Overview

URL imgserve.net/img-54ac8c4def6ef.html
IP104.27.171.91
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-10-17 05:06:54 CEST
StatusLoading report..
urlQuery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.171.91

Date UQ / IDS / BL URL IP
2018-11-15 04:11:18 +0100
2 - 1 - 1 imgserve.net/img-5312b02a2c55f.html 104.27.171.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af15fe0f.html 104.27.171.91
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-09 02:53:11 +0100
2 - 1 - 2 imgserve.net/img-54b8f7f76f9f2.html 104.27.171.91
2018-11-07 21:06:07 +0100
2 - 0 - 1 imgserve.net/img-531b3b116a506.html 104.27.171.91
2018-11-07 15:11:36 +0100
2 - 0 - 2 imgserve.net/img-51f083d266342.html 104.27.171.91
2018-11-05 18:07:20 +0100
2 - 0 - 2 imgserve.net/img-51ea9c13dbd6c.html 104.27.171.91
2018-11-05 08:10:59 +0100
2 - 0 - 2 imgserve.net/img-54b40e54bb3a9.html 104.27.171.91
2018-11-04 04:56:26 +0100
2 - 0 - 1 imgserve.net/img-54d4ca1f5453f.html 104.27.171.91

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-11-16 04:57:59 +0100
0 - 0 - 2 mrkzgulfup.com/do.php?img=87774 104.28.11.162
2018-11-16 04:55:18 +0100
0 - 0 - 0 mrkzgulfup.com 104.28.10.162
2018-11-16 04:41:58 +0100
0 - 1 - 0 https://promoclk.com/cl/bb8ae60bb4a36a1c 104.18.44.130
2018-11-16 04:28:17 +0100
3 - 0 - 2 campmor.us/continentaitesting/Officepage/ 104.27.171.177
2018-11-16 04:25:54 +0100
0 - 0 - 4 https://secure.nightsofni.xyz/lp/wg/rs_05/til (...) 104.28.3.211
2018-11-16 04:19:48 +0100
0 - 0 - 3 buffalo-israel-link.org/wp-includes/images/adb/ 104.24.113.6
2018-11-16 04:13:56 +0100
0 - 0 - 0 https://www.wattpad.com/story/167601587-watch (...) 104.16.111.12
2018-11-16 04:10:39 +0100
0 - 0 - 5 https://sevjesdrq8vsc60e2ag5kvr931m9jcrhq6khh (...) 104.16.159.215
2018-11-16 03:59:19 +0100
0 - 0 - 0 https://www.thelaegotist.com/member-work/full (...) 104.28.23.4
2018-11-16 03:58:54 +0100
0 - 1 - 0 https://ssl.topshape.me/lp/vidto-es/index.htm (...) 104.24.118.116

Last 10 reports on domain: imgserve.net

Date UQ / IDS / BL URL IP
2018-11-15 10:40:04 +0100
2 - 1 - 2 imgserve.net/img-547565868f825.html 104.27.170.91
2018-11-15 04:11:18 +0100
2 - 1 - 1 imgserve.net/img-5312b02a2c55f.html 104.27.171.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af03b425.html 104.27.170.91
2018-11-15 04:11:07 +0100
2 - 1 - 1 imgserve.net/img-531b3af15fe0f.html 104.27.171.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.170.91
2018-11-15 04:10:56 +0100
2 - 1 - 1 imgserve.net/img-5197c3755eecd.html 104.27.170.91
2018-11-14 03:19:47 +0100
2 - 1 - 1 imgserve.net/img-531b3b4d7eafa.html 104.27.171.91
2018-11-14 03:15:40 +0100
2 - 1 - 1 imgserve.net/img-5312b0288a458.html 104.27.171.91
2018-11-12 18:26:19 +0100
2 - 1 - 1 imgserve.net/img-536ad1a395425.html 104.27.170.91
2018-11-09 02:53:11 +0100
2 - 1 - 2 imgserve.net/img-54b8f7f76f9f2.html 104.27.171.91


JavaScript

Executed Scripts (23)


Executed Evals (0)


Executed Writes (20)

#1 JavaScript::Write (size: 11, repeated: 1) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#2 JavaScript::Write (size: 6, repeated: 16) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 171, repeated: 1) - SHA256: 071c14ce6808301d5ea6dc61c6f325418d16356b451662672de23397ccd67ec2

                                        < a href = "http://kmylvwo5.com/tracker_clicks.php?a=1142&c=12470&b=36377&_t=1539745582"
id = "ad_link"
target = "_blank" > Check This FREE PORN Site Before It 's BANNED Forever</a>
                                    

#4 JavaScript::Write (size: 531, repeated: 1) - SHA256: 26fd6937039fa5b1ec45702b9344d4e7b7725a0862d73721bcf92c40dc297636

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582220" > < /iframe>
                                    

#5 JavaScript::Write (size: 531, repeated: 1) - SHA256: 2c42b019a7418a18f077dfe68ab62131444a8699f928853d868ab1ef88e4bc80

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582421" > < /iframe>
                                    

#6 JavaScript::Write (size: 531, repeated: 1) - SHA256: 8cce024ac87a47437cef8c3974be235ee335eec6e7c5b3e9d40cee883a643da3

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582531" > < /iframe>
                                    

#7 JavaScript::Write (size: 531, repeated: 1) - SHA256: c6ee02bfaef4ca05b3ac3c06c5b0d8e3406a29f0acf42f63b59269b7a61fc084

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582591" > < /iframe>
                                    

#8 JavaScript::Write (size: 531, repeated: 1) - SHA256: 90a3d81afc68582d966338a7d8bbb578c94268ce1da58a18d389c0f44ab8adb2

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582635" > < /iframe>
                                    

#9 JavaScript::Write (size: 531, repeated: 1) - SHA256: 48cd0a91f2bd1dafec55021c967b29238e429287a068d67fad8a55fd0e8d9154

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582687" > < /iframe>
                                    

#10 JavaScript::Write (size: 531, repeated: 1) - SHA256: 44456dd55fbd94a21c0d19bd4656c5f4df7bd57dd4754c87619234da8af2501f

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582725" > < /iframe>
                                    

#11 JavaScript::Write (size: 531, repeated: 1) - SHA256: eef8acbffa635cae1601f12c2d09f74852b4738269f226199b8ab0ea433cf190

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582781" > < /iframe>
                                    

#12 JavaScript::Write (size: 531, repeated: 1) - SHA256: 9a3df2472788324750579cc8ab7cdadb378c09dfbe6d9bd9b86d7dabd0805902

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582825" > < /iframe>
                                    

#13 JavaScript::Write (size: 531, repeated: 1) - SHA256: 124c371f7b0476abf9f851019779944ae90f22f38c3f134f90cb892dca1c49e4

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582884" > < /iframe>
                                    

#14 JavaScript::Write (size: 531, repeated: 1) - SHA256: 87abdb6c2bc850392e661766cd2bf45392116f495ecb509397adaaf87535ad0e

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582925" > < /iframe>
                                    

#15 JavaScript::Write (size: 531, repeated: 1) - SHA256: c20f72feef0e78b1f1df988a820446bd8652313b470e1ee8e3013e0b13e9e4e4

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583107" > < /iframe>
                                    

#16 JavaScript::Write (size: 531, repeated: 1) - SHA256: 3898dfb8038bbf4064fc4e63b520c28e071723b600aa5544bf99ee78d0b7ad89

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583888" > < /iframe>
                                    

#17 JavaScript::Write (size: 531, repeated: 1) - SHA256: cf083c7b743056f0da693095b4331c09894444c165713a045b4d6dbdb9a89ee5

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583926" > < /iframe>
                                    

#18 JavaScript::Write (size: 531, repeated: 1) - SHA256: 41d9c26d10bdc1839cd715d51760a644f9d871f0509e34a98b489cde81c90581

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583964" > < /iframe>
                                    

#19 JavaScript::Write (size: 531, repeated: 1) - SHA256: 96f5a64137c4b4bd3da32522ac5693d02eaec9e77f916903cb67e64025c7d98f

                                        < div style = "width: 300px; height: 250px; text-align: left;" > < iframe style = "border: 0px solid #000000;"
frameborder = "0"
scrolling = "no"
width = "300"
height = "250"
src = "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745584002" > < /iframe>
                                    

#20 JavaScript::Write (size: 89, repeated: 1) - SHA256: 87717e9204bcb89f3d5305f8a010dd429cc0c5aa4d4925cdc1c77ea37341c1d2

                                        < script type = 'text/javascript'
src = 'http://5gl1x9qc.com/d/a/1142.php?ext=js&_t=8247580171
                                    


HTTP Transactions (78)


Request Response
                                        
                                            GET /img-54ac8c4def6ef.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 03:06:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; expires=Thu, 17-Oct-19 03:06:20 GMT; path=/; domain=.imgserve.net; HttpOnly refererx=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; path=/ viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; expires=Wed, 17-Oct-2018 04:06:20 GMT; path=/; domain=.imgserve.net viewerid=54ac8c4def6ef; expires=Wed, 17-Oct-2018 04:06:20 GMT; path=/; domain=.imgserve.net imagen3=1; expires=Thu, 18-Oct-2018 03:06:20 GMT
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: cloudflare
CF-RAY: 46af8c78454f42a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9577
Md5:    6f517ac17fcaef87834bfb183ce7ce64
Sha1:   59afd86e627f6d4e6e6d1b23cfbc7f10ca9aa05d
Sha256: 6475070c73b9d6f8e8bded983958f477fec102c936c245a6f089161073ccbaf6
                                        
                                            GET /css/styles.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 03:06:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 13 Jan 2015 07:23:52 GMT
Etag: W/"54b4c808-fceb"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:20 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c79255a42a9-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16363
Md5:    cdae48c2d228c78bcc72c4c0895ad283
Sha1:   a83d7527c3a8f3683094ff25f11ce7d76cfe0841
Sha256: c14d3811da0f79fcd55bc1af6daed9a29cfb6b7622b81f090a230a11ab08a090
                                        
                                            GET /js/jquery-1.7.1.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 03:06:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:20 GMT
Etag: W/"51ae97f4-16eac"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:20 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c79235b4261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33223
Md5:    797e5aeed7a915aa9423119040979407
Sha1:   1287bebc61e72f65aa726faeb9a27485a38b9707
Sha256: 4f74858d849a6a197bbf30d7bdb6003ae954f55c757c95aeaea94071fdff710c
                                        
                                            GET /css/smoothness/jquery-ui-1.8.18.custom.css HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 17 Oct 2018 03:06:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:43 GMT
Etag: W/"51ae9a27-833b"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:21 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c7ab3734261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7335
Md5:    8c3ae5f2631058b80fb6f6d84342ecd0
Sha1:   888aa2afe402561fe03a98b94b2abd7d48d69efd
Sha256: f9da0fc48c829ebfeb5079da87520156bd8e8f14d2ba4f3bdf4488fc49bba9d1
                                        
                                            GET /js/jquery-ui-1.8.18.custom.min.js HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 03:06:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:44:27 GMT
Etag: W/"51ae97fb-335f7"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:21 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c7ab57c42a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   52155
Md5:    1c8b6494b85c448273f83a2814226e0e
Sha1:   f7713dd0a26d0cfaa051020b2b37d589414c45f1
Sha256: fec6535c94fe5fb5604068322a6a43b16ea598c98415d8fe05fc54e8176021a7
                                        
                                            GET /css/img/pig.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:21 GMT
Content-Length: 821
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:30 GMT
Etag: "335-4de5e76e73a80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:21 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c7c159b42a9-OSL


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   821
Md5:    603b3f482f950ea6ecbe3f02e4527d51
Sha1:   cc218bdf4d001f3db5482e6290e3d2ba13969ca0
Sha256: 4a96458a5a569e653a34eeb335eafe180e28129ac00125392ee5bec392ccbb3d
                                        
                                            GET /css/img/logo.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:21 GMT
Content-Length: 21186
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:28 GMT
Etag: "52c2-4de5e76c8b600"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:21 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c7c13854261-OSL


--- Additional Info ---
Magic:  PNG image, 280 x 80, 8-bit/color RGBA, non-interlaced
Size:   21186
Md5:    0f2ef79913ef0d8ab7b994bb7c5fe9fe
Sha1:   a9f53968b43919d2db7f1ce7033a9f41a6d5ade3
Sha256: 5bf1fff11cc2949712da86d18ed92bef598cbdda2ab57f0d5e98357152e28667
                                        
                                            GET /jquery/text.js?_t=Math.floor(Math.random()*99999999999) HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         104.16.196.215
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 17 Oct 2018 03:06:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=da79290dc9e44e864ff29d9774876f2d91539745581; expires=Thu, 17-Oct-19 03:06:21 GMT; path=/; domain=.5gl1x9qc.com; HttpOnly
Last-Modified: Wed, 29 Mar 2017 18:20:04 GMT
Etag: W/"58dbfad4-1c9"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:21 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c7c12cd42a3-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   309
Md5:    ce46a3c0de343339a689c89866261e07
Sha1:   15d7033005f8313d87ee7fc0c01ff04cfbc0408e
Sha256: 046a2434ac8093105cc19850e70be73d6d08b2ec52df39aa9df28e8e9503b606
                                        
                                            GET /css/img/menubutton.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:21 GMT
Content-Length: 3494
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:29 GMT
Etag: "da6-4de5e76d7f840"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:21 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c7c1703429d-OSL


--- Additional Info ---
Magic:  PNG image, 150 x 40, 8-bit/color RGBA, non-interlaced
Size:   3494
Md5:    d1394f343c66e133faf085d089c7994b
Sha1:   a4064bd855e37c837ca0071416244e20dea5a1fa
Sha256: ad28f482b6f4e37eeafc726c5d2058da03cf848a3397d09d25773ea6a6fe32ad
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 10 Oct 2018 13:21:27 GMT
Etag: 0B425B03FFBD5FA3ADA882792BF827FB00B88885
X-OCSP-Responder-ID: rmdccaocsp22
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=36260
Expires: Wed, 17 Oct 2018 13:10:41 GMT
Date: Wed, 17 Oct 2018 03:06:21 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d7615c0125b1f9554b9d9dc61b71be35
Sha1:   0b425b03ffbd5fa3ada882792bf827fb00b88885
Sha256: 124480edc54da4054a0da4403a4393dfcf7d3981e2e6280abec02cb90cc5eea5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 424B413FCAD941C040D692B87CDE897F59DB16AA
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=151843
Expires: Thu, 18 Oct 2018 21:17:04 GMT
Date: Wed, 17 Oct 2018 03:06:21 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    83c72f9ab989986ef6becba8e433c7ac
Sha1:   424b413fcad941c040d692b87cde897f59db16aa
Sha256: 88fa386cbec8abadec656da6ae494781daa1a1c8d14dc768376fc7ede025432e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: E8581583C2803974EDDB983E5584CDB37B4F9E14
X-OCSP-Responder-ID: rmdccaocsp26
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=151834
Expires: Thu, 18 Oct 2018 21:16:55 GMT
Date: Wed, 17 Oct 2018 03:06:21 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5e712a8f20f0ae131a32a41f82c55b67
Sha1:   e8581583c2803974eddb983e5584cdb37b4f9e14
Sha256: 65e0f33f70b334d388d92507b68dacbf8b7390892e3cb264962501c2836b9e79
                                        
                                            GET /images/big/2015/01/06/54ac8c4def6d6.jpg HTTP/1.1 
Host: s11.imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 03:06:21 GMT
Content-Length: 735625
Connection: keep-alive
Last-Modified: Wed, 07 Jan 2015 01:33:04 GMT
Etag: "54ac8cd0-b3989"
Expires: Sat, 14 Oct 2028 03:06:21 GMT
Cache-Control: public, max-age=315360000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c7c472142b5-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   735625
Md5:    0ffd80350a739a9cde239dd9c788d48a
Sha1:   bc5cd752af320fe64eb212d932bcb2be3405aead
Sha256: e8cbdd43f9361baa2defc2d6b3d4da927ab637088b594fc497ef84660c75ba0a
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         104.20.209.59
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d64eb8475e42dc40af1d305c78cc4556d1539745582; expires=Thu, 17-Oct-19 03:06:22 GMT; path=/; domain=.coinhive.com; HttpOnly
Last-Modified: Mon, 15 Oct 2018 11:58:24 GMT
Etag: W/"5bc480e0-423b4"
Expires: Wed, 17 Oct 2018 11:06:22 GMT
Cache-Control: public, max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c8048a942c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   70162
Md5:    b6bb44f95a22a27e8b92d2ccbc591524
Sha1:   b5f4bf87301fb5291d70f392758d9c56ae374cc3
Sha256: e32b7829c99619bfa2c1de9e1ed9e9e515863b2d094e86c629c67c7350e8c96d

Alerts:
  urlquery:
    - Crypto currency mining script
                                        
                                            GET /css/img/bg2.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/styles.css
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Content-Length: 7637
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:53:23 GMT
Etag: "1dd5-4de5e767c6ac0"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:22 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c80c5eb42a9-OSL


--- Additional Info ---
Magic:  PNG image, 2247 x 190, 8-bit colormap, non-interlaced
Size:   7637
Md5:    8388f9f5ebca3dd2c58b44f190687497
Sha1:   44678688ae09eb0b35eaef09f83771165d1104cb
Sha256: de57f5342874c0d1e33353e7e42b61134d2aab7cb52d1929e115b44049d5f525
                                        
                                            GET /view.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af8c80e5f142a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /image-54ac8c4def6ef.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af8c80c741429d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /imgs-54ac8c4def6ef.html HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af8c80c3d54261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   393
Md5:    683d975f0afd4979f56ee8c21b4218a3
Sha1:   629952f74abdbbe8094b0640c79206544c7feb7a
Sha256: 844bce032ed8712745d47fd2ae04d63efdeeda3f9451b7249d1e200fe52216bd
                                        
                                            GET /adserver.php HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Server: cloudflare
CF-RAY: 46af8c80e3d74261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582220 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:22 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27H%DBE%5B%0F%13%12V%0B%15%96%F6%11%E1%DD%93%FA%EDg%60%E6%C1%F3%AC%F8%16%D6d%1BB%EB%3C%23%DF%A9%02f%C9%09%9C%B0r%AFfY%C3%AB%D4v%06%89%AC%AE%DD2%2C%3E%E5%DFM%19%86%C1%C7%28%DB%D4%8FG%D8%CF%B0%0D%17%7Cg%0A%B1%01W%CA%03%A9G%24%1B; expires=Thu, 18-Oct-2018 03:06:22 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   819
Md5:    4e8baf6af88375601c66d34f713195cc
Sha1:   537a56ff22d2f0996e7c26cd32c8fde8498af616
Sha256: 0be2d7e42cc1509e6f77e0844c0ccd827b9316812b52b7f3b3a45d95a3c1fa1b
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /z/116220443 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         104.24.121.232
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dfd10d23fada49a81e309f521f438edc61539745582; expires=Thu, 17-Oct-19 03:06:22 GMT; path=/; domain=.tweowhvrim.review; HttpOnly
Location: https://tweowhvrim.review/z/116220443
Server: cloudflare
CF-RAY: 46af8c8114ba42bb-OSL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   245
Md5:    8eb843a57fad3126f2c16f535ea84101
Sha1:   4dd57b2e7dd991842631f8a25318c5445eb86a5f
Sha256: ff0a5d495304dbfc56774d1a2016fe04c42ba746ba5ded6ef591d8118084c468
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582421 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27H%DBE%5B%0F%13%12V%0B%15%96%F6%11%E1%DD%93%FA%EDg%60%E6%C1%F3%AC%F8%16%D6d%1BB%EB%3C%23%DF%A9%02f%C9%09%9C%B0r%AFfY%C3%AB%D4v%06%89%AC%AE%DD2%2C%3E%E5%DFM%19%86%C1%C7%28%DB%D4%8FG%D8%CF%B0%0D%17%7Cg%0A%B1%01W%CA%03%A9G%24%1B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:22 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F; expires=Thu, 18-Oct-2018 03:06:22 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   686
Md5:    fff8a2dd76ac357b15327d27e443aa52
Sha1:   09e669567f62aea6f1c82475ee8a4cb23b58180c
Sha256: 7a819af9039407b6d610ea1f6f999cd5d033ce3fc4a79cc1bd6bcc13483439ae
                                        
                                            GET /library/118525/c5a187d64e607349786728fd25809b1892f787bb.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582220
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27H%DBE%5B%0F%13%12V%0B%15%96%F6%11%E1%DD%93%FA%EDg%60%E6%C1%F3%AC%F8%16%D6d%1BB%EB%3C%23%DF%A9%02f%C9%09%9C%B0r%AFfY%C3%AB%D4v%06%89%AC%AE%DD2%2C%3E%E5%DFM%19%86%C1%C7%28%DB%D4%8FG%D8%CF%B0%0D%17%7Cg%0A%B1%01W%CA%03%A9G%24%1B

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1539004788"
Cache-Control: max-age=86400
Content-Length: 25924
Last-Modified: Mon, 08 Oct 2018 13:19:48 GMT
X-HW: 1539745582.dop004.sk1.t,1539745582.cds016.sk1.c


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   25924
Md5:    1b895a1037d7bcadb84dc994e771783d
Sha1:   c5a187d64e607349786728fd25809b1892f787bb
Sha256: 9071b98db0141191a87f52a61dd944775cfcf2f6eb2137518ac762efc5a80861
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/530318/a059fb6c8330f74784db9a7c5ad19ccde1f89e07.jpg HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582421
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1520955008"
Cache-Control: max-age=86400
Content-Length: 23106
Last-Modified: Tue, 13 Mar 2018 15:30:08 GMT
X-HW: 1539745582.dop006.sk1.t,1539745582.cds040.sk1.c


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23106
Md5:    b068b72a430d8a6518c1b8ad1bf40230
Sha1:   a059fb6c8330f74784db9a7c5ad19ccde1f89e07
Sha256: 3b0ae64bc817e6de50cf1b62811b9d347509d90da967880f8f3e3d3e73eb1639
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 15 Oct 2018 06:17:38 GMT
Etag: 732F14FEBD09ACC614C1D08ABDC9D4FF7186BC36
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 278
Cache-Control: public, no-transform, must-revalidate, max-age=442832
Expires: Mon, 22 Oct 2018 06:06:54 GMT
Date: Wed, 17 Oct 2018 03:06:22 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   278
Md5:    58279d330a7756734a389b4a2cf552cd
Sha1:   732f14febd09acc614c1d08abdc9d4ff7186bc36
Sha256: 0c45ef8b0b0a8021bc28e51b81788c3c3587b61a6e6a3f4561368cb9889cf664
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27H%DBE%5B%0F%13%12V%0B%15%96%F6%11%E1%DD%93%FA%EDg%60%E6%C1%F3%AC%F8%16%D6d%1BB%EB%3C%23%DF%A9%02f%C9%09%9C%B0r%AFfY%C3%AB%D4v%06%89%AC%AE%DD2%2C%3E%E5%DFM%19%86%C1%C7%28%DB%D4%8FG%D8%CF%B0%0D%17%7Cg%0A%B1%01W%CA%03%A9G%24%1B

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 11 Oct 2018 21:27:34 GMT
Etag: 81BA3F7F2D06068D6A1DEE440E749D321E073BFD
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 313
Cache-Control: public, no-transform, must-revalidate, max-age=151840
Expires: Thu, 18 Oct 2018 21:17:02 GMT
Date: Wed, 17 Oct 2018 03:06:22 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   313
Md5:    5b1a178dc2ebf50f750216ca7402f74b
Sha1:   81ba3f7f2d06068d6a1dee440e749d321e073bfd
Sha256: ede2d28fbd261789543608426fdfb751321f4f9cbc7b951a81e7ff3a48c670d8
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /d/a/1142.php?ext=js&_t=8247580171 HTTP/1.1 
Host: 5gl1x9qc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=da79290dc9e44e864ff29d9774876f2d91539745581

                                         
                                         104.16.196.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: tr_az=m%255B0%255D%3D10%26m%255B1%255D%3D1142%26d%255B0%255D%3D16%26d%255B1%255D%3D1142; expires=Fri, 19-Oct-2018 03:06:22 GMT; Max-Age=172800 tr_a=m%255B0%255D%3D10%26m%255B1%255D%3D36377%26d%255B0%255D%3D16%26d%255B1%255D%3D36377; expires=Fri, 19-Oct-2018 03:06:22 GMT; Max-Age=172800
Content-Encoding: gzip
Server: cloudflare
CF-RAY: 46af8c82933742a3-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   200
Md5:    4b150a68126daeeecf58aba663369b42
Sha1:   3b665655105b6a5817e6c7140f716e941d7a3a77
Sha256: af53664a52a45cda4576d815e46fd536459870382e2d5d6508a1dc44b92e5416
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /z/116220443 HTTP/1.1 
Host: tweowhvrim.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=dfd10d23fada49a81e309f521f438edc61539745582

                                         
                                         104.24.121.232
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Apr 2018 23:09:55 GMT
Etag: W/"26f0-56a4fc9445fbb"
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46af8c83dca34273-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2690
Md5:    11e8d1cb4e37f10e66c40c28833656ac
Sha1:   70f389d5ca18684e72d27a86d7e9fbbd61407053
Sha256: 66b115902ebc0a0136cd5d57816d9d7d7482d828af79d168b19ec7bdcd36149c
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582825 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:22 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DK%0E%830%0CD%EF%E2%13%E4c%13%D79%0C%8APZ%2CQ%04%24%5DT%88%BB7%82m%D7lFz3%D2%BC%24%5Ev%15Gl%089%26A%D9K%0B%18%B5%16%88%2A6%9EX%F5%9DO%24%FF%08H%C4%AE%F5%2C0%A5R%FFn6%08%0CiYt%7E%F5%CF-%AF%9F%3C%0F_%B8%CE%2C%A2%81x4%AD%0B%A6Cw%BB%96%D8wl%EE%D5%1E%3F%7D%CBhL; expires=Thu, 18-Oct-2018 03:06:22 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   659
Md5:    5bb703b7105b58904667e3ca7f5c0b13
Sha1:   358b8bf70d24732b6d6b51a45a287bef046ffb24
Sha256: f1e41117074b80efb24edf89c25b48d4ad9221046894c237135572fac77f549f
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /library/581670/76e5002e166315c2331ac8f454ef23926ddeee19.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582825
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DK%0E%830%0CD%EF%E2%13%E4c%13%D79%0C%8APZ%2CQ%04%24%5DT%88%BB7%82m%D7lFz3%D2%BC%24%5Ev%15Gl%089%26A%D9K%0B%18%B5%16%88%2A6%9EX%F5%9DO%24%FF%08H%C4%AE%F5%2C0%A5R%FFn6%08%0CiYt%7E%F5%CF-%AF%9F%3C%0F_%B8%CE%2C%A2%81x4%AD%0B%A6Cw%BB%96%D8wl%EE%D5%1E%3F%7D%CBhL

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1538753041"
Cache-Control: max-age=86400
Content-Length: 170648
Last-Modified: Fri, 05 Oct 2018 15:24:01 GMT
X-HW: 1539745582.dop004.sk1.t,1539745582.cds019.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   170648
Md5:    6a4a931d345ddcec5e9cb4991f428829
Sha1:   76e5002e166315c2331ac8f454ef23926ddeee19
Sha256: 7411a6f8634a054d680ff562ecfeb722bb88379bd46395a190868392e239b29d
                                        
                                            GET /templates/images/background-right.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/servegimg.png
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:22 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c85663242a9-OSL


--- Additional Info ---
                                        
                                            GET /templates/images/background-left.jpg HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Location: http://whos.amung.us/swidget/hostsgimg.png
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:22 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c8567c4429d-OSL


--- Additional Info ---
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582925 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DK%0E%830%0CD%EF%E2%13%E4c%13%D79%0C%8APZ%2CQ%04%24%5DT%88%BB7%82m%D7lFz3%D2%BC%24%5Ev%15Gl%089%26A%D9K%0B%18%B5%16%88%2A6%9EX%F5%9DO%24%FF%08H%C4%AE%F5%2C0%A5R%FFn6%08%0CiYt%7E%F5%CF-%AF%9F%3C%0F_%B8%CE%2C%A2%81x4%AD%0B%A6Cw%BB%96%D8wl%EE%D5%1E%3F%7D%CBhL

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:22 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_; expires=Thu, 18-Oct-2018 03:06:22 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   661
Md5:    eeb42f483df3f9011f92969970d147df
Sha1:   46ed13d3973ceb06165c00cbec85eb216acf9848
Sha256: f8635f3a4e861dba4397fde69be404f969fd2c28dabc99bf6904d629d547dee4
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0A%830%10E%EF2%27H%A63M%3A9L%09%21%D5%01%15%DB%C4%85%88w7%D8%ADk7%1F%DE%FF%F0_%14%94M%05%D9%1B%26%1F%A2%90l%A5%05%F4Z%0B%04%15%1BN%AC%3A%E6%13%F9%F1r%C4%EC%B1%F5%5E%60%88%A5%5En%D6%09%A48%CF%3Au%EF%CF%2F%7F%97%3C%A5%15%FEg%96%C8%40%D8%9B%16%9Dy%12%DE%AB%DD%0F%25%2FF%2F

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /css/smoothness/images/ui-icons_454545_256x240.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Content-Length: 4369
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:06 GMT
Etag: "1111-4de5e790c8b80"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:23 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c86042c4261-OSL


--- Additional Info ---
Magic:  PNG image, 256 x 240, 8-bit colormap, non-interlaced
Size:   4369
Md5:    119dd0c2e94ad689de873ef39fd43e6e
Sha1:   1ab19df782d0b8491fc21c1edf7b20941624dd34
Sha256: cb36e80beaf2a527d463da552a5c679a46c4ff8c881318a194bb0ccb61cb2d5c
                                        
                                            GET /css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Content-Length: 105
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:02 GMT
Etag: "69-4de5e78cf8280"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:23 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c86063942a9-OSL


--- Additional Info ---
Magic:  PNG image, 1 x 400, 8-bit/color RGBA, non-interlaced
Size:   105
Md5:    e5a8f32e28fd5c27bf0fed33c8a8b9b5
Sha1:   7e5c99e9f0113ba6b63c2bb408b8347191316cda
Sha256: f0e6cd91b837d5c5644d026e5ffeccd907953317cd5c0f689901733afda260b2
                                        
                                            GET /css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/css/smoothness/jquery-ui-1.8.18.custom.css
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Content-Length: 178
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:54:01 GMT
Etag: "b2-4de5e78c04040"
CF-Cache-Status: HIT
Expires: Wed, 17 Oct 2018 07:06:23 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c86042d4261-OSL


--- Additional Info ---
Magic:  PNG image, 40 x 100, 8-bit/color RGBA, non-interlaced
Size:   178
Md5:    8692e6efddf882acbff144c38ea7dfdf
Sha1:   a9bb131c4acff0d07fa7b7f21bef05179c28d13b
Sha256: 39ab7ccd9f4e82579da78a9241265df288d8eb65dbbd7cf48aed2d0129887df5
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 17 Oct 2018 01:35:12 GMT
Expires: Wed, 17 Oct 2018 03:35:12 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 5471
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /swidget/hostsgimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         67.202.94.93
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/21.png


--- Additional Info ---
                                        
                                            GET /swidget/servegimg.png HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         67.202.94.93
HTTP/1.1 307 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, must-revalidate
Location: http://widgets.amung.us/small/00/12.png


--- Additional Info ---
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=738363523&utmhn=imgserve.net&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x737&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=ImgServe.net%20%7C%20Earn%20Money%20Sharing%20Images&utmhid=776306119&utmr=-&utmp=%2Fimg-54ac8c4def6ef.html&utmht=1539745583804&utmac=UA-40347884-1&utmcc=__utma%3D120226704.2015073960.1539745583.1539745583.1539745583.1%3B%2B__utmz%3D120226704.1539745583.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=462660476&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Wed, 17 Oct 2018 03:06:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /library/530318/7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582925
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705623"
Cache-Control: max-age=86400
Content-Length: 296015
Last-Modified: Tue, 19 Dec 2017 17:47:03 GMT
X-HW: 1539745583.dop006.sk1.t,1539745583.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   296015
Md5:    3ddb8167820e977615a641bc6a1eb2bd
Sha1:   7021b2c964c9bf1fa0e5cdc2fe1761f0a712fc1f
Sha256: 3d5072cf06330fd3372e63fb73246718457b179b5cc2fae904f5ec09998d9c03
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /small/00/21.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Content-Length: 318
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-13e"
Expires: Thu, 18 Oct 2018 03:06:23 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   318
Md5:    ab16ea717837af20fd67f0ff589542ad
Sha1:   ba40966224ac1e835f6fffdf16c1d0980c32537b
Sha256: 1800cd75058096f0ea131fdf3d3e7f046d93977892e56adc2d748a8127c5d2bf
                                        
                                            GET /small/00/12.png HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 17 Oct 2018 03:06:23 GMT
Content-Length: 319
Last-Modified: Sun, 13 Jun 2010 09:48:29 GMT
Connection: keep-alive
Etag: "4c14a96d-13f"
Expires: Thu, 18 Oct 2018 03:06:23 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit colormap, non-interlaced
Size:   319
Md5:    52be211330111afd620876775a503dc6
Sha1:   815faa6a4d8b1d795eddc5808feaa4e06cbd1766
Sha256: fcea93ff3ebb838b05a7e1e9b3c335df105178143bf7e2b2f893c5759e381687
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   423
Md5:    717d7ce4cc1c25ce711b593fbe1d2512
Sha1:   7736535536888326e4742a5685841f2177d4ce6f
Sha256: f8332bb3f37ea76db8bd2460478d2fe98f1892f6b452218cde98ad69c8e7b4f5
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582531 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   664
Md5:    4f552ebfdb08ee2f6a9a6ca84613b593
Sha1:   e0a49a5d68dd6941c147075700f07962ebee45c7
Sha256: bfab603bb5df3091c8cc192ef33e7ba34ef320336fd71d791753fee0c935067a
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582591 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8FA%0A%C20%10E%EF2%27%C8%A43%C989%8C%84%92j%40K5q%21%A5w7%B6%DB.%C4E7%03%EF%7F%F8%8F%89J%3Ag%B5%2C%86IB%FCbi%07%AE%B9%16%08Y1%ACX%F3%3D%AD%C8%DD%C9%13%B3%D8%96%8B%C2-%96%BA%DB%A1W%E8%E34%E5%F1r%1E%9E%E9%F1Jc%FF%86m%0C%89%0C%84%A5i%AD7%8E%EC%8E%D6%FE%A1%A5%9F%B5%2C%9D%13s%F8%B7%E8%D9%A0%3BV%BB%7C%00%B2%3A%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   683
Md5:    13f67d9a4695eb6048a5c8a90ebd2ba7
Sha1:   b4af4cd08610ea95d63c1b91020aacf748c74ec1
Sha256: 4c8111afa74a72b31143a90de722ce241a1970b77bc4e5678f699caaadc2fe50
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582884 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    a1c56c488f8bb71c7418ab07d58533ae
Sha1:   2f025671ec5b1f54248ef5804c53727e09049cb6
Sha256: ae64628b8f4f7fac923a720385c68ce081ea5a15d102018d8d91c0c5a1d2cad2
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582635 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8FA%0A%C20%10E%EF2%27%C8%A43%C989%8C%84%92j%40K5q%21%A5w7%B6%DB.%C4E7%03%EF%7F%F8%8F%89J%3Ag%B5%2C%86IB%FCbi%07%AE%B9%16%08Y1%ACX%F3%3D%AD%C8%DD%C9%13%B3%D8%96%8B%C2-%96%BA%DB%A1W%E8%E34%E5%F1r%1E%9E%E9%F1Jc%FF%86m%0C%89%0C%84%A5i%AD7%8E%EC%8E%D6%FE%A1%A5%9F%B5%2C%9D%13s%F8%B7%E8%D9%A0%3BV%BB%7C%00%B2%3A%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   683
Md5:    13f67d9a4695eb6048a5c8a90ebd2ba7
Sha1:   b4af4cd08610ea95d63c1b91020aacf748c74ec1
Sha256: 4c8111afa74a72b31143a90de722ce241a1970b77bc4e5678f699caaadc2fe50
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582725 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8FA%0A%C20%10E%EF2%27%C8%A43%C989%8C%84%92j%40K5q%21%A5w7%B6%DB.%C4E7%03%EF%7F%F8%8F%89J%3Ag%B5%2C%86IB%FCbi%07%AE%B9%16%08Y1%ACX%F3%3D%AD%C8%DD%C9%13%B3%D8%96%8B%C2-%96%BA%DB%A1W%E8%E34%E5%F1r%1E%9E%E9%F1Jc%FF%86m%0C%89%0C%84%A5i%AD7%8E%EC%8E%D6%FE%A1%A5%9F%B5%2C%9D%13s%F8%B7%E8%D9%A0%3BV%BB%7C%00%B2%3A%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   683
Md5:    13f67d9a4695eb6048a5c8a90ebd2ba7
Sha1:   b4af4cd08610ea95d63c1b91020aacf748c74ec1
Sha256: 4c8111afa74a72b31143a90de722ce241a1970b77bc4e5678f699caaadc2fe50
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582781 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8FA%0A%C20%10E%EF2%27%C8%A43%C989%8C%84%92j%40K5q%21%A5w7%B6%DB.%C4E7%03%EF%7F%F8%8F%89J%3Ag%B5%2C%86IB%FCbi%07%AE%B9%16%08Y1%ACX%F3%3D%AD%C8%DD%C9%13%B3%D8%96%8B%C2-%96%BA%DB%A1W%E8%E34%E5%F1r%1E%9E%E9%F1Jc%FF%86m%0C%89%0C%84%A5i%AD7%8E%EC%8E%D6%FE%A1%A5%9F%B5%2C%9D%13s%F8%B7%E8%D9%A0%3BV%BB%7C%00%B2%3A%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   683
Md5:    13f67d9a4695eb6048a5c8a90ebd2ba7
Sha1:   b4af4cd08610ea95d63c1b91020aacf748c74ec1
Sha256: 4c8111afa74a72b31143a90de722ce241a1970b77bc4e5678f699caaadc2fe50
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583888 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%C5%D0%C1%0A%C20%0C%06%E0w%C9%134%5D%D2%C6%F4a%A4%8C%EA%0A%3A%A6%AD%07%19%7Bw%CB%BC%8A%E8e%BB%04%FE%FC%90%0F%12%95u%CEjY%0C%93%84%A8%A4si%03%86%5C%0B%84%AC%18%D6X%F35%AD%91%BB%83%27f%B1m%2F%0A%97X%EA%C7%0E%BDB%1F%A7%29%8F%E7%E3%E9%9En%8F4%F6Ox%1FC%22%03ai%AC%F5%C6%91%DD%9Ce%E9%9C%98%CDY%F4l%D0%ED%F0d%B4%7F%B1%F4%85%A5%DF%D8%E5%05%B8%5E%ACu; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   673
Md5:    632d1d0ada2240cf9d9c274695489b92
Sha1:   442f6d8e7367921a1226002c6fe9b01aa6d0e49c
Sha256: 8cfdd6acf1f21d71bc708b3912051bdf22734104b30980de9493957693ebb86b
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583107 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   661
Md5:    b0fdb60bee244061fa632cdeec3aeef1
Sha1:   80b14b0237dd34a76420557207b8257fbaf62d1e
Sha256: af5dee898e7c8bd72fe187e6f71c9999c74f0cc3e26cd971a8c571a23a457a99
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582687 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%8FA%0A%C20%10E%EF2%27%C8%A43%C989%8C%84%92j%40K5q%21%A5w7%B6%DB.%C4E7%03%EF%7F%F8%8F%89J%3Ag%B5%2C%86IB%FCbi%07%AE%B9%16%08Y1%ACX%F3%3D%AD%C8%DD%C9%13%B3%D8%96%8B%C2-%96%BA%DB%A1W%E8%E34%E5%F1r%1E%9E%E9%F1Jc%FF%86m%0C%89%0C%84%A5i%AD7%8E%EC%8E%D6%FE%A1%A5%9F%B5%2C%9D%13s%F8%B7%E8%D9%A0%3BV%BB%7C%00%B2%3A%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   683
Md5:    13f67d9a4695eb6048a5c8a90ebd2ba7
Sha1:   b4af4cd08610ea95d63c1b91020aacf748c74ec1
Sha256: 4c8111afa74a72b31143a90de722ce241a1970b77bc4e5678f699caaadc2fe50
                                        
                                            GET /library/530318/b1b992e28cb2dd59c8af9c880871e5478002ac0e.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582531
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 03:06:24 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705625"
Cache-Control: max-age=86400
Content-Length: 326567
Last-Modified: Tue, 19 Dec 2017 17:47:05 GMT
X-HW: 1539745584.dop004.sk1.t,1539745584.cds003.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   326567
Md5:    9b7fe1be99cb649d0b893c86ff9ea496
Sha1:   b1b992e28cb2dd59c8af9c880871e5478002ac0e
Sha256: a9064aa832aad0685a0081bc8b6af0e7b188f7a360d9cf0c5114837e5b80b062
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745584002 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   661
Md5:    b0fdb60bee244061fa632cdeec3aeef1
Sha1:   80b14b0237dd34a76420557207b8257fbaf62d1e
Sha256: af5dee898e7c8bd72fe187e6f71c9999c74f0cc3e26cd971a8c571a23a457a99
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583926 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   661
Md5:    b0fdb60bee244061fa632cdeec3aeef1
Sha1:   80b14b0237dd34a76420557207b8257fbaf62d1e
Sha256: af5dee898e7c8bd72fe187e6f71c9999c74f0cc3e26cd971a8c571a23a457a99
                                        
                                            GET /ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583964 HTTP/1.1 
Host: syndication.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/imgs-54ac8c4def6ef.html
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%8DA%0E%C20%0C%04%FF%E2%17%C4%A9%9D%18%E71%28%AA%02X%82%AA%90p%40%A8%7F%27%94%2B%E7%5CV%9A%5Di%27%2B%E9%DB%D4%B38%26I%F9%8B%B5%07%5C%ACUH%A6%98vlv%2B%3B%F2t%88%C4%2C%BE%F7%A2p%CD%B5%FD%DD0%2A%CCy%5Dm9%1FO%8Fr%7F%96e%7E%C1%EF%0C%89%1C%A4%ADk%7Dt%81%FCp-%CB%14%C4%0D%D7bd%87a%ACv%FB%00%AE%C4%8A_

                                         
                                         95.211.229.245
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; expires=Fri, 16-Oct-2020 03:06:24 GMT; Max-Age=63072000; domain=exoclick.com impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab; expires=Thu, 18-Oct-2018 03:06:24 GMT; Max-Age=86400; path=/; domain=.exoclick.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   661
Md5:    b0fdb60bee244061fa632cdeec3aeef1
Sha1:   80b14b0237dd34a76420557207b8257fbaf62d1e
Sha256: af5dee898e7c8bd72fe187e6f71c9999c74f0cc3e26cd971a8c571a23a457a99
                                        
                                            GET /library/530318/3205d638d43d508b2c7b8af14ac66485a51374e9.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745582884
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%BD%CD%C1%0A%C20%0C%80%E1w%C9%134%5D%D2%C6%F4a%A4%8CN%0B%3A%A6%AD%07%19%7Bw%EBv%DDA%3C%EC%12%F8%13%C8%17%95t%CEjY%0C%93%84%F8%CD%D2%06%5Cs-%10%B2bX%B3%E6%7BZ%93%BB%93%27f%B1m%2F%0A%B7X%EA%EE%0D%BDB%1F%A7%29%8F%97%F3%F0L%8FW%1A%FB7l%CF%90%C8%40X%1Ak%BDqd%0FgY%3A%27%E6p%16%3D%1Bt%3B%AC%FD%83%A5%DF%D8%E5%03%AFp%8Ab

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 03:06:24 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1513705627"
Cache-Control: max-age=86400
Content-Length: 478744
Last-Modified: Tue, 19 Dec 2017 17:47:07 GMT
X-HW: 1539745584.dop006.sk1.t,1539745584.cds049.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   478744
Md5:    c90eb3444b30f50466b6183e5177ac56
Sha1:   3205d638d43d508b2c7b8af14ac66485a51374e9
Sha256: a375b1a82e66c73244b5e8d5fd1fd77ded12de71eff98fdb766305606707684c
                                        
                                            GET /library/546258/8fc34ca2ff7cbabf952762120722529c02145e52.gif HTTP/1.1 
Host: static.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=imgserve&cat=97&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=&text_only=0&show_thumb=&idzone=547379&idsite=201687&p=http%3A//imgserve.net/img-54ac8c4def6ef.html&dt=1539745583888
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%225bc6a72e3b3ce5.907359613975253722%22%3B%7D; impressions=x%9C%C5%D0%C1%0A%C20%0C%06%E0w%C9%134%5D%D2%C6%F4a%A4%8C%EA%0A%3A%A6%AD%07%19%7Bw%CB%BC%8A%E8e%BB%04%FE%FC%90%0F%12%95u%CEjY%0C%93%84%A8%A4si%03%86%5C%0B%84%AC%18%D6X%F35%AD%91%BB%83%27f%B1m%2F%0A%97X%EA%C7%0E%BDB%1F%A7%29%8F%E7%E3%E9%9En%8F4%F6Ox%1FC%22%03ai%AC%F5%C6%91%DD%9Ce%E9%9C%98%CDY%F4l%D0%ED%F0d%B4%7F%B1%F4%85%A5%DF%D8%E5%05%B8%5E%ACu

                                         
                                         205.185.216.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 17 Oct 2018 03:06:24 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1521013017"
Cache-Control: max-age=86400
Content-Length: 70715
Last-Modified: Wed, 14 Mar 2018 07:36:57 GMT
X-HW: 1539745584.dop011.sk1.t,1539745584.cds050.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   70715
Md5:    3d30f9f55cfb7f5235fccb8f96e7f457
Sha1:   8fc34ca2ff7cbabf952762120722529c02145e52
Sha256: 0a066fc2d9726bc00e2c43d6211f9fb5a52e60c927ed46c00d24d1afc694c182
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: imgserve.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d517267724f5f019451c7ac4500b6b0b11539745580; PHPSESSID=564f9f4c38d0b09179c8d625153e50ad; viewer=0d2a1aa1eba95ce94db006af2ad7dc5f; viewerid=54ac8c4def6ef; imagen3=1; __utma=120226704.2015073960.1539745583.1539745583.1539745583.1; __utmb=120226704.1.10.1539745583; __utmc=120226704; __utmz=120226704.1539745583.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         104.27.171.91
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Jun 2013 01:42:49 GMT
Etag: W/"51ae9799-47c"
CF-Cache-Status: REVALIDATED
Expires: Wed, 24 Oct 2018 03:06:24 GMT
Cache-Control: public, max-age=604800
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46af8c8e5047429d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   921
Md5:    06ee4e4a98828888549e3ed7693dd78c
Sha1:   ef954a19b195cce9f07d6ef1efb08e295aa81baf
Sha256: 281e819159c678c2a170900b0d6d584fab10d46613c3567dd8b5c31ea93b8eb6
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html

                                         
                                         172.64.163.36
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d019fa24e2481cedb0af91922ee1a94c71539745584; expires=Thu, 17-Oct-19 03:06:24 GMT; path=/; domain=.popmyads.com; HttpOnly
Location: https://popmyads.com/x/pma
Server: cloudflare
CF-RAY: 46af8c8f42e97600-ARN


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   234
Md5:    f93c41ecf56596dfaff243d71b6315ce
Sha1:   348380cff5f286fd99bf74d71f37bcb0fbf3e95f
Sha256: ab246188c1c38fdd6b1b5e721ef8d14caa305028bc6b79fe314e316d6407323d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 280
Last-Modified: Wed, 17 Oct 2018 00:33:15 GMT
Etag: 606784539D1DA9E4E64876580B05AB24DDBF618C
X-OCSP-Responder-ID: rmdccaocsp28
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
Cache-Control: public, no-transform, must-revalidate, max-age=595207
Expires: Wed, 24 Oct 2018 00:26:31 GMT
Date: Wed, 17 Oct 2018 03:06:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   280
Md5:    77de95a16ac267190c7630906eb877fa
Sha1:   606784539d1da9e4e64876580b05ab24ddbf618c
Sha256: aa00a3245795f4401006380e0f696da104cfa723068e808d467ab61f39969a88
                                        
                                            GET /x/pma HTTP/1.1 
Host: popmyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://imgserve.net/img-54ac8c4def6ef.html
Cookie: __cfduid=d019fa24e2481cedb0af91922ee1a94c71539745584

                                         
                                         172.64.163.36
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 17 Oct 2018 03:06:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.1.16
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46af8c90e8e085fb-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26897
Md5:    74df32e7c9729cc21ddb00e044c8a808
Sha1:   919daf6d75fd32b4ca59cc29a331cb0078373bce
Sha256: 2e99678de740ec7d0b2f6080245ecc6b0a764a463dd1e858ef1d95b6892ff84a