Overview

URL acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
IP151.101.85.108
ASNAS6983 Earthlink, Inc.
Location United States
Report completed2017-07-23 03:03:31 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 151.101.85.108

Date UQ / IDS / BL URL IP
2017-10-09 11:35:09 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-10-03 20:11:43 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-10-03 19:33:39 +0200
0 - 0 - 0 acdn.adnxs.com 151.101.85.108
2017-09-28 17:04:50 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-09-22 15:40:16 +0200
0 - 0 - 0 cdn.adnxs.com/v/s/100/trk.js 151.101.85.108
2017-09-20 09:45:00 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-09-02 15:31:04 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-08-31 21:28:28 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-08-17 13:32:52 +0200
0 - 0 - 0 acdn.adnxs.com/ib/static/usersync/v3/async_us (...) 151.101.85.108
2017-08-13 11:15:44 +0200
0 - 0 - 0 acdn.adnxs.com 151.101.85.108

Last 10 reports on ASN: AS6983 Earthlink, Inc.

Date UQ / IDS / BL URL IP
2017-10-24 11:20:02 +0200
0 - 0 - 0 bid.contextweb.com/ 151.101.112.166
2017-10-24 10:13:35 +0200
0 - 0 - 0 https://philogb.github.io/jit/index.html 151.101.113.147
2017-10-24 10:10:32 +0200
0 - 0 - 0 https://rlopez0689.github.io/OrgChartJit 151.101.113.147
2017-10-24 10:00:53 +0200
0 - 0 - 0 https://jhfrench.github.io/bootstrap-tree/doc (...) 151.101.113.147
2017-10-24 09:58:09 +0200
0 - 0 - 0 stellathomas2605.kinja.com/pro-race-consultan (...) 151.101.65.34
2017-10-24 09:56:58 +0200
0 - 0 - 0 in.pinterest.com/pin/860891284992045607/ 151.101.112.84
2017-10-24 09:55:43 +0200
0 - 0 - 0 www.behance.net/gallery/58075893/Pro-Race-Con (...) 151.101.129.197
2017-10-24 09:52:46 +0200
0 - 0 - 0 stellathomas2605.kinja.com/pro-race-consultan (...) 151.101.1.34
2017-10-24 09:50:43 +0200
0 - 0 - 0 in.pinterest.com/pin/860891284992045458/ 151.101.112.84
2017-10-24 09:50:00 +0200
0 - 0 - 0 www.behance.net/gallery/58074605/Pro-Race-Con (...) 151.101.65.197

No other reports on domain: .



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (32)


Request Response
                                        
                                            GET /ib/static/usersync/v3/async_usersync.html HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         151.101.85.108
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.9.13
Last-Modified: Fri, 20 May 2016 02:07:09 GMT
Etag: W/"573e714d-3e3"
Expires: Tue, 01 Aug 2017 18:36:49 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: e0a1bb88354655bae6b4f44be1ff58238053e5563770e29e0e433e905ee66055
Content-Length: 506
Accept-Ranges: bytes
Date: Sun, 23 Jul 2017 01:02:59 GMT
Age: 30695169
Connection: keep-alive
X-Served-By: cache-jfk1022-JFK, cache-bma7028-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 32165417
X-Timer: S1500771779.154570,VS0,VE0
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   506
Md5:    b5df0fbc24b9c2e120c7adb1cd618f25
Sha1:   8ced45952c9a51b4e6689cd886e556719fa077b5
Sha256: 54020af72caa42494902c2e0d1fc011e0228df93d5531ef2f820af61528b3b63
                                        
                                            GET /async_usersync?cbfn=AN_async_load HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         37.252.172.53
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DAN_async_load
AN-X-Request-Uuid: 6f82fc89-4cea-4786-95bf-fc320ea87f7d
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.4:80


--- Additional Info ---
                                        
                                            GET /bounce?%2Fasync_usersync%3Fcbfn%3DAN_async_load HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406

                                         
                                         37.252.172.53
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 1330
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 6eac41e4-5d8e-429f-94de-6f5d532e5fdc
Set-Cookie: anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.24:80


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1330
Md5:    589f2a0a8b653e238d585003f9daeb14
Sha1:   99b42f23917c7059e088b695ce84bcf072847d61
Sha256: 504319aa9b764b544896055bd77ca00ea009ac09948d4b93a61bfd7fbcc23da9
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         151.101.85.108
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.9.13
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: 18c539ebc7ce97f994fcf35e270c019862b74f51f2b492807013e1380f831d87
Content-Length: 131
Accept-Ranges: bytes
Date: Sun, 23 Jul 2017 01:02:59 GMT
Age: 0
Connection: keep-alive
X-Served-By: cache-jfk8120-JFK, cache-bma7028-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 3, 0
X-Timer: S1500771779.382412,VS0,VE94
Vary: Accept-Encoding
Cache-Control: max-age=86400


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131
Md5:    dbd39d618a16ab9672e552b893252fca
Sha1:   28bc431e15c1600107964839b42f7ce64e950d2b
Sha256: e11172086458e56e39339a642c8f5709d94c467fd9b4f0fe2efb6582781b88ec
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&uid=7586099500581505406 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm=&google_sc=&uid=7586099500581505406&google_tc=
Date: Sun, 23 Jul 2017 01:02:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 323
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 23-Jul-2017 01:17:59 GMT; path=/; domain=.doubleclick.net


--- Additional Info ---
Magic:  HTML document text
Size:   323
Md5:    304564e475107a19717b0c8911339855
Sha1:   d2db841ed555bb9b6c4ba88fce5251ca0f5c0e5d
Sha256: be3b7f300c019bee37e0f5f1d916e4837b47532ba7d0807cc967ac58d6067cd3
                                        
                                            GET /t/v2/sync?tagid=V2_4265&src.visitorId=7586099500581505406 HTTP/1.1 
Host: odr.mookie1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         52.59.43.167
HTTP/1.1 302 Found
Content-Type: text/plain; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, must-revalidate
Date: Sun, 23 Jul 2017 01:02:59 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://global.ib-ibi.com/image.sbxx?go=298769&pid=541&xid=11397414388378182142
P3P: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC",policyref="/w3c/p3p.xml"
Pragma: no-cache
Set-Cookie: id=11397414388378182142; Domain=.mookie1.com; Expires=Wed, 22-Aug-2018 01:02:59 GMT; Path=/ mdata=1|11397414388378182142|1500771779585; Domain=.mookie1.com; Expires=Wed, 22-Aug-2018 01:02:59 GMT; Path=/
X-Application-Context: application
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /c.gif?anx_uid=7586099500581505406&Red3=MSAN_pd HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         13.107.21.200
HTTP/1.1 302 Redirect
                                        
Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Location: http://m.adnxs.com/seg?add=5159620&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D226%26user%3D2C7233FAEBDD6DE731EA3932EFDD6E92%3B%26redir%3Dhttp%253A%252F%252Fm.adnxs.com%252Fmapuid%253Fmember%253D280%2526user%253D2C7233FAEBDD6DE731EA3932EFDD6E92%253B
Server: Microsoft-IIS/10.0
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Set-Cookie: ANONCHK=1; domain=c.bing.com; expires=Sun, 23-Jul-2017 01:12:59 GMT; path=/; MUID=2C7233FAEBDD6DE731EA3932EFDD6E92; domain=.bing.com; expires=Fri, 17-Aug-2018 01:02:59 GMT; path=/; MR=0; domain=c.bing.com; expires=Fri, 19-Jan-2018 01:02:59 GMT; path=/; MUIDB=127F80E1EC376E35258B8A29EDD36FAE; path=/; httponly; expires=Tue, 23-Jul-2019 01:02:59 GMT
X-Powered-By: ASP.NET
X-MSEdge-Ref: Ref A: 5103057202EC453796C44F6B91D2534C Ref B: STOSCHEDGE0316 Ref C: 2017-07-23T01:02:59Z
Date: Sun, 23 Jul 2017 01:02:58 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=appnexus&google_cm=&google_sc=&uid=7586099500581505406&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://ib.adnxs.com/setuid?entity=101&uid=7586099500581505406&code=CAESEIjb9D2SSQSFvTQ2TLlrzF4&google_cver=1
Date: Sun, 23 Jul 2017 01:02:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 317
X-XSS-Protection: 1; mode=block
Set-Cookie: id=27f15131ff342991||t=1500771779|et=730|cs=002213fd488d320a974180f296; expires=Tue, 23-Jul-2019 01:02:59 GMT; path=/; domain=.doubleclick.net test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUkHpBJrF-AWZZbwHpBWSwOKwrt9myOj8STpSWJu3jtI04_qpUqnTw; expires=Tue, 23-Jul-2019 01:02:59 GMT; path=/; domain=.doubleclick.net; HttpOnly


--- Additional Info ---
Magic:  HTML document text
Size:   317
Md5:    dd19dfaaaee07834eb7c400bdf12d7ce
Sha1:   e74fed4074b7af4546c6c1b6ac4a2c07c4fdcc4d
Sha256: d16233b036634a573218bc79a2fb4bca5588fdc149d23d33c37ad8bea022c0c8
                                        
                                            GET /setuid?entity=101&uid=7586099500581505406&code=CAESEIjb9D2SSQSFvTQ2TLlrzF4&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         37.252.172.53
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: a99abcbf-6b1e-4c17-9dca-083ac6b594df
Set-Cookie: anj=dTM7k!M40LhgVC6ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaHxIPcP(ihCV:K)#4>tzu'9JB7.7'PiQ5%SN[xsb@8`Iaj>jv^P/*@]GLteUR:V?5TLm3<1RiXs>8GobM-f1Ak>^8nK0WK^Xj3%o%m@%npIi<U8_n; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.37:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /dis/usersync.aspx?r=7&p=3&cp=appnexus&cu=1&url=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D52%26code%3D%7Bcriteo_userid%7D%26seg%3D5311899 HTTP/1.1 
Host: dis.criteo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         178.250.2.76
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: Microsoft-IIS/8.5
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
X-Powered-By: ASP.NET
Date: Sun, 23 Jul 2017 01:02:59 GMT
Content-Length: 43


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /tap.php?v=4894&nid=1986&put=7586099500581505406 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         213.19.162.90
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=4894&nid=1986&put=7586099500581505406
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Sun, 23 Jul 2017 01:02:59 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /seg?add=5159620&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D226%26user%3D2C7233FAEBDD6DE731EA3932EFDD6E92%3B%26redir%3Dhttp%253A%252F%252Fm.adnxs.com%252Fmapuid%253Fmember%253D280%2526user%253D2C7233FAEBDD6DE731EA3932EFDD6E92%253B HTTP/1.1 
Host: m.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         185.33.222.62
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://m.adnxs.com/mapuid?member=226&user=2C7233FAEBDD6DE731EA3932EFDD6E92;&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D280%26user%3D2C7233FAEBDD6DE731EA3932EFDD6E92%3B
AN-X-Request-Uuid: 06abdfec-2906-409f-8b42-98fdddd4c30e
Set-Cookie: anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 218.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.117:80


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=527442, public, no-transform, must-revalidate
Last-Modified: Sat, 22 Jul 2017 03:31:51 GMT
Expires: Sat, 29 Jul 2017 03:31:51 GMT
Date: Sun, 23 Jul 2017 01:02:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    6e190d2062c8c055b844e3335e54c7a8
Sha1:   7a9248fc91555134c478b6e76fbf3feead15e734
Sha256: 563671aff12f2412e1b033b45856650c95bf9e24fe12767cee4b020e8aa418a3
                                        
                                            GET /cm?in=1&pub=345&userid=7586099500581505406 HTTP/1.1 
Host: p.rfihub.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         193.0.160.206
HTTP/1.1 302 Found
                                        
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: eud=H4sIAAAAAAAAABMSNje1MDOwtDQ1MDC1MDQ1MDUxMIviBTIMzM0Nzc0tLQyNZzGi8gHXvi1xNAAAAA;Path=/;Domain=.rfihub.com;Expires=Fri, 17-Aug-2018 01:02:59 GMT rud=H4sIAAAAAAAAAOMSMjMxsLSwsLC0NDcwNjCyNDUwEuIz1DXIMDJ3TwrJTkqycJPiNTQ1MDA3NzQ3t7QwNAYA_DL5TzMAAAA;Path=/;Domain=.rfihub.com;Expires=Fri, 17-Aug-2018 01:02:59 GMT ruds=H4sIAAAAAAAAAOMSMjMxsLSwsLC0NDcwNjCyNDUwEuIz1DXIMDJ3TwrJTkqycAMAZJUY-CQAAAA;Path=/;Domain=.rfihub.com euds=H4sIAAAAAAAAABMSNje1MDOwtDQ1MDC1MDQ1MDUxMAMAPWV4jBUAAAA;Path=/;Domain=.rfihub.com
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://ib.adnxs.com/pxj?bidder=18&seg=378601&action=setuids('640988899703029502','');&redir=
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /sync/img?mt_exid=13&mt_exuid=7586099500581505406&redir=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D8%26code%3D%5Buuid%5D HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         185.29.135.226
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Sun, 23 Jul 2017 01:02:59 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Cache-Control: no-cache
Set-Cookie: uuid=f92d5974-f5c3-4a00-b92d-b3f0381f40e7; domain=.mathtag.com; path=/; expires=Mon, 20-Aug-2018 01:02:59 GMT
Location: http://sync.mathtag.com/sync/img?mt_exid=13&mt_exuid=7586099500581505406&redir=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D8%26code%3D%5Buuid%5D&mm_bnc&mm_bct
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.10.0 a38180b RELEASE cdg-pixel-x12
Expires: Sun, 23 Jul 2017 01:02:58 GMT


--- Additional Info ---
                                        
                                            GET /tap.php?cookie_redirect=1&v=4894&nid=1986&put=7586099500581505406 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: c=1

                                         
                                         213.19.162.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: 8I2NEhTQGMzS-WzfQJnsBw
Set-Cookie: rpb=4894%3D1; Domain=.rubiconproject.com; Expires=Tue, 22-Aug-2017 01:02:59 GMT; Path=/ put_1986=7586099500581505406; Domain=.rubiconproject.com; Expires=Tue, 22-Aug-2017 00:59:59 GMT; Path=/ rpx=4894%3D66233%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Tue, 22-Aug-2017 01:02:59 GMT; Path=/ khaos=J5G0ROJ2-1W-1QYI; Domain=.rubiconproject.com; Expires=Sun, 21-Jan-2018 13:02:59 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Sun, 23 Jul 2017 01:02:59 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /mapuid?member=226&user=2C7233FAEBDD6DE731EA3932EFDD6E92;&redir=http%3A%2F%2Fm.adnxs.com%2Fmapuid%3Fmember%3D280%26user%3D2C7233FAEBDD6DE731EA3932EFDD6E92%3B HTTP/1.1 
Host: m.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         185.33.222.62
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://m.adnxs.com/mapuid?member=280&user=2C7233FAEBDD6DE731EA3932EFDD6E92;
AN-X-Request-Uuid: 24e32e9f-5712-43d6-b280-78af5725eb65
Set-Cookie: anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 218.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.76:80


--- Additional Info ---
                                        
                                            GET /sync/img?mt_exid=13&mt_exuid=7586099500581505406&redir=http%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D8%26code%3D%5Buuid%5D&mm_bnc&mm_bct HTTP/1.1 
Host: sync.mathtag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: uuid=f92d5974-f5c3-4a00-b92d-b3f0381f40e7

                                         
                                         185.29.135.226
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Sun, 23 Jul 2017 01:02:59 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Cache-Control: no-cache
Location: http://ib.adnxs.com/setuid?entity=8&code=f92d5974-f5c3-4a00-b92d-b3f0381f40e7
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Server: MT3 1.15.10.0 a38180b RELEASE cdg-pixel-x13
Set-Cookie: uuidc=vydJO4q7/vUVKa7TTtEJxE2BsZW0QWmwB6UFZD1eM3kprkydQKZPKM4Vn4B3bwh/oBN2Mxpm2kV81cXnZzUcvUw24l+OMwfdsdFEp4PaUbg=; Expires=Mon, 20-Aug-18 01:02:59 GMT; Domain=.mathtag.com; Path=/
Expires: Sun, 23 Jul 2017 01:02:58 GMT


--- Additional Info ---
                                        
                                            GET /dpixel?source=appnexus&eid=5&id=7586099500581505406 HTTP/1.1 
Host: cms.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         95.172.94.15
HTTP/1.1 302 Found
                                        
Connection: close
Location: http://ib.adnxs.com/setuid?entity=44&code=KkyuJHlA-iQyFv8nfBa0LnxH_3QyQPt1KU31qMKr
Set-Cookie: d=ECUBCQG1GJEA; expires=Sat, 21-Oct-2017 01:02:59 GMT; path=/; domain=.quantserve.com mc=5973f5c3-cf0cc-9c2fc-5bb68; expires=Thu, 23-Aug-2018 01:02:59 GMT; path=/; domain=.quantserve.com
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 0
Date: Sun, 23 Jul 2017 01:02:59 GMT
Server: QS


--- Additional Info ---
                                        
                                            GET /pxj?bidder=18&seg=378601&action=setuids(%27640988899703029502%27,%27%27);&redir= HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         37.252.172.53
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: b1d75681-cb2f-4604-a295-c4f3801a257e
Set-Cookie: anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.24:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /mapuid?member=280&user=2C7233FAEBDD6DE731EA3932EFDD6E92; HTTP/1.1 
Host: m.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         185.33.222.62
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 92923828-98c7-4908-b81a-61fa5fbbe09e
Set-Cookie: anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 218.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.22:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /setuid?entity=8&code=f92d5974-f5c3-4a00-b92d-b3f0381f40e7 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         37.252.172.53
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: f1dfcbe1-3e63-4bce-bb81-b62f5673e53c
Set-Cookie: anj=dTM7k!M4/bd<-p'ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[E7aUj!Db9KTw+12)R:^K)E^PtE:Nt29o!TM/gY9>T(_vE_'_ZXQ-a2T!-FObhoYYA.vUof**PRPP(dH]+1zU9; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.68:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         151.101.85.108
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.9.13
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: 18c539ebc7ce97f994fcf35e270c019862b74f51f2b492807013e1380f831d87
Content-Length: 131
Accept-Ranges: bytes
Date: Sun, 23 Jul 2017 01:02:59 GMT
Age: 0
Connection: keep-alive
X-Served-By: cache-jfk8120-JFK, cache-bma7028-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 1
X-Timer: S1500771780.903833,VS0,VE0
Vary: Accept-Encoding
Cache-Control: max-age=86400


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131
Md5:    dbd39d618a16ab9672e552b893252fca
Sha1:   28bc431e15c1600107964839b42f7ce64e950d2b
Sha256: e11172086458e56e39339a642c8f5709d94c467fd9b4f0fe2efb6582781b88ec
                                        
                                            GET /setuid?entity=44&code=KkyuJHlA-iQyFv8nfBa0LnxH_3QyQPt1KU31qMKr HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         37.252.172.53
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: b3074d27-f5a0-4889-95fe-696a5c9a2c76
Set-Cookie: anj=dTM7k!M4/bdsf*)ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Z'lQFgM4R*d(Qb@bw3/OI^C4Y/@3gXacg1JKu^^NQSD66^1qX_$5AjGd#TkASUV]>*hWQ4uVNN3FJH!8`5aR?wv^; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.206:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /getuid?https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus1%26google_sc%26google_hm%3D%24%7BBASE64_UID_ENC%7D%26google_cm HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M40mf5$P.ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Yen!q<vjnJ!7+$`i[7kPW16

                                         
                                         37.252.172.53
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:01 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus1&google_sc&google_hm=NzU4NjA5OTUwMDU4MTUwNTQwNg%3D%3D&google_cm
AN-X-Request-Uuid: 9f738ea8-b7eb-424e-b6e3-845ff79f9edc
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:01 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.15:80


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 23 Jul 2017 01:03:00 GMT
Expires: Thu, 27 Jul 2017 01:03:00 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fff6750c5b8df8544614fab6276a7012
Sha1:   61588b81099a3ed8c1ca6c63a9e63c780af59630
Sha256: bfdbf01090d7ae4a991394671077451901aac172159691060e721b6b7c3b4f0d
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=462184, public, no-transform, must-revalidate
Last-Modified: Fri, 21 Jul 2017 09:21:52 GMT
Expires: Fri, 28 Jul 2017 09:21:52 GMT
Date: Sun, 23 Jul 2017 01:03:00 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    5bbc0859ab02b7bfa1c1304b5f19ac42
Sha1:   0931a6572ac8d020eeb75317d25351ee1535a292
Sha256: 016cd5bcba05382e3de685f946b4eb1c45dd8ac1ba8710c1cd229a178c7c3e2d
                                        
                                            GET /pixel?google_nid=appnexus1&google_sc&google_hm=NzU4NjA5OTUwMDU4MTUwNTQwNg%3D%3D&google_cm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: id=27f15131ff342991||t=1500771779|et=730|cs=002213fd488d320a974180f296; IDE=AHWqTUkHpBJrF-AWZZbwHpBWSwOKwrt9myOj8STpSWJu3jtI04_qpUqnTw

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://adx.adnxs.com/mapuid?member=181&user=&google_gid=CAESEO_eCZ9A8qiABWx8tv7LhDE&google_cver=1
Date: Sun, 23 Jul 2017 01:03:00 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 307
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,36,35",quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  HTML document text
Size:   307
Md5:    f98fe5520bf17df518b8254e74b11f13
Sha1:   7c08d1995823ea371ff36df052b53472c36bdc42
Sha256: 851fc89222b3b93d55d4647dd3055cb583612b20ca5454bae540919b05a91af7
                                        
                                            GET /mapuid?member=181&user=&google_gid=CAESEO_eCZ9A8qiABWx8tv7LhDE&google_cver=1 HTTP/1.1 
Host: adx.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M4/bdsf*)ghqdmU(5>'v^bY8!]tbPB*Ny7NI/6X@j8eRmmp*sW.XQw2D.O82p#iZ0Iw>Of4<5*D$BL/#YaI(Im%Y)n[/Iltd('2]Ch4dE4jGN%F!r[@*V-+C6Z'lQFgM4R*d(Qb@bw3/OI^C4Y/@3gXacg1JKu^^NQSD66^1qX_$5AjGd#TkASUV]>*hWQ4uVNN3FJH!8`5aR?wv^

                                         
                                         185.33.223.208
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Sun, 23 Jul 2017 01:03:02 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 1f78a588-ab48-45ca-ad39-df7f9f24ea79
Set-Cookie: anj=dTM7k!M4/bdsf*)ghqdmU(5>'v^bY8!]tb+.FoAc=:_)V=nhlu2+U7[r%r_G-'aH_Xj<ftm)XDc.RQ%qlP/rObIN]JsX*12Tn?a6J:k2%j$^m('>m*'PG2v#(qdJ))SGyZhaew9g+F!574mkNg=T(+5e'ai]nvyFgum(Y0f4F6mHmdu3ZLE577Qtji.Br$!6CV(k<8699'G/2!@G$r>9/EX; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:02 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 24-Jul-2017 01:03:02 GMT; Domain=.adnxs.com; HttpOnly uuid2=7586099500581505406; Path=/; Max-Age=7776000; Expires=Sat, 21-Oct-2017 01:03:02 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 311.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.242:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /track/cmf/generic?ttd_pid=appnexus&ttd_tpi=1&ttd_puid=7586099500581505406 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html

                                         
                                         46.137.123.28
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Sun, 23 Jul 2017 01:02:59 GMT
Location: http://match.adsrvr.org/track/cmb/generic?ttd_pid=appnexus&ttd_tpi=1&ttd_puid=7586099500581505406
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=33f6ea9f-0eea-4bdb-bc8e-c9e65389353a; domain=.adsrvr.org; expires=Mon, 23-Jul-2018 01:02:59 GMT; path=/ TDCPM=CAEYBSgCMgsIooWXr6ncqDUQBTgB; domain=.adsrvr.org; expires=Mon, 23-Jul-2018 01:02:59 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 225
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   225
Md5:    55a9cd87aaa5c86bdd392a6bec82bc09
Sha1:   2628414044cf4a96d2388d23bdfcfba49c917814
Sha256: 1229a82ec26e114145e7d008acba50bae2735791cfe73a5f5a350425161291af
                                        
                                            GET /track/cmb/generic?ttd_pid=appnexus&ttd_tpi=1&ttd_puid=7586099500581505406 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
Cookie: TDID=33f6ea9f-0eea-4bdb-bc8e-c9e65389353a; TDCPM=CAEYBSgCMgsIooWXr6ncqDUQBTgB

                                         
                                         46.137.123.28
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Sun, 23 Jul 2017 01:03:00 GMT
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=33f6ea9f-0eea-4bdb-bc8e-c9e65389353a; domain=.adsrvr.org; expires=Mon, 23-Jul-2018 01:03:00 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwi2nJ2Jk9yoNRAFGAU4AUIEIgIIAQ..; domain=.adsrvr.org; expires=Mon, 23-Jul-2018 01:03:00 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 70
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   70
Md5:    58a7930cd4577fc33c35828c271eab8f
Sha1:   406e57f86dc101e10f3a57be1e2f7b93c4580474
Sha256: 8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: acdn.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sess=1; uuid2=7586099500581505406; anj=dTM7k!M4/bdsf*)ghqdmU(5>'v^bY8!]tb+.FoAc=:_)V=nhlu2+U7[r%r_G-'aH_Xj<ftm)XDc.RQ%qlP/rObIN]JsX*12Tn?a6J:k2%j$^m('>m*'PG2v#(qdJ))SGyZhaew9g+F!574mkNg=T(+5e'ai]nvyFgum(Y0f4F6mHmdu3ZLE577Qtji.Br$!6CV(k<8699'G/2!@G$r>9/EX

                                         
                                         151.101.85.108
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.9.13
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: 18c539ebc7ce97f994fcf35e270c019862b74f51f2b492807013e1380f831d87
Content-Length: 131
Accept-Ranges: bytes
Date: Sun, 23 Jul 2017 01:03:02 GMT
Age: 3
Connection: keep-alive
X-Served-By: cache-jfk8120-JFK, cache-bma7028-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 2
X-Timer: S1500771782.380586,VS0,VE0
Vary: Accept-Encoding
Cache-Control: max-age=86400


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131
Md5:    dbd39d618a16ab9672e552b893252fca
Sha1:   28bc431e15c1600107964839b42f7ce64e950d2b
Sha256: e11172086458e56e39339a642c8f5709d94c467fd9b4f0fe2efb6582781b88ec