-'aH_Xj<eHg%ZF2.RP:>pC.G:ayHGUZNbr7*>+FO68r?Ff]0CDpWnlUoTtLwoH>>LX(hD+Hah9BpJa2LC:u5?d?[pI(s)1JUkE>J)J5z9(C_s.N@Y^7QQa3qZ8c@'Xq/fAQ:OhaQPlAwDc>bb^/Ub3IO`@$_!!9e_.vj9DxFxlSE.[q>iS.5Ia)QcdQRz!9'G/2!@@Sm@bY6a; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.211:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /a/vendor_sync/user?vendor_id=1&uid=2538009099740048085&t=1 HTTP/1.1 
Host: t.wayfair.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         88.221.73.108
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Server: nginx
Content-Encoding: gzip
Vary: Accept-Encoding
Server_Id: bo1.196.85
Lb_Id: bo1.6.12
TXID: otAgZVlw0Eh+g8jEuVPSAg==
Date: Thu, 20 Jul 2017 15:46:16 GMT
Content-Length: 24
Connection: keep-alive
Set-Cookie: CSNUtId=a2d02065-5970-d048-7e83-c8c4b953d202; expires=Tue, 19-Jan-2038 03:14:07 GMT; Max-Age=646918071; path=/; domain=.wayfair.com


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24
Md5:    45fbd0a14bd0385606c4282dd47b2c8e
Sha1:   bbb329498a44bb5491a6120fed3b5fd6b567e837
Sha256: c1f620e3b4732b54290aefd2f82fa8f4f2a05ab637082456bc3b6634ba471740
                                        
                                            GET /mapuid?member=226&user=0EEA898D98076BDD3BA383489C076894;&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D280%26user%3D0EEA898D98076BDD3BA383489C076894%3B HTTP/1.1 
Host: m.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fss0=Mde3%$sa5f]]SYg<^K]0ZwXZO40TAj>nbTv%VwQoIW)'-#/dG*OFZVj<??19@<GTZaq9ja^Th>C'_JVB`9-OW8%CJTCbuFgxK'tw'nI?g9>[s6112u!dhjkIsp(jn]kPNIi=ZM>o@o.7?F.d3C7aRRH?$I%o%m@%nrv:=tEzS

                                         
                                         185.33.222.62
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:18 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://m.adnxs.com/mapuid?member=280&user=0EEA898D98076BDD3BA383489C076894;
AN-X-Request-Uuid: 8d15916d-2641-4012-b308-9e54cb6e6c01
Set-Cookie: anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fst<%Ed^mhpB=LJi$l8fi7xK(q8.6)fO]NLHm5eVMZ1J/3=>ko$MrVY.[Gpa_.AhSgOs26+55$Fq_i/74^]16p?h60XV_1aP7v#vS@5)p7w_TUFvzPBbFLu[x#kxntVai1+iDJ!=Rho$gc_F>oALa7G7%t<2j'%6$Hh<!_4uRrsNhE; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 218.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.116:80


--- Additional Info ---
                                        
                                            GET /mapuid?member=280&user=0EEA898D98076BDD3BA383489C076894; HTTP/1.1 
Host: m.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fst<%Ed^mhpB=LJi$l8fi7xK(q8.6)fO]NLHm5eVMZ1J/3=>ko$MrVY.[Gpa_.AhSgOs26+55$Fq_i/74^]16p?h60XV_1aP7v#vS@5)p7w_TUFvzPBbFLu[x#kxntVai1+iDJ!=Rho$gc_F>oALa7G7%t<2j'%6$Hh<!_4uRrsNhE

                                         
                                         185.33.222.62
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:18 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 8978ceb6-5b8b-4e51-80b0-b8bda1dc7650
Set-Cookie: anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fst<%Ed^mhpB=LJi$l8fi7xK(q8.6)fO]NLHm5eVMZ1J/3=>ko$MrVY.[Gpa_.AhSgOs26+55$Fq_i/74^]16p?h60XV_1aP7v#vS@5)p7w_TUFvzPBbFLu[x#kxntVai1+iDJ!=Rho$gc_F>oALa7G7%t<2j'%6$Hh<!_4uRrsNhE; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 218.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.79:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fst<%Ed^mhpB=LJi$l8fi7xK(q8.6)fO]NLHm5eVMZ1J/3=>ko$MrVY.[Gpa_.AhSgOs26+55$Fq_i/74^]16p?h60XV_1aP7v#vS@5)p7w_TUFvzPBbFLu[x#kxntVai1+iDJ!=Rho$gc_F>oALa7G7%t<2j'%6$Hh<!_4uRrsNhE

                                         
                                         151.101.85.108
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.9.13
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: 18c539ebc7ce97f994fcf35e270c019862b74f51f2b492807013e1380f831d87
Content-Length: 131
Accept-Ranges: bytes
Date: Thu, 20 Jul 2017 15:46:16 GMT
Age: 1
Connection: keep-alive
X-Served-By: cache-jfk8120-JFK, cache-bma7027-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 1
X-Timer: S1500565576.370259,VS0,VE0
Vary: Accept-Encoding
Cache-Control: max-age=86400


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131
Md5:    dbd39d618a16ab9672e552b893252fca
Sha1:   28bc431e15c1600107964839b42f7ce64e950d2b
Sha256: e11172086458e56e39339a642c8f5709d94c467fd9b4f0fe2efb6582781b88ec
                                        
                                            GET /getuid?https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus1%26google_sc%26google_hm%3D%24%7BBASE64_UID_ENC%7D%26google_cm HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4.wgjZ%3ghqdmU(3$!d:(Ye!]tbPB*Ny7NI/6X@j5U*mQAkjL4JzY2D.O82ox9rCf/B2f1s][AN4TdXP1mAHM_-R_Nxy-eD2a.5$C=gdq%]lle.AB-^(5gC6Yf7#a'Kf/eTTQ-#5q[!AWxvk398<

                                         
                                         185.33.223.215
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:18 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus1&google_sc&google_hm=MjUzODAwOTA5OTc0MDA0ODA4NQ%3D%3D&google_cm
AN-X-Request-Uuid: f4a47024-e201-4cf7-8435-0e0867ea1809
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:18 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.221.133:80


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 20 Jul 2017 15:46:16 GMT
Expires: Mon, 24 Jul 2017 15:46:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ef03eb11fc4da2474644e7072fb6f473
Sha1:   e6330029576f16317585c0e1c72e38e36bfe0f49
Sha256: 22af77c0228093232ca55f4483806e2a7812d57e1d186bf092b9eb1d083a7381
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=366269, public, no-transform, must-revalidate
Last-Modified: Mon, 17 Jul 2017 21:26:55 GMT
Expires: Mon, 24 Jul 2017 21:26:55 GMT
Date: Thu, 20 Jul 2017 15:46:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    b74a9fb9df25cd77adb7de7c3b01c5a8
Sha1:   9cca9c1b29d2e8799dec26692bae98dfaee30613
Sha256: d42cc04177856308d60126391d46ba858e4c86a44b73d248c385d28441754ea2
                                        
                                            GET /pixel?google_nid=appnexus1&google_sc&google_hm=MjUzODAwOTA5OTc0MDA0ODA4NQ%3D%3D&google_cm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: id=27bceb24532f180c||t=1500565575|et=730|cs=002213fd4885ff68e104c40853; IDE=AHWqTUkXh4xK6rtPxs8LYxI7rWoXUupaJXYuPnv5IyiDQlChZom3LsFoHQ

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://adx.adnxs.com/mapuid?member=181&user=&google_gid=CAESEOifS-xVCkB0SOAPh1bNlcc&google_cver=1
Date: Thu, 20 Jul 2017 15:46:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 307
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,36,35",quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  HTML document text
Size:   307
Md5:    ddafdc08672fea9c105bd23d30aaa770
Sha1:   34864aa307c6a300f05589e746c59537e512f1a8
Sha256: 2747eb2c7636d9eed8259cec64405e821c9cb1e43ec169b4e0d27a9cbee4a323
                                        
                                            GET /mapuid?member=181&user=&google_gid=CAESEOifS-xVCkB0SOAPh1bNlcc&google_cver=1 HTTP/1.1 
Host: adx.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fst<%Ed^mhpB=LJi$l8fi7xK(q8.6)fO]NLHm5eVMZ1J/3=>ko$MrVY.[Gpa_.AhSgOs26+55$Fq_i/74^]16p?h60XV_1aP7v#vS@5)p7w_TUFvzPBbFLu[x#kxntVai1+iDJ!=Rho$gc_F>oALa7G7%t<2j'%6$Hh<!_4uRrsNhE

                                         
                                         37.252.172.39
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Thu, 20 Jul 2017 15:46:19 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 4349761a-ec9f-4a9d-aa28-bc26da14cfcb
Set-Cookie: anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fst<+QmD$hpB=LJi$l8fi7xK(q8.6)fO]NLHm5eVMZ1J/3=>ko$MrVY.[Gpa_.AhSgOs26+55$Fq_i/74^]16p?h60XV_1aP7v#vS@5)p7w_TUFvzPBbFLu[x#kxntVai1+iDJ!=Rho$gc_F>oALa7G7%t<2j'%6$Hh<!_4uTSaPq>; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:19 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 21-Jul-2017 15:46:19 GMT; Domain=.adnxs.com; HttpOnly uuid2=2538009099740048085; Path=/; Max-Age=7776000; Expires=Wed, 18-Oct-2017 15:46:19 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 246.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.76:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sess=1; uuid2=2538009099740048085; anj=dTM7k!M4/bd<-p'ghqdmU(3$!d:(Ye!fst<+QmD$hpB=LJi$l8fi7xK(q8.6)fO]NLHm5eVMZ1J/3=>ko$MrVY.[Gpa_.AhSgOs26+55$Fq_i/74^]16p?h60XV_1aP7v#vS@5)p7w_TUFvzPBbFLu[x#kxntVai1+iDJ!=Rho$gc_F>oALa7G7%t<2j'%6$Hh<!_4uTSaPq>

                                         
                                         151.101.85.108
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.9.13
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: 18c539ebc7ce97f994fcf35e270c019862b74f51f2b492807013e1380f831d87
Content-Length: 131
Accept-Ranges: bytes
Date: Thu, 20 Jul 2017 15:46:18 GMT
Age: 3
Connection: keep-alive
X-Served-By: cache-jfk8120-JFK, cache-bma7027-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 2
X-Timer: S1500565579.545707,VS0,VE0
Vary: Accept-Encoding
Cache-Control: max-age=86400


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131
Md5:    dbd39d618a16ab9672e552b893252fca
Sha1:   28bc431e15c1600107964839b42f7ce64e950d2b
Sha256: e11172086458e56e39339a642c8f5709d94c467fd9b4f0fe2efb6582781b88ec