Overview

URL https://p.hgc.host/158180
IP104.27.135.23
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-06-13 22:17:30 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.135.23

Date UQ / IDS / BL URL IP
2018-08-13 20:06:38 +0200
0 - 0 - 0 https://p.hgc.host/328342 104.27.135.23
2018-08-13 19:13:29 +0200
0 - 0 - 0 https://p.hgc.host/328252 104.27.135.23
2018-08-12 23:14:39 +0200
0 - 0 - 0 https://p.hgc.host/326912 104.27.135.23
2018-08-09 06:38:28 +0200
0 - 0 - 0 https://p.hgc.host/318834 104.27.135.23
2018-08-05 18:49:13 +0200
0 - 0 - 0 https://p.hgc.host/311201 104.27.135.23
2018-08-05 17:19:40 +0200
0 - 0 - 0 https://p.hgc.host/311029 104.27.135.23
2018-08-04 03:30:21 +0200
0 - 0 - 0 https://p.hgc.host/306399 104.27.135.23
2018-08-03 09:30:22 +0200
0 - 0 - 0 https://p.hgc.host/304726 104.27.135.23
2018-07-31 16:24:45 +0200
0 - 0 - 0 https://p.hgc.host/paste.php 104.27.135.23
2018-07-31 04:18:47 +0200
0 - 0 - 0 https://p.hgc.host/paste.php 104.27.135.23

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-08-14 15:21:30 +0200
0 - 0 - 2 www.rbv.xyz/foros/f9/threads/119895-VideoGraf (...) 104.31.82.193
2018-08-14 15:20:10 +0200
0 - 0 - 0 www.geneas.review/expands-malady/ef46mB238k5q (...) 104.27.168.35
2018-08-14 15:19:20 +0200
0 - 0 - 0 piusxii.info/crane-payment-innovations.html 104.24.126.215
2018-08-14 15:18:35 +0200
0 - 0 - 0 piusxii.info/ 104.24.127.215
2018-08-14 15:16:56 +0200
0 - 0 - 2 adobedownloads.webs.com/Adobe_CS5.5_Keygen.rar 104.16.87.120
2018-08-14 15:16:07 +0200
0 - 0 - 1 www.7sultans.eu/download.casino 104.27.135.252
2018-08-14 15:16:05 +0200
0 - 0 - 1 gf.wiretarget.com/me/me-dtn.rar 104.24.98.233
2018-08-14 15:15:39 +0200
0 - 3 - 0 eu.bestrewardgivingapps.pw/ 104.28.26.10
2018-08-14 15:15:28 +0200
0 - 1 - 1 intershopoutsourcing.com/articles/view 104.27.181.174
2018-08-14 15:15:23 +0200
0 - 1 - 0 https://short1231.top/?l=nP42Tr9L 104.28.0.252

No other reports on domain: hgc.host



JavaScript

Executed Scripts (46)


Executed Evals (83)

#1 JavaScript::Eval (size: 30, repeated: 2) - SHA256: a454510a1d03abbfd568adb315e6b0f53edf1972c7eac7e5c43332425a2ceed5

                                        0,
function(D) {
    D.X(0);
}
                                    

#2 JavaScript::Eval (size: 30, repeated: 2) - SHA256: ee5559ce215b269871f2f6751f89a10690824d687ab8c653b07803ad53eb18e1

                                        0,
function(D) {
    D.X(3);
}
                                    

#3 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 05b2d901ed3e1d2d9ae88fd626cbcf0e6ad5ca2bdf7c1d260887722fce7f7028

                                        0,
function(D) {
    D.X(4);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 918b8238838e20675053b432a7f9ff232e76d5d021a1ca68133118e7019f4a38

                                        0,
function(D) {
    D.X(7);
}
                                    

#5 JavaScript::Eval (size: 38, repeated: 2) - SHA256: 8e6492fb4ee3fb67423ec3b4d2478fe68c7b0f087bed940a880b6cf7e7a201ad

                                        0,
function(D) {
    D.a && E(D, 0);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 4fb194d5f972cdaf62919cfc089993db65998ffdaa7030a82baa0868dd7313d2

                                        0,
function(D) {
    f(D, 1);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 2) - SHA256: e43ff430a24a78d673921cbbe0736f8529eaec9a9db7cc4af27ac88df52d5443

                                        0,
function(D) {
    f(D, 2);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 2) - SHA256: d722d87a88eb8d0564d2fd75bab224d1b19a8b2cf9bfde505d506d221944f47a

                                        0,
function(D) {
    f(D, 4);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 2) - SHA256: a7ca5e38c9b90c7e359386b75fb8e164ef35f629c6b1f39787675f2469f2b089

                                        0,
function(D) {
    z(D, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 19dae9c7363b0dc97a8a0a822a65eea5326754c555de28b3eafae37a9d7966a1

                                        0,
function(D) {
    z(D, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 380478bc3e920609e176e7851531f2f594f3055bc986b0f347793acff80a8514

                                        0,
function(D) {
    z(D, 4);
}
                                    

#12 JavaScript::Eval (size: 187, repeated: 2) - SHA256: d96e86342f01c9dc3a4292a10c339ff752ee4a70d981b42d75777e176231a7bd

                                        0,
function(D, a) {
    ((a.push(D[0] << 24 | D[1] << 16 | D[2] << 8 | D[3]), a).push(D[4] << 24 | D[5] << 16 | D[6] << 8 | D[7]), a).push(D[8] << 24 | D[9] << 16 | D[10] << 8 | D[11]);
}
                                    

#13 JavaScript::Eval (size: 83, repeated: 2) - SHA256: 7f71c347a559d65eff6e3a15bc756bc6e7b4e7cb6bc1629b2b3cf3298ef0d530

                                        0,
function(D, a) {
    U(D, 1, 5) || (a = e(D), g(D, a.W, a.A.apply(a.B, a.M)));
}
                                    

#14 JavaScript::Eval (size: 93, repeated: 2) - SHA256: 65a5c7299085352f943c20bb1854bc78097f6531db146e64ae3e476643bf2cb4

                                        0,
function(D, a) {
    a = D.V(), D = D.h(a), D[0].removeEventListener(D[1], D[2], false);
}
                                    

#15 JavaScript::Eval (size: 50, repeated: 2) - SHA256: 9fd2a995cdc54733123587ab87127ccbfc99008828282351773718e61b7d9ed2

                                        0,
function(D, a) {
    a = D.h(D.V()), Y(D, a);
}
                                    

#16 JavaScript::Eval (size: 517, repeated: 2) - SHA256: 02dc94bfa326add244135f8db27ab1ad2b953299c10845d68904e9c901a1894f

                                        0,
function(D, a) {
    if (this.J) {
        return D = D ? this.J().shift() : this.w().shift(), this.J().length ||
            this.w().length || (this.w = this.J = void 0, this.l--), D;
    }
    if (D = this.h(177), !(D in this.$)) {
        throw x(this, 31), this.F;
    }
    return (((void 0 == this.s && (this.s = m(this.$, D - 4), this.O = void 0), this).O != D >> 3 &&
        (this.O = D >> 3, a = [0, 0, 0, this.h(206)], this.L = r(this.s, this.O, a)), g)(this, 177, D + 1), this.$)[D] ^ this.L[D % 8];
}
                                    

#17 JavaScript::Eval (size: 125, repeated: 2) - SHA256: 2c88ba510018af2e4853ec70a0a65b16f60aabf0058043e88ec5bf3fbbb82d1b

                                        0,
function(D, a) {
    if (void 0 === (a = this.S[D], a)) {
        throw x(this, 30, 0, D), this.F;
    }
    return a();
}
                                    

#18 JavaScript::Eval (size: 90, repeated: 2) - SHA256: bdd60e6c4d6e595c008e9a621a4ff039b09b6479d55b11871b95c59882658ce0

                                        0,
function(D, a, t) {
    (a = (t = (a = D.V(), D).V(), D.S)[a] && D.h(a), g)(D, t, a);
}
                                    

#19 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 5f91d6087a801e87716b0e58de9f75b9c9ffeab225ba7f99ea9f4fe5f2fb60ed

                                        0,
function(D, a, t) {
    (t = (a = D.V(), D.V()), g)(D, t, "" + D.h(a));
}
                                    

#20 JavaScript::Eval (size: 80, repeated: 2) - SHA256: 8506b2ffa492bd516f206b005c782a853b1ba09f5f2915eab285014a0b5229c7

                                        0,
function(D, a, t) {
    (t = (a = D.V(), D.V()), g)(D, t, D.h(t) % D.h(a));
}
                                    

#21 JavaScript::Eval (size: 80, repeated: 2) - SHA256: 63b5fe4971e3b82e570b3898884b7a04e83955d71790b6bdb2b6ad9e57ef06a1

                                        0,
function(D, a, t) {
    (t = (a = D.V(), D.V()), g)(D, t, D.h(t) * D.h(a));
}
                                    

#22 JavaScript::Eval (size: 80, repeated: 2) - SHA256: 150c60faa1cad401e991c3d289d3a161a424d011084b992a1fd724215d901fe0

                                        0,
function(D, a, t) {
    (t = (a = D.V(), D.V()), g)(D, t, D.h(t) + D.h(a));
}
                                    

#23 JavaScript::Eval (size: 80, repeated: 2) - SHA256: d9079fd19f74af8e940278270b90f6fef6e72198b09fde8ef814e241cd55389c

                                        0,
function(D, a, t) {
    (t = (a = D.V(), D.V()), g)(D, t, D.h(t) - D.h(a));
}
                                    

#24 JavaScript::Eval (size: 88, repeated: 2) - SHA256: f60cc68a4a3cb1e89bd54f2721ac6aaf45b9a6d6e7db2b50722e5ebfd8a22098

                                        0,
function(D, a, t) {
    0 != (t = (a = D.V(), D).V(), D.h(a)) && g(D, 177, D.h(t));
}
                                    

#25 JavaScript::Eval (size: 123, repeated: 2) - SHA256: c4fdbed4572b1b32dce09174f7116a0b7bd000dbff4a599f14c1cb46179ec74d

                                        0,
function(D, a, t) {
    U(D, 1, 5) ||
        (a = D.V(), t = D.V(), g(D, t, function(D) {
            return eval(D);
        }(D.h(a))));
}
                                    

#26 JavaScript::Eval (size: 81, repeated: 2) - SHA256: fccb7a157434f4289b4b9a0efe4716e2c33f33c5c218a6e04208683a19d27d15

                                        0,
function(D, a, t) {
    a = (t = (a = D.V(), D).V(), D).h(a), g(D, t, K(a));
}
                                    

#27 JavaScript::Eval (size: 244, repeated: 2) - SHA256: c9aad414eb29a46ada3f5e35c2806fa47841f80f8607bd23bc40728afbc0f843

                                        0,
function(D, a, t) {
    if (3 == D.length) {
        for (t = 0; 3 > t; t++) {
            a[t] += D[t];
        }
        for (D = [13, 8, 13, (t = 0, 12), 16, 5, 3, 10, 15]; 9 > t; t++) {
            a[3](a, t % 3, D[t]);
        }
    }
}
                                    

#28 JavaScript::Eval (size: 135, repeated: 2) - SHA256: 8a614414258ee8f58e505e386a054ce6de5e4a300ebffac80b30fb750d618841

                                        0,
function(D, a, t) {
    return a = (t = function() {
        return D;
    }, function() {
        return t();
    }), a[this.C] = function(A) {
        D = A;
    }, a;
}
                                    

#29 JavaScript::Eval (size: 296, repeated: 2) - SHA256: d3f0470278edc74f3d496b806a86f56a01888ce387d934bb0d012cd19f688ecb

                                        0,
function(D, a, t, c, y, b, w) {
    if ((c = (a = D.V(), t = X(D), ""), D).S[214]) {
        for (y = D.h(214), w = y.length, b = 0; t--;) {
            b = (b + X(D)) % w, c += h[y[b]];
        }
    } else {
        for (; t--;) {
            c += h[D.V()];
        }
    }
    g(D, a, c);
}
                                    

#30 JavaScript::Eval (size: 94, repeated: 2) - SHA256: 769857cd983c469ded19abbac33b4a33d2f3fbcae82e54ab3431e1a5946943d5

                                        0,
function(D, a, t, h) {
    (h = (a = D.V(), t = D.V(), D).V(), g)(D, h, D.h(a) | D.h(t));
}
                                    

#31 JavaScript::Eval (size: 95, repeated: 2) - SHA256: 04bf411f53142d10eced15b96baca0f915db306bbc772a3655e709db401fd9cb

                                        0,
function(D, a, t, h) {
    (h = (a = D.V(), t = D.V(), D).V(), g)(D, h, D.h(a) || D.h(t));
}
                                    

#32 JavaScript::Eval (size: 101, repeated: 2) - SHA256: 375388877e50455e949f7f49be59334df214c9ede42dcbcf509318df0a9d1352

                                        0,
function(D, a, t, h) {
    (h = (a = D.V(), t = D.V(), D.V()), g)(D, h, (D.h(a) in D.h(t)) + 0);
}
                                    

#33 JavaScript::Eval (size: 202, repeated: 2) - SHA256: c775558f0a57d42c1e5ea624567ba3c37ef88348a831fcf6a9a3d1c759e7851e

                                        0,
function(D, a, t, h) {
    (t = (D &= (a = D & 4, 3), t = this.V(), h = this.V(), this.h(t)), a) &&
    (t = L(("" + t).replace(/\r\n/g, "\n"))), D && R(this, h, J(t.length, 2)), R(this, h, t);
}
                                    

#34 JavaScript::Eval (size: 93, repeated: 2) - SHA256: 83efc399b14578d8ad8e85c59aa7c4a4324ba1cebd5b7760b107120d66abb58b

                                        0,
function(D, a, t, h) {
    (t = (a = D.V(), D.V()), h = D.V(), D).h(a)[D.h(t)] = D.h(h);
}
                                    

#35 JavaScript::Eval (size: 104, repeated: 2) - SHA256: e31a0d0460268c98113f4da3b6da66e2d8882d82c3223210b3e810475c2603b0

                                        0,
function(D, a, t, h) {
    a = (h = (a = D.V(), t = D.V(), D.V()), D).h(a) == D.h(t), g(D, h, +a);
}
                                    

#36 JavaScript::Eval (size: 103, repeated: 2) - SHA256: e3578fde3ddb3abb102f77876386cf3c95462937a26d9cadf57f422ac97e9a4c

                                        0,
function(D, a, t, h) {
    a = (h = (a = D.V(), t = D.V(), D.V()), D).h(a) > D.h(t), g(D, h, +a);
}
                                    

#37 JavaScript::Eval (size: 109, repeated: 2) - SHA256: cf9c7296fa4960ed3ad4a2021fef1e31068b013cc75c09f4f6701258864eac0b

                                        0,
function(D, a, t, h) {
    a = (t = (h = (a = D.V(), t = D.V(), D.V()), D).h(t), D.h(a)), g(D, h, a[t]);
}
                                    

#38 JavaScript::Eval (size: 155, repeated: 2) - SHA256: e6987baba0e483cea9a742785b2d3a1d569ffe4f0f099c5d9287e1095a115261

                                        0,
function(D, a, t, h) {
    for (; t--;) {
        177 != t &&
            230 != t && a.S[t] && (a.S[t] = a[h](a[D](t), this));
    }
    a[D] = this;
}
                                    

#39 JavaScript::Eval (size: 247, repeated: 2) - SHA256: 846f22475acca0619509a9dcc183b2221b4e0889212c7689b2243ffaed3db49e

                                        0,
function(D, a, t, h) {
    if ((a = D.D.pop())) {
        for (t = D.V(); 0 < t; t--) {
            h = D.V(), a[h] = D.S[h];
        }
        (a[202] = D.S[202], a[213] = D.S[213], D).S = a;
    } else {
        g(D, 177, D.$.length);
    }
}
                                    

#40 JavaScript::Eval (size: 88, repeated: 2) - SHA256: 3655db52799811bb608f70b6f006a55d6075bd5d40fb4e3c8dd20facfc5d0202

                                        0,
function(D, a, t, h) {
    t = (a = D.V(), D.V()), h = D.V(), g(D, h, D.h(a) << t);
}
                                    

#41 JavaScript::Eval (size: 88, repeated: 2) - SHA256: bac12d6beb77ecc4183150873c3b4e6d2de5e39d283d4d1ab3ffb0f1f09e401f

                                        0,
function(D, a, t, h) {
    t = (a = D.V(), D.V()), h = D.V(), g(D, h, D.h(a) >> t);
}
                                    

#42 JavaScript::Eval (size: 170, repeated: 2) - SHA256: 98947f01d1491490e6779babc2fdd1370970835aae391338f13781f782a6dfd5

                                        0,
function(D, a, t, h) {
    try {
        h = D[(a + 2) % 3], D[a] = D[a] - D[(a + 1) % 3] - h ^ (1 == a ? h << t : h >>> t);
    } catch (c) {
        throw c;
    }
}
                                    

#43 JavaScript::Eval (size: 225, repeated: 2) - SHA256: 6c2bc291e13566b669c36e341a813a32b9ea04849163a26a5eba37b13581bf45

                                        0,
function(D, a, t, h, c) {
    0 !== (t = (a = (h = (t = (a = D.V(), D).V(), D.V()), D.h(a)), c = D.h(D.V()), D.h(t)), h = D.h(h), a) &&
        (h = H(D, h, c, 1, a, t), a.addEventListener(t, h, T), g(D, 96, [a, t, h]));
}
                                    

#44 JavaScript::Eval (size: 138, repeated: 2) - SHA256: f4ea1224796052e20c8df849c444a713d5e49602d0b58eaba1065bbeb4d150b6

                                        0,
function(D, a, t, h, c) {
    for (h = (t = (a = D.V(), X(D)), c = 0, []); c < t; c++) {
        h.push(D.V());
    }
    g(D, a, h);
}
                                    

#45 JavaScript::Eval (size: 130, repeated: 2) - SHA256: 9ed72ea93e3f8c1a987092e46c78131906388905f40121a417cc75f6b2f13fba

                                        0,
function(D, a, t, h, c) {
    t = (c = (t = (a = D.V(), D.V()), h = D.h(D.V()), D.h(D.V())), D).h(t), g(D, a, H(D, t, h, c));
}
                                    

#46 JavaScript::Eval (size: 403, repeated: 2) - SHA256: 0d6f631f1cfb8c7de3f203b259b4132ce6405eaaaa08dd6a7b03614632cebb9d

                                        0,
function(D, a, t, h, c, b) {
    if (!U(D, 1, 255)) {
        if (h = (t = (a = (h = (t = (a = D.V(), D).V(), D.V()), c = D.V(), D).h(a), D.h(t)), D).h(h), D = D.h(c), "object" == K(a)) {
            for (b in c = [], a) {
                c.push(b);
            }
            a = c;
        }
        for (b = (c = 0, a).length; c < b; c += h) {
            t(a.slice(c, c + h), D);
        }
    }
}
                                    

#47 JavaScript::Eval (size: 220, repeated: 2) - SHA256: 3f6cfb08cb5aca6b05d1782b7e4aee2fb25516d5fc2e3bc14538605c76d4ef2d

                                        0,
function(D, a, t, h, c, b) {
    return D = ((b = (t = (c = (h = function() {
        return h[t.P + (c[t.I] === a) - !b[t.I]];
    }, function() {
        return h();
    }), this), t).Z, c[t.C] = function(D) {
        h[t.H] = D;
    }, c)[t.C](D), c);
}
                                    

#48 JavaScript::Eval (size: 339, repeated: 2) - SHA256: 8fe4e7cd0ca17a3e6a1b5d9ed74e2bfdd65c13288f00a78242b54e88dae78762

                                        0,
function(D, a, t, h, c, b, w) {
    U(D, 1, 5) ||
        (a = e(D), c = a.A, h = a.B, t = a.M, w = t.length, 0 == w ? (b = new(h[c])) : 1 == w ? (b = new(h[c])(t[0])) : 2 == w ? (b = new(h[c])(t[0], t[1])) : 3 == w ? (b = new(h[c])(t[0], t[1], t[2])) : 4 == w ? (b = new(h[c])(t[0], t[1], t[2], t[3])) : x(D, 22), g(D, a.W, b));
}
                                    

#49 JavaScript::Eval (size: 776, repeated: 2) - SHA256: 0ca8f00ccbea64f8c4f5d8571b4d49dc660136126426f46626316cbd46ddbeb9

                                        0,
function(D, a, t, h, c, b, w, F, n, M, P, Z, k) {
    for (M = n = (b = (c = (a = D.V(), h = t = 0, function(a, A) {
            for (; h < a;) {
                t |= D.V() << h, h += 8;
            }
            return A = t & (1 << (h -= a, a)) - 1, t >>= a, A;
        }), c)(3) + 1, w = c(5), F = [], 0); M < w; M++) {
        P = c(1), F.push(P), n += P ? 0 : 1;
    }
    for (M = 0, n = (n - 1).toString(2).length, Z = []; M < w; M++) {
        F[M] || (Z[M] = c(n));
    }
    for (M = 0; M < w; M++) {
        F[M] && (Z[M] = D.V());
    }
    for (M = b, k = []; M--;) {
        k.push(D.h(D.V()));
    }
    g(D, a, function(D, a, A, t, h) {
        for (a = (A = (D.l++, t = 0, []), []); t < w; t++) {
            if (!F[h = Z[t], t]) {
                for (; h >= a.length;) {
                    a.push(D.V());
                }
                h = a[h];
            }
            A.push(h);
        }
        D.J = D.U(k.slice(), D.V), D.w = D.U(A, D.V);
    });
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 2) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#52 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 44bd7ae60f478fae1061e11a7739f4b94d1daf917982d33b6fc8a01a63f89c21

                                        H
                                    

#53 JavaScript::Eval (size: 272, repeated: 2) - SHA256: 3733ee1c4fd02d9785dcda0ff4153a00ec14645197b4d5a86402f98ad889a133

                                        H = function(D, a, t, h, c, A) {
    return function() {
        var B = h & 1,
            G = [6, a, t, void 0, c, A, arguments];
        if (h & 2) {
            var p = (I(D, G), W)(D, true, false, false);
        } else {
            B && D.j.length ? I(D, G) : B ? (I(D, G), W(D, true, false, false)) : (p = S(D, G));
        }
        return p;
    };
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#55 JavaScript::Eval (size: 487, repeated: 2) - SHA256: b17429896666b9b89e587d1c2dc2f5fe7ec966ab1b1fab7c8033ac6b5dcc756c

                                        L = function(D, a, t, h, c) {
    for (h = t = (a = [], 0); h < D.length; h++) {
        c = D.charCodeAt(h), 128 > c ? (a[t++] = c) : (2048 > c ? (a[t++] = c >> 6 | 192) : (55296 == (c & 64512) &&
            h + 1 < D.length && 56320 == (D.charCodeAt(h + 1) & 64512) ? (c = 65536 + ((c & 1023) << 10) + (D.charCodeAt(++h) & 1023), a[t++] = c >> 18 | 240, a[t++] = c >> 12 & 63 | 128) : (a[t++] = c >> 12 | 224), a[t++] = c >> 6 & 63 | 128), a[t++] = c & 63 | 128);
    }
    return a;
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac

                                        R
                                    

#57 JavaScript::Eval (size: 398, repeated: 2) - SHA256: 02d569a38c38594ad4c43d75a9e27df04c3b7bed70b7572b210973bcbd05c451

                                        R = function(D, a, t, h, c, A) {
    for (c = D.h(a), 167 == a ? (a = function(D, a, t, h) {
            if (t = (a = c.length, a - 4) >> 3, c.f != t) {
                t = (t << (h = [(c.f = t, 0), 0, 0, A], 3)) - 4;
                try {
                    c.v = r(m(c, t), m(c, t + 4), h);
                } catch (b) {
                    throw b;
                }
            }
            c.push(c.v[a & 7] ^ D);
        }, A = D.h(51)) : (a = function(D) {
            c.push(D);
        }), h && a(h & 255), h = 0, D = t.length; h < D; h++) {
        a(t[h]);
    }
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#59 JavaScript::Eval (size: 87, repeated: 2) - SHA256: c549093390e72eab080c5ff571f30c37e76e753fbfd29f5df255c6ce102541f6

                                        X = function(D, a) {
    return (a = D.V(), a) & 128 && (a = a & 127 | D.V() << 7), a;
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#61 JavaScript::Eval (size: 83, repeated: 2) - SHA256: c5f54c6851bc4ae2553f0161a82a09c2255a0d7ec8668b1a5ce1f2d4848c445f

                                        Y = function(D, a) {
    (D.D.push(D.S.slice()), D.S)[177] = void 0, g(D, 177, a);
}
                                    

#62 JavaScript::Eval (size: 2, repeated: 22) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#63 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#64 JavaScript::Eval (size: 35, repeated: 2) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#65 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#66 JavaScript::Eval (size: 265, repeated: 2) - SHA256: 553a1833d2257c0870a3b798f980deb4e411d1247d90f3ed3d36cbd32f38c0ec

                                        e = function(D, a, t, h, c, A) {
    for (A = (c = (h = ((a = {}, t = D.V(), a.W = D.V(), a).M = [], D.V() - 1), D.V()), 0); A < h; A++) {
        a.M.push(D.V());
    }
    for (a.A = D.h(t), a.B = D.h(c); h--;) {
        a.M[h] = D.h(a.M[h]);
    }
    return a;
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#68 JavaScript::Eval (size: 118, repeated: 2) - SHA256: 29b465692c6440b37f0610364dd94cc1ee167b9e279cd9e3c5786c06514e8f1f

                                        f = function(D, a, t, h) {
    for (t = D.V(), h = 0; 0 < a; a--) {
        h = h << 8 | D.V();
    }
    g(D, t, h);
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 2) - SHA256: cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29

                                        g
                                    

#70 JavaScript::Eval (size: 329, repeated: 2) - SHA256: a6935f83b4b0721e99a60554311fa4979a2a527eba5a73e83e5f7385fbd57ff4

                                        g = function(D, a, t) {
    if (177 == a || 230 == a) {
        if (D.S[a]) {
            D.S[a][D.C](t);
        } else {
            D.S[a] = D.g(t);
        }
    } else if (135 != a && 167 != a && 112 != a && 202 != a || !D.S[a]) {
        D.S[a] = D.U(t, D.h);
    }
    206 == a && (D.s = void 0, g(D, 177, D.h(177) + 4));
}
                                    

#71 JavaScript::Eval (size: 1, repeated: 2) - SHA256: acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0

                                        l
                                    

#72 JavaScript::Eval (size: 637, repeated: 2) - SHA256: 8ff2654fecbccebad2919ef88123e3db44dc5dddd93892931450f0de30fd8153

                                        l = function(D, a, t, h, c, A, B) {
    D.l++;
    try {
        for (t = (c = void 0, A = 0, h = 5001, D.$.length);
            (--h || D.K) && (D.J || (A = D.h(177)) < t);) {
            try {
                D.J ? (c = D.V(true)) : (g(D, 230, A), B = D.V(), c = D.h(B)), c && c.call ? c(D) : x(D, 21, 0, B), D.Y = true, U(D, 0, 2);
            } catch (G) {
                G != D.F && (D.h(170) ? x(D, 22, G) : g(D, 170, G));
            }
        }
        h || x(D, 33);
    } catch (G) {
        try {
            x(D, 22, G);
        } catch (p) {
            q(D, p);
        }
    }
    return (t = D.h(150), a) && g(D, 177, a), D.l--, t;
}
                                    

#73 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#74 JavaScript::Eval (size: 88, repeated: 2) - SHA256: 0009c16ad5628a1f5e37fb042b2361449f3237c977853b84f13fa58036f9e78d

                                        m = function(D, a) {
    return D[a] << 24 | D[a + 1] << 16 | D[a + 2] << 8 | D[a + 3];
}
                                    

#75 JavaScript::Eval (size: 9, repeated: 1) - SHA256: ebf49dcd836f810084c14e0f2dab4dc1768bbdc5980481bf201fcf76771dff7a

                                        navigator
                                    

#76 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#77 JavaScript::Eval (size: 366, repeated: 2) - SHA256: 5e70a5b8685757786651f4c00a7b6526a9235fe40da7dbbb091d65c709569a98

                                        r = function(D, a, t, h) {
    try {
        for (h = 0; 79669387488 != h;) {
            D += (a << 4 ^ a >>> 5) + a ^ h + t[h & 3], h += 2489668359, a += (D << 4 ^ D >>> 5) + D ^ h + t[h >>> 11 & 3];
        }
        return [D >>> 24, D >> 16 & 255, D >> 8 & 255, D & 255, a >>> 24, a >> 16 & 255, a >> 8 & 255, a & 255];
    } catch (c) {
        throw c;
    }
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 0bfe935e70c321c7ca3afc75ce0d0ca2f98b5422e008bb31c00c6d7f1f1c0ad6

                                        u
                                    

#79 JavaScript::Eval (size: 133, repeated: 2) - SHA256: 268811b9fb88cdc4eb92fbba8dd74fbd95271d8938ba1e468b8c0e61c6b4d284

                                        u = function(D, a, t) {
    return (t = D.h(177), D.$ && t < D.$.length ? (g(D, 177, D.$.length), Y(D, a)) : g(D, 177, a), l)(D, t);
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881

                                        x
                                    

#81 JavaScript::Eval (size: 439, repeated: 2) - SHA256: bfd8244b11ce5ce14e463adaa5949da545e838bbed0def3446b4f431cc7914b1

                                        x = function(D, a, t, h, c) {
    (0 == (void 0 != (a = (c = D.h(230), [a, c >> 8 & 255, c & 255]), h) &&
            a.push(h), D).h(202).length &&
        (D.S[202] = void 0, g(D, 202, a)), h = "", t &&
        (t.message && (h += t.message), t.stack && (h += ":" + t.stack)), t = D.h(213), 3 < t &&
        (h = h.slice(0, t - 3), t -= h.length + 3, h = L(h.replace(/\r\n/g, "\n")), R(D, 167, J(h.length, 2).concat(h), 12)), g)(D, 213, t);
}
                                    

#82 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#83 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 00082403c38211031b44ba75e84a4d45df63d4207f0f4d8bcf64d35b85d72d72

                                        z = function(D, a, t, h) {
    t = D.V(), h = D.V(), R(D, h, J(D.h(t), a));
}
                                    

Executed Writes (5)

#1 JavaScript::Write (size: 633, repeated: 1) - SHA256: 65f0d8ac6e9cb6137be25f745070da58b7cea63147c895870790fbb6cafb0db0

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-2987126323848558"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180611/r20180604/zrt_lookup.html#" > < /iframe><script>google_pub_vars=window.parent['google_sv_map']['aswift_0'];google_iframe_start_time=new Date().getTime();google_async_iframe_id="aswift_0";</script > < script > window.google_process_slots = function() {
    window.google_sa_impl({
        iframeWin: window,
        pubWin: window.parent
    });
}; < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180611 / r20180604 / show_ads_impl.js "></script></body></html>
                                    

#2 JavaScript::Write (size: 429, repeated: 1) - SHA256: 5b016be0cef3fc4af5a866dd4a03fcb6449c2d9e87509b0f2e35d49a063ffc45

                                        < !doctype html > < html > < body > < script > google_pub_vars = window.parent['google_sv_map']['aswift_1'];
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_1"; < /script><script>window.google_process_slots=function(){window.google_sa_impl({iframeWin: window, pubWin: window.parent});};</script > < script src = "https://pagead2.googlesyndication.com/pagead/js/r20180611/r20180604/show_ads_impl.js" > < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 54, repeated: 2) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#4 JavaScript::Write (size: 1386, repeated: 1) - SHA256: 5d8b351653df816b9cee2eaeb497e47906d42a85ba04ec91ea7cc0aec8401c5a

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "1106"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&amp;output=html&amp;h=90&amp;slotname=3379809525&amp;adk=2397306331&amp;adf=807048394&amp;w=1106&amp;fwrn=4&amp;fwrnh=100&amp;lmt=1528921019&amp;rafmt=1&amp;guci=1.2.0.0.2.2.0&amp;format=1106x90&amp;url=https%3A%2F%2Fp.hgc.host%2F158180&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;rh=0&amp;rw=1106&amp;resp_fmts=3&amp;wgl=0&amp;adsid=NT&amp;dt=1528921019969&amp;bpp=141&amp;fdt=154&amp;idt=899&amp;shv=r20180611&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;correlator=7726839343877&amp;frm=20&amp;pv=2&amp;ga_vid=422449240.1528921021&amp;ga_sid=1528921021&amp;ga_hid=510829851&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=35&amp;ady=673&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=368226400%2C21061122%2C828064255&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;dtd=1354"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#5 JavaScript::Write (size: 1411, repeated: 1) - SHA256: dbe3f6edba8682c1db91b3be6972a621023b533b03ecdd68031341159bd612e0

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "1059"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&amp;output=html&amp;h=90&amp;slotname=3379809525&amp;adk=1392416136&amp;adf=807048394&amp;w=1059&amp;fwrn=4&amp;fwrnh=100&amp;lmt=1528921019&amp;rafmt=1&amp;guci=1.2.0.0.2.2.0&amp;format=1059x90&amp;url=https%3A%2F%2Fp.hgc.host%2F158180&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;rh=0&amp;rw=1059&amp;resp_fmts=3&amp;wgl=0&amp;adsid=NT&amp;dt=1528921020466&amp;bpp=34&amp;fdt=911&amp;idt=1102&amp;shv=r20180611&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=1106x90&amp;correlator=7726839343877&amp;frm=20&amp;pv=1&amp;ga_vid=422449240.1528921021&amp;ga_sid=1528921021&amp;ga_hid=510829851&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=50&amp;ady=1372&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=368226400%2C21061122%2C828064255&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=1162"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (57)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 12 Jun 2018 11:24:59 GMT
Etag: 4125CED40DB86401BF888C6B582B9A44D3AA9315
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 280
Cache-Control: public, no-transform, must-revalidate, max-age=1748
Expires: Wed, 13 Jun 2018 20:46:06 GMT
Date: Wed, 13 Jun 2018 20:16:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   280
Md5:    44c34a2ec53c0d364dc370c646e0c62f
Sha1:   4125ced40db86401bf888c6b582b9a44d3aa9315
Sha256: 69ddec4822f0a9661f045a9a6a64449d6e95089507775cec0f2cdb4623b16efe
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 12 Jun 2018 01:16:20 GMT
Etag: 5C5063D02D7F0CC9E2FEDB13F269E70D01D6D352
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 313
Cache-Control: public, no-transform, must-revalidate, max-age=780
Expires: Wed, 13 Jun 2018 20:29:58 GMT
Date: Wed, 13 Jun 2018 20:16:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   313
Md5:    2d854403e13826e5d83f8ece896ea3e2
Sha1:   5c5063d02d7f0cc9e2fedb13f269e70d01d6d352
Sha256: 126a9c178e1d62caace2fa38037ce4cd73efe1dbab6e05e9b3145f2219f27d38
                                        
                                            GET /158180 HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Content-Length: 4299
Connection: keep-alive
Set-Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; expires=Thu, 13-Jun-19 20:16:59 GMT; path=/; domain=.hgc.host; HttpOnly PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf17c034279-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4299
Md5:    b86d837a31a010bd92ec9bd9e4770db4
Sha1:   55ee6c02e011c64c893fb78aaf53366f2774c40f
Sha256: bb2c53b564a31ea3383dc574f3d308a685c8948d99cf1dafe883f76e1c17bc6a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    de323b14e46f5db34962d90fe4b7e8d8
Sha1:   1733cbb8b675232edf41287dba54d2a8cd647886
Sha256: 3e40e1db5434d2312cb969fb0c7f9482e74c9183665867b87109713635c6a575
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /theme/default/css/paste.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Content-Length: 277
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: "267-5678f70f1c8a0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf2dd0a4279-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   277
Md5:    845b120e209848c2d674889982d88bf1
Sha1:   9b2ecddeaf0a93cc2cdedb06d3c89526885f4e43
Sha256: a5d3167df12cbb7e8a186f6990605105b179944162fa88825a7b6e46b7db35c7
                                        
                                            GET /theme/default/img/favicon.ico HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Content-Length: 15086
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: "5aac4a50-3aee"
X-Powered-By: PleskLin
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf32dbe429d-OSL


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 16x16, 256-colors
Size:   15086
Md5:    90ca5b1ac561cdf1fa1808cba6b8f839
Sha1:   c8d858a21bf3196d1e17555350526bae8a9de535
Sha256: 73269d45efa7f09109cf542f5ecf2cd990102bed31993829a7d1559d176c73e3
                                        
                                            GET /theme/default/js/bootstrap.min.js HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-8a7c"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf33e644291-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9431
Md5:    b34667735bf7aa53a7aa8992385d78b5
Sha1:   5d3a5c958992288de59cd489eb54795f1a464c06
Sha256: 2006dfde1be03913dab705f2801256801697cf5285ebe35930428fb0dde8b456
                                        
                                            GET /theme/default/js/jquery.min.js HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-1762a"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf33f2442c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33341
Md5:    b145564de05bec4340fdeb156f87cf24
Sha1:   4653d9b998797216d2911160c4d592a49319d965
Sha256: ee6f48ea8ea31e4d951bf20b36fd925b833d458aaeeeec11fc4d7c4f9dc067b0
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Wed, 13 Jun 2018 20:16:59 GMT
Expires: Wed, 13 Jun 2018 20:16:59 GMT
Cache-Control: private, max-age=3600
Etag: 12108382685569607246
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27262
Md5:    9f924d81366f65c4c37618c1623ef9e5
Sha1:   e6a59cc775f13771dc8b3a2ebabaecf673d31734
Sha256: 8aeec05108863aadfec0e5b89a81efa5bdeac3ba4b54997dd409623cc35e9e6c
                                        
                                            GET /theme/default/js/paste.js HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-1996"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf33eb4427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1909
Md5:    225618a9e3ba8c4889f5e5497f490540
Sha1:   e363fa1f15b52737391951af05162e1e10c75194
Sha256: 1297a6a90af772d4cd29ecfc28fd3ef0b35de49fe4d16d9c6bf9943715504427
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    72e7e5646d6c66b5026caca4c7c94672
Sha1:   0ff7284a7b1248a463956813151afd69a6a8a1ab
Sha256: 77779e9bd6f00888a27850397e75d8b8f9f80ae824e788be8692ee059a5816b6
                                        
                                            GET /theme/default/js/jquery-ui.min.js HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-3ab2b"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf41dc34279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   64525
Md5:    a883bea6f01bfe933ed9f0df25c9bcd5
Sha1:   2eda43b039e5d258f8decd750c0143c3a4ba185d
Sha256: 321b7716e424f7ce24081319e16d195ecbade1cdfd3d302f0713b4625be4f2ac
                                        
                                            GET /theme/default/js/datatables.min.js HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-13485"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf42e49429d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26811
Md5:    26034dfcfab2625cd4a600cdcf32dd8f
Sha1:   92ca81c4cd18a4512c0e870b138094b7f7d954e9
Sha256: 588758381f2682565090dc112e44d076b86b2e7e3a51afc3f48bde37d053c66f
                                        
                                            GET /theme/default/js/bootstrap-select.js HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-ab9a"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf348e642b5-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10184
Md5:    09d0d8c39f9c315bbd364ce60c8ad23a
Sha1:   4f59acbf8af201d772f0fd39bccc04b17e91725f
Sha256: ff24c9e1f636dfe814140156e129e19fb03e14ee1eab8d038945dc76dcdabc27
                                        
                                            GET /theme/default/css/style.min.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-95fe"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf4c8a442c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7278
Md5:    aadb585b854f75572a6823271a4b5269
Sha1:   e63b2174a8035193752151a6f994342e70975d39
Sha256: 1bf949772ece4ac1615f5697227d90c401070554a1810814d2ada4f6dfb7653e
                                        
                                            GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,600,700,800,300 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Wed, 13 Jun 2018 20:16:59 GMT
Date: Wed, 13 Jun 2018 20:16:59 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   381
Md5:    3adc4f9893cf44390b3d1787784dbf33
Sha1:   7213fd985728d53b24ab73fbc15579939401f333
Sha256: 1c55421e4186e85ede2782d82c10f707e2b941cd316cdfbe1df1a9a234457071
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6dcd55ee3be377509e7ab1074bcfbfcc
Sha1:   984038f25c8b096b8c9ccc180133695dbb1d7544
Sha256: c2294d285b251750ed43f7a3aa7c921958c193c5b3ca09afab2a2bc64e1b17aa
                                        
                                            GET /theme/default/css/bootstrap.min.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-1bc2d"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf4d8004291-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19092
Md5:    15a1f011816f8cce8ae22d5522a90de0
Sha1:   16626c2e0b3a4b88d7535e53849884c10ed9020e
Sha256: 4b3eed018294d9f9b4c79d30dc0288665c02dff8ea9465cfe107ac5ca96ccb5e
                                        
                                            GET /theme/default/css/plugins/datatables.min.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-36de"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf58f15429d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2100
Md5:    9eecda83190ed2fa971aa0dfc95d7bb6
Sha1:   d75676d5dda8f8db0635816610aa58e5af7cee47
Sha256: 4bd6fecc9159c94d017f10d715f9bb28e3409282a85489715068f522e0ab00b0
                                        
                                            GET /theme/default/css/plugins/bootstrap-checkbox.min.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-9e9"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf59b1342b5-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   676
Md5:    8aa825868ebaafca9ddc2cf8227890ce
Sha1:   5bcc8a3ea5920f70a593f532bb46c628d0f6e633
Sha256: 331e8765525d9437905c0e5236ac2ac37d54dd47326125027e79a20c6024c672
                                        
                                            GET /theme/default/css/responsive.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Content-Length: 278
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: "272-5678f70f1d83f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf598a6427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   278
Md5:    b6b3150de4a3aa4ff26be0a88aa444d5
Sha1:   c049f475f5e023c6ca5cf48581a2b2d2c9d0ac0b
Sha256: b1f014577b049f871731382680589d810656f9808122a4b608e214d5f9d7e7dc
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c3015b5e841e79ff8fa29de55492a4e3
Sha1:   1b2a55c2d09185d5a47adb5608ec745a39e2e9f8
Sha256: a60d64b50c8076350f42e0889b21f73049caa1ddccca6eae46d2a8a6501de98e
                                        
                                            GET /theme/default/css/plugins/font-awesome.min.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-7175"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf57f074279-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6495
Md5:    d7d2f1e830eee219dc223cd82b965b77
Sha1:   5e5018f09176f0516cf221e9cd4032f7f1d90732
Sha256: f41098f4fe22f2eced6cdc42e17c4fc4025178dcf974342ab6270497a70c99e8
                                        
                                            GET /theme/default/css/plugins/bootstrap-select.min.css HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/paste.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 13 Jun 2018 20:16:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-1543"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf5a96942c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1414
Md5:    97b05958e86cdf5d6f153dd145b31600
Sha1:   78a90e95b3eccc737295fa57f5549b6c2e952026
Sha256: b0d9380161f83653e2a7284b18b39d02649b4676bd068c0b97475b7239ee31b4
                                        
                                            GET /adsid/integrator.js?domain=p.hgc.host HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Wed, 13 Jun 2018 20:16:59 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /adsid/integrator.js?domain=p.hgc.host HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Wed, 13 Jun 2018 20:17:00 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /pub-config/r20160913/ca-pub-2987126323848558.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Wed, 13 Jun 2018 20:17:00 GMT
Expires: Thu, 14 Jun 2018 08:17:00 GMT
Last-Modified: Tue, 12 Jun 2018 21:26:45 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /pagead/js/r20180611/r20180604/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Wed, 13 Jun 2018 20:17:00 GMT
Expires: Wed, 13 Jun 2018 20:17:00 GMT
Cache-Control: private, max-age=1209600
Etag: 2143114672394216226
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   70164
Md5:    432310569cbd2c838e3fc3daa7998193
Sha1:   8e4428649d08df74cbafc9086fac82497568d036
Sha256: 86391ae53d7bc5ec75d91b430efcf6ec8039c06741a350f50ed674b42cb4d964
                                        
                                            GET /theme/default/css/plugins/fonts/fontawesome-webfont.woff?v=4.6.3 HTTP/1.1 
Host: p.hgc.host
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/theme/default/css/plugins/font-awesome.min.css
Cookie: __cfduid=df4034e3830bc6f0f6a20fa02e4374d521528921019; PHPSESSID=9cp39sffh3q2ro8ribkb3s5om2

                                         
                                         104.27.135.23
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Wed, 13 Jun 2018 20:17:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 22:50:56 GMT
Etag: W/"5aac4a50-1612c"
X-Powered-By: PleskLin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a73cf92d6c4291-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   90376
Md5:    93ddcd2166577989c22bfe10080bb466
Sha1:   cdf3c2df6adbbce0731fc993e615c52532b1b472
Sha256: 68f8f4177414c707c5c1a8e9a9d9430bf689e96bbc80364b8455d443d13345ae
                                        
                                            GET /pagead/html/r20180611/r20180604/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 12 Jun 2018 19:16:06 GMT
Expires: Tue, 26 Jun 2018 19:16:06 GMT
Etag: 4726315756816018096
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6958
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 90055
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6958
Md5:    10e890f6add5412ceb6551110efc6a5a
Sha1:   2931281ad4cc4612fc4f51d293476b6447d24df0
Sha256: 7b9de2bf9579846089a25c5cc861e2de3e7b91f3867e528478a7badb2f6da1f0
                                        
                                            GET /pagead/js/r20180611/r20180604/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 12 Jun 2018 02:16:04 GMT
Expires: Tue, 26 Jun 2018 02:16:04 GMT
Etag: 274352813981526987
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26561
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 151257
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26561
Md5:    07f7f48721c133d6aa4d970d83de8228
Sha1:   3512b4e7fbcd7e1e6393184f2b811b61652a9348
Sha256: 87891c09a14c6a66eb04a176177cbe0d58350e465d63970ee5b33a33b1870f14
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:17:01 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6937857e5c2eba15945960e6a8ecfc90
Sha1:   bdb49b35ec08757f77a09a2c2851009932f5ef76
Sha256: 31a0c754ce6b4f29908271691845ae471f7e007e3a03ad6c1af8c0a1a21d7936
                                        
                                            GET /pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Wed, 13 Jun 2018 20:17:01 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 13-Jun-2018 20:32:01 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Wed, 13 Jun 2018 20:17:01 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21778
Md5:    38eb8c573b19f3fe51aff0d84d45887b
Sha1:   9d32544a2d0ada9dcf33f76ce68c57bf23be8d95
Sha256: 9f033c1e0296185a24576cceb1b0284265c99a7d4dd7e620960c1e4ff0dee0bd
                                        
                                            GET /pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=2397306331&adf=807048394&w=1106&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1106x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1106&resp_fmts=3&wgl=0&adsid=NT&dt=1528921019969&bpp=141&fdt=154&idt=899&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&correlator=7726839343877&frm=20&pv=2&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=35&ady=673&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=1&dtd=1354 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Wed, 13 Jun 2018 20:17:01 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 13-Jun-2018 20:32:01 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Wed, 13 Jun 2018 20:17:01 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18214
Md5:    89e769a47cf695b9e67d5e08aa1f38df
Sha1:   abea2386bca419cbd8d21edb0b8ec315fb6e7230
Sha256: 398d8b5453ab34e4709dc30987b1ee8c33a762241d78cdbe1d6b2e0187b245a3
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 13 Jun 2018 18:58:51 GMT
Expires: Wed, 13 Jun 2018 20:58:51 GMT
Last-Modified: Fri, 18 May 2018 01:10:24 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14386
Cache-Control: public, max-age=7200
Age: 4691
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14386
Md5:    b3de885583a477d4e31568948d6bebd7
Sha1:   2ce8d853244dde551c41d5207d6f71c567bde8c6
Sha256: e1bb5aa555a0d875e2a67884ceaa0629e08994a8aabadc2fac5b6915793dbf75
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:17:02 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a5f4153d9dea95e7efb6bd90d3f2793c
Sha1:   7dc5379c3f41b0731ebe010eeb30594598687bec
Sha256: 9b0c3dd7a46a2352e4b60f3486eb6e174db446c3d72196899d5edfe6a597dacc
                                        
                                            GET /pagead/adview?ai=C5eS4vXshW6vPLJSUywXqkLn4BOHG0ZBS0sGdorYH_a-Q88sJEAEg_5KgJWDD3KSFmBigAZybiMADyAECqAMByAPJBKoEkgFP0N0fh-L7fBv2Q-nGqluNKf8RMVFOViLKQMiEG-oqfhU-8ZH6QkC9vbV0WLWjLVEgZ-0EEDRs4r8WCLvx0Sj1aSjq4pggwmBjli5VwWA2yWgESAy4ewXGfyzKHTEP7raQPFF6Mf1Q62zuZYkR0BJLLCpFaAq_XJCC-mNv1U0BeTz-rnsEWEA_EoFrCU8f80ujZsAEgO6g6OkBkgUECAQYAZIFBAgFGASSBQQIBRgYkgUFCAUYqAGgBgKAB8zk9z-oB47OG6gHjc0bqAfVyRuoB9nLG6gHz8wbqAemvhuoB5jOG6gH6c0b2AcB8gcEEIDWAdIICQiA4YAQEAEYAoAKAdgTDA&sigh=aabuFrJIwfE&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=2397306331&adf=807048394&w=1106&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1106x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1106&resp_fmts=3&wgl=0&adsid=NT&dt=1528921019969&bpp=141&fdt=154&idt=899&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&correlator=7726839343877&frm=20&pv=2&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=35&ady=673&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=1&dtd=1354
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 13 Jun 2018 20:17:02 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUl_dQL0K-gUxmgsxXRjTi3QOVLM3hBeTm7Z8mDOEBs-TH60y2cI66xijz6D; expires=Fri, 12-Jun-2020 20:17:02 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Wed, 13 Jun 2018 20:17:02 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=CXthPvXshW9LIKNWIygX-iYr4BL-_o7hNjMLAm_MGwI23ARABIP-SoCVgw9ykhZgYoAHT27SjA8gBAqgDAcgDyQSqBJEBT9Cn5ivJT9wyHR6-k8xXuZTPYeNNV0kSCEBpBWqcm-mmIJaJlLy2qigNf-FBwLTNh_hH5VaGAq3ySfofSMmkqBbrUAHOSAfcaLKYY9pQYTR8sEsw12jjmtzirsSSlk8fj6yZcJcgbeWDHxW3P6WcRFVhHJBMLHzmmS-W3Y-LtY99FwJZ-zE-6_akXDSRlJDbr8AE6-aLnaUBkgUECAQYAZIFBAgFGASgBgKAB5Wky1yoB47OG6gHjc0bqAfVyRuoB9nLG6gHz8wbqAemvhuoB5jOG6gH6c0b2AcB8gcDEJl10ggJCIDhgBAQARgCgAoB2BMM&sigh=DCOgiWMAD84&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 13 Jun 2018 20:17:02 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnwWhm5DbNi3rPZYqk_VfUXFZHOcgW7DNBqdPIE450_jl0LlMvygiXct9tn; expires=Fri, 12-Jun-2020 20:17:02 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Wed, 13 Jun 2018 20:17:02 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /simgad/2207302194795979580?sqp=4sqPyQQlQiMqIQhaEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBacAJ4AQ&rs=AOga4qmC3IG-rc0BJmzHHlxrCFy9Kk5-IA HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=2397306331&adf=807048394&w=1106&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1106x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1106&resp_fmts=3&wgl=0&adsid=NT&dt=1528921019969&bpp=141&fdt=154&idt=899&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&correlator=7726839343877&frm=20&pv=2&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=35&ady=673&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=1&dtd=1354

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 7788
Date: Tue, 05 Jun 2018 22:56:07 GMT
Expires: Wed, 05 Jun 2019 22:56:07 GMT
Last-Modified: Sun, 12 Nov 2017 00:42:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 681655
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  PNG image, 728 x 90, 8-bit colormap, non-interlaced
Size:   7788
Md5:    5cc9a22c6b387dc28f235781303c9e37
Sha1:   9a177c3dc0e979c7e66324db360557cf11b1da99
Sha256: 45ead0e03b61ef9a8cf84eef3de7313cc6b621f72d1cf608b52cb913b004341f
                                        
                                            GET /r/collect?v=1&_v=j68&a=510829851&t=pageview&_s=1&dl=https%3A%2F%2Fp.hgc.host%2F158180&ul=en-us&de=UTF-8&dt=%40Live%40%20streaming%20FIFA%20world%20cup%202018%20opening%20ceremony%20-%20HGC%20Paste&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAEQ~&jid=693774608&gjid=958578583&cid=422449240.1528921021&tid=UA-54062376-7&_gid=884038998.1528921022&_r=1&z=889707161 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://p.hgc.host/158180

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Wed, 13 Jun 2018 20:17:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /simgad/11483089395888372895?sqp=4sqPyQQlQiMqIQhaEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBacAJ4AQ&rs=AOga4qkKZmqt3KY9k2crWwJ4DIS65uKTAA HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 6421
Date: Tue, 29 May 2018 23:39:36 GMT
Expires: Wed, 29 May 2019 23:39:36 GMT
Last-Modified: Mon, 11 Dec 2017 11:15:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1283846
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  PNG image, 970 x 90, 8-bit colormap, non-interlaced
Size:   6421
Md5:    d0654502915fd60a9597a5d27e8d5770
Sha1:   33b756471f604cca41ed4f9aade0c46c76a1f758
Sha256: 320bd8da88365201fc803d84bc8e0b98d3e16878e5c8e402b8c44ec68ac000b2
                                        
                                            GET /pagead/js/r20180611/r20110914/abg_lite.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 11 Jun 2018 13:46:52 GMT
Expires: Mon, 25 Jun 2018 13:46:52 GMT
Etag: 9436329933104245881
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 13072
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 196210
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13072
Md5:    edd850e650113e545db75ede8a46e2c6
Sha1:   9713da0b0615f7f9e4725e1c236c169558a9c4c0
Sha256: 1ef1a75fd8eb819f45ab1d1a107c130f8382bca75a57eb064c8670b59cebd31a
                                        
                                            GET /pagead/js/r20180611/r20110914/client/ext/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 11 Jun 2018 13:46:52 GMT
Expires: Mon, 25 Jun 2018 13:46:52 GMT
Etag: 3934311557058548375
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 13185
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 196210
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13185
Md5:    04a45386b173a7fffdcf190baa09ada7
Sha1:   69897c7e11c34a77bc798b3dd3f86b5b7a88b442
Sha256: 06a7b5b6868bc0ccc08cfff97cfb70793061bf49a05fab90bf814d26ec4085ae
                                        
                                            GET /pagead/images/transparent.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Wed, 13 Jun 2018 17:33:04 GMT
Expires: Thu, 14 Jun 2018 17:33:04 GMT
Etag: 2462972746714251406
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Age: 9838
Cache-Control: public, max-age=86400
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   67
Md5:    3f318b569cc43578a73d1c38270b6857
Sha1:   244717a495885a727dc67313ebb1ef7b447dfe7d
Sha256: bdf72009ad226c17f1954ba602292902a780b80af07dbcbab1322bdf5c32be66
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162
Cookie: IDE=AHWqTUnwWhm5DbNi3rPZYqk_VfUXFZHOcgW7DNBqdPIE450_jl0LlMvygiXct9tn

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Wed, 13 Jun 2018 20:15:57 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 65
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            GET /pagead/js/r20180611/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 11 Jun 2018 13:46:52 GMT
Expires: Mon, 25 Jun 2018 13:46:52 GMT
Etag: 14617486786606014518
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1411
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 196210
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1411
Md5:    f51c071c9eeb9d0678ac063662ddc878
Sha1:   812c5a75d191bf5051671bd4914c10dab4d4e263
Sha256: e6e6a383d70030372a488b9f1945c32332e9b489d465c0c4eb71d59da20711da
                                        
                                            GET /pagead/js/r20180611/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 11 Jun 2018 13:55:58 GMT
Expires: Mon, 25 Jun 2018 13:55:58 GMT
Etag: 12203368232420338792
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3669
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 195664
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3669
Md5:    32a5ef33f8102ba0e7aed277ab63454a
Sha1:   1b97e6087ca5baed3d14d9cbe26ecc3fdc325722
Sha256: c1ddfbc4e4eddb3ea522ccb72a58e956033ecce01b4b6195f5da114d73e58edf
                                        
                                            GET /pagead/js/r20180611/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 12 Jun 2018 19:50:14 GMT
Expires: Tue, 26 Jun 2018 19:50:14 GMT
Etag: 15402718609408364443
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25937
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 88008
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25937
Md5:    a4433fee34d9e06b9fb78a91277ea033
Sha1:   2a9e8bb61fca2798b10410b1b36aad63da11e9e7
Sha256: eda353e77ab734ffcedddadc711e3bdf13eb15c388c228cbeba75ceebbaf8e7d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:17:02 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c457f2e9cd5600c1a65a9dc3d664f064
Sha1:   08ce09992f764d79feff3f05bc0b0bb7d6a436a9
Sha256: d2a71e359b5e2dc13b086f677c27fb228ccb9160d95f9b722fd37010051639d5
                                        
                                            GET /pcs/activeview?xai=AKAOjsseIQji_ueRsnLOiec74FO29nJILiCTqImbmvp2kPUuVx5jWGWM-BL4zyL5vAfAyL9_PnuXjvpCw4zaei8jTbXoZxCu7mtvq8wQBCnOBUSj15l8YJSNZGDHSP0&sig=Cg0ArKJSzBkUf0xwoOZjEAE&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180611 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=2397306331&adf=807048394&w=1106&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1106x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1106&resp_fmts=3&wgl=0&adsid=NT&dt=1528921019969&bpp=141&fdt=154&idt=899&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&correlator=7726839343877&frm=20&pv=2&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=35&ady=673&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=1&dtd=1354

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Wed, 13 Jun 2018 20:17:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pcs/activeview?xai=AKAOjstgE6GNlt2l2vNZnagVwIg1pfnbNGrurrHnveR1Y56VcuiLqilasfqfeCGBgoSexMD7TBLELSUmvPMndQENMsAcmt6M_bcI75n8NmHjTvu7OqR-8sH-nUe8bDU&sig=Cg0ArKJSzDIrKeaQU63dEAE&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180611 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Wed, 13 Jun 2018 20:17:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.4
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Wed, 13 Jun 2018 20:17:02 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUnwWhm5DbNi3rPZYqk_VfUXFZHOcgW7DNBqdPIE450_jl0LlMvygiXct9tn

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Wed, 13 Jun 2018 20:17:02 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Wed, 13-Jun-2018 21:17:02 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Wed, 13 Jun 2018 20:17:02 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.4
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Wed, 13 Jun 2018 20:17:02 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /bg/3dX1aOKXfarloHg2zRLzGm5Q3Hj9XSvcyE_QKpYX3J0.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2987126323848558&output=html&h=90&slotname=3379809525&adk=1392416136&adf=807048394&w=1059&fwrn=4&fwrnh=100&lmt=1528921019&rafmt=1&guci=1.2.0.0.2.2.0&format=1059x90&url=https%3A%2F%2Fp.hgc.host%2F158180&ea=0&flash=10.0.45&fwr=0&rh=0&rw=1059&resp_fmts=3&wgl=0&adsid=NT&dt=1528921020466&bpp=34&fdt=911&idt=1102&shv=r20180611&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=1106x90&correlator=7726839343877&frm=20&pv=1&ga_vid=422449240.1528921021&ga_sid=1528921021&ga_hid=510829851&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=50&ady=1372&biw=1159&bih=754&scr_x=0&scr_y=0&eid=368226400%2C21061122%2C828064255&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=144&bc=1&ifi=2&dtd=1162

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4983
Date: Tue, 12 Jun 2018 17:22:36 GMT
Expires: Wed, 12 Jun 2019 17:22:36 GMT
Last-Modified: Mon, 04 Jun 2018 10:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 96866
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4983
Md5:    718af2a0a87375cd6eaa0b448909b04e
Sha1:   35f1a2b6eb72d7d128e780dd903f8a1061a83f1a
Sha256: 3c845f2c761ef6f23ea2872171cdcd0cdec06453b6ae96d989405f6a884110c2
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUnwWhm5DbNi3rPZYqk_VfUXFZHOcgW7DNBqdPIE450_jl0LlMvygiXct9tn; DSID=NO_DATA

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Wed, 13 Jun 2018 20:17:02 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Wed, 13-Jun-2018 21:17:02 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Wed, 13 Jun 2018 20:17:02 GMT
Cache-Control: private


--- Additional Info ---