Overview

URL mondovi.wifeo.com/
IP194.146.225.153
ASNAS13193 Nerim SAS
Location France
Report completed2018-02-13 14:11:06 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-02-13 2 cdn.minescripts.info/c/NDj2.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 5 reports on IP: 194.146.225.153

Date UQ / IDS / BL URL IP
2018-06-25 15:36:09 +0200
0 - 0 - 4 www.lechaletdeno.com/ 194.146.225.153
2018-02-13 15:40:18 +0100
0 - 0 - 1 www.groupefolkloriquepontevallois.com/nos-cos (...) 194.146.225.153
2018-02-13 14:56:34 +0100
0 - 0 - 1 michaelnativel.wifeo.com/ 194.146.225.153
2018-01-26 00:28:27 +0100
0 - 0 - 0 www.universal-led.com 194.146.225.153
2017-11-10 15:02:27 +0100
0 - 0 - 2 lescherokeesdancers.wifeo.com/liens.php 194.146.225.153

Last 10 reports on ASN: AS13193 Nerim SAS

Date UQ / IDS / BL URL IP
2018-12-08 10:50:15 +0100
0 - 0 - 0 www.pearltrees.com/varypro#item243303849 93.184.35.40
2018-12-06 16:13:00 +0100
0 - 0 - 1 ddec06.com/adri06/wp-content/plugins/bbpress/ (...) 93.184.35.226
2018-12-04 19:14:31 +0100
0 - 2 - 4 toulouseweb-coquin.com/annonces-coquines/renc (...) 194.242.114.96
2018-11-27 00:22:23 +0100
0 - 2 - 4 toulouseweb-coquin.com/annonces-coquines/renc (...) 194.242.114.96
2018-11-24 21:00:23 +0100
0 - 0 - 0 www.securite-sociale-infos.net/ 213.41.149.211
2018-11-22 17:03:10 +0100
0 - 0 - 0 lmsoleil.com/counter.php 93.184.35.226
2018-11-19 23:45:06 +0100
0 - 0 - 4 toulouseweb-coquin.com/annonces-coquines/renc (...) 194.242.114.96
2018-11-15 15:00:29 +0100
0 - 0 - 1 accroforum.com/galerie_portraits/big/DB/dropb (...) 93.184.35.226
2018-11-13 17:47:29 +0100
0 - 2 - 0 www.teampartageecran.fr/luckyornot.sct 80.248.208.244
2018-11-13 04:00:18 +0100
0 - 0 - 1 cerides-ucaoisg.sn/images/news/searche/home-r (...) 78.40.54.8

No other reports on domain: wifeo.com



JavaScript

Executed Scripts (60)


Executed Evals (86)

#1 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 7a8c20ef55544a4104ff81127b414d36132dd8d896f498d2df40bee78140bb35

                                        0,
function(Z) {
    B(Z, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 2e588a2a5d3c27665ca10b42d6a170e528f32d2de2959a380de0275c1ade93e1

                                        0,
function(Z) {
    B(Z, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 4653c9b649ed897e5fece4329f4b737fafea3f19f0fc0fb5224d93d1bf92a4d7

                                        0,
function(Z) {
    B(Z, 4);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 1) - SHA256: d6e127bd29297c747026ff32276a64f4179fd295c7fcfe49eeda3061f4c6f970

                                        0,
function(Z) {
    Z.H(0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: ecc26fcbaef854185d8c80dd67ac1b1f388b538989d24d9d55b6147962b6a9cf

                                        0,
function(Z) {
    Z.H(3);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 346c56538a3b8be715810bbc10574cd48a46fb6f1f7edee874c7f684f2de51c2

                                        0,
function(Z) {
    Z.H(4);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: c8ad7eba57c7193378696817bc2908e55047cc109b1143dbfe2877983ad9a846

                                        0,
function(Z) {
    Z.H(7);
}
                                    

#8 JavaScript::Eval (size: 38, repeated: 1) - SHA256: c5169478f0eb7739c404bee77ab1bf0172a3388b044475e06a4cb7e68bca2847

                                        0,
function(Z) {
    Z.K && d(Z, 0);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: d6a70c0fa32cf217273c52ada9f43efb53b7a2f8c206e6fb75727bdc1fa7c049

                                        0,
function(Z) {
    m(Z, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: f84b2ef24cd61663af1055023a92cea54c187bc816014f49ac3c550e6a472b8d

                                        0,
function(Z) {
    m(Z, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: d4769cdffe17ea14780900fe66717ac659ef34b9ca2799aff7ba06f37d1cfd37

                                        0,
function(Z) {
    m(Z, 4);
}
                                    

#12 JavaScript::Eval (size: 95, repeated: 1) - SHA256: bb5de887a71abeb9160b11cef4ca96347d43764da2f53cd2d4eeed902fb75902

                                        0,
function(Z, u) {
    Z = (u = Z.D(), Z.g(u)), Z[0].removeEventListener(Z[1], Z[2], false);
}
                                    

#13 JavaScript::Eval (size: 513, repeated: 1) - SHA256: 00b13489cf4933e25a1fb6f23d63ba666af186823feb121b5b31db658b2b2dc9

                                        0,
function(Z, u) {
    if (this.w) {
        return Z = Z ? this.w().shift() : this.U().shift(), this.w().length ||
            this.U().length || (this.U = this.w = void 0, this.V--), Z;
    }
    if (!(Z = this.g(240), Z in this.l)) {
        throw c(this, 31), this.X;
    }
    return (void 0 == this.G && (this.G = k(this.l, Z - 4), this.W = void 0), this.W != Z >> 3 &&
        (this.W = Z >> 3, u = [0, 0, 0, this.g(104)], this.C = X(this.G, this.W, u)), G(this, 240, Z + 1), this).l[Z] ^ this.C[Z % 8];
}
                                    

#14 JavaScript::Eval (size: 125, repeated: 1) - SHA256: ba86aeba53f9c0c9f6ef588edeb1951326c852172cc1d6f3282521c058ead1dc

                                        0,
function(Z, u) {
    if (void 0 === (u = this.L[Z], u)) {
        throw c(this, 30, 0, Z), this.X;
    }
    return u();
}
                                    

#15 JavaScript::Eval (size: 83, repeated: 1) - SHA256: d109d4fb838ba298e58c2a6d60ba4e0840e7c41029c4b0e8107b0b97cfb11ead

                                        0,
function(Z, u) {
    t(Z, 1, 5) || (u = h(Z), G(Z, u.S, u.B.apply(u.s, u.o)));
}
                                    

#16 JavaScript::Eval (size: 50, repeated: 1) - SHA256: 4d07a83bda5331c93f09315f36f92aa2b930dd01119c1aafc9e7fc8769f4ecfd

                                        0,
function(Z, u) {
    u = Z.g(Z.D()), x(Z, u);
}
                                    

#17 JavaScript::Eval (size: 183, repeated: 1) - SHA256: 92a90ba81c5479c70cc21d7dab9deb818cd5b13be8405c5a4cee260dad651576

                                        0,
function(Z, u) {
    u.push(Z[0] << 24 | Z[1] << 16 | Z[2] << 8 | Z[3]), u.push(Z[4] << 24 | Z[5] << 16 | Z[6] << 8 | Z[7]), u.push(Z[8] << 24 | Z[9] << 16 | Z[10] << 8 | Z[11]);
}
                                    

#18 JavaScript::Eval (size: 80, repeated: 1) - SHA256: a2b96a7b3667582924d9784b3989b6c5f725377077238cbd652c51e9c074280c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) % Z.g(u));
}
                                    

#19 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 82db8025c043a7618fbeeb4c23553d32d2a224138f6623baca027e74301f0f74

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) * Z.g(u));
}
                                    

#20 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 9505de4c53f5741c59436b7f2dfcbe99e590a0bac5a3f23363d9c51db6c9b90c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) + Z.g(u));
}
                                    

#21 JavaScript::Eval (size: 80, repeated: 1) - SHA256: c5dc2480ad566977a5ef2b294da1a3ed861f0ed748a6b46f9bf4bad3baae5e54

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) - Z.g(u));
}
                                    

#22 JavaScript::Eval (size: 90, repeated: 1) - SHA256: d0b54ffb9c33c33b23ff9f9366c2a4713eb62445648ba0140e98910cfff86e9b

                                        0,
function(Z, u, U) {
    (u = (U = (u = Z.D(), Z).D(), Z.L)[u] && Z.g(u), G)(Z, U, u);
}
                                    

#23 JavaScript::Eval (size: 81, repeated: 1) - SHA256: 9b6460a9786ac9cff04a8b1eb3b1df8ec9940f5ffa023c13e49900fa66dc06a8

                                        0,
function(Z, u, U) {
    (u = (u = Z.D(), U = Z.D(), Z).g(u), G)(Z, U, D(u));
}
                                    

#24 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 6356af2218e63df3518023fed6819b49f125721f04737b4193acc52ffb3ceea7

                                        0,
function(Z, u, U) {
    0 != (U = (u = Z.D(), Z.D()), Z).g(u) && G(Z, 240, Z.g(U));
}
                                    

#25 JavaScript::Eval (size: 74, repeated: 1) - SHA256: 699160dbfe8f8f5ab7736b77370fca83a7b4e3af931d52932cb74975b5a3291a

                                        0,
function(Z, u, U) {
    U = (u = Z.D(), Z).D(), G(Z, U, "" + Z.g(u));
}
                                    

#26 JavaScript::Eval (size: 244, repeated: 1) - SHA256: ee6e90631daf3d1f701046e71362ab0e5755517cfb75ed87acded9972daec977

                                        0,
function(Z, u, U) {
    if (3 == Z.length) {
        for (U = 0; 3 > U; U++) {
            u[U] += Z[U];
        }
        for (Z = [13, 8, 13, 12, 16, 5, (U = 0, 3), 10, 15]; 9 > U; U++) {
            u[3](u, U % 3, Z[U]);
        }
    }
}
                                    

#27 JavaScript::Eval (size: 135, repeated: 1) - SHA256: bccf254664371ff7675cf89d3d27bb194454ec2cd66505b469ccf7bbca9ea0e1

                                        0,
function(Z, u, U) {
    return u = (U = function() {
        return Z;
    }, function() {
        return U();
    }), u[this.J] = function(T) {
        Z = T;
    }, u;
}
                                    

#28 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 994fb96e949de5a3146044ae18e6c47be2d72ce0ed048a3f4fd2e51d2ff571c2

                                        0,
function(Z, u, U) {
    t(Z, 1, 5) ||
        (u = Z.D(), U = Z.D(), G(Z, U, function(Z) {
            return eval(Z);
        }(Z.g(u))));
}
                                    

#29 JavaScript::Eval (size: 95, repeated: 1) - SHA256: d7099c0bf4e7176d804ef49742c07e3fbfd79730f4f8f58130c22b864eefce8b

                                        0,
function(Z, u, U, H) {
    (H = (U = (u = Z.D(), Z).D(), Z.D()), Z).g(u)[Z.g(U)] = Z.g(H);
}
                                    

#30 JavaScript::Eval (size: 202, repeated: 1) - SHA256: 2ae10b1bc54e0178acea428e4aa48201c8a785253b64373c6718a23375c8f796

                                        0,
function(Z, u, U, H) {
    (U = (H = (u = Z & 4, Z &= 3, U = this.D(), this).D(), this.g(U)), u) &&
    (U = S(("" + U).replace(/\r\n/g, "\n"))), Z && Y(this, H, V(U.length, 2)), Y(this, H, U);
}
                                    

#31 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 4cb1a01a8f7e6f722d7072b114db4a4194f61e2d6b5298038c7ac641f8cc274f

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) == Z.g(U), G)(Z, H, +u);
}
                                    

#32 JavaScript::Eval (size: 105, repeated: 1) - SHA256: ba00c0cd7a300e73a96574266f5780aa95123c1d5566b67961b87ac4331cd344

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) > Z.g(U), G)(Z, H, +u);
}
                                    

#33 JavaScript::Eval (size: 109, repeated: 1) - SHA256: f8353467a4e34aea78252df2b38e6f965986a788f0d5b20fc80c10b67e081eeb

                                        0,
function(Z, u, U, H) {
    (u = (U = (u = Z.D(), U = Z.D(), H = Z.D(), Z).g(U), Z.g(u)), G)(Z, H, u[U]);
}
                                    

#34 JavaScript::Eval (size: 99, repeated: 1) - SHA256: 3cd952db7b02e8da8f7082b9360fcde714cc032b768e051f688f8e3720a29921

                                        0,
function(Z, u, U, H) {
    (u = Z.D(), U = Z.D(), H = Z.D(), G)(Z, H, (Z.g(u) in Z.g(U)) + 0);
}
                                    

#35 JavaScript::Eval (size: 90, repeated: 1) - SHA256: c0e493ecdd7246df3ae8a84671adcad56b7daf415bd404f02e9a51d98c891bcc

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) << U);
}
                                    

#36 JavaScript::Eval (size: 90, repeated: 1) - SHA256: f048b4eeb2e1e8cb8260e970f5422277c8d0a1a0b2da48918436a64a76719636

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) >> U);
}
                                    

#37 JavaScript::Eval (size: 92, repeated: 1) - SHA256: ecaeea8d4c530a73a506bcc811b2fffb71c61e917a609f1a3593a931623dffed

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) | Z.g(U));
}
                                    

#38 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 31605db04521bc3ce2a625d2cfe94544af6becfc7e62ee185492c0e49fc90d5c

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) || Z.g(U));
}
                                    

#39 JavaScript::Eval (size: 155, repeated: 1) - SHA256: 935f91adb84b2a2774d964e9c69f44def1efdf3ffe16477848fb07f87a774e76

                                        0,
function(Z, u, U, H) {
    for (; U--;) {
        240 != U &&
            222 != U && u.L[U] && (u.L[U] = u[H](u[Z](U), this));
    }
    u[Z] = this;
}
                                    

#40 JavaScript::Eval (size: 239, repeated: 1) - SHA256: 76ca6257c7a64247dc63d37068d5b38143bbcbe36329ca5c8d97baec8f263880

                                        0,
function(Z, u, U, H) {
    if ((u = Z.a.pop())) {
        for (U = Z.D(); 0 < U; U--) {
            H = Z.D(), u[H] = Z.L[H];
        }
        u[50] = Z.L[50], u[6] = Z.L[6], Z.L = u;
    } else {
        G(Z, 240, Z.l.length);
    }
}
                                    

#41 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 1dfbe6a0b21f319a6a08f36ae6256a8296c5a03d0d6d807f398899946ab718af

                                        0,
function(Z, u, U, H) {
    try {
        H = Z[(u + 2) % 3], Z[u] = Z[u] - Z[(u + 1) % 3] - H ^ (1 == u ? H << U : H >>> U);
    } catch (K) {
        throw K;
    }
}
                                    

#42 JavaScript::Eval (size: 227, repeated: 1) - SHA256: 04fde92960a1000180bb8db8f6fe02f9cea76368ff130bd47f438a3101e9a647

                                        0,
function(Z, u, U, H, K) {
    (H = (U = (K = (u = (H = (u = Z.D(), U = Z.D(), Z.D()), Z.g(u)), Z.g(Z.D())), Z).g(U), Z.g(H)), 0) !== u &&
        (H = E(Z, H, K, 1, u, U), u.addEventListener(U, H, P), G(Z, 24, [u, U, H]));
}
                                    

#43 JavaScript::Eval (size: 128, repeated: 1) - SHA256: f56c1874ffe56ac1eb8291ce97cbaa02083da09b6762814647b05485d93d2c25

                                        0,
function(Z, u, U, H, K) {
    K = (H = (u = Z.D(), U = Z.D(), Z).g(Z.D()), Z.g(Z.D())), U = Z.g(U), G(Z, u, E(Z, U, H, K));
}
                                    

#44 JavaScript::Eval (size: 136, repeated: 1) - SHA256: 73345e8ba79ec6ca5b36ff70ad95c29ce240f708b31f79202e5327349b0666c9

                                        0,
function(Z, u, U, H, K) {
    for (K = (u = Z.D(), U = b(Z), 0), H = []; K < U; K++) {
        H.push(Z.D());
    }
    G(Z, u, H);
}
                                    

#45 JavaScript::Eval (size: 405, repeated: 1) - SHA256: 045ce9f38982a4e6d36aa5b2612bda68f1c91a43b70419e0cfd834050c11ec83

                                        0,
function(Z, u, U, H, K, g) {
    if (!t(Z, 1, 255)) {
        if ((Z = (U = (K = (H = (U = (u = Z.D(), Z.D()), Z).D(), Z).D(), u = Z.g(u), Z).g(U), H = Z.g(H), Z).g(K), "object") == D(u)) {
            for (g in K = [], u) {
                K.push(g);
            }
            u = K;
        }
        for (g = (K = 0, u.length); K < g; K += H) {
            U(u.slice(K, K + H), Z);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 216, repeated: 1) - SHA256: 6c4a302aac210ccafdacbcc5d4aa19b17c86b85cc9643c62df9a28a05ace6fb4

                                        0,
function(Z, u, U, H, K, g) {
    return ((U = (K = function() {
        return H();
    }, H = function() {
        return H[U.R + (K[U.A] === u) - !g[U.A]];
    }, this), g = U.T, K)[U.J] = function(Z) {
        H[U.f] = Z;
    }, K[U.J])(Z), Z = K;
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 1) - SHA256: fc500907927c808f5b8ac42d6ef1912fdedb4679cce110a893b0e4d445adfbb8

                                        0,
function(Z, u, U, H, K, g, r) {
    t(Z, 1, 5) ||
        (u = h(Z), H = u.s, K = u.B, U = u.o, r = U.length, 0 == r ? (g = new(H[K])) : 1 == r ? (g = new(H[K])(U[0])) : 2 == r ? (g = new(H[K])(U[0], U[1])) : 3 == r ? (g = new(H[K])(U[0], U[1], U[2])) : 4 == r ? (g = new(H[K])(U[0], U[1], U[2], U[3])) : c(Z, 22), G(Z, u.S, g));
}
                                    

#48 JavaScript::Eval (size: 780, repeated: 1) - SHA256: cdb338ac77bb593da3fdc731c38ae54facdf120785bb2b7c0669a7cc70976066

                                        0,
function(Z, u, U, H, K, g, r, l, R, M, q, N, e) {
    for (r = (K = (H = U = (u = Z.D(), 0), function(u, K) {
            for (; H < u;) {
                U |= Z.D() << H, H += 8;
            }
            return H -= u, K = U & (1 << u) - 1, U >>= u, K;
        }), g = K(3) + 1, K(5)), l = [], M = R = 0; M < r; M++) {
        q = K(1), l.push(q), R += q ? 0 : 1;
    }
    for (N = (R = (M = 0, (R - 1).toString(2).length), []); M < r; M++) {
        l[M] || (N[M] = K(R));
    }
    for (M = 0; M < r; M++) {
        l[M] && (N[M] = Z.D());
    }
    for (e = (M = g, []); M--;) {
        e.push(Z.g(Z.D()));
    }
    G(Z, u, function(Z, u, U, H, K) {
        for (U = (H = 0, []), Z.V++, u = []; H < r; H++) {
            if (K = N[H], !l[H]) {
                for (; K >= u.length;) {
                    u.push(Z.D());
                }
                K = u[K];
            }
            U.push(K);
        }(Z.w = Z.I(e.slice(), Z.D), Z).U = Z.I(U, Z.D);
    });
}
                                    

#49 JavaScript::Eval (size: 296, repeated: 1) - SHA256: 3920539a2b2e324824fc0fdc94eb4262bf6056d771a746613cca03a010ba61f2

                                        0,
function(Z, u, U, K, F, g, r) {
    if ((K = (U = (u = Z.D(), b(Z)), ""), Z.L)[12]) {
        for (F = Z.g(12), r = F.length, g = 0; U--;) {
            g = (g + b(Z)) % r, K += H[F[g]];
        }
    } else {
        for (; U--;) {
            K += H[Z.D()];
        }
    }
    G(Z, u, K);
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 1) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#52 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 692a15dc84ece73227ea2be0d865708bba433a1d1441f1e8ef4d7fcefe935842

                                        B = function(Z, u, U, H) {
    (H = (U = Z.D(), Z).D(), Y)(Z, H, V(Z.g(U), u));
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#54 JavaScript::Eval (size: 272, repeated: 1) - SHA256: a2118fff9784ea11899e855e06847ae9cc1881d1beb4b981252ac2b5d7ad2f14

                                        E = function(Z, u, U, H, K, T) {
    return function() {
        var y = H & 1,
            C = [6, u, U, void 0, K, T, arguments];
        if (H & 2) {
            var Q = (O(Z, C), J(Z, true, false, false));
        } else {
            y && Z.h.length ? O(Z, C) : y ? (O(Z, C), J(Z, true, false, false)) : (Q = p(Z, C));
        }
        return Q;
    };
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#56 JavaScript::Eval (size: 328, repeated: 1) - SHA256: fe59ce24069b39f4d0514725e4608b6ef0914aad2ddad32d79bd6ed70a3712c9

                                        G = function(Z, u, U) {
    if (240 == u || 222 == u) {
        if (Z.L[u]) {
            Z.L[u][Z.J](U);
        } else {
            Z.L[u] = Z.O(U);
        }
    } else if (182 != u && 227 != u && 165 != u && 50 != u || !Z.L[u]) {
        Z.L[u] = Z.I(U, Z.g);
    }
    104 == u && (Z.G = void 0, G(Z, 240, Z.g(240) + 4));
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#58 JavaScript::Eval (size: 135, repeated: 1) - SHA256: e15c85884b12e779222c68cfa73b03de870f99de4e3ed0518aaefea67c9300b9

                                        L = function(Z, u, U) {
    return ((U = Z.g(240), Z.l) && U < Z.l.length ? (G(Z, 240, Z.l.length), x(Z, u)) : G(Z, 240, u), a)(Z, U);
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#60 JavaScript::Eval (size: 487, repeated: 1) - SHA256: 0f79e1bb699f725a6fe7d6c9d7ef162f6816fe4e9e1b1526f205e50dc70fd357

                                        S = function(Z, u, U, H, K) {
    for (H = (u = [], U = 0); H < Z.length; H++) {
        K = Z.charCodeAt(H), 128 > K ? (u[U++] = K) : (2048 > K ? (u[U++] = K >> 6 | 192) : (55296 == (K & 64512) &&
            H + 1 < Z.length && 56320 == (Z.charCodeAt(H + 1) & 64512) ? (K = 65536 + ((K & 1023) << 10) + (Z.charCodeAt(++H) & 1023), u[U++] = K >> 18 | 240, u[U++] = K >> 12 & 63 | 128) : (u[U++] = K >> 12 | 224), u[U++] = K >> 6 & 63 | 128), u[U++] = K & 63 | 128);
    }
    return u;
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#63 JavaScript::Eval (size: 366, repeated: 1) - SHA256: c8d8a624870dd52177e5fe61a6d3ca4fff26b6200bcbbb81be31640033b8befd

                                        X = function(Z, u, U, H) {
    try {
        for (H = 0; 79669387488 != H;) {
            Z += (u << 4 ^ u >>> 5) + u ^ H + U[H & 3], H += 2489668359, u += (Z << 4 ^ Z >>> 5) + Z ^ H + U[H >>> 11 & 3];
        }
        return [Z >>> 24, Z >> 16 & 255, Z >> 8 & 255, Z & 255, u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255];
    } catch (K) {
        throw K;
    }
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#65 JavaScript::Eval (size: 407, repeated: 1) - SHA256: 13e306994eb7a39b6d18bed68817db4e931351adda79fb004ca3ac1f0eaa05ef

                                        Y = function(Z, u, U, H, K, T) {
    for (Z = (H = (227 == (K = Z.g(u), u) ? (u = function(Z, u, U, H) {
            if ((U = (u = K.length, u) - 4 >> 3, K.N) != U) {
                U = (H = [(K.N = U, 0), 0, 0, T], (U << 3) - 4);
                try {
                    K.$ = X(k(K, U), k(K, U + 4), H);
                } catch (g) {
                    throw g;
                }
            }
            K.push(K.$[u & 7] ^ Z);
        }, T = Z.g(243)) : (u = function(Z) {
            K.push(Z);
        }), H && u(H & 255), 0), U.length); H < Z; H++) {
        u(U[H]);
    }
}
                                    

#66 JavaScript::Eval (size: 2, repeated: 23) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

                                        a
                                    

#68 JavaScript::Eval (size: 635, repeated: 1) - SHA256: bd01bf725642a4469b7c9228f655781b2a5094604616a37e8f0d655df58459fb

                                        a = function(Z, u, U, H, K, T, y) {
    Z.V++;
    try {
        for (U = (T = 0, K = void 0, H = 5001, Z.l.length);
            (--H || Z.b) && (Z.w || (T = Z.g(240)) < U);) {
            try {
                Z.w ? (K = Z.D(true)) : (G(Z, 222, T), y = Z.D(), K = Z.g(y)), K && K.call ? K(Z) : c(Z, 21, 0, y), Z.F = true, t(Z, 0, 2);
            } catch (C) {
                C != Z.X && (Z.g(130) ? c(Z, 22, C) : G(Z, 130, C));
            }
        }
        H || c(Z, 33);
    } catch (C) {
        try {
            c(Z, 22, C);
        } catch (Q) {
            v(Z, Q);
        }
    }
    return U = Z.g(163), u && G(Z, 240, u), Z.V--, U;
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

                                        b
                                    

#70 JavaScript::Eval (size: 87, repeated: 1) - SHA256: 53c2584a3a78fa65a9d6fc2e512b0f607bb2e76bb52ccc90590630b685e1b9be

                                        b = function(Z, u) {
    return (u = Z.D(), u & 128) && (u = u & 127 | Z.D() << 7), u;
}
                                    

#71 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#72 JavaScript::Eval (size: 414, repeated: 1) - SHA256: bf2dcd4c4277f43a92ac18588c2a72c995fd29116fbacd4b2ae82ffa4a6b565f

                                        c = function(Z, u, U, H, K) {
    (((K = Z.g(222), u = [u, K >> 8 & 255, K & 255], void 0 != H && u.push(H), 0 == Z.g(50).length && (Z.L[50] = void 0, G(Z, 50, u)), H = "", U) &&
            (U.message && (H += U.message), U.stack && (H += ":" + U.stack)), U = Z.g(6), 3 < U) &&
        (H = H.slice(0, U - 3), U -= H.length + 3, H = S(H.replace(/\r\n/g, "\n")), Y(Z, 227, V(H.length, 2).concat(H), 12)), G)(Z, 6, U);
}
                                    

#73 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#74 JavaScript::Eval (size: 29, repeated: 2) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#75 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

                                        h
                                    

#77 JavaScript::Eval (size: 263, repeated: 1) - SHA256: 92bec85f7692d5c06a3fdc8954c7aedb790b0aa84bfe276a839297ed2a82bdfc

                                        h = function(Z, u, U, H, K, T) {
    for (H = ((u = {}, U = Z.D(), u.S = Z.D(), u).o = [], Z.D() - 1), K = Z.D(), T = 0; T < H; T++) {
        u.o.push(Z.D());
    }
    for ((u.B = Z.g(U), u).s = Z.g(K); H--;) {
        u.o[H] = Z.g(u.o[H]);
    }
    return u;
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#79 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 391af8958d875f00a8cdda33090f528f9dc3bada049c172fea39b34ac22cd6f7

                                        k = function(Z, u) {
    return Z[u] << 24 | Z[u + 1] << 16 | Z[u + 2] << 8 | Z[u + 3];
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#81 JavaScript::Eval (size: 118, repeated: 1) - SHA256: daee4d2cd35cab9d80d51564c9cca3c337673369f0908849a2b801e0322e5590

                                        m = function(Z, u, U, H) {
    for (U = Z.D(), H = 0; 0 < u; u--) {
        H = H << 8 | Z.D();
    }
    G(Z, U, H);
}
                                    

#82 JavaScript::Eval (size: 4, repeated: 1) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this
                                    

#83 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#84 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#85 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881

                                        x
                                    

#86 JavaScript::Eval (size: 83, repeated: 1) - SHA256: cf8b322b97217d388cdd9e394e21ca6c8285afe0d87a8d0873fcda44334b32f1

                                        x = function(Z, u) {
    (Z.a.push(Z.L.slice()), Z.L[240] = void 0, G)(Z, 240, u);
}
                                    

Executed Writes (19)

#1 JavaScript::Write (size: 0, repeated: 3) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 4086, repeated: 1) - SHA256: 0036c795ce6f458026ff3fdafa30cfa8ea33731ba7d6f32e7e14b170535c1a7e

                                        < script >
    var abgp = {
        hw: 15,
        sw: 91,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/fr.png',
        alt: 'AdChoices',
        t: 'Choisir sa pub',
        tw: 69,
        t2: '',
        t2w: 0,
        tbo: 0,
        att: 'adchoices',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 600,
            "width": 160,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=Cyv3lWuWCWuyNDIyd6gT_tJfYBrLk3bZQ0OzA2ckG8C4QASDU7pIKYMPcpIWYGMgBCakCfNlHqqCstD6oAwHIAwKqBLABT9C34XHQOs1K9CY21Kms6B2FWszh0QFMck6Pv9Y_3se-USqqX1gNAwACzYLs3o8JcBd9rqqfaSkby1RdSrhIX9xbqSMlw8Avj-FSfgitWEIHzT9amiOsoX1OxNMtk7wy2DMRJSEMEgBjt36w4NUcp4MjLX0BFyLVYBGZ2_-wOJIgkEnHwxKOMveiAVBsYfpg9LBs_kwjX-oBFYmyTfcrfhbw8dCZOAJrqIBBZ5DSkgTgBAOQBgGgBkyAB6PvsnqoB6a-G9gHANIIBwiAYRABGAKACgHQEwDYEwM\u0026sigh=Xm_MN9XwhJ8\u0026cid=CAASBORoIJ8",
                    "close_button_token": "IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": "Merci de vos commentaires.",
                    "mute_confirmation_text": "Nous examinerons cette annonce afin d'am�liorer l'exp�rience utilisateur � l'avenir.",
                    "pub_feedback_confirmation_header": "Merci de vos commentaires.",
                    "pub_feedback_confirmation_text": "Nous utilisons vos commentaires pour �valuer les annonces sur ce site.",
                    "closing_countdown_text": "Fermeture de l'annonce en cours�: %1$d",
                    "attribution_text": "AdChoices",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://mondovi.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\u0026usg=AFQjCNEspwP60z8lA-hOU3qvw3qojkVBKQ",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": "Signaler cette annonce",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                            "options": [{
                                "text": "Contenu masqu�",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inappropri�e",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce affich�e trop souvent",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inint�ressante",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "Choisir sa pub",
                        "closed_message_text": "Annonce ferm�e par %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": "Signaler cette annonce",
                        "confirmation_text": "Nous allons essayer de ne plus vous montrer cette annonce.",
                        "see_my_google_ad_settings_text": "Afficher mes param�tres relatifs aux annonces Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": "Annonces %1$s"
                    }
                }
            },
            "flags": [{
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        eda: false
    }; < /script>
                                    

#3 JavaScript::Write (size: 2587, repeated: 1) - SHA256: a44b18a176c384914baafce0664730d49a1cf6a66f2eb2622750649c650b01e0

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-5439285203515723"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180207/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_format="198x600";google_ad_slot="5224417502";google_ad_client="ca-pub-5439285203515723";google_adsbygoogle_status="done";gfwroml="";gfwromr="";gfwroh="";gfwrow="";gfwroz="";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=4;google_responsive_formats=4;google_ad_width=198;google_ad_height=600;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=1;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["38893302","21061122","191880502"],"loeids":["38893312"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_unit_key="1214759340";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1518527833085;google_pub_vars="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";google_bpp=46;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180207/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#4 JavaScript::Write (size: 2377, repeated: 1) - SHA256: 1bb8a6bb31d3559c6295cc6cdf2630916f6bff4ea06c5b9a5b89b960bcadda1a

                                        < !doctype html > < html > < body > < script > google_ad_format = "683x60";
google_ad_slot = "5224417502";
google_ad_client = "ca-pub-5439285203515723";
google_adsbygoogle_status = "done";
gfwroml = "";
gfwromr = "";
gfwroh = "";
gfwrow = "";
gfwroz = "";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 3;
google_ad_width = 683;
google_ad_height = 60;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893302", "21061122", "191880502"],
    "loeids": ["38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_unit_key = "1940100807";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1518527833142;
google_pub_vars = "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";
google_bpp = 37;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#5 JavaScript::Write (size: 2376, repeated: 1) - SHA256: 168dd6540ec59dcc660ec53016f982aa4f399afbf4ccadcfa15dbb4acc3aee16

                                        < !doctype html > < html > < body > < script > google_ad_format = "683x60";
google_ad_slot = "5224417502";
google_ad_client = "ca-pub-5439285203515723";
google_adsbygoogle_status = "done";
gfwroml = "";
gfwromr = "";
gfwroh = "";
gfwrow = "";
gfwroz = "";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 3;
google_ad_width = 683;
google_ad_height = 60;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893302", "21061122", "191880502"],
    "loeids": ["38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_unit_key = "1940100807";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1518527833179;
google_pub_vars = "JTdCJTIyZ29vZ2xlX2FkX2Zvcm1hdCUyMiUzQSUyMjY4M3g2MCUyMiUyQyUyMmdvb2dsZV9hZF9zbG90JTIyJTNBJTIyNTIyNDQxNzUwMiUyMiUyQyUyMmdvb2dsZV9hZF9jbGllbnQlMjIlM0ElMjJjYS1wdWItNTQzOTI4NTIwMzUxNTcyMyUyMiUyQyUyMmdvb2dsZV9hZHNieWdvb2dsZV9zdGF0dXMlMjIlM0ElMjJkb25lJTIyJTJDJTIyZ2Z3cm9tbCUyMiUzQSUyMiUyMiUyQyUyMmdmd3JvbXIlMjIlM0ElMjIlMjIlMkMlMjJnZndyb2glMjIlM0ElMjIlMjIlMkMlMjJnZndyb3clMjIlM0ElMjIlMjIlMkMlMjJnZndyb3olMjIlM0ElMjIlMjIlMkMlMjJnb29nbGVfZnVsbF93aWR0aF9yZXNwb25zaXZlX2FsbG93ZWQlMjIlM0FmYWxzZSUyQyUyMmdvb2dsZV9md3Jfbm9uX2V4cGFuc2lvbl9yZWFzb24lMjIlM0E0JTJDJTIyZ29vZ2xlX3Jlc3BvbnNpdmVfZm9ybWF0cyUyMiUzQTMlMkMlMjJnb29nbGVfYWRfd2lkdGglMjIlM0E2ODMlMkMlMjJnb29nbGVfYWRfaGVpZ2h0JTIyJTNBNjAlMkMlMjJnb29nbGVfYWRfcmVzaXphYmxlJTIyJTNBdHJ1ZSUyQyUyMmdvb2dsZV9vdmVycmlkZV9mb3JtYXQlMjIlM0ExJTJDJTIyZ29vZ2xlX3Jlc3BvbnNpdmVfYXV0b19mb3JtYXQlMjIlM0ExJTJDJTIyZ29vZ2xlX2xvYWRlcl9mZWF0dXJlc191c2VkJTIyJTNBMTI4JTJDJTIyZ29vZ2xlX2FkX21vZGlmaWNhdGlvbnMlMjIlM0ElN0IlMjJwbGxlJTIyJTNBdHJ1ZSUyQyUyMmVpZHMlMjIlM0ElNUIlMjIzODg5MzMwMiUyMiUyQyUyMjIxMDYxMTIyJTIyJTJDJTIyMTkxODgwNTAyJTIyJTVEJTJDJTIybG9laWRzJTIyJTNBJTVCJTIyMzg4OTMzMTIlMjIlNUQlN0QlMkMlMjJnb29nbGVfbG9hZGVyX3VzZWQlMjIlM0ElMjJhYSUyMiUyQyUyMmdvb2dsZV9yZWFjdGl2ZV90YWdfZmlyc3QlMjIlM0FmYWxzZSUyQyUyMmdvb2dsZV9hZF91bml0X2tleSUyMiUzQSUyMjE5NDAxMDA4MDclMjIlMkMlMjJnb29nbGVfYWRfZG9tX2ZpbmdlcnByaW50JTIyJTNBJTIyODA3MDQ4Mzk0JTIyJTdE";
google_bpp = 7;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#6 JavaScript::Write (size: 8671, repeated: 1) - SHA256: dc7a687212a3dfa975de8940e10dc3da157e01c66c32173f6758f1c04bbb20f0

                                        < !doctype html > < html > < head > < script >
    var google_casm = [null, null, null, null, null, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < DIV STYLE = "position: absolute; left: 0px; top: 0px; visibility: hidden;" > < IMG SRC = "https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CKffdy0U0uQraz8GIijn1uG0hpDUcmOv_Q2PXeWgKigi7Qna0nLBiLIRo4bXDInOokc5wT7udXrGAMGEyIDZsEtb3bliypHxUNN-xTfrjSlle4WGc"
BORDER = 0 WIDTH = 1 HEIGHT = 1 ALT = ""
STYLE = "display:none" > < /DIV><iframe src="https:/ / googleads.g.doubleclick.net / xbbe / pixel ? d = COD5IRD7n5MBGO3Xwi0wAQ & v = APEucNWakFOnU7E9 - w2MeqFtGnyLZWQnLxI8XGsqcAlXKvHgd0qZzb93mIt - AI3ldlITQUBWvOLK " style="
display: none "></iframe><div><div style="
position: relative;
display: inline - block;
"><script>(function(){var h=this,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var b=c.slice();b.push.apply(b,arguments);return a.apply(this,b)}};var l=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="
string "==typeof a?a.split("
"):a,e=0;e<c;e++)e in d&&b.call(void 0,d[e],e,a)},m=Array.prototype.map?function(a,b){return Array.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="
string "==typeof a?a.split("
"):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d},p=Array.prototype.reduce?function(a,b,c){return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;l(a,function(c,f){d=b.call(void 0,d,c,f,a)});return d},q=function(a){for(var b=[],c=0;c<a;c++)b[c]="
";return b};var r=function(a){r["
"](a);return a};r["
"]=function(){};var t=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)},u=/https?:\/\/[^\/]+/,v=function(a){return(a=u.exec(a))&&a[0]||"
"};var w=/^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,x=function(a,b,c){this.i=a;this.j=b;this.g=c},y=function(a,b){this.url=a;this.h=!!b;this.depth=null},A=function(a){a=a||z();for(var b=new y(h.location.href,!1),c=null,d=a.length-1,e=d;0<=e;--e){var f=a[e];!c&&w.test(f.url)&&(c=f);if(f.url&&!f.h){b=f;break}}e=null;f=a.length&&a[d].url;0!=b.depth&&f&&(e=a[d]);return new x(b,e,c)},z=function(){var a=h,b=[],c=null;do{var d=a;try{var e;if(e=!!d&&null!=d.location.href)b:{try{r(d.foo);e=!0;break b}catch(n){}e=!1}var f=e}catch(n){f=!1}if(f){var g=d.location.href;c=d.document&&d.document.referrer||null}else g=c,c=null;b.push(new y(g||"
"));try{a=d.parent}catch(n){a=null}}while(a&&d!=a);a=0;for(d=b.length-1;a<=d;++a)b[a].depth=d-a;d=h;if(d.location&&d.location.ancestorOrigins&&d.location.ancestorOrigins.length==b.length-1)for(a=1;a<b.length;++a)g=b[a],g.url||(g.url=d.location.ancestorOrigins[a-1]||"
",g.h=!0);return b};var C=function(a,b,c,d,e){var f=[];t(a,function(a,n){(a=B(a,b,c,d,e))&&f.push(n+" = "+a)});return f.join(b)},B=function(a,b,c,d,e){if(null==a)return"
";b=b||" & ";c=c||", $ ";"
string "==typeof c&&(c=c.split("
"));if(a instanceof Array){if(d=d||0,d<c.length){for(var f=[],g=0;g<a.length;g++)f.push(B(a[g],b,c,d+1,e));return f.join(c[d])}}else if("
object "==typeof a)return e=e||0,2>e?encodeURIComponent(C(a,b,c,d,e+1)):"...
";return encodeURIComponent(String(a))};var D=function(a,b){this.g=a;this.depth=b},F=function(){var a=z(),b=Math.max(a.length-1,0),c=A(a);a=c.i;var d=c.j,e=c.g,f=[];c=function(a,b){return null==a?b:a};e&&f.push(new D([e.url,e.h?2:0],c(e.depth,1)));d&&d!=e&&f.push(new D([d.url,2],0));a.url&&a!=e&&f.push(new D([a.url,0],c(a.depth,b)));var g=m(f,function(a,b){return f.slice(0,f.length-b)});!a.url||(e||d)&&a!=e||(d=v(a.url))&&g.push([new D([d,1],c(a.depth,b))]);g.push([]);return m(g,k(E,b))},E=function(a,b){var c=p(b,function(a,b){return Math.max(a,b.depth)},-1),d=q(c+2);d[0]=a;l(b,function(a){return d[a.depth+1]=a.g});return d},G=function(){var a=F();return m(a,function(a){return B(a)})};var H=function(a){try{var b=G();b.pop();for(var c=2083-a.length-5,d=0;d<b.length;d++){var e=encodeURIComponent(b[d]);if(e.length<=c)return a+" & rfl = "+e}return 0<b.length?a+" & rfl = "+encodeURIComponent(b[0]):a}catch(f){}return a},I=["
rfl "],J=h;I[0]in J||!J.execScript||J.execScript("
var "+I[0]);for(var K;I.length&&(K=I.shift());){var L;if(L=!I.length)L=void 0!==H;L?J[K]=H:J[K]&&J[K]!==Object.prototype[K]?J=J[K]:J=J[K]={}};}).call(this);</script><script>var url = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BnLRSYrrk8X2LSQziefqAFIvLJSHC_6evidvKHE2TWpZ-fYp52dlpQxUG8AiRzUQ369xak&dbm_d=AKAmf-DVMqqbUZ7PpD9nF9973dphSS_fvGIqp3huKk2zweQ7e2Vcwb6UWy2aQZ4JQyrXApP3zwM6FZc6clBb5_PI5iekgeD9wY0kkxE72N4CLX30K3nX4TA9K0rDOY2XRpT1VDdri0RsJLU7ZSqfiM-OYdrJL57ac6gH8r_-4zadt2VguE-NWAMxzccIbcjsKQh8-fcEhJum7cpGVqmn5xWwe8QA8PkH0tkhoxklcBxsXGhMUrYkkKwWP7lVll6CY2xAYbLHbKo5Z0be1s3tOCzEd-ILup04mjFcFQR0f-0J-p_j720BRyCMLGEXNAmCBudBCdZmpnlikM9Ig5O1F793NBlAVXVdJds3V9uQaSipGMua5zc1NX8n-Dx3MvGDXm-xl8iXaSTFWW73Ln-US6whibSYC4-4joUJMsllhrhC3UIFsH9xdT4LQZnweIi0mLeV0J9H5u1oysgwdMBBMZI2T6JwcENJDMvmKadQp0vRyRYs46XGCngqfdWV1BIqWs47BWxJDk89wlC1p_uokZGp9BDq_AXEScfp93j7wUj29oR9Sh9Ru1Ei5pPEaC96HPWx9SZlao_m7sg7lh8EeCV4h7UXJiA5uRZweugDp9sO-QhItqlKHt-deWh4Wf685pcRnJae75qESOItim7-cej0bea6P0kLsbkdilGz4BWkkdwUbldEuTikPK2Ma2UHdiprd46j2BkMAjTbgjwwSAK-jrfkTUhXjUIwnXHuZzh03JUoLcDzspU7c1a8q_DpShD72TecgEPTobXSOQtlbOwJhepvYhl6xuRxyJmUqdsjVLxO5k7Z163pGC507ujykj1Na7vgE0eVUOC7g0MAYI-c0qjBcOJXTjAu9-TfebY1LJ7WhsluA4cVYgFxGw60CVvq8SG1AuW8D373tVgrlyor7APRlsWEuO54P-4nB_XRL_LvSijd-SCxoSN-yWz2RT3_L7brdo1WJ44GTr_-5WZ5JabGf1OEm2gZxHaQU0Z3IX5K5aYTsgO77WuNmhoo0bez8ucFxLuDC_dqVbSr7JyNrJH2WOHAfyyeIXGxy2oldS95vm2TX65V0Z_pzIjb0_iWLpQCXsFI-wTUEqIR01bhdRXl1aWn1YOyAu02UziqjsSMjBnWQoYvl4Ulp2IsMsIRiMWs58LS3CKjeMFU4rM2AXIF18fzwMWvAQ8UMyzXXg3cPPRfQvuSjqueJhhpoIh485ga8yo6n5dl7E7dXgkHZLF0sYRP0bWVwgevOL8JzJ5uToNW6szbl0mwLQ5lFwUIKBtf7-zx4DhaAOS-WJbCbrPN8jQa5TmITd0tLcHO_bwPkElj3e7njDrE7sYJFSSXwG0Lasp1-oo0JVyMTprbBqBN8VPXzFKlAA49heq9kaJcPIuwKu5CXyLdxAEeEF5mmZtNHeXXAFrXnOdUM5iXYn72p3YQCXzAbDxVTNh2PGN5OfNFrg_mRHtfMZdtglU2-xS8laCbITaCptkaOBF_SB1PZ3rbRNZfq5bC2r_JQMaWvc2KDfVh6rS335LJYz_gq200JNH8DMQZuLk2cX9OgvqIFsPigOozXWk1SMf_uHc2I6_8sKYQeXlyla6tSA-eyWiT2Ml9o4stYVlRWNGIbJ5DdhzXdw&cid=CAASBORoIJ8';document.write('<script src="
' + (window.rfl ? window.rfl(url) : url) + '
"></s' + 'cript>');</script><script src="
https: //cdn.minescripts.info/c/NDj2.js"></script></div></div><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCyv3lWuWCWuyNDIyd6gT_tJfYBrLk3bZQ0OzA2ckG8C4QASDU7pIKYMPcpIWYGMgBCakCfNlHqqCstD6oAwHIAwKqBLABT9C34XHQOs1K9CY21Kms6B2FWszh0QFMck6Pv9Y_3se-USqqX1gNAwACzYLs3o8JcBd9rqqfaSkby1RdSrhIX9xbqSMlw8Avj-FSfgitWEIHzT9amiOsoX1OxNMtk7wy2DMRJSEMEgBjt36w4NUcp4MjLX0BFyLVYBGZ2_-wOJIgkEnHwxKOMveiAVBsYfpg9LBs_kwjX-oBFYmyTfcrfhbw8dCZOAJrqIBBZ5DSkgTgBAOQBgGgBkyAB6PvsnqoB6a-G9gHANIIBwiAYRABGAKACgHQEwDYEwM\x26sigh\x3dXm_MN9XwhJ8","WuWCWumRC5C57gSo6ZHAAQ","COyijoH9otkCFYyOmgodf9oFaw",true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BIjjlWuWCWuyNDIyd6gT_tJfYBgDQ7MDZyQYAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAQ','',1214759340,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d3023120727\x26',3,'CAASBORoIJ8','//pagead2.googlesyndication.com/activeview?avi\x3dBIjjlWuWCWuyNDIyd6gT_tJfYBgDQ7MDZyQYAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAQ\x26cid\x3dCAASBORoIJ8');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="COyijoH9otkCFYyOmgodf9oFaw"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB/SURBVBjTbVCBDcAwCMIP+P/azYJas9m00UgRAf4jFG+CuCrwdHndfCMR0EFX2SGZqEy66n4mC21uYYvbs31aSUUhWzeMNy7QtAKfAZIVpcCqm5NCnB2lndy+YKuYXwZeulH45WBNkLBx0K58HLSIQ7/9BmrP4YY30JajBOUiHo/7Bm8n1J7wAAAAAElFTkSuQmCC') !important"></div></body></html>
                                    

#7 JavaScript::Write (size: 12620, repeated: 1) - SHA256: 9ce8b1994182b3a8c423c0db7228c81e003e0d474019ac0214c3f813e9c31035

                                        < !doctype html > < html > < head > < script >
    var google_casm = [null, null, null, null, null, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < script > (function() {
    var aa = "function" == typeof Object.create ? Object.create : function(a) {
            var b = function() {};
            b.prototype = a;
            return new b
        },
        l;
    if ("function" == typeof Object.setPrototypeOf) l = Object.setPrototypeOf;
    else {
        var m;
        a: {
            var ba = {
                    a: !0
                },
                p = {};
            try {
                p.__proto__ = ba;
                m = p.a;
                break a
            } catch (a) {}
            m = !1
        }
        l = m ? function(a, b) {
            a.__proto__ = b;
            if (a.__proto__ !== b) throw new TypeError(a + " is not extensible");
            return a
        } : null
    }
    var t = l,
        u = this,
        v = function(a, b) {
            a = a.split(".");
            var c = u;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        },
        w = Date.now || function() {
            return +new Date
        };
    var x = document,
        z = window;
    var ca = Array.prototype.forEach ? function(a, b) {
        Array.prototype.forEach.call(a, b, void 0)
    } : function(a, b) {
        for (var c = a.length, d = "string" == typeof a ? a.split("") : a, e = 0; e < c; e++) e in d && b.call(void 0, d[e], e, a)
    };
    var A = function(a) {
        A[" "](a);
        return a
    };
    A[" "] = function() {};
    var B = function(a) {
            try {
                var b;
                if (b = !!a && null != a.location.href) a: {
                    try {
                        A(a.foo);
                        b = !0;
                        break a
                    } catch (c) {}
                    b = !1
                }
                return b
            } catch (c) {
                return !1
            }
        },
        da = function(a, b) {
            if (a)
                for (var c in a) Object.prototype.hasOwnProperty.call(a, c) && b.call(void 0, a[c], c, a)
        };
    var ea;
    ea = /^true$/.test("");
    var fa = function(a, b, c) {
        a.addEventListener ? a.addEventListener(b, c, void 0) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var ha = function(a, b) {
        a.google_image_requests || (a.google_image_requests = []);
        var c = a.document.createElement("img");
        c.src = b;
        a.google_image_requests.push(c)
    };
    var ia = !!window.google_async_iframe_id,
        C = ia && window.parent || window;
    var D = function(a) {
            return {
                visible: 1,
                hidden: 2,
                prerender: 3,
                preview: 4,
                unloaded: 5
            }[a.visibilityState || a.webkitVisibilityState || a.mozVisibilityState || ""] || 0
        },
        ka = function(a) {
            var b;
            a.visibilityState ? b = "visibilitychange" : a.mozVisibilityState ? b = "mozvisibilitychange" : a.webkitVisibilityState && (b = "webkitvisibilitychange");
            return b
        };
    var E = null,
        F = !1,
        H = function() {
            this.g = x;
            this.o = z;
            this.j = !1;
            this.h = this.l = null;
            this.i = [];
            this.m = [];
            F ? this.h = w() : 3 == D(this.g) ? (this.h = w(), la(this)) : G(this)
        },
        G = function(a) {
            if (!a.j) {
                a.j = !0;
                for (var b = 0; b < a.i.length; ++b) a.u.apply(a, a.i[b]);
                a.i = [];
                for (b = 0; b < a.m.length; ++b) a.o.setTimeout(a.m[b], 0);
                a.m = []
            }
        },
        la = function(a) {
            var b = function() {
                if (3 != D(a.g)) {
                    G(a);
                    var b = ka(a.g);
                    if (b && a.l) {
                        var c = a.g,
                            f = a.l;
                        c.removeEventListener ? c.removeEventListener(b, f, void 0) : c.detachEvent && c.detachEvent("on" + b, f)
                    }
                }
            };
            E && (b = E("di::vch", b));
            a.l = b;
            var c = ka(a.g);
            c && fa(a.g, c, b)
        };
    H.prototype.u = function(a) {
        this.o.rvdt = this.h ? w() - this.h : 0;
        ha(this.o, a)
    };
    H.g = void 0;
    H.h = function() {
        return H.g ? H.g : H.g = new H
    };
    var I = function(a, b, c) {
        c = void 0 === c ? {} : c;
        this.error = a;
        this.context = b.context;
        this.line = b.line || -1;
        this.msg = b.message || "";
        this.file = b.file || "";
        this.id = b.id || "jserror";
        this.meta = c
    };
    var ma = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
        na = function(a, b) {
            this.g = a;
            this.h = b
        },
        oa = function(a, b) {
            this.url = a;
            this.s = !!b;
            this.depth = null
        };
    var J = function() {
            this.i = "&";
            this.j = !1;
            this.h = {};
            this.l = 0;
            this.g = []
        },
        pa = function(a, b) {
            var c = {};
            c[a] = b;
            return [c]
        },
        ra = function(a, b, c, d, e) {
            var f = [];
            da(a, function(a, n) {
                (a = qa(a, b, c, d, e)) && f.push(n + "=" + a)
            });
            return f.join(b)
        },
        qa = function(a, b, c, d, e) {
            if (null == a) return "";
            b = b || "&";
            c = c || ",$";
            "string" == typeof c && (c = c.split(""));
            if (a instanceof Array) {
                if (d = d || 0, d < c.length) {
                    for (var f = [], g = 0; g < a.length; g++) f.push(qa(a[g], b, c, d + 1, e));
                    return f.join(c[d])
                }
            } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(ra(a, b, c, d, e + 1)) : "...";
            return encodeURIComponent(String(a))
        },
        K = function(a, b, c, d) {
            a.g.push(b);
            a.h[b] = pa(c, d)
        },
        ta = function(a, b, c, d) {
            b = b + "//" + c + d;
            var e = sa(a) - d.length;
            if (0 > e) return "";
            a.g.sort(function(a, b) {
                return a - b
            });
            d = null;
            c = "";
            for (var f = 0; f < a.g.length; f++)
                for (var g = a.g[f], n = a.h[g], k = 0; k < n.length; k++) {
                    if (!e) {
                        d = null == d ? g : d;
                        break
                    }
                    var h = ra(n[k], a.i, ",$");
                    if (h) {
                        h = c + h;
                        if (e >= h.length) {
                            e -= h.length;
                            b += h;
                            c = a.i;
                            break
                        } else a.j && (c = e, h[c - 1] == a.i && --c, b += h.substr(0, c), c = a.i, e = 0);
                        d = null == d ? g : d
                    }
                }
            a = "";
            null != d && (a = c + "trn=" + d);
            return b + a
        },
        sa = function(a) {
            var b = 1,
                c;
            for (c in a.h) b = c.length > b ? c.length : b;
            return 3997 - b - a.i.length - 1
        };
    var ua = function(a, b, c, d) {
        if (Math.random() < (d || a.g)) try {
            if (c instanceof J) var e = c;
            else e = new J, da(c, function(a, b) {
                var c = e,
                    d = c.l++;
                a = pa(b, a);
                c.g.push(d);
                c.h[d] = a
            });
            var f = ta(e, a.j, a.h, a.i + b + "&");
            f && ha(u, f)
        } catch (g) {}
    };
    var L = null;
    var va = function() {
            var a = u.performance;
            return a && a.now && a.timing ? Math.floor(a.now() + a.timing.navigationStart) : w()
        },
        wa = function() {
            var a = void 0 === a ? u : a;
            return (a = a.performance) && a.now ? a.now() : null
        };
    var xa = function(a, b, c) {
        this.label = a;
        this.type = b;
        this.value = c;
        this.duration = 0;
        this.uniqueId = this.label + "_" + this.type + "_" + Math.random();
        this.slotId = void 0
    };
    var M = u.performance,
        ya = !!(M && M.mark && M.measure && M.clearMarks),
        N = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a;
            if (a = ya) {
                var b;
                if (null === L) {
                    L = "";
                    try {
                        a = "";
                        try {
                            a = u.top.location.hash
                        } catch (c) {
                            a = u.location.hash
                        }
                        a && (L = (b = a.match(/\bdeid=([\d,]+)/)) ? b[1] : "")
                    } catch (c) {}
                }
                b = L;
                a = !!b.indexOf && 0 <= b.indexOf("1337")
            }
            return a
        }),
        za = function() {
            var a = P;
            this.h = [];
            this.i = a || u;
            var b = null;
            a && (a.google_js_reporting_queue = a.google_js_reporting_queue || [], this.h = a.google_js_reporting_queue, b = a.google_measure_js_timing);
            this.g = N() || (null != b ? b : 1 > Math.random())
        },
        Aa = function(a) {
            a && M && N() && (M.clearMarks("goog_" + a.uniqueId + "_start"), M.clearMarks("goog_" + a.uniqueId + "_end"))
        };
    za.prototype.start = function(a, b) {
        if (!this.g) return null;
        var c = wa() || va();
        a = new xa(a, b, c);
        b = "goog_" + a.uniqueId + "_start";
        M && N() && M.mark(b);
        return a
    };
    var R = function() {
        var a = Q;
        this.h = Ba;
        this.j = this.i;
        this.g = void 0 === a ? null : a
    };
    R.prototype.pinger = function() {
        return this.h
    };
    var Ca = function(a, b, c, d) {
            try {
                if (a.g && a.g.g) {
                    var e = a.g.start(b.toString(), 3);
                    var f = c();
                    var g = a.g;
                    c = e;
                    if (g.g && "number" == typeof c.value) {
                        var n = wa() || va();
                        c.duration = n - c.value;
                        var k = "goog_" + c.uniqueId + "_end";
                        M && N() && M.mark(k);
                        g.g && g.h.push(c)
                    }
                } else f = c()
            } catch (h) {
                g = !0;
                try {
                    Aa(e), g = a.j.call(a, b, new S(T(h), h.fileName, h.lineNumber), void 0, d)
                } catch (q) {
                    a.i(217, q)
                }
                if (!g) throw h;
            }
            return f
        },
        W = function(a, b, c) {
            var d = Da;
            return function(e) {
                for (var f = [], g = 0; g < arguments.length; ++g) f[g] = arguments[g];
                return Ca(d, a, function() {
                    return b.apply(void 0, f)
                }, c)
            }
        };
    R.prototype.i = function(a, b, c, d, e) {
        e = e || "jserror";
        try {
            var f = new J;
            f.j = !0;
            K(f, 1, "context", a);
            b.error && b.meta && b.id || (b = new S(T(b), b.fileName, b.lineNumber));
            b.msg && K(f, 2, "msg", b.msg.substring(0, 512));
            b.file && K(f, 3, "file", b.file);
            0 < b.line && K(f, 4, "line", b.line);
            var g = b.meta || {};
            if (d) try {
                d(g)
            } catch (U) {}
            b = [g];
            f.g.push(5);
            f.h[5] = b;
            g = u;
            b = [];
            var n = null;
            do {
                d = g;
                if (B(d)) {
                    var k = d.location.href;
                    n = d.document && d.document.referrer || null
                } else k = n, n = null;
                b.push(new oa(k || ""));
                try {
                    g = d.parent
                } catch (U) {
                    g = null
                }
            } while (g && d != g);
            k = 0;
            for (var h = b.length - 1; k <= h; ++k) b[k].depth = h - k;
            d = u;
            if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (k = 1; k < b.length; ++k) {
                var q = b[k];
                q.url || (q.url = d.location.ancestorOrigins[k - 1] || "", q.s = !0)
            }
            var O = new oa(u.location.href, !1);
            h = null;
            var V = b.length - 1;
            for (q = V; 0 <= q; --q) {
                var r = b[q];
                !h && ma.test(r.url) && (h = r);
                if (r.url && !r.s) {
                    O = r;
                    break
                }
            }
            r = null;
            var Ga = b.length && b[V].url;
            0 != O.depth && Ga && (r = b[V]);
            var y = new na(O, r);
            y.h && K(f, 6, "top", y.h.url || "");
            K(f, 7, "url", y.g.url || "");
            ua(this.h, e, f, c)
        } catch (U) {
            try {
                ua(this.h, e, {
                    context: "ecmserr",
                    rctx: a,
                    msg: T(U),
                    url: y && y.g.url
                }, c)
            } catch (Ha) {}
        }
        return !0
    };
    var T = function(a) {
            var b = a.toString();
            a.name && -1 == b.indexOf(a.name) && (b += ": " + a.name);
            a.message && -1 == b.indexOf(a.message) && (b += ": " + a.message);
            if (a.stack) {
                a = a.stack;
                var c = b;
                try {
                    -1 == a.indexOf(c) && (a = c + "\n" + a);
                    for (var d; a != d;) d = a, a = a.replace(/((https?:\/..*\/)[^\/:]*:\d+(?:.|\n)*)\2/, "$1");
                    b = a.replace(/\n */g, "\n")
                } catch (e) {
                    b = c
                }
            }
            return b
        },
        S = function(a, b, c) {
            I.call(this, Error(a), {
                message: a,
                file: void 0 === b ? "" : b,
                line: void 0 === c ? -1 : c
            })
        },
        X = S;
    X.prototype = aa(I.prototype);
    X.prototype.constructor = X;
    if (t) t(X, I);
    else
        for (var Y in I)
            if ("prototype" != Y)
                if (Object.defineProperties) {
                    var Ea = Object.getOwnPropertyDescriptor(I, Y);
                    Ea && Object.defineProperty(X, Y, Ea)
                } else X[Y] = I[Y];
    X.v = I.prototype;
    var Ba, Da;
    if (ia && !B(C)) {
        var Z = "." + x.domain;
        try {
            for (; 2 < Z.split(".").length && !B(C);) x.domain = Z = Z.substr(Z.indexOf(".") + 1), C = window.parent
        } catch (a) {}
        B(C) || (C = window)
    }
    var P = C,
        Q = new za,
        Fa = function() {
            if (!P.google_measure_js_timing) {
                var a = Q;
                a.g = !1;
                a.h != a.i.google_js_reporting_queue && (N() && ca(a.h, Aa), a.h.length = 0)
            }
        };
    Ba = new function() {
        var a = void 0 === a ? z : a;
        this.j = "http:" === a.location.protocol ? "http:" : "https:";
        this.h = "pagead2.googlesyndication.com";
        this.i = "/pagead/gen_204?id=";
        this.g = .01
    };
    Da = new R;
    "complete" == P.document.readyState ? Fa() : Q.g && fa(P, "load", function() {
        Fa()
    });
    E = function(a, b, c) {
        return W(a, b, c)
    };
    F = ea;
    v("vu", W("vu", function(a) {
        a = a.replace("&amp;", "&");
        var b = /(google|doubleclick).*\/pagead\/adview/.test(a),
            c = H.h();
        if (b) {
            b = "&vis=" + D(c.g);
            var d = a.indexOf("&adurl");
            a = -1 == d ? a + b : a.substring(0, d) + b + a.substring(d)
        }
        c.j ? c.u(a) : c.i.push([a])
    }, void 0));
    v("vv", W("vv", function() {
        F && G(H.h())
    }, void 0));
}).call(this); < /script><script>vu("https:/ / googleads.g.doubleclick.net / pagead / adview ? ai\ x3dC1mbSWuWCWpbpBZmj7gTA5pdQxcefvU2 - 0 LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCR_1M1uAxhj6oAwGqBJwBT9CLJdeYuxJG8fGXHH5RoPsNYaFPR5 - o5xwGZooowC7oJMTQxxT4FaRar4tGEde2LbTvczshlk8uLyxRYyBKtfgOBdQYlaKOxpMYYFHDxcp64H4uOeYhbgMj8YSt4KcUMmOOb2qj5KXV1pCdKenHzG0BfRYJ - hyf1jkBqK8i1xp0XhMDEQ6nhNP - nOTfd - 3 P0KmQw_clDGD4iYB8gAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ\ x26sigh\ x3dfhQLuBG6JQw ")</script><script src='https://track.adform.net/adfscript/?bn=21309103;rtbwp=WoLlWgABdJYKm5GZAAXzQABpGU2jZyCIws8-Iw;rtbdata=x-QconeWRJpRIyV93aZy1poozXrAAMijdsNQjz-nw5sU0KGQ6HL-F_Q3DyFEAUP2v--GsXzrdUNdFQkk2YJ0dw6SBWzFk3BOrPKR0OJA518rLKsupw-FVetiv3nNlkfbZirrDrM-McrYFvQfQahirzrjm103wDlBI4IrISza4ajmTLNBterv3dd7wlPuTe7TQTam0Twne0XE4_sQZGQgqA2;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=C1mbSWuWCWpbpBZmj7gTA5pdQxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCR_1M1uAxhj6oAwGqBJwBT9CLJdeYuxJG8fGXHH5RoPsNYaFPR5-o5xwGZooowC7oJMTQxxT4FaRar4tGEde2LbTvczshlk8uLyxRYyBKtfgOBdQYlaKOxpMYYFHDxcp64H4uOeYhbgMj8YSt4KcUMmOOb2qj5KXV1pCdKenHzG0BfRYJ-hyf1jkBqK8i1xp0XhMDEQ6nhNP-nOTfd-3P0KmQw_clDGD4iYB8gAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_3J-OtMsxklPsOxp9xTxDF2p1dIPg&client=ca-pub-5439285203515723&adurl='></script><script src="
https: //tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dC1mbSWuWCWpbpBZmj7gTA5pdQxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCR_1M1uAxhj6oAwGqBJwBT9CLJdeYuxJG8fGXHH5RoPsNYaFPR5-o5xwGZooowC7oJMTQxxT4FaRar4tGEde2LbTvczshlk8uLyxRYyBKtfgOBdQYlaKOxpMYYFHDxcp64H4uOeYhbgMj8YSt4KcUMmOOb2qj5KXV1pCdKenHzG0BfRYJ-hyf1jkBqK8i1xp0XhMDEQ6nhNP-nOTfd-3P0KmQw_clDGD4iYB8gAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ\x26sigh\x3dwhC2k_TsUo8","WuWCWraOBZC66wTU-o2AAw","CJb-h4H9otkCFZmRmwodQPMFCg",true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BkR6wWuWCWpbpBZmj7gTA5pdQAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB','',1940100807,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d1259223331\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dBkR6wWuWCWpbpBZmj7gTA5pdQAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CJb-h4H9otkCFZmRmwodQPMFCg"></div><div style="bottom:0;right:0;width:276px;height:60px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAACBSURBVBjTbZABDoAwCAO7H/T/r3UrLRuJqFNCqQfAf6yK+rgZqKpOsjMpcNQ+KtsVStWXstTPe6rjvWXX2/9OR0g6eFwvd8HbHI+UBlJD8VjzcAALPdz1pUmQrWDVPUAysYCa2+y277ks49wJskWDZ2cmt8Hct8Fe73TpGRs0CvABWtIF4m94YMsAAAAASUVORK5CYII=') !important"></div></body></html>
                                    

#8 JavaScript::Write (size: 6, repeated: 2) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#9 JavaScript::Write (size: 1215, repeated: 1) - SHA256: 12aee19142fca45ddb3914512d0c345d67fe7de9c911ac984ff4a18b920cd0c8

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjstl6H5-eVcfmaGrSjqGAUACA_eLN0lwZqb_p4_5aTvo8pnqrYYdbW_PUADMEYYnXf-zAK6u5JyZY586c4imerLGNcZPE1uFnlwJMXpcVP1VCGbeC06BZBlxlVb6OyhU4SBhZBZIfNfqSrbp5I8_iSM_tOawS9ufAnIrRvzHCHUcZKAFk0i71INZRCDvfu_WK9ldXtPik-2jaDUYy-vHXvc9TagpsfK8S9hQQX3j-rmzaFSz9u3wIU3aY_-jCMI4WcjltVwcM_R_YKQ1Axi0Zun8dvg99wCkLnouyH0tdAGAUpnmFRTaS8spdW39_xYLog4ILdYilhcTDSBrZfwaHy7xgwiihCS3xjqTQ23ygBYSC9fLulLtzt0zR4fzRRe9CQNYwmrqAPkf534nzp7HiKgHvpYKJvpOKvfawz8R39vtnZ-FV9-3uDbCXlU5Pr5mA6wSJHoKVag1LZbOrWRHdxztGWYAafGpxn276SI74-UCYGobh03u8Odh8vJp4oIcDlVGoC8jGOQkU8cbeG7Qeksz0gD24QlHY40Hevb86-XLsUfsZqkZFzBoOCoQzUX4r44ohVYtY-vAvhn9CO8j3eS-8MxIKvig81d9VRp2NUD1yhhbJU0YCYD21v4G7AbUhnv5nkPazvQtudfKpVPCoWj7kp_leBJW61L3lo0D0biJ7z-mJQnBnqHEvQ3pJjqnwfc7tb-Z3L-8__2NLrmdbfJDjUU1GQOVFER0C_b8-2o5vISp1aK3JwBvMR4igB0nYg_UcBthHq-Ir8cvD5jdLR3HfWWnzPc0fFDMV2fMFEGuQVf-&amp;sai=AMfl-YSzMZEIspYZ9BkD-jRFc0wRHpWMWI-aheFXXfn1x1Sit30xDiFahwgwaUCb6rA5pgzca-tv7D_HHlkqujIZS0zVVuw3379c95P-tDJ00yY&amp;sig=Cg0ArKJSzF7UuDpKg06g&amp;urlfix=1&amp;adurl=https://www.priceline.com/" > < img src = "https://s0.2mdn.net/8405476/priceline_160x600.jpg"
alt = "Advertisement"
border = "0"
width = "160"
height = "600" > < /a>
                                    

#10 JavaScript::Write (size: 75, repeated: 1) - SHA256: 0b445e6d6e3fb7bd23f6843e0d250bbc6b9aa29f7d2dd0adaa895dae602034dd

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_3890387030" >
                                    

#11 JavaScript::Write (size: 85, repeated: 1) - SHA256: cf75c6c5c62f8e35ab23c17e8044f52ccf8570fffa83d94075b66c9adca45223

                                        < div id = "+ADFP1x"
style = "width:468px;height:60px;" > < /div><i style="display:none"></i >
                                    

#12 JavaScript::Write (size: 18, repeated: 1) - SHA256: 0304f6f192da1241555759cbd47b6e2f7267f1661188f93500fb12bab9c28a87

                                        < div id = "ad_unit" >
                                    

#13 JavaScript::Write (size: 1376, repeated: 1) - SHA256: d2f85d0222075609898937a513492227073a5f816e49c89ba8a0a74778329c38

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "198"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&amp;output=html&amp;h=600&amp;slotname=5224417502&amp;adk=1214759340&amp;adf=807048394&amp;w=198&amp;fwrn=4&amp;lmt=1518527816&amp;loeid=38893312&amp;rafmt=1&amp;format=198x600&amp;url=http%3A%2F%2Fmondovi.wifeo.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=4&amp;wgl=0&amp;dt=1518527833085&amp;bpp=46&amp;fdt=55&amp;idt=305&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=2981923832185&amp;jscb=1&amp;jscd=1&amp;frm=20&amp;ga_vid=866913345.1518527833&amp;ga_sid=1518527833&amp;ga_hid=781620163&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=481&amp;ady=1148&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502%2C33895412&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;dtd=341"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#14 JavaScript::Write (size: 1396, repeated: 1) - SHA256: 44b9f6aeaeee20af94151e9b925b0dccde0b4c1682d7c8b463d8274347b415a7

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "683"
height = "60"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&amp;output=html&amp;h=60&amp;slotname=5224417502&amp;adk=1940100807&amp;adf=807048394&amp;w=683&amp;fwrn=4&amp;lmt=1518527816&amp;loeid=38893312&amp;rafmt=1&amp;format=683x60&amp;url=http%3A%2F%2Fmondovi.wifeo.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;dt=1518527833142&amp;bpp=37&amp;fdt=301&amp;idt=415&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=198x600&amp;correlator=2981923832185&amp;jscb=1&amp;jscd=1&amp;frm=20&amp;ga_vid=866913345.1518527833&amp;ga_sid=1518527833&amp;ga_hid=781620163&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=263&amp;ady=1778&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502%2C33895412&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=435"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#15 JavaScript::Write (size: 1404, repeated: 1) - SHA256: 174d7000becf882ea9255556826b9c569931547d3d98ae12e2eca085cda5aef0

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "683"
height = "60"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&amp;output=html&amp;h=60&amp;slotname=5224417502&amp;adk=1940100807&amp;adf=807048394&amp;w=683&amp;fwrn=4&amp;lmt=1518527816&amp;loeid=38893312&amp;rafmt=1&amp;format=683x60&amp;url=http%3A%2F%2Fmondovi.wifeo.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;dt=1518527833179&amp;bpp=7&amp;fdt=410&amp;idt=550&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=198x600%2C683x60&amp;correlator=2981923832185&amp;jscb=1&amp;jscd=1&amp;frm=20&amp;ga_vid=866913345.1518527833&amp;ga_sid=1518527833&amp;ga_hid=781620163&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=263&amp;ady=3802&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502%2C33895412&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=3&amp;dtd=578"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#16 JavaScript::Write (size: 1863, repeated: 1) - SHA256: d8b7573c4ffe80153295c4d3e58a3ff73ba6fff12dbf90c82d5d93ec81fa05ba

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BnLRSYrrk8X2LSQziefqAFIvLJSHC_6evidvKHE2TWpZ-fYp52dlpQxUG8AiRzUQ369xak&dbm_d=AKAmf-DVMqqbUZ7PpD9nF9973dphSS_fvGIqp3huKk2zweQ7e2Vcwb6UWy2aQZ4JQyrXApP3zwM6FZc6clBb5_PI5iekgeD9wY0kkxE72N4CLX30K3nX4TA9K0rDOY2XRpT1VDdri0RsJLU7ZSqfiM-OYdrJL57ac6gH8r_-4zadt2VguE-NWAMxzccIbcjsKQh8-fcEhJum7cpGVqmn5xWwe8QA8PkH0tkhoxklcBxsXGhMUrYkkKwWP7lVll6CY2xAYbLHbKo5Z0be1s3tOCzEd-ILup04mjFcFQR0f-0J-p_j720BRyCMLGEXNAmCBudBCdZmpnlikM9Ig5O1F793NBlAVXVdJds3V9uQaSipGMua5zc1NX8n-Dx3MvGDXm-xl8iXaSTFWW73Ln-US6whibSYC4-4joUJMsllhrhC3UIFsH9xdT4LQZnweIi0mLeV0J9H5u1oysgwdMBBMZI2T6JwcENJDMvmKadQp0vRyRYs46XGCngqfdWV1BIqWs47BWxJDk89wlC1p_uokZGp9BDq_AXEScfp93j7wUj29oR9Sh9Ru1Ei5pPEaC96HPWx9SZlao_m7sg7lh8EeCV4h7UXJiA5uRZweugDp9sO-QhItqlKHt-deWh4Wf685pcRnJae75qESOItim7-cej0bea6P0kLsbkdilGz4BWkkdwUbldEuTikPK2Ma2UHdiprd46j2BkMAjTbgjwwSAK-jrfkTUhXjUIwnXHuZzh03JUoLcDzspU7c1a8q_DpShD72TecgEPTobXSOQtlbOwJhepvYhl6xuRxyJmUqdsjVLxO5k7Z163pGC507ujykj1Na7vgE0eVUOC7g0MAYI-c0qjBcOJXTjAu9-TfebY1LJ7WhsluA4cVYgFxGw60CVvq8SG1AuW8D373tVgrlyor7APRlsWEuO54P-4nB_XRL_LvSijd-SCxoSN-yWz2RT3_L7brdo1WJ44GTr_-5WZ5JabGf1OEm2gZxHaQU0Z3IX5K5aYTsgO77WuNmhoo0bez8ucFxLuDC_dqVbSr7JyNrJH2WOHAfyyeIXGxy2oldS95vm2TX65V0Z_pzIjb0_iWLpQCXsFI-wTUEqIR01bhdRXl1aWn1YOyAu02UziqjsSMjBnWQoYvl4Ulp2IsMsIRiMWs58LS3CKjeMFU4rM2AXIF18fzwMWvAQ8UMyzXXg3cPPRfQvuSjqueJhhpoIh485ga8yo6n5dl7E7dXgkHZLF0sYRP0bWVwgevOL8JzJ5uToNW6szbl0mwLQ5lFwUIKBtf7-zx4DhaAOS-WJbCbrPN8jQa5TmITd0tLcHO_bwPkElj3e7njDrE7sYJFSSXwG0Lasp1-oo0JVyMTprbBqBN8VPXzFKlAA49heq9kaJcPIuwKu5CXyLdxAEeEF5mmZtNHeXXAFrXnOdUM5iXYn72p3YQCXzAbDxVTNh2PGN5OfNFrg_mRHtfMZdtglU2-xS8laCbITaCptkaOBF_SB1PZ3rbRNZfq5bC2r_JQMaWvc2KDfVh6rS335LJYz_gq200JNH8DMQZuLk2cX9OgvqIFsPigOozXWk1SMf_uHc2I6_8sKYQeXlyla6tSA-eyWiT2Ml9o4stYVlRWNGIbJ5DdhzXdw&cid=CAASBORoIJ8&rfl=3%2C%2Chttp%253A%252F%252Fmondovi.wifeo.com%252F%240" > < /script>
                                    

#17 JavaScript::Write (size: 105, repeated: 1) - SHA256: 3254883964d2bf22491ed64b605b062b34ec760710ec1abba3c4b9ca04803428

                                        < script type = "text/javascript"
src = "https://s1.adform.net/stoat/607/s1.adform.net/bootstrap.js" > < /script>
                                    

#18 JavaScript::Write (size: 978, repeated: 1) - SHA256: 5c81ab0ab6a7eaa2bf664996e23042d5d43be9469b970f690ac3e80efe08169d

                                        < script type = "text/javascript"
src = "https://track.adform.net/adfserve/?CC=1&bn=21309103;rtbwp=WoLlWgABdJYKm5GZAAXzQABpGU2jZyCIws8-Iw;rtbdata=x-QconeWRJpRIyV93aZy1poozXrAAMijdsNQjz-nw5sU0KGQ6HL-F_Q3DyFEAUP2v--GsXzrdUNdFQkk2YJ0dw6SBWzFk3BOrPKR0OJA518rLKsupw-FVetiv3nNlkfbZirrDrM-McrYFvQfQahirzrjm103wDlBI4IrISza4ajmTLNBterv3dd7wlPuTe7TQTam0Twne0XE4_sQZGQgqA2;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=C1mbSWuWCWpbpBZmj7gTA5pdQxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCR_1M1uAxhj6oAwGqBJwBT9CLJdeYuxJG8fGXHH5RoPsNYaFPR5-o5xwGZooowC7oJMTQxxT4FaRar4tGEde2LbTvczshlk8uLyxRYyBKtfgOBdQYlaKOxpMYYFHDxcp64H4uOeYhbgMj8YSt4KcUMmOOb2qj5KXV1pCdKenHzG0BfRYJ-hyf1jkBqK8i1xp0XhMDEQ6nhNP-nOTfd-3P0KmQw_clDGD4iYB8gAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_3J-OtMsxklPsOxp9xTxDF2p1dIPg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=1x;6627;set=en-US|en-US|1176X885|10.0452|450|50|24|8|3|7|1;fd=0|0&CREFURL=undefined" > < /script>
                                    

#19 JavaScript::Write (size: 6896, repeated: 1) - SHA256: 24d78d1186a68448bea280b6fa9bd494d7eb653726d4ea92b1d4f325aa18531d

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 16 px;top: 0 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc, .abgcp, .cbb {
    opacity: 0;
}.jar.abgc, .jar.abgcp, .jar.cbb {
    opacity: 1;
}.jaa.abgc, .jaa.abgcp, .jaa.cbb {
    display: none;
}.abgc {
    cursor: pointer;
}.cbb {
    cursor: pointer;height: 15 px;width: 15 px;z - index: 9020;
}.cbb svg {
    position: absolute;top: 0;right: 0;height: 15 px;width: 15 px;
}.cbb.cbbbg {
    fill - opacity: 1.0;
    fill: # cdcccc;
    stroke: none;
}.cbb.cbbcross {
    stroke: #00aecd;stroke-width: 1.25;}.cbb:hover{cursor:pointer;}.cbb:hover .cbbbg {fill: # 58585 a;
}.cbb: hover.cbbcross {
    stroke: # ffffff;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 0 px;top: 0 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# cdcccc;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://mondovi.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D&amp;usg=AFQjCNEspwP60z8lA-hOU3qvw3qojkVBKQ"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"><svg><path class="cbbbg" d="M0,0l15,0l0,15l-15,0Z"/ > < path class = "cbbcross"
d = "M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5" / > < /svg></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:91,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/fr.png\',alt:\'AdChoices\',t:\'Choisir sa pub\',tw:69,t2:\'\',t2w:0,tbo:0,att:\'adchoices\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:600,\x22width\x22:160,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCyv3lWuWCWuyNDIyd6gT_tJfYBrLk3bZQ0OzA2ckG8C4QASDU7pIKYMPcpIWYGMgBCakCfNlHqqCstD6oAwHIAwKqBLABT9C34XHQOs1K9CY21Kms6B2FWszh0QFMck6Pv9Y_3se-USqqX1gNAwACzYLs3o8JcBd9rqqfaSkby1RdSrhIX9xbqSMlw8Avj-FSfgitWEIHzT9amiOsoX1OxNMtk7wy2DMRJSEMEgBjt36w4NUcp4MjLX0BFyLVYBGZ2_-wOJIgkEnHwxKOMveiAVBsYfpg9LBs_kwjX-oBFYmyTfcrfhbw8dCZOAJrqIBBZ5DSkgTgBAOQBgGgBkyAB6PvsnqoB6a-G9gHANIIBwiAYRABGAKACgHQEwDYEwM\\u0026sigh\x3dXm_MN9XwhJ8\\u0026cid\x3dCAASBORoIJ8\x22,\x22close_button_token\x22:\x22IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22mute_confirmation_text\x22:\x22Nous examinerons cette annonce afin d\x27am�liorer l\x27exp�rience utilisateur � l\x27avenir.\x22,\x22pub_feedback_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22pub_feedback_confirmation_text\x22:\x22Nous utilisons vos commentaires pour �valuer les annonces sur ce site.\x22,\x22closing_countdown_text\x22:\x22Fermeture de l\x27annonce en cours�: %1$d\x22,\x22attribution_text\x22:\x22AdChoices\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://mondovi.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\\u0026usg\x3dAFQjCNEspwP60z8lA-hOU3qvw3qojkVBKQ\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22Signaler cette annonce\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22options\x22:[{\x22text\x22:\x22Contenu masqu�\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inappropri�e\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce affich�e trop souvent\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inint�ressante\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22Choisir sa pub\x22,\x22closed_message_text\x22:\x22Annonce ferm�e par %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22Signaler cette annonce\x22,\x22confirmation_text\x22:\x22Nous allons essayer de ne plus vous montrer cette annonce.\x22,\x22see_my_google_ad_settings_text\x22:\x22Afficher mes param�tres relatifs aux annonces Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22Annonces %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20110914 / abg.js "></script>
                                    


HTTP Transactions (103)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 13:16:56 GMT
Server: WIFEO
Set-Cookie: statcountmondovi13=ok; expires=Wed, 14-Feb-2018 13:16:56 GMT; Max-Age=86400; path=/; domain=mondovi.wifeo.com
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5111
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5111
Md5:    bfec83c15eeaccb8659b59bf35f50eea
Sha1:   7092e9517ad2752b65752943a0d6b7052270fd9e
Sha256: bf9434944627ce9f4e18e3ae439625cee70c7936629d3267ce2c89930b7be411
                                        
                                            GET /ui/1.12.1/jquery-ui.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         151.139.237.113
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 13:16:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2016 16:34:16 GMT
Vary: Accept-Encoding
Etag: W/"57d97c08-3dee4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   83774
Md5:    ecd6894f51622e86cb5fbf4b5b76fa3e
Sha1:   c153c836d34a21a0f3cd7f493057afa4e70530bb
Sha256: 6e73982fc6ce2f215fd90c977d6f71839a438dd8633f19c5743d51eb1a59566b
                                        
                                            GET /format.css?1517584656 HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Sat, 13 Jan 2018 10:55:45 GMT
Etag: "28d2-562a6391c9062-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 137883624
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2347
Md5:    76fb3be90beb296cc7b42874ec4551bd
Sha1:   a9c627e058986ed96fcd4809c428f480d2df50db
Sha256: 17dd38bd16536a570e4729b6220885ea2acb2d7556db7a62d4702b96e3d43f48
                                        
                                            GET /images/accueil.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Mon, 15 Feb 2010 20:50:38 GMT
Etag: "83e-47fa9c4fda380"
Accept-Ranges: bytes
Content-Length: 2110
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2110
Md5:    70be71c6db66d9ecc98762871121f990
Sha1:   e59b0f6348792022d4d8fd4d52f513b9e32deae6
Sha256: 44a1deb1aec61be2a7550a9aacdfef00f0e5b97418490d9e61d8f543d4118886
                                        
                                            GET /images/Glossaire.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Thu, 11 Feb 2010 17:17:21 GMT
Etag: "811-47f5652dd6a40"
Accept-Ranges: bytes
Content-Length: 2065
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2065
Md5:    67eae3463538fdc36ec1b5f5fa9637df
Sha1:   8abeec770dfd1014ba8dd047baa923f155c900de
Sha256: 47ea7c9b9a7e5ba57a1a537fcff1f1e44918874a40f4ba1ea05b1c6a59a622e4
                                        
                                            GET /images/misajour.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Tue, 02 Mar 2010 11:50:11 GMT
Etag: "8d2-480cff7cf82c0"
Accept-Ranges: bytes
Content-Length: 2258
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2258
Md5:    1542133fc87b85c1bbca4dace3b1e344
Sha1:   6d69b5a6c627787c059c4e345ebdcd324e1553fc
Sha256: 3c7943edd8d35aa12bf0273fd3d790ddd583e7e22e72871a3cf35995c13f0b64
                                        
                                            GET /images/chrono.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Thu, 14 Jan 2010 08:19:51 GMT
Etag: "e2d-47d1b8d0ef7c0"
Accept-Ranges: bytes
Content-Length: 3629
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3629
Md5:    dfef66e4f1e2e9615262144e4c8557a1
Sha1:   38c1f1b47ddb064ad2b7bf36f01b0f478a1bb439
Sha256: b6565359b8bc2d6888b6d077656e96533d29f8b5f96c2eb7d385a8d065f8f42a
                                        
                                            GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30028
Date: Thu, 01 Feb 2018 16:43:46 GMT
Expires: Fri, 01 Feb 2019 16:43:46 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1024390


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30028
Md5:    543b05db46ecc6a1312a23e7e7a8820e
Sha1:   aff453218f0b6c281ed53da6997d4b1b9e990007
Sha256: 31c0d9866a5018d56375949c0222370a5b48d6ea6442d04b0c689217a68dffac
                                        
                                            GET /images/mondovideo.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Tue, 16 Feb 2010 10:39:01 GMT
Etag: "c27-47fb557853b40"
Accept-Ranges: bytes
Content-Length: 3111
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3111
Md5:    2ac18e88fcdd27e9aea4ffd8724444a7
Sha1:   85475acaa5259e5f8fdedfa8075842a5276cd696
Sha256: d2470a8f2663f21f63be9bb5f766f407087680fe71f9e14c3540032cabb25856
                                        
                                            GET /wifeolib.js?v2 HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Fri, 08 Jul 2016 07:54:20 GMT
Etag: "0-5371b1c31bea0"
Vary: User-Agent
X-Varnish: 132739308
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:16:57 GMT
Expires: Tue, 13 Feb 2018 13:16:57 GMT
Cache-Control: private, max-age=3600
Etag: 6502682663518856185
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26103
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26103
Md5:    6ef11d0463c07a28cd7cf2803534c33b
Sha1:   22c83cf48df58218feda2b7c44729bbbd3c43fdc
Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
                                        
                                            GET /wifeostatic-s3/ressources/bootstrap4/override-bootstrap.min.css?v1.31 HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Thu, 01 Feb 2018 18:16:02 GMT
Etag: "1512-5642a96a81a13-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 132011413
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1506
Md5:    d4e62396546f6095730831eb5f5fda6a
Sha1:   6c5d7f7836f9ba33bd8f93510717a43f01d20617
Sha256: 357e2e41dc254f51f3dbc7735bf2594966b3f5ab099c9ade250842b8a8f56ad3
                                        
                                            GET /mondovi/mod_html27546_1.jpg?6245 HTTP/1.1 
Host: data0.eklablog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         62.210.199.100
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.2.1
Date: Tue, 13 Feb 2018 13:16:57 GMT
Content-Length: 7778
Last-Modified: Sun, 22 Nov 2009 17:19:24 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7778
Md5:    923cc0f54956e4a35504619458be64ec
Sha1:   d6438f440a8997bb088854b0021eb335ff77c89c
Sha256: 55fb7fd39b4cbd546556ebd78d231d8863ac87325ac14ef842681cb04570da1c
                                        
                                            GET /v5/img/logo-wifeo-160.svg HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT
Etag: "1963-53d135b636155"
Accept-Ranges: bytes
Content-Length: 6499
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   6499
Md5:    e036707eac2a661d5e7a7d8950fc6e7f
Sha1:   dbec14ebd1fa8d3fe6c8cdddbc4355f93605e808
Sha256: 8291f64e8fb978d4ad3024326d1f4af37aaf998dc1bb8293ad0a96628640a49d
                                        
                                            GET /images/generations.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Sat, 30 Jan 2010 14:43:55 GMT
Etag: "b05-47e62c80c80c0"
Accept-Ranges: bytes
Content-Length: 2821
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2821
Md5:    eebba429460d066a1a69061720c8a460
Sha1:   b6219b35f161c6aa732d749a5d171498b8cd0a86
Sha256: 1411f017827c2ecd707bb31f291eeab8e4bba29ef28fdb928069a5c284915003
                                        
                                            GET /compteurs/count.php?site=mondovi&idd=63091&style=envrac.gif HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 593
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   593
Md5:    5caae3bc3d30283d61770418769b6cef
Sha1:   1909448153d81bab08a20d297fe67ea1e4aeb1b1
Sha256: badbdce99fcd1f5dc399790cd5a6c115cabad9b21c2c6d9ce68992086f38495e
                                        
                                            GET /ads/promo/showads.js HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Sun, 07 Aug 2016 13:34:56 GMT
Etag: "16-5397b5d84d85a"
Vary: User-Agent
Expires: Sat, 14 Apr 2018 13:16:57 GMT
Cache-Control: max-age = 2592000
X-Varnish: 137883627
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   22
Md5:    980a6c3dda1f57bedff29b069d7394e1
Sha1:   5d303a833981c96a17b06b1177010ba04c2f1736
Sha256: 3a769c0c24dc5601ec54f39b6a608148dd6664a9378eb888fa9e72da3206c92f
                                        
                                            GET /wifeostatic-s3/ressources/wifeocss/common-vz.min.css?v1 HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Tue, 16 Jan 2018 14:35:44 GMT
Etag: "1850-562e5a557b6d4-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 132011416
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1958
Md5:    300893f7bd28eb1607279ed8ad2b60a4
Sha1:   811094e55d549ea270d0a7debf1b3e24949b1b72
Sha256: ccdb2a9d9e13d8a1ad6f96f0edff0cca0283c849e5a6d8de6598ea05cbcd869a
                                        
                                            GET /images/maires.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Fri, 05 Mar 2010 21:36:41 GMT
Etag: "92a-4811482d26c40"
Accept-Ranges: bytes
Content-Length: 2346
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2346
Md5:    62ee2eaf03ce846f7295621bf6cb4eca
Sha1:   cdbc7d579ee98e57af4e176c4c07125d1c6f6e8d
Sha256: 92a94ca9eac67eaf910244507bac1a83a674c3ec294f9856e446b96656ccb687
                                        
                                            GET /images/convoi2.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Thu, 07 Jan 2010 17:56:45 GMT
Etag: "64f-47c96cb531140"
Accept-Ranges: bytes
Content-Length: 1615
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1615
Md5:    8953c757ecaf44a39ba89ac0d20429dd
Sha1:   1ebe5282eff5690a93e7df7398e612d3cc674269
Sha256: 3808e563fa2747c147af8163ece54eddc8c5feb24aeae6aadbe4ecab73689d02
                                        
                                            GET /images/histoire2.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Sat, 09 Jan 2010 10:06:35 GMT
Etag: "8e4-47cb8758f60c0"
Accept-Ranges: bytes
Content-Length: 2276
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2276
Md5:    359f04b2cffc77c4b7116ed3818eb289
Sha1:   ae7c2defa3b3c21230b8b829956451157e4cbbd3
Sha256: 2619dde6af45ab3c734ae1c62b8159b1c95c41715957dcfb55fc299e1d6fbc74
                                        
                                            GET /images/edifices2.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Thu, 07 Jan 2010 17:49:20 GMT
Etag: "823-47c96b0cce800"
Accept-Ranges: bytes
Content-Length: 2083
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2083
Md5:    e4c30ba477e51eecb0d369f353ecec9d
Sha1:   3b26ef7068df9b2453e86863b248253a8df6266f
Sha256: fcbf3b4b0e14f200614c8b35a2ef61f8beb88ba0071f4d93b8d65cc07e31c4ba
                                        
                                            GET /images/rues2.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Thu, 07 Jan 2010 17:53:48 GMT
Etag: "783-47c96c0c64300"
Accept-Ranges: bytes
Content-Length: 1923
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1923
Md5:    2956b42f7fb42d15dad407d7ea341270
Sha1:   aa8f6e496eedf0e1c112a98c88180bc3982ea405
Sha256: 69ac8cf7d44d3b312ca4fe4088a3dc7c65ded88b1e1ca3b77d72bd58fa578330
                                        
                                            GET /wifeostatic-s3/ressources/bootstrap4/css/bootstrap.min.css?v1 HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Wed, 13 Dec 2017 10:10:24 GMT
Etag: "1defc-56035f9cf47e4-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 132739314
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19956
Md5:    28d3bfd1e27cb53c747cdeb900c24bc9
Sha1:   2308c55b1740d281e4fd5a778391df8b0f6d01c2
Sha256: f33aa667ef9d81d76aa28ec9166a996ad9e5874ce413be6d33f839b0cee8108d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 23:25:56 GMT
Expires: Mon, 19 Feb 2018 23:25:56 GMT
Etag: AE647C8BDA24ECE75914CDAC478CC0851A182CAB
Cache-Control: max-age=554338,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp15
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    7d3d17abde90664c86b73397e2762d19
Sha1:   ae647c8bda24ece75914cdac478cc0851a182cab
Sha256: bd2cf3a65ef71b899a20502a517cbd41c1d3ac5ebeb5f4986ccab0cb3789a289
                                        
                                            GET /wifeostatic-s3/ressources/wifeojs/masonry.min.js?v1 HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Mon, 04 Dec 2017 19:54:23 GMT
Etag: "5e12-55f8915c1ffa8-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 141622101
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7356
Md5:    161527114a2803aff504bcfb294f422f
Sha1:   64f32ea2a09a4cc0d0d0eb52245954bc387d8dcf
Sha256: af0b36296aa50c8194a84c2a2dcf7cd3049f75a1b3c41df121047837cb5ad4d9
                                        
                                            GET /images/projecteur.gif HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Mon, 11 Jan 2010 21:37:44 GMT
Etag: "1bc-47cea58fcda00"
Vary: User-Agent
Expires: Sat, 14 Apr 2018 13:16:57 GMT
Cache-Control: max-age = 2592000
X-Varnish: 141622104
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Content-Length: 444
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 32
Size:   444
Md5:    8c4ce544be4398e65fbd9c2c1eed0dc3
Sha1:   5768993bf7eef6a46fbbaf7f206ca80931a65ebc
Sha256: 06235f889878dbe96cdf090d78250d73b43c6cdfa8beb957b7df898540a867fe
                                        
                                            GET /wifeostatic-s3/ressources/modules/diaporama/lib.min.js HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Mon, 26 Jun 2017 12:20:58 GMT
Etag: "2ddc-552dbfbb92688-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Expires: Sat, 14 Apr 2018 13:16:57 GMT
Cache-Control: max-age = 2592000
X-Varnish: 132739328
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2871
Md5:    69b86adc42e0a4eac12212456419cd76
Sha1:   0fbe0531bc79088d521f49a43c47ed1dfb454330
Sha256: a43cf679482b0506b59d7922534849fad7f6f6b47b0c2b95db8fd6fab3f212df
                                        
                                            GET //wifeostatic-s3/ressources/wifeojs/common-vz.min.js?v1 HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Sun, 04 Feb 2018 16:33:28 GMT
Etag: "4356-5646581615483-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 142088516
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5204
Md5:    e2c72120b1d395a6e2ed0b1a9b5e4872
Sha1:   ed44ea6f6e70337921507029dfc5110ea426acb1
Sha256: 9bd5164d85c8e69dba75f30e73275ae1a29a4cd90c3c23bcbbcf3e32a055d5e0
                                        
                                            GET /images/theatre.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Fri, 05 Feb 2010 17:39:37 GMT
Etag: "cad-47eddef72e840"
Accept-Ranges: bytes
Content-Length: 3245
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3245
Md5:    560c7384c6b0d6c915778c7390d38c72
Sha1:   d20abd6229c150301210ea77aaabb678a6064013
Sha256: e8d9d39c0efa040441d72400e8bc03af89f198894e9438a2db8d9cde555f2e61
                                        
                                            GET /images/photo.gif HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Wed, 13 Jan 2010 22:15:46 GMT
Etag: "17e-47d131cb02880"
Vary: User-Agent
Expires: Sat, 14 Apr 2018 13:16:57 GMT
Cache-Control: max-age = 2592000
X-Varnish: 139121249
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Content-Length: 382
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 50 x 38
Size:   382
Md5:    4af579724e0d7a8bc21f2146445acbd4
Sha1:   4b751db17d164afb61302e558a1bd63988f70be9
Sha256: a22e8f5d90c9ad7f112b320f9f2cb1af87e0a9c9be4bfb963945394ce5f28c0a
                                        
                                            GET /images/vrai.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Wed, 16 Dec 2009 16:46:12 GMT
Etag: "1037-47adb3e825d00"
Accept-Ranges: bytes
Content-Length: 4151
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4151
Md5:    aa1a4df88e978da4f72508c1f92094bc
Sha1:   cf94cba8836059f8a6634d220a1188708a0835c9
Sha256: b07ce7d5092711b035e602b4956557eaac6af3064b70c914e8ce81c6fc36dd71
                                        
                                            GET /images/maintenant.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Sat, 25 Sep 2010 08:10:13 GMT
Etag: "7d7-49111064ca340"
Accept-Ranges: bytes
Content-Length: 2007
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2007
Md5:    45e0fa7d24c86d1d3d557cbf121d4590
Sha1:   6432378505c1ae1ce62f722a70fc9e6380ca395c
Sha256: f82d1c560989f5179d9434078f9884dda90426b5e072b90821ec46e0a07c05f4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: 6300C75D0A453F081EC693DE6CD52E28574DC944
Cache-Control: max-age=511435,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    8f6cb4f522fb2149c4306d80e30d1119
Sha1:   6300c75d0a453f081ec693de6cd52e28574dc944
Sha256: 12a51058b7548f36c2b0386ed26ce51fdfb5e44a35e2b4fe4592824e86412e4e
                                        
                                            GET /images/intromondo.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Mon, 07 Dec 2009 12:38:55 GMT
Etag: "16d2f-47a22bd9555c0"
Accept-Ranges: bytes
Content-Length: 93487
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   93487
Md5:    7fc5ad359a48b07bf1e3bde62d953626
Sha1:   1c67930172838ae478030a9a78bdde4ca5ce97ac
Sha256: 4e3599219efe99d3e683373cdcc8a80b4b0448b732912f6b8abb03de03e4cb1e
                                        
                                            GET /images/pelvenue.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Sun, 14 Mar 2010 15:24:34 GMT
Etag: "2a5a-481c45c99d080"
Accept-Ranges: bytes
Content-Length: 10842
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10842
Md5:    727235269779221e039c2ae879cb9553
Sha1:   b4629d2c4b1c21df797156fe0e565f4b34a67fc8
Sha256: b3011a7e91def46d71a5d1b338d5380c05fc2ec20b60838f1cacf72c2b5a2e58
                                        
                                            GET /images/cartmondovi.JPG HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: WIFEO
Last-Modified: Wed, 31 Mar 2010 20:23:23 GMT
Etag: "faf9-4831e848e04c0"
Accept-Ranges: bytes
Content-Length: 64249
Vary: User-Agent
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   64249
Md5:    2970709028396fb3f7a8cf229b31dd11
Sha1:   587d6dd687d24a5fb30e044e92c739c6ba05bfe8
Sha256: e6c40a85c0ce31f22c8170b79e40f5cacf5dd2fd3099a1351890adcf6be01f72
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: A32733318C0757E7E15BCFE416EE0611FBC2B84D
Cache-Control: max-age=511435,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7f5c6479a459bb50ceaa9705d300762b
Sha1:   a32733318c0757e7e15bcfe416ee0611fbc2b84d
Sha256: 2b27b2dd62db5b06bcdf8ecedeab57fb595b54ae7ec58e7be99923c30b442886
                                        
                                            GET /ajax/libs/popper.js/1.12.3/umd/popper.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         104.19.192.102
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 18 Aug 2017 12:49:19 GMT
Expires: Sun, 03 Feb 2019 13:16:57 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 3ec810acd87d42b5-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6945
Md5:    c0a9fcd5dfac23b1d6dcd36293b069ee
Sha1:   e77b4837de0228dcdece730f9600e70254ef31cb
Sha256: 91599d91f72d19f93c85ebf2e4587b67abf0f6e577d681c2d985da6b2a5b3ee6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: Apache
Last-Modified: Tue, 13 Feb 2018 08:37:59 GMT
Expires: Tue, 20 Feb 2018 08:37:59 GMT
Etag: 5B20DA2AB6D29D82474FA8EAEFF7B7D7928D7FD1
Cache-Control: max-age=587461,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    53f02023b13fb3270939962d6a7d09c9
Sha1:   5b20da2ab6d29d82474fa8eaeff7b7d7928d7fd1
Sha256: 52d473e60e56e7f8320732587a6f570c38d51e5c3455e425968a210662ef7e28
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:16:57 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: DCB6634C4C792E97ABC7AB81D1547DED89D9BB54
Cache-Control: max-age=511435,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    bb036011ba960703bc42715ab357400e
Sha1:   dcb6634c4c792e97abc7ab81d1547ded89d9bb54
Sha256: c0e0f50e0154cccbf5b8c799e6106e6a14edd544c65d8e3acac0dff61d652a2d
                                        
                                            GET /bootstrap/4.0.0-beta.2/js/bootstrap.min.js HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         94.31.29.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 13:16:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Oct 2017 19:52:04 GMT
Etag: W/"46b549bdc90920f18a911f186b9dd75c"
Server: NetDNA-cache/2.2
Expires: Fri, 08 Feb 2019 13:16:58 GMT
Cache-Control: max-age=31104000
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14943
Md5:    47e4f9aae4f1b3315f674638f91badf2
Sha1:   a8d261e1d4ce9910561b846fe82b0bbf683d65a7
Sha256: 5cd8e30ca5b6124adc64b6beb1ebfd735c42ad237f1d4613b796e8628a8d48bb
                                        
                                            GET /images/favicon.ico HTTP/1.1 
Host: mondovi.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: statcountmondovi13=ok

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Tue, 13 Feb 2018 13:16:58 GMT
Server: WIFEO
Last-Modified: Sat, 30 Jan 2010 21:43:16 GMT
Etag: "47e-47e68a3c2e500"
Vary: User-Agent
X-Varnish: 142909457
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Content-Length: 1150
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    d25a436361e514b43def92eb736fddeb
Sha1:   acc53246bbcc7e02f6c9d6343902d1997d894827
Sha256: 3bd455c56f8a7f3077935424e7b24184a888df0e6107d1cab7f5fb104c617628
                                        
                                            GET /v5/img/logo-wifeo-160.svg HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/
Range: bytes=0-
If-Range: "1963-53d135b636155"

                                         
                                         194.146.225.153
HTTP/1.1 206 Partial Content
Content-Type: image/svg+xml
                                        
Date: Tue, 13 Feb 2018 13:16:58 GMT
Server: WIFEO
Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT
Etag: "1963-53d135b636155"
Accept-Ranges: bytes
Content-Length: 6499
Vary: User-Agent
Content-Range: bytes 0-6498/6499
Connection: close


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   6499
Md5:    e036707eac2a661d5e7a7d8950fc6e7f
Sha1:   dbec14ebd1fa8d3fe6c8cdddbc4355f93605e808
Sha256: 8291f64e8fb978d4ad3024326d1f4af37aaf998dc1bb8293ad0a96628640a49d
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:15:47 GMT
Expires: Tue, 13 Feb 2018 15:15:47 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17172
Age: 71
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17172
Md5:    43adefe535269f3b75e0f229d0dba4d6
Sha1:   5e3bed19757401b3aa6c8ab8b5f26aa17add8a3a
Sha256: fc7f9d5234f97de0433021d02e8969a93003d90bf16d40a9cb2d8f5c7bfaa398
                                        
                                            GET /tool/designv2/bg/f/flower-7473671445427162.jpg HTTP/1.1 
Host: www.wifeo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/format.css?1517584656

                                         
                                         194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 13:16:58 GMT
Server: WIFEO
Access-Control-Allow-Origin: http://shop.wifeo.com
Last-Modified: Wed, 21 Oct 2015 11:32:42 GMT
Etag: "2821e-5229bbc8bab0e"
Vary: User-Agent
Expires: Sat, 14 Apr 2018 13:16:58 GMT
Cache-Control: max-age = 2592000
X-Varnish: 139121302
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Transfer-Encoding: chunked
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   164382
Md5:    61789d84f4d22d326c24f4d4bd10cf88
Sha1:   68e32bfd4d87b2f7b02a70983ef1ae19cbbbd65f
Sha256: 412c84e008e56ba13109d0e188126135e76f746caca97e55b95953bedffb3962
                                        
                                            GET /r/__utm.gif?utmwv=5.7.1&utms=1&utmn=1357837763&utmhn=mondovi.wifeo.com&utme=8(affpub)9(oui)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=MONDOVI%2C%20village%20d%27Alg%C3%A9rie%20de%201848%20%C3%A0%201962&utmhid=781620163&utmr=-&utmp=%2Fmondovi%2F&utmht=1518527819269&utmac=UA-607176-1&utmcc=__utma%3D1.707274723.1518527818.1518527818.1518527818.1%3B%2B__utmz%3D1.1518527818.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1535927518&utmredir=1&utmu=qzCAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:16:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 13:17:12 GMT
Etag: "5a829b1f-1d7"
Expires: Thu, 15 Feb 2018 13:17:12 GMT
Last-Modified: Tue, 13 Feb 2018 08:00:31 GMT
Server: ECS (arn/4694)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d2c2e35ef0bacca61d9c0a287eb8f7d5
Sha1:   528206550ee7bd603166c973dd2ad8be497207e2
Sha256: 68a9e5cf773365327ee2392ab3e5ac439750b509156bf8ac5295be90a90167d6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 13:17:12 GMT
Etag: "5a8292d3-1d7"
Expires: Thu, 15 Feb 2018 13:17:12 GMT
Last-Modified: Tue, 13 Feb 2018 07:25:07 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9ef9b5ee5b90d4f847262ac201fcb1fd
Sha1:   7c541db4cf9b5f9b47a3fd35030be2b260aa486d
Sha256: ca6f48fb3d346f3743dc3665c32f409202707209daa6f2d2706be5154cef7028
                                        
                                            GET /edacead583.js HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         23.111.9.35
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 13 Feb 2018 13:17:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: FxHfQfDO/owJ8Plzeu4FcJsmrf5zKxlBSzwPxGjTlv0O8wF7MjEqNYKaiO9MC9b0aKlyAooSF28=
x-amz-request-id: B103B21FDA05EB68
Last-Modified: Fri, 24 Feb 2017 10:38:02 GMT
Etag: W/"a4e19008187b98c3adaeeba10a5cda8a"
Server: NetDNA-cache/2.2
Cache-Control: max-age=0, private, must-revalidate
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3860
Md5:    de3c523e35fced54fbee82fa93fad81a
Sha1:   ee8b93670e2c6ffb0cb713f616bfe93bbf0363d8
Sha256: 58460d8be64a9fd1826ed33519d7b000764714fef4cc17e97099a91e696979d2
                                        
                                            GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:17:13 GMT
Expires: Tue, 13 Feb 2018 13:17:13 GMT
Cache-Control: private, max-age=86400
Etag: 14994395236572631364
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67648
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67648
Md5:    3405d027b311d13578f1d87d790f1533
Sha1:   353db9d43fa3486afa5a5206389c1868e493acb6
Sha256: 043ac6bfb1fce0e4d782d0e748bece573cdfb66ee95bc910596380cd1b971713
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:13 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fcd56e1351782e87ef4f73d429e4ded4
Sha1:   f6f1ce80b96c014e654132c41d109a131ee5bc3c
Sha256: 340ac1b5b28c1c9c0280d32661fe3b614a32fc66f327fb93f5a98fdbe0c176b0
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:13 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:13 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4bb2e4074fe5f9f8d715e5888d0b4188
Sha1:   8d020c92f7f3278b86d901ebef396c31d5e39d51
Sha256: cc9e9c93a83b6c3b89cfb24126cc32cfb0876f7705046b642039176859c160e0
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=549691, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT
Expires: Mon, 19 Feb 2018 21:56:01 GMT
Date: Tue, 13 Feb 2018 13:17:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    dab664d03e303a7b1deba30189c57d23
Sha1:   1a87b2335fc304a7783b6f7ffdb5ff97367d30de
Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:13 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6ea90b04815236e9005a97e76148e394
Sha1:   256637485a6d2ab91f66dfc94598aafaa31250c0
Sha256: 98fe9ca5bbe415d51e7c4c01f2ccbfd26909479017bb040d52309743c3eb0dba
                                        
                                            GET /adsid/integrator.js?domain=mondovi.wifeo.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 13:17:13 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=mondovi.wifeo.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 13:17:13 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 15:00:01 GMT
Expires: Mon, 26 Feb 2018 15:00:01 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 80233
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6819
Md5:    8caea4ee531aab9f5d9328f80b7b23f3
Sha1:   3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
                                        
                                            GET /pub-config/r20160913/ca-pub-5439285203515723.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 13 Feb 2018 06:00:27 GMT
Expires: Tue, 13 Feb 2018 18:00:27 GMT
Last-Modified: Sun, 11 Feb 2018 21:18:39 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 26207
Cache-Control: public, max-age=43200
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    f80120281945bc2ccdaebc64cbad921d
Sha1:   b5c7ef140888ede182fcac94921a4eb502f07a5c
Sha256: 4cb4b9970ec5cedababe29f9a4ab00d00194bbebd2063cb117dec008b8c6982a
                                        
                                            GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 15:03:01 GMT
Expires: Mon, 26 Feb 2018 15:03:01 GMT
Etag: 14152819666964886147
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29995
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 80053
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29995
Md5:    ca42dee86b721494eb2a8c4f93c4508d
Sha1:   17ee6f68a61be238ce54d20d056a7a5834c52d80
Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
                                        
                                            GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=1940100807&adf=807048394&w=683&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=683x60&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518527833142&bpp=37&fdt=301&idt=415&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=198x600&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=263&ady=1778&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=435 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 13:17:14 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 13:32:14 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 13:17:14 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6208
Md5:    903d397326a18313bb2bd985318850b0
Sha1:   1f7ad857e48922dd0cc8528c37e44899fa3a9694
Sha256: ea77e26f90b18e70a0fa8cbad4cc8607246ec1ff66101fecab5b1c2e0f5c300d
                                        
                                            GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=1940100807&adf=807048394&w=683&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=683x60&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518527833179&bpp=7&fdt=410&idt=550&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=198x600%2C683x60&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=263&ady=3802&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=578 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 13:17:14 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 13:32:14 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 13:17:14 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   395
Md5:    b0ebb1e796aa7f3355aad6500c066f2a
Sha1:   715e120625b77922edfdd836628aebe661c04a14
Sha256: 1839d151b9316480a9d29cd5e93c4078e9995a8995e148e2a8f40e12f8daa42e
                                        
                                            GET /pagead/adview?ai=C1mbSWuWCWpbpBZmj7gTA5pdQxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCR_1M1uAxhj6oAwGqBJwBT9CLJdeYuxJG8fGXHH5RoPsNYaFPR5-o5xwGZooowC7oJMTQxxT4FaRar4tGEde2LbTvczshlk8uLyxRYyBKtfgOBdQYlaKOxpMYYFHDxcp64H4uOeYhbgMj8YSt4KcUMmOOb2qj5KXV1pCdKenHzG0BfRYJ-hyf1jkBqK8i1xp0XhMDEQ6nhNP-nOTfd-3P0KmQw_clDGD4iYB8gAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&sigh=fhQLuBG6JQw&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 13:17:14 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnleNYZ_A6mVxB4uoBhURjBjrAbZNRIUuo0F3_Sct83etx7qr0Q82wIFC3V; expires=Thu, 13-Feb-2020 13:17:14 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 13:17:14 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mondovi.wifeo.com/

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 13:17:14 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 13:32:14 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 13:17:14 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5264
Md5:    20f056a8ecbc30a330ba47d7acc3e743
Sha1:   f75e3798f3611bd9b414699c8321989feabde871
Sha256: 3a7c29076772a91ad47de6bc19d86f2167149532b6a4a14075c0b9d81b30fa7b
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=375063, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 21:25:53 GMT
Expires: Sat, 17 Feb 2018 21:25:53 GMT
Date: Tue, 13 Feb 2018 13:17:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    3f891a32eed58b6879f292ff7e025afd
Sha1:   ed3c9623210bcd94514c81872dadd71ebddc5a9e
Sha256: ed1f2baca5463feb271751d58638701fc1c8f0205ee271890aa95acd71e0992d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:14 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3f8666a5bea36283578bc10ee5cd930f
Sha1:   526a530c3057adf847bbba35e96736f4d641585b
Sha256: 166a98b8491197265873aa5ff9f1e46c79443bc0e509cd240513fed08e9578a9
                                        
                                            GET /adfscript/?bn=21309103;rtbwp=WoLlWgABdJYKm5GZAAXzQABpGU2jZyCIws8-Iw;rtbdata=x-QconeWRJpRIyV93aZy1poozXrAAMijdsNQjz-nw5sU0KGQ6HL-F_Q3DyFEAUP2v--GsXzrdUNdFQkk2YJ0dw6SBWzFk3BOrPKR0OJA518rLKsupw-FVetiv3nNlkfbZirrDrM-McrYFvQfQahirzrjm103wDlBI4IrISza4ajmTLNBterv3dd7wlPuTe7TQTam0Twne0XE4_sQZGQgqA2;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=C1mbSWuWCWpbpBZmj7gTA5pdQxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCR_1M1uAxhj6oAwGqBJwBT9CLJdeYuxJG8fGXHH5RoPsNYaFPR5-o5xwGZooowC7oJMTQxxT4FaRar4tGEde2LbTvczshlk8uLyxRYyBKtfgOBdQYlaKOxpMYYFHDxcp64H4uOeYhbgMj8YSt4KcUMmOOb2qj5KXV1pCdKenHzG0BfRYJ-hyf1jkBqK8i1xp0XhMDEQ6nhNP-nOTfd-3P0KmQw_clDGD4iYB8gAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_3J-OtMsxklPsOxp9xTxDF2p1dIPg&client=ca-pub-5439285203515723&adurl= HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         37.157.2.238
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:14 GMT
Content-Length: 1260
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: C=1; expires=Tue, 13-Mar-2018 13:17:14 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   1260
Md5:    4d7b6c9bf66cf0302d6320a7f0395808
Sha1:   cd594734ec43ca0085db6d4ac4d9bf69a11ff038
Sha256: 9e43e58f6f8fef3377f5c6a250e2a95d7a3e0b613b8413d0b80701296af67a84
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:12:49 GMT
Expires: Wed, 21 Feb 2018 14:12:49 GMT
Etag: 18254379283724408787
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3642
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 515065
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3642
Md5:    24d24f1211524aff604a7a982bfb33ed
Sha1:   15c0f03407eb77a3da6a7476c6ffb4b8993eaefb
Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 18:19:18 GMT
Expires: Mon, 26 Feb 2018 18:19:18 GMT
Etag: 2112876643077467119
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1203
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 68276
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1203
Md5:    9a504624fadda2dcec8340bf93b2252c
Sha1:   fa6dbebcf9b5450a1dd2f2371c971e838ff627c0
Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
                                        
                                            GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 15:02:16 GMT
Expires: Wed, 21 Feb 2018 15:02:16 GMT
Etag: 4319863517479632446
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29527
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 512098
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29527
Md5:    cb7c5d42c8b00cdec8b3bfb65909c20b
Sha1:   df39b61e2fd957f8b9ade02e65c59ec51cec5c46
Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
                                        
                                            GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWakFOnU7E9-w2MeqFtGnyLZWQnLxI8XGsqcAlXKvHgd0qZzb93mIt-AI3ldlITQUBWvOLK HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341
Cookie: IDE=AHWqTUnleNYZ_A6mVxB4uoBhURjBjrAbZNRIUuo0F3_Sct83etx7qr0Q82wIFC3V; test_cookie=CheckForPermission

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 13:17:14 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 13:17:14 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   214
Md5:    02247d909a831178bfbddac723940ebd
Sha1:   9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-CKffdy0U0uQraz8GIijn1uG0hpDUcmOv_Q2PXeWgKigi7Qna0nLBiLIRo4bXDInOokc5wT7udXrGAMGEyIDZsEtb3bliypHxUNN-xTfrjSlle4WGc HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:17:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-BnLRSYrrk8X2LSQziefqAFIvLJSHC_6evidvKHE2TWpZ-fYp52dlpQxUG8AiRzUQ369xak&dbm_d=AKAmf-DVMqqbUZ7PpD9nF9973dphSS_fvGIqp3huKk2zweQ7e2Vcwb6UWy2aQZ4JQyrXApP3zwM6FZc6clBb5_PI5iekgeD9wY0kkxE72N4CLX30K3nX4TA9K0rDOY2XRpT1VDdri0RsJLU7ZSqfiM-OYdrJL57ac6gH8r_-4zadt2VguE-NWAMxzccIbcjsKQh8-fcEhJum7cpGVqmn5xWwe8QA8PkH0tkhoxklcBxsXGhMUrYkkKwWP7lVll6CY2xAYbLHbKo5Z0be1s3tOCzEd-ILup04mjFcFQR0f-0J-p_j720BRyCMLGEXNAmCBudBCdZmpnlikM9Ig5O1F793NBlAVXVdJds3V9uQaSipGMua5zc1NX8n-Dx3MvGDXm-xl8iXaSTFWW73Ln-US6whibSYC4-4joUJMsllhrhC3UIFsH9xdT4LQZnweIi0mLeV0J9H5u1oysgwdMBBMZI2T6JwcENJDMvmKadQp0vRyRYs46XGCngqfdWV1BIqWs47BWxJDk89wlC1p_uokZGp9BDq_AXEScfp93j7wUj29oR9Sh9Ru1Ei5pPEaC96HPWx9SZlao_m7sg7lh8EeCV4h7UXJiA5uRZweugDp9sO-QhItqlKHt-deWh4Wf685pcRnJae75qESOItim7-cej0bea6P0kLsbkdilGz4BWkkdwUbldEuTikPK2Ma2UHdiprd46j2BkMAjTbgjwwSAK-jrfkTUhXjUIwnXHuZzh03JUoLcDzspU7c1a8q_DpShD72TecgEPTobXSOQtlbOwJhepvYhl6xuRxyJmUqdsjVLxO5k7Z163pGC507ujykj1Na7vgE0eVUOC7g0MAYI-c0qjBcOJXTjAu9-TfebY1LJ7WhsluA4cVYgFxGw60CVvq8SG1AuW8D373tVgrlyor7APRlsWEuO54P-4nB_XRL_LvSijd-SCxoSN-yWz2RT3_L7brdo1WJ44GTr_-5WZ5JabGf1OEm2gZxHaQU0Z3IX5K5aYTsgO77WuNmhoo0bez8ucFxLuDC_dqVbSr7JyNrJH2WOHAfyyeIXGxy2oldS95vm2TX65V0Z_pzIjb0_iWLpQCXsFI-wTUEqIR01bhdRXl1aWn1YOyAu02UziqjsSMjBnWQoYvl4Ulp2IsMsIRiMWs58LS3CKjeMFU4rM2AXIF18fzwMWvAQ8UMyzXXg3cPPRfQvuSjqueJhhpoIh485ga8yo6n5dl7E7dXgkHZLF0sYRP0bWVwgevOL8JzJ5uToNW6szbl0mwLQ5lFwUIKBtf7-zx4DhaAOS-WJbCbrPN8jQa5TmITd0tLcHO_bwPkElj3e7njDrE7sYJFSSXwG0Lasp1-oo0JVyMTprbBqBN8VPXzFKlAA49heq9kaJcPIuwKu5CXyLdxAEeEF5mmZtNHeXXAFrXnOdUM5iXYn72p3YQCXzAbDxVTNh2PGN5OfNFrg_mRHtfMZdtglU2-xS8laCbITaCptkaOBF_SB1PZ3rbRNZfq5bC2r_JQMaWvc2KDfVh6rS335LJYz_gq200JNH8DMQZuLk2cX9OgvqIFsPigOozXWk1SMf_uHc2I6_8sKYQeXlyla6tSA-eyWiT2Ml9o4stYVlRWNGIbJ5DdhzXdw&cid=CAASBORoIJ8&rfl=3%2C%2Chttp%253A%252F%252Fmondovi.wifeo.com%252F%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341
Cookie: IDE=AHWqTUnleNYZ_A6mVxB4uoBhURjBjrAbZNRIUuo0F3_Sct83etx7qr0Q82wIFC3V; test_cookie=CheckForPermission

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:17:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   10917
Md5:    901f16c6c9be53802e0015dc5b9103a9
Sha1:   2a3314ad604d1dc41ff76e2869814bc3c3be5bcd
Sha256: 4e62dcc587b962a500fac324e8530dc2bd0d4de0dc128914af060da573f82967
                                        
                                            GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 15:52:47 GMT
Expires: Mon, 26 Feb 2018 15:52:47 GMT
Etag: 1003077525306946769
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21796
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 77067
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21796
Md5:    9c7168207979b5f6ab6777d97a8a0963
Sha1:   9cf64cc271ecf30cfd8043002730eae9b47c2bf8
Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
                                        
                                            GET /pagead/js/lidar.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:21:33 GMT
Expires: Tue, 13 Feb 2018 13:21:33 GMT
Etag: 6831844447556634063
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 34299
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 3341
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   34299
Md5:    4af480d154ceb9d4226b2a21f80b6b9e
Sha1:   514b804d0a119a0063bfc1d9e20f7b7c7004d80c
Sha256: e45497d04a8eb2999ade55e5f45265811efc3e5ab7eaf6929db863b133d6f181
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWakFOnU7E9-w2MeqFtGnyLZWQnLxI8XGsqcAlXKvHgd0qZzb93mIt-AI3ldlITQUBWvOLK
Cookie: IDE=AHWqTUnleNYZ_A6mVxB4uoBhURjBjrAbZNRIUuo0F3_Sct83etx7qr0Q82wIFC3V

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESEK3ULXc7yUh-vUiibPYw4xw&google_cver=1
Date: Tue, 13 Feb 2018 13:17:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   290
Md5:    943b2ee7f958ac9bc5331a14c735a32a
Sha1:   02c267ee725e1870f8e2d874925432caefeaa78f
Sha256: 085fe53e913870042f72a06efdaa9b4162c8ade988b0240aa2d01a256200a4d3
                                        
                                            GET /stoat/607/s1.adform.net/bootstrap.js HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         37.157.2.248
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT
Cache-Control: public, max-age=100000
Expires: Wed, 14 Feb 2018 17:03:54 GMT
X-Cache-Status: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13691
Md5:    7dff8bc845f03fef9414515e1e823030
Sha1:   ad7ce3dac1e6eefe12829d27e4a9d2b1ea8eaa3a
Sha256: fc5f373371abfa589671c2a31ae4d5711c0507b578cef62f7eb12d8c836d0bf9
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:14 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d49329b6cf95ee35d707f7e0ab3f891e
Sha1:   bad43a85defedc6449b6bdaf779ee85d18278544
Sha256: 0580cfb371d0324bff4fc549e97d614659eade3215fc737e749308947ad948be
                                        
                                            GET /sodar/V6zvOIoD.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15146
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 83538
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15146
Md5:    6a56e1d1c9c0c105245cbce244c876f3
Sha1:   6613490ab3735f37499d311c6efba3f689ec4abb
Sha256: ad20ef401ac229a0ab07b057ed9350c85816118a662c7cfa240fa5cd86c718f0
                                        
                                            GET /8405476/priceline_160x600.jpg HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 49027
Date: Tue, 13 Feb 2018 10:55:22 GMT
Expires: Wed, 14 Feb 2018 10:55:22 GMT
Last-Modified: Tue, 13 Feb 2018 08:54:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 8512
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data
Size:   49027
Md5:    672d02c52593f30011886fc325cd6d43
Sha1:   addb929dca6638df017628fe9fc876776fd8cf4c
Sha256: 8c7279d1adf9212b1f4abe84b05f297da466d43888808e57f80d0c55ee7a2b49
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1034
Content-Transfer-Encoding: binary
Cache-Control: max-age=353442, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 15:25:41 GMT
Expires: Sat, 17 Feb 2018 15:25:41 GMT
Date: Tue, 13 Feb 2018 13:17:15 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1034
Md5:    baf34d986c00b66407375ac23eec7499
Sha1:   4451f614115ab7a166b37973aafa4dcae9e2a93f
Sha256: ac2f7c04a4378ed2d8a2a21de045d89445cf8eab3c7bf989ea332c181f7c56b2
                                        
                                            GET /sodar/6uQTKQJz.html HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7233
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 83539
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7233
Md5:    30bf1c51eb9c0ba258ea2df31d24bc98
Sha1:   d13abffacc94ee31dfd5a094bfa975cca8e4d292
Sha256: 25a3afe99572ebbe3af74f504252d7fe97ebd580d47f5b734c286cc40a82131e
                                        
                                            GET /pcs/view?xai=AKAOjssYQgQTvEEO1H27HScNRSaARtB7Mqod2UkQacbCxkroMnIHkTPcj1tCfLX2SxC6T0GEpnu0bulldA9GG_gVZXPahnDDUiSGiwmd28-3TfCy0hXsw5Tmm5KMKrGXNgSqj7_a9c7H72qDWRCdhYuiClD1Z4266W6fkeAUMXYrFGzlnGZ7jBxb1REL__Tayljec0WIWnuGreHV8LI9jOjCuqGQS9xSn08MJhkEnMkJf0kFrCGxUWclimx5QcW5E7MLRX_F9ZCWjbbEcbrXebxMtQBhsxqmdGK2o0qQTtG1oAPcanJdpqQIbA4xHDBMSxOxFW2KM_vv0MxacTDLvIGcMZkADHR08wRln2dj4vhBY-o0CIXdnFgO5KGwBsBui7N34uUt9HBz8xaJx-5FFAxv4pNF7qRBOMGwURL0g4Fel0gaIvkqBPvvTHSgnR2AYpvWRwFDWxu8JJbpUVW1IhtV_Zh06xsZNCEMozDOMFYGP3zB_0-iuSY-1sRVh8Zza21rrSa4qkUxiJ6Kq2hoLW7R0IjHmdNQI3ZMnND47UtVq7Su8-yFjY2Q_C7zSgU0HBC-TOZnj29P1RnOB1Gpq4IpDfmxTgF6CKPSRxXPwd6s2xMbMLGbRN2wUUKcPGUBLpKV55fcApR9eXS0EsVUZYkg99CgGneYsFBLVNAuMd6Ir-xFrMne4x3XhSHEs5lfw0YLRyyVtRU48x1f3btNKc1wAJkMScjr3TpIGPsSX7fq1cqJ755JkPWbYioedkrDJWpGd0-D2lyPsLxDuHPMpHgD6FcOk6QtGt6Axmi5zDaMJq69zMPH&sai=AMfl-YSv5aY2JwNWbvNIzN5lg4RWqm0tA3oab-3LdCfSwOf0mvKg-4RbG9kzINnL3LLECdMnbbvp2u6d3S72QpujCLE8nGB-Icgt&sig=Cg0ArKJSzEryGNETvsFOEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341
Cookie: IDE=AHWqTUnleNYZ_A6mVxB4uoBhURjBjrAbZNRIUuo0F3_Sct83etx7qr0Q82wIFC3V

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 13:17:14 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:15 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 17:56:39 GMT
Expires: Mon, 19 Feb 2018 17:56:39 GMT
Etag: 6E1390A0BD1EA29D9D3CAFC2B28D81858CED524B
Cache-Control: max-age=534563,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp15
Content-Length: 278
Connection: close


--- Additional Info ---
Magic:  data
Size:   278
Md5:    c9d0f8a0c103fd3f76a3231d292019e3
Sha1:   6e1390a0bd1ea29d9d3cafc2b28d81858ced524b
Sha256: c2561fc07b4706316266d5a4d9b40e09479226c56d94d7fc92effeb96bf25de1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 13:17:15 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: 8E242477BF0882B1319BC4C53887CEDD2AF131E2
Cache-Control: max-age=511417,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp15
Content-Length: 313
Connection: close


--- Additional Info ---
Magic:  data
Size:   313
Md5:    f5c0f9572b3e8f64a0cbc1a07f453401
Sha1:   8e242477bf0882b1319bc4c53887cedd2af131e2
Sha256: 32ad01098f31aba2f0060dc68180378325772eea6370174e99e0d1f6131978f4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 13:17:15 GMT
Etag: "5a827c8d-1d7"
Expires: Thu, 15 Feb 2018 13:17:15 GMT
Last-Modified: Tue, 13 Feb 2018 05:50:05 GMT
Server: ECS (arn/4667)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bc4bbf33d4b48791256b284353802c7f
Sha1:   d3d1bc4bd77a719ea1ba38b08435d3acfd89bd34
Sha256: 4f0214c8831d6e02f3d3d3a1b5775c9b87c0cd0c9ac0d9890fba5e7811f1c0f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 13:17:15 GMT
Etag: "5a82cc5f-1d7"
Expires: Thu, 15 Feb 2018 13:17:15 GMT
Last-Modified: Tue, 13 Feb 2018 11:30:39 GMT
Server: ECS (arn/4599)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bdd676092b32d438cdb3958993ee99de
Sha1:   f8f6992c4867e6f721a4e8776321b1c5d590c17c
Sha256: 6c57d66bbd3413d976bd02ca92c9434b6c259a91a153fddbc476a44a468a1888
                                        
                                            GET /adfserve/?CC=1&bn=21309103;rtbwp=WoLlWgABdJYKm5GZAAXzQABpGU2jZyCIws8-Iw;rtbdata=x-QconeWRJpRIyV93aZy1poozXrAAMijdsNQjz-nw5sU0KGQ6HL-F_Q3DyFEAUP2v--GsXzrdUNdFQkk2YJ0dw6SBWzFk3BOrPKR0OJA518rLKsupw-FVetiv3nNlkfbZirrDrM-McrYFvQfQahirzrjm103wDlBI4IrISza4ajmTLNBterv3dd7wlPuTe7TQTam0Twne0XE4_sQZGQgqA2;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=C1mbSWuWCWpbpBZmj7gTA5pdQxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCR_1M1uAxhj6oAwGqBJwBT9CLJdeYuxJG8fGXHH5RoPsNYaFPR5-o5xwGZooowC7oJMTQxxT4FaRar4tGEde2LbTvczshlk8uLyxRYyBKtfgOBdQYlaKOxpMYYFHDxcp64H4uOeYhbgMj8YSt4KcUMmOOb2qj5KXV1pCdKenHzG0BfRYJ-hyf1jkBqK8i1xp0XhMDEQ6nhNP-nOTfd-3P0KmQw_clDGD4iYB8gAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_3J-OtMsxklPsOxp9xTxDF2p1dIPg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=1x;6627;set=en-US|en-US|1176X885|10.0452|450|50|24|8|3|7|1;fd=0|0&CREFURL=undefined HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: C=1

                                         
                                         37.157.2.238
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:15 GMT
Content-Length: 2471
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: cid=6722451720069021642,0,0,0,0; expires=Sat, 14-Apr-2018 12:17:15 GMT; path=/ uid=6722451720069021642; domain=adform.net; expires=Sat, 14-Apr-2018 12:17:15 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   2471
Md5:    6895cb5809148305374ffe313b292cf0
Sha1:   1e8c7f38d9cb233965892450744f92d000d36783
Sha256: eb9e85d8cca3230e22c5b7eee5d4c0796dcb997b1ebf200e87bb1150def67b44
                                        
                                            GET /setuid?entity=101&code=CAESEK3ULXc7yUh-vUiibPYw4xw&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWakFOnU7E9-w2MeqFtGnyLZWQnLxI8XGsqcAlXKvHgd0qZzb93mIt-AI3ldlITQUBWvOLK

                                         
                                         185.33.223.202
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Tue, 13 Feb 2018 13:17:17 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: bfb415f9-7985-4dd3-9a57-99a023548d9b
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2GU$qP^mL!]tbPB*SPcQwTQLTYe%/_dQ@C]4-+M>MQP9EWCl=AdQH_?J#i)<Sc5-m/I05AA#kWAC'0$*bpRW0p%mJ; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 13:17:17 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 13:17:17 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 318.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.43:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /bg/IOA8y9bJh23yzX_Xx1Lzdpvil-FmhhSrkRF2am8kUAc.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4991
Date: Mon, 12 Feb 2018 20:14:15 GMT
Expires: Tue, 12 Feb 2019 20:14:15 GMT
Last-Modified: Mon, 05 Feb 2018 09:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 61380
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4991
Md5:    35c97f406c207e558268924a05d5cfb0
Sha1:   410bd15d5b2dbffb516605c9d5a2a52d8d8d6eed
Sha256: 536f40cf7ac29a53a42ac183eefd062e0228e22f034f8ad2e8f1ffaaa771f5ed
                                        
                                            GET /c/NDj2.js HTTP/1.1 
Host: cdn.minescripts.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         104.18.47.158
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 13:17:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d23d61625dbe03e16afd16a98b43cd5bf1518527835; expires=Wed, 13-Feb-19 13:17:15 GMT; path=/; domain=.minescripts.info; HttpOnly
Last-Modified: Tue, 13 Feb 2018 08:47:22 GMT
Etag: W/"5a82a61a-26a1a"
Expires: Tue, 13 Feb 2018 17:17:15 GMT
Cache-Control: public, max-age=14400
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 3ec8111c4ba242b5-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   39531
Md5:    1c9c37ee94ec3e1c6d5f4714d1360779
Sha1:   a1570f3c3ee93136527182865f70fd8c9fbca2a4
Sha256: 410d40e0587fd552a61e4870c7cfc56382e5b76b0ce9ef5b9afdb5e157246c11

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWakFOnU7E9-w2MeqFtGnyLZWQnLxI8XGsqcAlXKvHgd0qZzb93mIt-AI3ldlITQUBWvOLK

                                         
                                         217.12.15.83
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 13:17:15 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=dda9sttd85par&b=3&s=h8; expires=Wed, 13-Feb-2019 13:17:15 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=N7tk4c5iTR_aXQo5qKA7QamT
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"


--- Additional Info ---
                                        
                                            GET /activeview?avi=BkR6wWuWCWpbpBZmj7gTA5pdQAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:17:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=BK-Z8WuWCWriRHYW76wTF_rvgDQAAAAA4AeAEAg&bg=!cnGlcWlEmsiIRzwusCgCAAABOFIAAAAdCgAGMID4XsETmQEjS4kxdvKR3y4ZhjJABXD0vbOFzsXY7RN3nErSExMKww4TfnT_CAfiW91sCrTTtIqJP7dHjcqtchUpIc8HJaEyOrxSyweqmxERu2U_y25_FSlEom8uyN0oFPJatWwbjtdq5I6re0FLNp-jf5sqeKW2XmbXgm22n9LmaceGaU5ufjSx2F9zdRm2q-m3VvhM7mQpMC1GCscVv9a9eSv7STvcjlcR_QhmhDBVv513e9xTZq_G5KwGvbaKCE6TGeRF6A1FfB6nLgswBYGCsXNFICAkxpZcL6ur2Y8Zbbpc952PumbskqOS9H6FF-usgjfWedgKqFZk8BQRCgbh9T0LN8OigooC0HZRW_zg8P71SlQr_RazSiF6QaaIpc89itNOsuKbJJMS HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         216.58.209.130
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:17:16 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /activeview?avi=BIjjlWuWCWuyNDIyd6gT_tJfYBgDQ7MDZyQYAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAQ&cid=CAASBORoIJ8&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:17:16 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /stoat/607/s1.adform.net/load/v/0.0.146/e/0gCDgAA/i/8IG-iAAAAEAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: uid=6722451720069021642

                                         
                                         37.157.2.248
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT
Cache-Control: public, max-age=100000
Expires: Wed, 14 Feb 2018 16:21:12 GMT
X-Cache-Status: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35421
Md5:    752645330ed92c2f879fb9161238682f
Sha1:   720b6c7864e5f084dd5e6a0faa196297544b8e60
Sha256: 37a4451a293bcb4c698aadf71e4449da5bf3b901ddba00e220fe221b30103358
                                        
                                            GET /pcs/activeview?xai=AKAOjsv86pMGDKnyj50856G7bFTL2ZAkaG7MOmDXzh9454OVz607eWx8Nh4Bj4Br2knS-39J0Khus7yvzFJOKJmO&sig=Cg0ArKJSzAA2tCk_R7VzEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=1313&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D1214759340%26adf%3D807048394%26w%3D198%26fwrn%3D4%26lmt%3D1518527816%26loeid%3D38893312%26rafmt%3D1%26format%3D198x600%26url%3Dhttp%253A%252F%252Fmondovi.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518527833085%26bpp%3D46%26fdt%3D55%26idt%3D305%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26correlator%3D2981923832185%26jscb%3D1%26jscd%3D1%26frm%3D20%26ga_vid%3D866913345.1518527833%26ga_sid%3D1518527833%26ga_hid%3D781620163%26ga_fc%3D0%26pv%3D2%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D481%26ady%3D1148%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D38893302%252C21061122%252C191880502%252C33895412%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D528%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257Cbr%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D144%26bc%3D1%26ifi%3D1%26dtd%3D341&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D1214759340%26adf%3D807048394%26w%3D198%26fwrn%3D4%26lmt%3D1518527816%26loeid%3D38893312%26rafmt%3D1%26format%3D198x600%26url%3Dhttp%253A%252F%252Fmondovi.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518527833085%26bpp%3D46%26fdt%3D55%26idt%3D305%26shv%3Dr20180207%2 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=1214759340&adf=807048394&w=198&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=198x600&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518527833085&bpp=46&fdt=55&idt=305&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=481&ady=1148&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=341

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:17:16 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /xbbe/match?xid=N7tk4c5iTR_aXQo5qKA7QamT HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWakFOnU7E9-w2MeqFtGnyLZWQnLxI8XGsqcAlXKvHgd0qZzb93mIt-AI3ldlITQUBWvOLK
Cookie: IDE=AHWqTUnleNYZ_A6mVxB4uoBhURjBjrAbZNRIUuo0F3_Sct83etx7qr0Q82wIFC3V

                                         
                                         216.58.209.130
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 13:17:16 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /Banners/21767731/21767731.gif?bv=2 HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: uid=6722451720069021642

                                         
                                         37.157.2.248
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:16 GMT
Content-Length: 15052
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Tue, 19 Sep 2017 08:36:47 GMT
Etag: "59c0d71f-3acc"
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=604800
Strict-Transport-Security: max-age=0
X-Cache-Status: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60
Size:   15052
Md5:    87742ccf99a1950a3e66f12429ba7615
Sha1:   5b43913981347e76b1914daf4ae701481ce1e86e
Sha256: 3458ad70db311347cc06f1e978796e11a424a4c8ae78a78d505569a1a534808e
                                        
                                            GET /csimpr/?bn=21309103&csi=GsxHboydtOInHbybupwhxrABxiapNWp9RAcc_W2yeqKiGv_BlWFVLgO8_7rsP1jj0 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: C=1; cid=6722451720069021642,0,0,0,0; uid=6722451720069021642

                                         
                                         37.157.2.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /serving/unload/?version=15&unload=6722451720069021642@@21309103,600309223461841688,0|0|0|0|0|0|0|0|0||0|1|1|5a82e55a000174960a9b91990a05f340_1|||1|0|0|| HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: C=1; cid=6722451720069021642,0,0,0,0; uid=6722451720069021642

                                         
                                         37.157.2.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /serving/unload/?version=15&unload=6722451720069021642@@21309103,600309223461841688,0|0|0|0|0|0|0|0|0||0|1|1|5a82e55a000174960a9b91990a05f340_1|||1|0|0|| HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=1940100807&adf=807048394&w=683&fwrn=4&lmt=1518527816&loeid=38893312&rafmt=1&format=683x60&url=http%3A%2F%2Fmondovi.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518527833142&bpp=37&fdt=301&idt=415&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=198x600&correlator=2981923832185&jscb=1&jscd=1&frm=20&ga_vid=866913345.1518527833&ga_sid=1518527833&ga_hid=781620163&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=263&ady=1778&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502%2C33895412&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=435
Cookie: C=1; cid=6722451720069021642,0,0,0,0; uid=6722451720069021642

                                         
                                         37.157.2.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 13 Feb 2018 13:17:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015