Haemadang.com

Connection: close
Pragma: no-cache
cache-control: no-cache
Location: /dlRZh/

HTTP/1.1 302 Found
Connection: close
Pragma: no-cache
cache-control: no-cache
Location: /

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 10 Aug 2019 05:50:01 GMT
Content-Length: 458
Age: 0
Connection: keep-alive
Server: nginx
Date: Sat, 10 Aug 2019 05:47:16 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: http://www.pwpsmltd.com/

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Aug 2019 05:47:17 GMT
Content-Type: text/html
Last-Modified: Thu, 01 Aug 2019 09:59:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d42b7f1-5ea1"
Content-Encoding: gzip
Upgrade: h2c
Connection: Upgrade

HTTP/2 301 
date: Thu, 01 Jan 1970 00:00:00 GMT
server: Apache
x-redirect-by: WordPress
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
location: https://blakeandmark.com/
content-length: 0
content-type: text/html; charset=UTF-8

HTTP/2 200 
date: Sat, 10 Aug 2019 05:50:07 GMT
server: Apache
link: <https://blakeandmark.com/wp-json/>; rel="https://api.w.org/", <https://blakeandmark.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
content-length: 9469
content-type: text/html; charset=UTF-8
Server: nginx
Date: Sat, 10 Aug 2019 05:50:12 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 234
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://blackouthome.site/
X-Host: blackouthome.site
Cache-Control: max-age=0
Cache-Control: public
X-VARITI-CCR: 495349303:1
Set-Cookie: ipp_uid2=aET0UmNXqoSPt3Ei/k9LuDrveAW2vYYkkL2KxoQ==; expires=Tue, 31 Dec 2030 23:59:59 GMT; path=/
Set-Cookie: ipp_uid1=1565416211983; expires=Tue, 31 Dec 2030 23:59:59 GMT; path=/
Set-Cookie: ipp_uid=1565416211983/aET0UmNXqoSPt3Ei/k9LuDrveAW2vYYkkL2KxoQ==; expires=Tue, 31 Dec 2030 23:59:59 GMT; path=/
Set-Cookie: rerf=AAAAAF1OWxRGllnFBCqcAg==; expires=Mon, 09-Sep-19 05:50:12 GMT; path=/
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Aug 2019 05:50:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 12 Jun 2019 11:20:24 GMT
ETag: W/"11204-58b1e997dee00"
X-Frame-Options: SAMEORIGIN
X-Host: blackouthome.site
Cache-Control: max-age=0
Cache-Control: public
Content-Encoding: gzip
X-VARITI-CCR: 579594952:1
Set-Cookie: ipp_uid2=Q5pUK6gHCJvB2eNK/ULRFt3G48yqCBoBqHdq/eQ==; expires=Tue, 31 Dec 2030 23:59:59 GMT; path=/
Set-Cookie: ipp_uid1=1565416212462; expires=Tue, 31 Dec 2030 23:59:59 GMT; path=/
Set-Cookie: ipp_uid=1565416212462/Q5pUK6gHCJvB2eNK/ULRFt3G48yqCBoBqHdq/eQ==; expires=Tue, 31 Dec 2030 23:59:59 GMT; path=/
Set-Cookie: rerf=AAAAAF1OWxSNKh88BMbZAg==; expires=Mon, 09-Sep-19 05:50:12 GMT; path=/
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Server: nginx/1.11.2
Date: Sat, 10 Aug 2019 05:50:15 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: http://www.hbbatian.com/

HTTP/1.1 200 OK
Server: nginx/1.11.2
Date: Sat, 10 Aug 2019 05:50:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 5463
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Credentials: true
Server: CloudFront
Date: Sat, 10 Aug 2019 05:50:24 GMT
Content-Type: text/html
Content-Length: 183
Connection: close
Location: https://intercom-attachments-7.com/
X-Cache: Redirect from cloudfront
Via: 1.1 22b93618451324c719001c4ae66237ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ORD50
X-Amz-Cf-Id: ww9nO6bX0IuwkhBE6dSFnER8pzeou1TwD4dovfj7_Pk7QufKoNeq4w==

HTTP/2 301 
content-type: text/html; charset=utf-8
content-length: 106
location: https://www.intercom.com/
cache-control: no-cache
content-encoding: gzip
content-security-policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net js.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com www.youtube.com intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-long-poller-a.intercom.io wss://nexus-websocket-a.intercom.io uploads.intercomcdn.com static.intercomassets.com *.tiles.mapbox.com api.amplitude.com app.getsentry.com sentry.io js.logentries.com api.giphy.com api.stripe.com heapanalytics.com meet.intercom.com www.google-analytics.com stats.g.doubleclick.net; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net js.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com www.youtube.com intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com netdna.bootstrapcdn.com platform.twitter.com static.segment.com switchet.s3.amazonaws.com www.google-analytics.com run.pstmn.io cdn.heapanalytics.com heapanalytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com admin.typeform.com; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com netdna.bootstrapcdn.com heapanalytics.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com
date: Sat, 10 Aug 2019 05:50:24 GMT
server: nginx
status: 301 Moved Permanently
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-intercom-version: 0a7c99e464b732092584a99eecfc9cdb9d981278
x-request-id: 00e02v0mgrckec29uc90
x-runtime: 0.006401
x-xss-protection: 1; mode=block
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 5dafcfe18ffd6eccdc6e9c39ca1b55d4.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD50
x-amz-cf-id: IhIujbcTkRVTBdj5ZZYadDakfTyh_uDMAjf8m-CVTSnr26sGTGVtIw==

HTTP/2 200 
content-type: text/html
date: Sat, 10 Aug 2019 05:50:25 GMT
content-security-policy: default-src 'self'; child-src 'self' share.intercom.io connect.facebook.net fast.wistia.com fast.wistia.net googleads.g.doubleclick.net *.hotjar.com bid.g.doubleclick.net youtube.com www.youtube.com js.stripe.com www.facebook.com staticxx.facebook.com *.soundcloud.com ti.to *.tito.io *.cdn.optimizely.com tpc.googlesyndication.com www.google.com ethn.io *.quora.com intercom-sheets.com app-ab27.marketo.com www.intercom-reporting.com d2c7xlmseob604.cloudfront.net; connect-src 'self' www.intercom.com app.intercom.io app.intercom.com api.intercom.io api-iam.intercom.io api-ping.intercom.io api.smartling.com js.intercomcdn.com nexus-websocket-a.intercom.io nexus-websocket-test.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-test.intercom.io store.intercomassets.com widget.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-test.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com abrtp1.marketo.com abrtp1-cdn.marketo.com app.getsentry.com stats.g.doubleclick.net www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com sentry.io www.facebook.com *.akamaihd.net *.optimizely.com *.wistia.com *.wistia.net *.quora.com *.soundcloud.com *.sndcdn.com *.clearbit.com 258-clw-344.mktoresp.com bat.bing.com cdn.bizible.com d2c7xlmseob604.cloudfront.net rum-collector-2.pingdom.net; font-src data: https:; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' 'unsafe-eval' app.intercom.io app.intercom.com js.intercomcdn.com store.intercomassets.com marketing.intercomassets.com widget.intercom.io ajax.googleapis.com analytics.twitter.com abrtp1.marketo.com abrtp1-cdn.marketo.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com bat.bing.com cdn-assets-prod.s3.amazonaws.com cdn.optimizely.com cdn3.optimizely.com cdn.ravenjs.com connect.facebook.net distillery.wistia.com distillery-main.wistia.com ethn.io fast.wistia.com fast.wistia.net ga.clearbit.com googleads.g.doubleclick.net sjs.bizographics.com js.stripe.com munchkin.marketo.net platform.twitter.com reveal.clearbit.com rtp-static.marketo.com script.hotjar.com secure.adnxs.com snap.licdn.com static.ads-twitter.com static.hotjar.com stats.g.doubleclick.net store.intercom.io ti.to tpc.googlesyndication.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com *.jquery.com *.tito.io *.linkedin.com *.quora.com *.soundcloud.com *.sndcdn.com *.widerfunnel.com 'strict-dynamic' 'nonce-1e1c6e1c718d626391583a4f6fee8817'; style-src 'self' 'unsafe-inline' *.tito.io app-ab27.marketo.com marketing.intercomassets.com maxcdn.bootstrapcdn.com rtp-static.marketo.com tagmanager.google.com; worker-src data: blob:
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
server: nginx
x-cache: Miss from cloudfront
via: 1.1 2fab83ff68f2262488d5c050d4c0ec65.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD51-C2
x-amz-cf-id: 5-MMw1-dgSShYLYmgzSVX87rG7U_p4-wjQKcz7-D4gp18UcLpg5G6w==
Date: Sat, 10 Aug 2019 05:50:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 10 Aug 2019 06:50:26 GMT
Location: https://ventrado.site/
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 503fb134b84ac653-MSP

HTTP/2 200 
date: Sat, 10 Aug 2019 05:50:26 GMT
content-type: text/html; charset=utf-8
set-cookie: __cfduid=d3dfcc23e4e54c9b90e282a030ba894681565416226; expires=Sun, 09-Aug-20 05:50:26 GMT; path=/; domain=.ventrado.site; HttpOnly; Secure
x-powered-by: PHP/7.2.10
set-cookie: 4e728e8517d6c77977342bdac971e0e28a531a0f=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyMlwiOjE1NjU0MTYyMjYsXCIzM1wiOjE1NjU0MTYyMjZ9LFwiY2FtcGFpZ25zXCI6e1wiMzhcIjoxNTY1NDE2MjI2LFwiOVwiOjE1NjU0MTYyMjZ9LFwidGltZVwiOjE1NjU0MTYyMjZ9In0.-H8e75pKvbUDnBIme1_KIvVPy41pWH9Cp_uT8fg_eYc; expires=Tue, 10-Sep-2019 05:50:26 GMT; Max-Age=2678400; path=/; domain=.ventrado.site
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 503fb135ce1a422f-MSP
content-encoding: br
Connection: close
Pragma: no-cache
cache-control: no-cache
Location: /

HTTP/1.1 302 Found
Connection: close
Pragma: no-cache
cache-control: no-cache
Location: /

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 10 Aug 2019 05:50:27 GMT
Content-Length: 477
Age: 8
Connection: keep-alive
Server: nginx
Date: Sat, 10 Aug 2019 05:50:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 51
Connection: keep-alive
Location: http://www.libracustody.com/
X-Served-By: Namecheap URL Forward

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Aug 2019 05:50:29 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
X-CST: MISS
X-CST: HIT
Allow: GET, HEAD
Server: nginx
Date: Sat, 10 Aug 2019 05:50:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
P3P: CP="ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC"
X-Powered-By: PHP/5.3.13p1
Set-Cookie: PHPSESSID=ji5sahe73ob769o0bfn2fn9n42; path=/
Set-Cookie: f33d2ed86bd82d4c22123c9da444d8ab=MTU2NTQxNjIzMQ%3D%3D; expires=Sun, 09-Aug-2020 05:50:31 GMT; path=/
Set-Cookie: 96b28b766b7e0699aa91c9ff3d890663=aHR0cHM6Ly9oeXBlc3RhdC5jb20%3D; expires=Sun, 09-Aug-2020 05:50:31 GMT; path=/
Set-Cookie: 2a0d2363701f23f8a75028924a3af643=NjcuMjEyLjE4Ny4xMDY%3D; expires=Sun, 11-Aug-2019 05:50:31 GMT; path=/
Content-Encoding: gzip