Overview

URL sharemobile.ro/data/share/C_7000_CFPRO.rar
IP185.53.178.8
ASNAS61969 Team Internet AG
Location Germany
Report completed2019-05-23 15:51:49 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-05-23 2 sharemobile.ro/data/share/C_7000_CFPRO.rar Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 185.53.178.8

Date UQ / IDS / BL URL IP
2019-06-25 04:36:16 +0200
0 - 0 - 0 bardaycardus.com 185.53.178.8
2019-06-25 02:53:20 +0200
0 - 0 - 0 www.integrissok.com 185.53.178.8
2019-06-16 06:01:45 +0200
0 - 0 - 0 images2.imgbox.co 185.53.178.8
2019-06-14 17:30:20 +0200
0 - 0 - 0 fincons.it 185.53.178.8
2019-06-14 16:31:35 +0200
0 - 0 - 0 fincons.com 185.53.178.8
2019-06-10 23:46:52 +0200
0 - 0 - 0 www.keprogio.com/moa 185.53.178.8
2019-06-10 22:10:05 +0200
0 - 4 - 0 cute-teen-fuck.pw/ 185.53.178.8
2019-06-10 16:53:53 +0200
0 - 0 - 1 participatoryscience.org/poster/mercury-conce (...) 185.53.178.8
2019-06-10 16:39:32 +0200
0 - 0 - 1 tpbairproxy.in/torrent/8093464/Skyfall_(2012) (...) 185.53.178.8
2019-06-10 16:39:30 +0200
0 - 0 - 1 tpbairproxy.in/torrent/3685180/La_guerra_de_l (...) 185.53.178.8

Last 10 reports on ASN: AS61969 Team Internet AG

Date UQ / IDS / BL URL IP
2019-06-26 14:55:17 +0200
0 - 0 - 0 www.inetria.pl 185.53.179.6
2019-06-26 12:16:26 +0200
0 - 0 - 0 peako24.pl 185.53.179.7
2019-06-26 07:21:31 +0200
0 - 0 - 0 parkingcrew.net 185.53.179.29
2019-06-25 21:07:16 +0200
0 - 1 - 0 Cutealbum.tk 185.53.177.31
2019-06-25 04:36:16 +0200
0 - 0 - 0 bardaycardus.com 185.53.178.8
2019-06-25 04:04:20 +0200
0 - 0 - 0 ww38.chanicut.com/ 185.53.179.29
2019-06-25 03:38:57 +0200
0 - 0 - 0 progressivre.com 185.53.178.7
2019-06-25 02:53:20 +0200
0 - 0 - 0 www.integrissok.com 185.53.178.8
2019-06-21 15:10:34 +0200
0 - 0 - 0 www.travelbirds.com 185.53.178.7
2019-06-20 03:56:09 +0200
0 - 0 - 0 parkingcrew.net/assets/scripts/js3.js 185.53.179.29

Last 10 reports on domain: sharemobile.ro

Date UQ / IDS / BL URL IP
2019-06-07 14:08:38 +0200
0 - 2 - 1 sharemobile.ro/data/share/159162/windows_8-ac (...) 185.53.178.8
2019-06-05 23:14:40 +0200
0 - 0 - 1 sharemobile.ro/data/share/opera_mini_7_next_s (...) 185.53.178.8
2019-06-05 14:21:20 +0200
0 - 0 - 1 sharemobile.ro/data/share/opera_mini_7_next_s (...) 185.53.178.8
2019-06-05 10:11:04 +0200
0 - 0 - 1 sharemobile.ro/data/share/28880/test_drive_un (...) 185.53.178.8
2019-06-05 09:01:37 +0200
0 - 0 - 1 sharemobile.ro/data/share/2532/RealPlayer_v10 (...) 185.53.178.8
2019-06-05 08:22:55 +0200
0 - 0 - 1 sharemobile.ro/data/share/43/pupici_pe_monito (...) 185.53.178.8
2019-06-05 06:02:25 +0200
0 - 0 - 1 sharemobile.ro/data/share/DioDict_3_KOREAN_Di (...) 185.53.178.8
2019-06-03 05:11:44 +0200
0 - 0 - 1 sharemobile.ro/data/share/8691/GTCLwin.exe 185.53.178.8
2019-05-30 03:23:27 +0200
0 - 0 - 1 sharemobile.ro/data/share/28880/test_drive_un (...) 185.53.178.8
2019-05-29 22:34:39 +0200
0 - 0 - 1 sharemobile.ro/data/share/opera_mini_7_next_s (...) 185.53.178.8


JavaScript

Executed Scripts (28)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 993, repeated: 1) - SHA256: c62bebc52eac65f21fb5bcd414d66e5bd2f7474ecf8c1e7b2df8a2d01c8e4758

                                        < img height = "1"
width = "1"
border = "0"
alt = ""
src = "https://www.googleadservices.com/pagead/conversion/1038302480/?random=1558619479481&cv=9&fst=1558619479481&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef"
style = "display:none" / >
                                    


HTTP Transactions (44)


Request Response
                                        
                                            GET /data/share/C_7000_CFPRO.rar HTTP/1.1 
Host: sharemobile.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.53.178.8
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 23 May 2019 13:51:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Check: 3c12dc4d54f8e22d666785b733b0052100c53444
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1058
Md5:    7eed61f4b65c13ba1e4e87e91f7e40e0
Sha1:   265e550af993b887050329fa7d7b19f4897655b3
Sha256: eebc37e75d3385be1cbb995a4ff5588b160c4de418517f5a5ad2a8164eba8f7a

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /assets/scripts/js3.js HTTP/1.1 
Host: parkingcrew.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sharemobile.ro/data/share/C_7000_CFPRO.rar

                                         
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 23 May 2019 13:51:15 GMT
Content-Length: 17915
Connection: keep-alive
Last-Modified: Mon, 07 Jan 2019 10:07:22 GMT
Etag: "5c3324da-45fb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   17915
Md5:    db3cacfb57ba35d3fcfdbbcf7d46bd42
Sha1:   64034a7b579d0fb46cc71417ff038da23886d6c8
Sha256: a606134e35db97024d04789609660c94f87f660dc259d91db5180e32787d4dad
                                        
                                            GET /track.php?domain=sharemobile.ro&toggle=browserjs&uid=MTU1ODYxOTQ3NS42NjkzOjQ0YTNlYzc2NWFiNTYwZWJhNzZlYTcyNWFhNWM1ZWVjZjFlM2Y5YTNhYTNhNGNjOWFlZDQyY2M4YzE3Y2I3ODg6NWNlNmE1NTNhMzZiZg%3D%3D HTTP/1.1 
Host: sharemobile.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sharemobile.ro/data/share/C_7000_CFPRO.rar

                                         
                                         185.53.178.8
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 23 May 2019 13:51:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /track.php?click=1f674acfc827153533d83fec8788fe1cc6d67099&domain=sharemobile.ro&uid=MTU1ODYxOTQ3NS42NjkzOjQ0YTNlYzc2NWFiNTYwZWJhNzZlYTcyNWFhNWM1ZWVjZjFlM2Y5YTNhYTNhNGNjOWFlZDQyY2M4YzE3Y2I3ODg6NWNlNmE1NTNhMzZiZg%3D%3D&ts=fHx8ZDQxZDh8fHxidWNrZXQwNDl8fHx8NWNlNmE1NTNhMjlkYXx8fDE1NTg2MTk0NzUuOTU1Nnw2YjM4MDEyNTA0M2U0YTVmMDhiMWMxZjBhM2RkMjc5YzdmMDVhYTk0fHx8fHwxfHx8MHw1Y2U2YTU1MzhjODMzNjNhNjY4YjQ3YTd8fHwwfHx8fHwwfDB8fHx8fHx8fHx8MHwxfDVjZTZhNTUzOGM4MzM2M2E2NjhiNDdhN3wwfDB8MXwwfDB8VzEwPXw%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off HTTP/1.1 
Host: sharemobile.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sharemobile.ro/data/share/C_7000_CFPRO.rar

                                         
                                         185.53.178.8
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 23 May 2019 13:51:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: sharemobile.ro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.53.178.8
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Thu, 23 May 2019 13:51:15 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Mon, 07 Jan 2019 10:07:22 GMT
Etag: "5c3324da-0"
Accept-Ranges: bytes


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.176
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=147428
Date: Thu, 23 May 2019 13:51:16 GMT
Etag: "5ce6404c-1d7"
Expires: Sat, 25 May 2019 06:48:24 GMT
Last-Modified: Thu, 23 May 2019 06:40:12 GMT
Server: ECS (phd/FD69)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77bab.cloudfront.net (CloudFront)
X-Amz-Cf-Id: t0QcIpmzLa0ddhP5zE2Jit94iez7eqEj0k1ov5_SX7act1K2proe6g==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f74e2506d04d654306c2e237cb5d92df
Sha1:   507b16f38832b229a77c56c4b0975e4aadf28d32
Sha256: 8df26a5fb61a10e28338a87be8295bbc1c1fdd110799979d334932867d049928
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.148
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Thu, 23 May 2019 13:51:16 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.8/2018-10-18)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ByYuQBKCRl195s3W61BeTN35vmhkC0YRueTeJa1-cs5EhdlUGFamRw==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    5e69cf3136ec0e0be08ebca710481f0d
Sha1:   3e6a7aae1536f8d5fa5e2deb18c2a2ccdc902bdb
Sha256: b4c8accf8280dea228ce52d23580a87e85cd7d2e1841eb054f5ee7fb838cf3b1
                                        
                                            GET /tr?id=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r&tk=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwdWIiOiI1MDVjNmI4MTcxMzIwNDAyNTc1YjFkNmUiLCJ0cyI6IjA1MjMxMzUxIiwiZCI6InNoYXJlbW9iaWxlLnJvIn0.-vNGiyjrXN7u1vtMGL2m4gz5GGBe4Ytor-_t2Cvdsvc HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sharemobile.ro/data/share/C_7000_CFPRO.rar

                                         
                                         54.85.168.127
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 23 May 2019 13:51:17 GMT
Content-Length: 2193
Connection: keep-alive
P3P: CP="CUR NOI NID STA STP"
X-Robots-Tag: noindex, nofollow
Set-Cookie: checkme=658079d11734140ab1f815cf9bbb02e6b789; Path=/


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   2193
Md5:    515fdfb3b9c2dc0965a8304a8ef14094
Sha1:   c0e6d926ed178e589249c54025b71ecc5bd8c687
Sha256: 007bdebffff621fc61bb9a007ce14ab20a01f45454e0bc9b5973ea16c5ae4e50
                                        
                                            GET /trx?id=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r&confirm=658079d11734140ab1f815cf9bbb02e6&size=886704&noframe=1&tnc_ref=http%3A%2F%2Fsharemobile.ro%2Fdata%2Fshare%2FC_7000_CFPRO.rar&reftaken=feed&refEqual=true HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://katie.runtnc.net/tr?id=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r&tk=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwdWIiOiI1MDVjNmI4MTcxMzIwNDAyNTc1YjFkNmUiLCJ0cyI6IjA1MjMxMzUxIiwiZCI6InNoYXJlbW9iaWxlLnJvIn0.-vNGiyjrXN7u1vtMGL2m4gz5GGBe4Ytor-_t2Cvdsvc
Cookie: checkme=658079d11734140ab1f815cf9bbb02e6b789

                                         
                                         54.85.168.127
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 23 May 2019 13:51:17 GMT
Content-Length: 233
Connection: keep-alive
P3P: CP="CUR NOI NID STA STP"
X-Robots-Tag: noindex, nofollow
Referrer-Policy: no-referrer


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   233
Md5:    b350566b5689327b520b2be6ac344027
Sha1:   f0eceb59e34cbc5b35f5b33d3259688cff6182bf
Sha256: dbe41688c7e06291e74402aaef55ae37bd443568d116341410b89156eac74452
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: checkme=658079d11734140ab1f815cf9bbb02e6b789

                                         
                                         54.85.168.127
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 23 May 2019 13:51:17 GMT
Content-Length: 150
Connection: keep-alive
Content-Security-Policy: default-src 'self'
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   150
Md5:    84241342d84ac29592a5d9516f8edf7f
Sha1:   03c53980e18e17625f439c20e7d438f066202428
Sha256: 6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c
                                        
                                            GET /includes/router_land.php?tracking=Ton&banner=RON-NO-DESKTOP-Zero_tef&keyword=50ca26a5784b672761010793&lpx=tef&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5 HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         161.47.7.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate
Content-Encoding: gzip
Date: Thu, 23 May 2019 13:47:10 GMT
Location: /lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D50ca26a5784b672761010793%26lpx%3Dtef%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/ _testcookie=test; expires=Thu, 23-May-2019 13:53:10 GMT; path=/ rmo=true; expires=Sun, 07-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com marketnetwork_subid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com
Content-Length: 22


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    a0501a98ab1b294fd669c2ecd1b8c027
Sha1:   ecd8ceda437c617578af895ce922b9497f20938b
Sha256: cada81a8faf83daa504d843d0795ec58a6f77bd94a28345385cdb54cef383832
                                        
                                            GET /lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D50ca26a5784b672761010793%26lpx%3Dtef%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5; _testcookie=test; rmo=true

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
Date: Thu, 23 May 2019 13:47:10 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: PHPSESSID=889fa6e9iagsccqrniv78jup82; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _testcookie=test; expires=Thu, 23-May-2019 13:53:10 GMT; path=/
Content-Length: 4102


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4102
Md5:    890708397690a710321def1fa9d3bf7e
Sha1:   ffc4338c41c12907337e9553fe1c7e4ec2506b2d
Sha256: 8aac67d49410f684406a0a00603d3af8f042cc6b8b1171cea0e96befcd969dc8
                                        
                                            GET /ajax/libs/jquery/1.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29839
Date: Fri, 19 Apr 2019 15:29:31 GMT
Expires: Sat, 18 Apr 2020 15:29:31 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 2931706


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29839
Md5:    9a9b2acb8c0cf46985e07996f688b43d
Sha1:   341c927be8f8344f30afb46d49ce6b5e3da62c7d
Sha256: 0b1e12a7712d7b092fd5e1b2724d6e248670ff82620ec75e24105b6b127e3ca8
                                        
                                            GET /lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D50ca26a5784b672761010793%26lpx%3Dtef%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
Date: Thu, 23 May 2019 13:47:10 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/ _testcookie=test; expires=Thu, 23-May-2019 13:53:10 GMT; path=/
Content-Length: 11081


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11081
Md5:    5a2deaf12b2ac568c76c949e9f313636
Sha1:   f8a191c8591d092d553ebcd4481e036c77b67b1e
Sha256: a089e352f18870cec3814cd78bd3d737f391a395ccc0d8994ab8d30011f7de42
                                        
                                            GET /pagead/conversion.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         216.58.207.194
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 23 May 2019 13:51:18 GMT
Expires: Thu, 23 May 2019 13:51:18 GMT
Cache-Control: private, max-age=3600
Etag: 17643551305961893984
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 9263
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9263
Md5:    0cf852ea35a7d44f1074397bf6b4c1cc
Sha1:   fcb665b028043887c9b935b2b0e87b13500768ff
Sha256: 132cac673e54b83d371dc00f2d9adb79ba39ddd4929a119b52b1eb9113828962
                                        
                                            GET /website/newwebsite/lp/tef/Win7.gif HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 23 May 2019 13:51:18 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501926"
Cache-Control: max-age=86400
Content-Length: 3059
Last-Modified: Thu, 14 Jul 2016 13:12:06 GMT
Access-Control-Allow-Origin: *
X-HW: 1558619478.dop020.sk1.t,1558619478.cds013.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 60 x 62
Size:   3059
Md5:    72edefcd39d81e6d207b19834e6941ef
Sha1:   03e824da65cf1fbb8849c06df5fee4f753d3d8ce
Sha256: 41e53e6880391a2ffdcecfc04969e62ade0e3383c54aed8c281a3c5c122a5f3c
                                        
                                            GET /lp/teg/css/style.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D50ca26a5784b672761010793%26lpx%3Dtef%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 23 May 2019 13:47:10 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Connection: Keep-Alive
Content-Length: 2238


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2238
Md5:    2df0a84a55ce5bfdae54508a20665ea2
Sha1:   dc663bae0287ca12367121b3aee6589b41bc6120
Sha256: 9c11c77c765b2f2ad8c795671b85e80274a4da7a4463dfb76bbbbfef8776d5c6
                                        
                                            GET /website/newwebsite/lp/tef/plus.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/css/style.css
Cookie: rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 23 May 2019 13:51:18 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501922"
Cache-Control: max-age=86400
Content-Length: 624
Last-Modified: Thu, 14 Jul 2016 13:12:02 GMT
Access-Control-Allow-Origin: *
X-HW: 1558619478.dop020.sk1.t,1558619478.cds024.sk1.c


--- Additional Info ---
Magic:  PNG image, 25 x 25, 8-bit/color RGB, non-interlaced
Size:   624
Md5:    47c1d3ee311e193de0cdd6e5b1a2eb4d
Sha1:   7f9d1d0cc1ffb72d64a75a088e8e9a1f105065c0
Sha256: 8c075719560b586b0c32318f5e963c3fea585c32a88cb874495c931e28f77ef9
                                        
                                            GET /assets/styles/jquery.fancybox/jquery.fancybox-2.css HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D50ca26a5784b672761010793%26lpx%3Dtef%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 23 May 2019 13:47:10 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Connection: Keep-Alive
Content-Length: 1606


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1606
Md5:    39c87544233ef0fafef3816c7dc083d1
Sha1:   b5a214c16e29bb922d7dd247c8cd4ab32a48ec15
Sha256: e39857dbe26db2b9569d4ee2d3246135a51f76684c0caa76a4b7ba1d63f0b8ea
                                        
                                            GET /website/newwebsite/lp/tef/download.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/css/style.css
Cookie: rmo=true

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 23 May 2019 13:51:18 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501926"
Cache-Control: max-age=86400
Content-Length: 368
Last-Modified: Thu, 14 Jul 2016 13:12:06 GMT
Access-Control-Allow-Origin: *
X-HW: 1558619478.dop017.sk1.t,1558619478.cds025.sk1.c


--- Additional Info ---
Magic:  PNG image, 21 x 20, 8-bit/color RGB, non-interlaced
Size:   368
Md5:    3158e13e8184dbb60eada6725e897a95
Sha1:   9ee305bdd713bde36a49f580962cc83658b71f55
Sha256: da30e4140b53e29b452d18fdbe53efa3068e586f9d00f68da0ed2a68cbfab310
                                        
                                            GET /atp/pfa.php?&channel=Ton&campaign=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&lpx=tef HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D50ca26a5784b672761010793%26lpx%3Dtef%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
P3P: CP="CAO DSP AND SO ON" policyref="/w3c/p3p.xml"
Date: Thu, 23 May 2019 13:47:10 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _trackid=6389810186; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _trackid_6389810186=6389810186; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _tracking=Ton; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _tracking_Ton=Ton; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _campaign=RON-NO-DESKTOP-Zero_tef; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _adgroup=direct; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _adgroup_direct=direct; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _keyword=50ca26a5784b672761010793; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _keyword_50ca26a5784b672761010793=50ca26a5784b672761010793; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _ads=direct; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _ads_direct=direct; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _browser=Firefox; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _browser_Firefox=Firefox; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _country=Norway; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com _country_Norway=Norway; expires=Mon, 22-Jul-2019 13:47:10 GMT; path=/; domain=reimageplus.com
Content-Length: 20


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /meter/www.reimageplus.com/23.gif HTTP/1.1 
Host: images.scanalert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         143.204.47.4
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Content-Length: 3005
Connection: keep-alive
Date: Thu, 23 May 2019 13:04:51 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: public
Expires: Thu, 23 May 2019 14:04:51 GMT
Content-Encoding: gzip
Age: 2788
X-Cache: Hit from cloudfront
Via: 1.1 f079cf7999e97a7d962121c7aebf2c3c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 8RpvQl8vFrt3Cp6FM_3MT9Oxgjm91ooBG4du1e1gmrmclQzUD8uS8Q==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3005
Md5:    102539419ea49058a5fd78365f742469
Sha1:   e4e891e5dc0d2c41eabf5dd8b497c191c287560a
Sha256: 7d59d63d95e75cf20757455fb4c3cc5333a2aacbf0424fc92a7a01ad3b694370
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: katie.runtnc.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: checkme=658079d11734140ab1f815cf9bbb02e6b789

                                         
                                         54.85.168.127
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 23 May 2019 13:51:19 GMT
Content-Length: 150
Connection: keep-alive
Content-Security-Policy: default-src 'self'
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   150
Md5:    84241342d84ac29592a5d9516f8edf7f
Sha1:   03c53980e18e17625f439c20e7d438f066202428
Sha256: 6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c
                                        
                                            GET /assets/scripts/cookie-note.js HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _source=%2Fincludes%2Frouter_land.php%3Ftracking%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26keyword%3D50ca26a5784b672761010793%26lpx%3Dtef%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82; _refcook=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache/2.2.15 (CentOS)
Date: Thu, 23 May 2019 13:47:12 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Thu, 11 Oct 2018 10:09:19 GMT
Content-Length: 684


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   684
Md5:    31a26a241ed14defc5417202d0ec5362
Sha1:   4071ec8b0f05942d1debfc17f04e14a24c890c76
Sha256: 6348d80a177746d0a346fb0c8aba8b73d2ddee827506a31abc054a60b77b6168
                                        
                                            GET /dc.js HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 23 May 2019 13:43:50 GMT
Expires: Thu, 23 May 2019 15:43:50 GMT
Last-Modified: Tue, 21 May 2019 23:53:44 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17093
Cache-Control: public, max-age=7200
Age: 449


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17093
Md5:    5f65521f6c6223e1e18cb161832bea2a
Sha1:   f03800023e7bbe2579cd24e122cdf8c6ecf8b4c6
Sha256: 787b69b93681cf41784dfa8655cbdafe8a56ecc62f0112a6ea2241a284a0e3c9
                                        
                                            GET /atp/pfa.php?&channel=Ton&campaign=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&lpx=tef HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82; _trackid=6389810186; _trackid_6389810186=6389810186; _tracking=Ton; _tracking_Ton=Ton; _campaign=RON-NO-DESKTOP-Zero_tef; _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; _adgroup=direct; _adgroup_direct=direct; _keyword=50ca26a5784b672761010793; _keyword_50ca26a5784b672761010793=50ca26a5784b672761010793; _ads=direct; _ads_direct=direct; _browser=Firefox; _browser_Firefox=Firefox; _country=Norway; _country_Norway=Norway

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
P3P: CP="CAO DSP AND SO ON" policyref="/w3c/p3p.xml"
Date: Thu, 23 May 2019 13:47:12 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _refcook=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ _trackid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _trackid_6389810186=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _trackid=6389810186; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _trackid_6389810186=6389810186; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _tracking=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _tracking_Ton=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _tracking=Ton; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _tracking_Ton=Ton; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _campaign_RON-NO-DESKTOP-Zero_tef=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _campaign=RON-NO-DESKTOP-Zero_tef; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _adgroup=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _adgroup_direct=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _adgroup=direct; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _adgroup_direct=direct; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _keyword=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _keyword_50ca26a5784b672761010793=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _keyword=50ca26a5784b672761010793; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _keyword_50ca26a5784b672761010793=50ca26a5784b672761010793; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _ads=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _ads_direct=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _ads=direct; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _ads_direct=direct; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _browser=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _browser_Firefox=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _browser=Firefox; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _browser_Firefox=Firefox; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _country=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _country_Norway=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=reimageplus.com _country=Norway; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com _country_Norway=Norway; expires=Mon, 22-Jul-2019 13:47:12 GMT; path=/; domain=reimageplus.com
Content-Length: 20


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /assets/scripts/jquery.fancybox/jquery.fancybox-2.js HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82; _trackid=6389810186; _trackid_6389810186=6389810186; _tracking=Ton; _tracking_Ton=Ton; _campaign=RON-NO-DESKTOP-Zero_tef; _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; _adgroup=direct; _adgroup_direct=direct; _keyword=50ca26a5784b672761010793; _keyword_50ca26a5784b672761010793=50ca26a5784b672761010793; _ads=direct; _ads_direct=direct; _browser=Firefox; _browser_Firefox=Firefox; _country=Norway; _country_Norway=Norway

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache/2.2.15 (CentOS)
Date: Thu, 23 May 2019 13:47:12 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Sun, 07 Jun 2015 06:06:18 GMT
Content-Length: 48716


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   48716
Md5:    932c065e6c0658681ca19a34d45981f4
Sha1:   7e10f6aba5d7bc1b21e0c62ba107ac5593c039d8
Sha256: 1a2da275a2f66503da340a4b38a064c5329d8b3f03eb057dee553786482c4874
                                        
                                            GET /website/newwebsite/lp/tef/minus.png HTTP/1.1 
Host: cdnrep.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/css/style.css
Cookie: rmo=true; __utma=141870001.1719301969.1558619480.1558619480.1558619480.1; __utmb=141870001.1.10.1558619480; __utmc=141870001; __utmz=141870001.1558619480.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _trackid=6389810186; _trackid_6389810186=6389810186; _tracking=Ton; _tracking_Ton=Ton; _campaign=RON-NO-DESKTOP-Zero_tef; _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; _adgroup=direct; _adgroup_direct=direct; _keyword=50ca26a5784b672761010793; _keyword_50ca26a5784b672761010793=50ca26a5784b672761010793; _ads=direct; _ads_direct=direct; _browser=Firefox; _browser_Firefox=Firefox; _country=Norway; _country_Norway=Norway

                                         
                                         205.185.208.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 23 May 2019 13:51:20 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1468501925"
Cache-Control: max-age=86400
Content-Length: 580
Last-Modified: Thu, 14 Jul 2016 13:12:05 GMT
Access-Control-Allow-Origin: *
X-HW: 1558619480.dop020.sk1.t,1558619480.cds022.sk1.c


--- Additional Info ---
Magic:  PNG image, 25 x 25, 8-bit/color RGB, non-interlaced
Size:   580
Md5:    27e624f58dfbc7e0b9d4d475181fc2dd
Sha1:   844b10905ee3fe43aa080ed9c48e379e82cca94b
Sha256: c5edda2dd802c5d9d437729d83c888306918e94262111bd24e3dc78560b7c6bd
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2dc&utms=1&utmn=337456461&utmhn=www.reimageplus.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmhid=572079974&utmr=0&utmp=%2Flp%2Fteg%2Findex_src.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&utmht=1558619480022&utmac=UA-24411584-1&utmcc=__utma%3D141870001.1719301969.1558619480.1558619480.1558619480.1%3B%2B__utmz%3D141870001.1558619480.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=927612784&utmredir=3&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 23 May 2019 13:51:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /js/1.js HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         143.204.47.127
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Length: 3626
Connection: keep-alive
Date: Thu, 23 May 2019 13:48:32 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Expires: Thu, 23 May 2019 14:48:32 GMT
Content-Encoding: gzip
Age: 168
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Id: EHWL2dDNYzlS2XbDoUgKMki6rwLXYvZjrTjL6GwuhsKO3K-nPSa8BA==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3626
Md5:    f92fe43bc5c8b1ff7976bb29194e04ac
Sha1:   42b2868d469424d95de2e32465d04a78147a4630
Sha256: a25cbc224c886dc315070ac22f7a5137da1da29895ed760da3fe5d22844dc2e8
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 May 2019 13:51:20 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    500a9907328c10fc6a0c42bef3672431
Sha1:   712e5fc259653f0b223698b33b2d86f16c4ea00c
Sha256: de7dfbe6b0e36b9a7336343dab6f65cc1c19faed49ebda1c557f2393ac676a53
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 May 2019 13:51:20 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /pagead/conversion/1038302480/?random=1558619479481&cv=9&fst=1558619479481&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http%3A%2F%2Fwww.reimageplus.com%2Flp%2Fteg%2Findex.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         216.58.207.194
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 23 May 2019 13:51:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1038302480/?random=1069608183&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=WKXmXLzSDtCVywWT1KnYAw&sscte=1&crd=&gtd=
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 May 2019 13:51:20 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    953fe012abed3e798661160e42bd6d35
Sha1:   02e00518a69d645f86103ef12c09df592639724c
Sha256: adac74d3594d5819c4b381a737c07cc2b422b094b41d1773fb5f28d49ae18e2b
                                        
                                            GET /pagead/viewthroughconversion/1038302480/?random=1069608183&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=WKXmXLzSDtCVywWT1KnYAw&sscte=1&crd=&gtd= HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         216.58.207.226
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 23 May 2019 13:51:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/pagead/1p-user-list/1038302480/?random=1069608183&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2561263755&resp=GooglemKTybQhCsO
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2019 14:06:20 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 May 2019 13:51:20 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3512c94e791832e5432bc43a75cfc78c
Sha1:   e2edea68aecbc58f2914ee007b4ea4e919d72a29
Sha256: 7a51fa894c8da75ec334f76a675fd5ea3052d85b7838910fa64251de9d84ea0f
                                        
                                            GET /pagead/1p-user-list/1038302480/?random=1069608183&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2561263755&resp=GooglemKTybQhCsO HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         216.58.207.228
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 23 May 2019 13:51:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/pagead/1p-user-list/1038302480/?random=1069608183&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2561263755&resp=GooglemKTybQhCsO&ipr=y
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 May 2019 13:51:20 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8b592b23ed32e079ff3b18a6d83abeec
Sha1:   a864dc727571d30f954e55bd03c37137985cd512
Sha256: 8a81bb88ed4cd74dc85db2e0532be976d24437ada41fc11e0b6fcf16c9cbddbf
                                        
                                            GET /mfesecure-public/host/reimageplus.com/client.json?source=jsmain HTTP/1.1 
Host: s3-us-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef
Origin: http://www.reimageplus.com

                                         
                                         52.218.160.40
HTTP/1.1 200 OK
Content-Type: application/json
                                        
x-amz-id-2: gNj7HYF4+Jw1DzQY4YHGfpTSkBdpPb6Frydt2kvxHGmGIWz3ijuSYYd0TfeGK5dwNECKHTRuZyw=
x-amz-request-id: D926DA423F73B2D1
Date: Thu, 23 May 2019 13:51:21 GMT
Access-Control-Allow-Origin: http://www.reimageplus.com
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Expose-Headers: Access-Control-Allow-Origin
Access-Control-Max-Age: 60
Access-Control-Allow-Credentials: true
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 22 May 2019 02:47:41 GMT
Etag: "83f248ec8774ab1ba4753704e50bba9f"
Cache-Control: public, max-age=60
Content-Encoding: gzip
x-amz-version-id: lmnoNXy80W8Wgc4S7yThv4Z9pxxyqy5G
Accept-Ranges: bytes
Content-Length: 147
Server: AmazonS3


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   147
Md5:    83f248ec8774ab1ba4753704e50bba9f
Sha1:   f0093463d7ac1b649515dd2b58884cdbf561320d
Sha256: ba435f8cab44081ade13bd9ff98018bf1de33a1533c6adf920365919df080e21
                                        
                                            GET /pagead/1p-user-list/1038302480/?random=1069608183&cv=9&fst=*&num=1&fmt=3&value=0&label=6-3FCKyD8wEQkPqM7wM&bg=666666&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=1&url=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ref=http://www.reimageplus.com/lp/teg/index.php%3Fchannel%3DTon%26banner%3DRON-NO-DESKTOP-Zero_tef%26adgroup%3Ddirect%26ads_name%3Ddirect%26keyword%3D50ca26a5784b672761010793%26context%3D0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5%26nms%3D1%26lpx%3Dtef&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&crd=&cdct=2&is_vtc=1&random=2561263755&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 23 May 2019 13:51:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.reimageplus.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: X-Mapping-fjhppofk=302F129A1ED4F39364C5F98DD2A88FE4; _testcookie=test; rmo=true; PHPSESSID=889fa6e9iagsccqrniv78jup82; __utma=141870001.1719301969.1558619480.1558619480.1558619480.1; __utmb=141870001.1.10.1558619480; __utmc=141870001; __utmz=141870001.1558619480.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _trackid=6389810186; _trackid_6389810186=6389810186; _tracking=Ton; _tracking_Ton=Ton; _campaign=RON-NO-DESKTOP-Zero_tef; _campaign_RON-NO-DESKTOP-Zero_tef=RON-NO-DESKTOP-Zero_tef; _adgroup=direct; _adgroup_direct=direct; _keyword=50ca26a5784b672761010793; _keyword_50ca26a5784b672761010793=50ca26a5784b672761010793; _ads=direct; _ads_direct=direct; _browser=Firefox; _browser_Firefox=Firefox; _country=Norway; _country_Norway=Norway

                                         
                                         161.47.7.14
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: Apache/2.2.15 (CentOS)
Date: Thu, 23 May 2019 13:47:13 GMT
Expires: Thu, 15 Apr 2045 20:00:00 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Fri, 24 Apr 2015 13:01:28 GMT
Content-Length: 894


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   894
Md5:    d0c2bd29933d303826e58db070e10832
Sha1:   1a6f18c55c3cd9ea9ff9485afc30c213a6aeefef
Sha256: 3af4842e79f2e783c9a73e19493a10164df5cf27e7e2fb67fb51b2f99d3b4d84
                                        
                                            GET /getseal?host_name=www.reimageplus.com&size=XS&use_flash=NO&use_transparent=YES&lang=en HTTP/1.1 
Host: seal.websecurity.norton.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /getseal?host_name=www.reimageplus.com&size=XS&use_flash=NO&use_transparent=YES&lang=en HTTP/1.1 
Host: seal.websecurity.norton.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /meter/reimageplus.com/105.png HTTP/1.1 
Host: cdn.ywxi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.reimageplus.com/lp/teg/index_src.php?channel=Ton&banner=RON-NO-DESKTOP-Zero_tef&adgroup=direct&ads_name=direct&keyword=50ca26a5784b672761010793&context=0122fa9df6b0333c0d1095997c0accfeadb41fadc2.r.1558619475.872e74e639d9d5d4bfdad441306adab5&nms=1&lpx=tef

                                         
                                         0.0.0.0
                                        


--- Additional Info ---