Overview

URL africouleur.com.composesite.com/
IP69.30.245.206
ASNAS32097 WholeSale Internet, Inc.
Location United States
Report completed2017-11-30 21:06:05 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2017-11-30 21:12:21 CET 1  108.187.160.231 Client IP ET TROJAN RAMNIT.A M1
2017-11-30 21:12:16 CET 1  210.56.55.200 Client IP ET TROJAN RAMNIT.A M1


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 69.30.245.206

Date UQ / IDS / BL URL IP
2018-02-13 16:17:06 +0100
0 - 0 - 1 mantaro.net.composesite.com/ 69.30.245.206
2018-02-13 15:20:25 +0100
0 - 0 - 1 dystingo.com.composesite.com/ 69.30.245.206
2018-02-13 15:15:21 +0100
0 - 0 - 1 dietketat.com.composesite.com/ 69.30.245.206
2018-02-13 14:57:28 +0100
0 - 0 - 1 gross-sander.de.composesite.com/ 69.30.245.206
2018-02-13 14:51:34 +0100
0 - 0 - 1 cddentistry.com.composesite.com/ 69.30.245.206
2018-02-13 14:45:27 +0100
0 - 0 - 1 epiz.de.composesite.com/ 69.30.245.206
2018-02-13 14:39:41 +0100
0 - 0 - 1 newstarltd-onreg.com.composesite.com/ 69.30.245.206
2018-02-13 13:06:36 +0100
0 - 0 - 1 weplayvolleyball.de.composesite.com/ 69.30.245.206
2018-02-13 12:08:30 +0100
0 - 0 - 1 asobinet.com.composesite.com/ 69.30.245.206
2018-02-13 12:04:47 +0100
0 - 0 - 1 paramourdespoupees.com.w3cdomain.com/ 69.30.245.206

Last 10 reports on ASN: AS32097 WholeSale Internet, Inc.

Date UQ / IDS / BL URL IP
2018-02-24 10:40:49 +0100
0 - 0 - 1 areacomunicacao.xp3.biz/bnk 173.208.215.124
2018-02-24 04:03:26 +0100
0 - 0 - 1 acoountupdatee.6te.net/belll.php 173.208.215.124
2018-02-23 22:19:36 +0100
0 - 0 - 1 abroconsultants.coolpage.biz/Revalidate/reval (...) 173.208.215.124
2018-02-23 20:44:50 +0100
0 - 0 - 2 tsong12.pw/ 204.12.211.34
2018-02-22 20:03:56 +0100
0 - 0 - 0 windup14.host/main/err.mp3 204.12.211.40
2018-02-22 07:42:13 +0100
0 - 0 - 1 www.google-hangout.account-servicerecovery.com/ 204.12.207.108
2018-02-22 01:24:08 +0100
0 - 0 - 1 api.xp3.biz/dsgf4 173.208.215.124
2018-02-21 20:42:37 +0100
0 - 0 - 1 deliverydhl.xp3.biz/Portal.php 173.208.215.124
2018-02-21 20:26:27 +0100
0 - 0 - 1 compagnaindemonde.6te.net/propositions.repert (...) 173.208.215.124
2018-02-21 17:56:26 +0100
0 - 0 - 0 xxgasm.com/wp-content/uploads/2016/09/oop_pus (...) 173.208.189.242

No other reports on domain: composesite.com



JavaScript

Executed Scripts (40)


Executed Evals (84)

#1 JavaScript::Eval (size: 38, repeated: 1) - SHA256: a0f3e63e81a8e77cd3026d7e1a1fa9c3dd29e6ee5d5a4cc6628d7aff5c9da463

                                        0,
function(Q) {
    Q.T && D(Q, 0);
}
                                    

#2 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 27654fe44c9790f075b697302f903fc7a8af4a1c99f2ea6a420a401e3455b451

                                        0,
function(Q) {
    Q.h(0);
}
                                    

#3 JavaScript::Eval (size: 30, repeated: 1) - SHA256: c4951618a6a1627764e601f317d05b2bbddfc911eaeb0a955e6a85fc88aebac7

                                        0,
function(Q) {
    Q.h(3);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 1) - SHA256: bc9a04eed404477b8facd5e752b3cda63a126dfc8571a0b7bf8f626d81f025e8

                                        0,
function(Q) {
    Q.h(4);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 63bec86fdabf7579dc30b4eae3a895e7c68588ea79b9a257323aaa5d4c4d34b7

                                        0,
function(Q) {
    Q.h(7);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 1) - SHA256: e4bc64fea194e245048aa59832d06bddc436fb98bad8c95736ab8721020a22e7

                                        0,
function(Q) {
    Y(Q, 1);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 1) - SHA256: a057d4d905858d63e542954035bd2c76578e00c5dc4425c0fd72e154796e5510

                                        0,
function(Q) {
    Y(Q, 2);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 5c3dd10384ec0cca810f6e62725744793d9e8f149af195f68aa1218702880439

                                        0,
function(Q) {
    Y(Q, 4);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: c8b127faf88f46bb38c7ff85e7126f21e6330cdaedf3733d5a656f00195ec47c

                                        0,
function(Q) {
    h(Q, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 31774cccd44cb71315fcb2a7ab3b6c1bee7cecc92efb94c1afa96f9ca67c903a

                                        0,
function(Q) {
    h(Q, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: e4f7fa75a0c5f18848e1dd8033d917fee37e55dcb1cae6931c594ed0c088c799

                                        0,
function(Q) {
    h(Q, 4);
}
                                    

#12 JavaScript::Eval (size: 51, repeated: 1) - SHA256: 1ae893908efa7ccce7b68f88609d151cf1352aff7c1dea5fd00c053da281f689

                                        0,
function(Q, N) {
    (N = Q.C(l(Q)), O)(Q, N);
}
                                    

#13 JavaScript::Eval (size: 185, repeated: 1) - SHA256: c2aa1870eaab60b2661557a242db88590d4f60a3865e659decc97b1d9a00fef4

                                        0,
function(Q, N) {
    (N.push(Q[0] << 24 | Q[1] << 16 | Q[2] << 8 | Q[3]), N).push(Q[4] << 24 | Q[5] << 16 | Q[6] << 8 | Q[7]), N.push(Q[8] << 24 | Q[9] << 16 | Q[10] << 8 | Q[11]);
}
                                    

#14 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 6f8a05425b87e0c4db73ecb3174cae821d88f5fd5a787a65b2e9fbf0e15c8023

                                        0,
function(Q, N) {
    J(Q, 1, 5) || (N = q(Q), r(Q, N.R, N.a.apply(N.B, N.K)));
}
                                    

#15 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 376c31ed123ff43ce6eae9cd92ab46ba3a4cb762a874d2e98b1b6a667d5077a6

                                        0,
function(Q, N) {
    Q = (N = l(Q), Q.C(N)), Q[0].removeEventListener(Q[1], Q[2], false);
}
                                    

#16 JavaScript::Eval (size: 125, repeated: 1) - SHA256: 7f953ea729abbc0fbb892d25132d8527624c6a2ed61f8580251a1d0466edaf24

                                        0,
function(Q, N) {
    if ((N = this.W[Q], void 0) === N) {
        throw R(this, 30, 0, Q), this.U;
    }
    return N();
}
                                    

#17 JavaScript::Eval (size: 86, repeated: 1) - SHA256: 0999c06d69cb2e9c1864363343676922e53fb0aabf584b71495e9645388c5e8a

                                        0,
function(Q, N, U) {
    (U = (N = l(Q), l)(Q), N = Q.W[N] && Q.C(N), r)(Q, U, N);
}
                                    

#18 JavaScript::Eval (size: 84, repeated: 1) - SHA256: 5b8fe61f41e98dd85aaaba40b69b32ad4e84cbc073cb6d87686547d2c8193fe6

                                        0,
function(Q, N, U) {
    0 != (U = (N = l(Q), l(Q)), Q).C(N) && r(Q, 0, Q.C(U));
}
                                    

#19 JavaScript::Eval (size: 121, repeated: 1) - SHA256: 9c96b88ee696d114efb0d17abd15d3875e7afd05086de6a77308449d5d85e4df

                                        0,
function(Q, N, U) {
    J(Q, 1, 5) ||
        (N = l(Q), U = l(Q), r(Q, U, function(Q) {
            return eval(Q);
        }(Q.C(N))));
}
                                    

#20 JavaScript::Eval (size: 75, repeated: 1) - SHA256: ac20218c3ff20b401c768b1ff7b1139fa5c48c937e150442068bec28b8bee7f6

                                        0,
function(Q, N, U) {
    N = l(Q), U = l(Q), N = Q.C(N), r(Q, U, A(N));
}
                                    

#21 JavaScript::Eval (size: 72, repeated: 1) - SHA256: 7238d51ed7088831de1db38f9560fd2330aa3de674c15f67624a90690bdfae10

                                        0,
function(Q, N, U) {
    U = (N = l(Q), l)(Q), r(Q, U, "" + Q.C(N));
}
                                    

#22 JavaScript::Eval (size: 76, repeated: 1) - SHA256: fa3e245fe46a047c6cc954d3ae36e119ca44b4d959f85ef60b889bc6f10147e8

                                        0,
function(Q, N, U) {
    U = (N = l(Q), l)(Q), r(Q, U, Q.C(U) % Q.C(N));
}
                                    

#23 JavaScript::Eval (size: 76, repeated: 1) - SHA256: c1076c3446de94e6ed8f95c976d3a41b659f3c27da0f133b90efaf0c94fdbb1e

                                        0,
function(Q, N, U) {
    U = (N = l(Q), l)(Q), r(Q, U, Q.C(U) * Q.C(N));
}
                                    

#24 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 158ec2f9a22e5fc7dfb7cf3fe286d6323f56677cdb1e770d6678a7a527099a4d

                                        0,
function(Q, N, U) {
    U = (N = l(Q), l)(Q), r(Q, U, Q.C(U) + Q.C(N));
}
                                    

#25 JavaScript::Eval (size: 76, repeated: 1) - SHA256: dbbe0da6e5957a2ee13c3873d0226d6f7b47c813dcb18e331e9e529b2c87840b

                                        0,
function(Q, N, U) {
    U = (N = l(Q), l)(Q), r(Q, U, Q.C(U) - Q.C(N));
}
                                    

#26 JavaScript::Eval (size: 244, repeated: 1) - SHA256: a555e6c615b32fe195889815451e05ac36454d8653f750ca83106ad6dfcd78ac

                                        0,
function(Q, N, U) {
    if (3 == Q.length) {
        for (U = 0; 3 > U; U++) {
            N[U] += Q[U];
        }
        for (Q = (U = 0, [13, 8, 13, 12, 16, 5, 3, 10, 15]); 9 > U; U++) {
            N[3](N, U % 3, Q[U]);
        }
    }
}
                                    

#27 JavaScript::Eval (size: 137, repeated: 1) - SHA256: 76b2bbfb2188124306618a9ba613060b35ff7d395ca9fa964af2b47f72911371

                                        0,
function(Q, N, U) {
    return (N = (U = function() {
        return Q;
    }, function() {
        return U();
    }), N)[this.S] = function(n) {
        Q = n;
    }, N;
}
                                    

#28 JavaScript::Eval (size: 292, repeated: 1) - SHA256: ae8c8cc63980f0cb5824023ec1edb6464147941bdcdf7b07aed6b97f7e139345

                                        0,
function(Q, N, U, G, T, I, H) {
    if ((U = (N = l(Q), f(Q)), G = "", Q.W)[54]) {
        for (T = Q.C(54), H = T.length, I = 0; U--;) {
            I = (I + f(Q)) % H, G += L[T[I]];
        }
    } else {
        for (; U--;) {
            G += L[l(Q)];
        }
    }
    r(Q, N, G);
}
                                    

#29 JavaScript::Eval (size: 202, repeated: 1) - SHA256: e767ef598da537560d134462a2a64daf5b91f425ef689e2f1529c7d1c18ce0d5

                                        0,
function(Q, N, U, L) {
    ((U = (Q &= (N = Q & 4, 3), U = l(this), L = l(this), this.C(U)), N && (U = y(("" + U).replace(/\r\n/g, "\n"))), Q) &&
        S(this, L, w(U.length, 2)), S)(this, L, U);
}
                                    

#30 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 77d15695f5f061d0c43f2f10f931badbb9a5793e5fe9a3b3be4421ecf798234b

                                        0,
function(Q, N, U, L) {
    (L = (N = l(Q), U = l(Q), l)(Q), Q).C(N)[Q.C(U)] = Q.C(L);
}
                                    

#31 JavaScript::Eval (size: 105, repeated: 1) - SHA256: 01c6091e6673712b7cfe20e77015e642af39db5019d78190d332744949a59d91

                                        0,
function(Q, N, U, L) {
    (N = (L = (U = (N = l(Q), l(Q)), l)(Q), Q).C(N) == Q.C(U), r)(Q, L, +N);
}
                                    

#32 JavaScript::Eval (size: 104, repeated: 1) - SHA256: 5dc0976f28ddfc4dd6afbd7be40ddefcd280d3f9ec02666463a5dae01f7c63e1

                                        0,
function(Q, N, U, L) {
    (N = (L = (U = (N = l(Q), l(Q)), l)(Q), Q).C(N) > Q.C(U), r)(Q, L, +N);
}
                                    

#33 JavaScript::Eval (size: 96, repeated: 1) - SHA256: 34c3d3b30234623e09013ca3badb0c50e7b87c8095966d054644c53e20bfcc4b

                                        0,
function(Q, N, U, L) {
    (N = l(Q), U = l(Q), L = l(Q), r)(Q, L, (Q.C(N) in Q.C(U)) + 0);
}
                                    

#34 JavaScript::Eval (size: 85, repeated: 1) - SHA256: a7f69a9ade9c34e07cb1441435f65d2274cb467294de1a84116b4a5ba25de540

                                        0,
function(Q, N, U, L) {
    L = (N = l(Q), U = l(Q), l)(Q), r(Q, L, Q.C(N) << U);
}
                                    

#35 JavaScript::Eval (size: 85, repeated: 1) - SHA256: a619b0dac29d94efb7e1d95527d9fb8d88975bd4652261d53e134d6beaf57932

                                        0,
function(Q, N, U, L) {
    L = (N = l(Q), U = l(Q), l)(Q), r(Q, L, Q.C(N) >> U);
}
                                    

#36 JavaScript::Eval (size: 91, repeated: 1) - SHA256: 5117837c66186e19d765f8c342c89c036a7b5b2d787a65585bd40d1a082fb479

                                        0,
function(Q, N, U, L) {
    L = (U = (N = l(Q), l(Q)), l)(Q), r(Q, L, Q.C(N) | Q.C(U));
}
                                    

#37 JavaScript::Eval (size: 92, repeated: 1) - SHA256: 4e7394e17dba7817244e2a609eff0b2d028f7094fa8903512a55dd6b7288127a

                                        0,
function(Q, N, U, L) {
    L = (U = (N = l(Q), l(Q)), l)(Q), r(Q, L, Q.C(N) || Q.C(U));
}
                                    

#38 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 0b4a533cbf9b46964f67866c756f8e84b51abf8ba53cfccaf1eecb271be0e9ce

                                        0,
function(Q, N, U, L) {
    U = (L = (U = (N = l(Q), l)(Q), l)(Q), Q).C(U), N = Q.C(N), r(Q, L, N[U]);
}
                                    

#39 JavaScript::Eval (size: 141, repeated: 1) - SHA256: b2020f3ef1c3b23c00f5ce8de68ffd9bf8e08f14df72813f12b6bc4541290a2c

                                        0,
function(Q, N, U, L) {
    for (; U--;) {
        0 != U && 215 != U && N.W[U] && (N.W[U] = N[L](N[Q](U), this));
    }
    N[Q] = this;
}
                                    

#40 JavaScript::Eval (size: 239, repeated: 1) - SHA256: cdecc0ac73d9c06aad131cdb75b48478e9a78e10ae21d00b374d0cf2d29ab51f

                                        0,
function(Q, N, U, L) {
    if ((N = Q.i.pop())) {
        for (U = l(Q); 0 < U; U--) {
            L = l(Q), N[L] = Q.W[L];
        }
        Q.W = (N[58] = Q.W[58], N[26] = Q.W[26], N);
    } else {
        r(Q, 0, Q.c.length);
    }
}
                                    

#41 JavaScript::Eval (size: 170, repeated: 1) - SHA256: c0606fdd15e94372e2b1480d6324bed6d24ad81bd3e7986324935aa884704b9a

                                        0,
function(Q, N, U, L) {
    try {
        L = Q[(N + 2) % 3], Q[N] = Q[N] - Q[(N + 1) % 3] - L ^ (1 == N ? L << U : L >>> U);
    } catch (G) {
        throw G;
    }
}
                                    

#42 JavaScript::Eval (size: 130, repeated: 1) - SHA256: f9ead621a8c9811284b8cb639f3fcd209cdee22fbe437d014300ee6dd6729866

                                        0,
function(Q, N, U, L, G) {
    (U = (G = (L = (U = (N = l(Q), l)(Q), Q.C(l(Q))), Q).C(l(Q)), Q).C(U), r)(Q, N, m(Q, U, L, G));
}
                                    

#43 JavaScript::Eval (size: 219, repeated: 1) - SHA256: d050758284a8f934c4d580066b6ac77022cc3f6dde7e0e03cdd5e5e881d7e306

                                        0,
function(Q, N, U, L, G) {
    0 !== (L = (G = (L = (N = l(Q), U = l(Q), l)(Q), N = Q.C(N), Q).C(l(Q)), U = Q.C(U), Q.C(L)), N) &&
        (L = m(Q, L, G, 1, N, U), N.addEventListener(U, L, K), r(Q, 96, [N, U, L]));
}
                                    

#44 JavaScript::Eval (size: 136, repeated: 1) - SHA256: aa7861c9a791b6ecd40b95aa4ba095da00d5080121eb4d46710e2bc51bf9cbce

                                        0,
function(Q, N, U, L, G) {
    for (L = (U = (N = l(Q), f)(Q), G = 0, []); G < U; G++) {
        L.push(l(Q));
    }
    r(Q, N, L);
}
                                    

#45 JavaScript::Eval (size: 238, repeated: 1) - SHA256: 720ff1cc12f9f779b3fc02f69e38d4a4d88dabf2739f292b3306cb005c23f351

                                        0,
function(Q, N, U, L, G) {
    for (U = (N = [], l(Q)), L = 0; L < U; L++) {
        G = l(Q), N.push(Q.C(G));
    }
    U = l(Q), r(Q, U, function(Q, U) {
        Q.H++;
        try {
            for (U = 0; U < N.length; U++) {
                (0, N[U])(Q);
            }
        } finally {
            Q.H--;
        }
    });
}
                                    

#46 JavaScript::Eval (size: 397, repeated: 1) - SHA256: bf64172e1ebad8394787606ae69796ee5bb2e98051d6cfd7ec05cbc0268586df

                                        0,
function(Q, N, U, L, G, I) {
    if (!J(Q, 1, 255)) {
        if ("object" == (Q = (U = (N = (U = (N = l(Q), l(Q)), L = l(Q), G = l(Q), Q.C(N)), Q).C(U), L = Q.C(L), Q).C(G), A)(N)) {
            for (I in G = [], N) {
                G.push(I);
            }
            N = G;
        }
        for (G = 0, I = N.length; G < I; G += L) {
            U(N.slice(G, G + L), Q);
        }
    }
}
                                    

#47 JavaScript::Eval (size: 216, repeated: 1) - SHA256: cd69661b29507e47ac261fb4b9aed574d51120b70432d091c4a1089bbd3ccde2

                                        0,
function(Q, N, U, L, G, I) {
    return Q = ((I = (L = function() {
        return L[U.m + (G[U.D] === N) - !I[U.D]];
    }, G = function() {
        return L();
    }, U = this, U).o, G[U.S] = function(Q) {
        L[U.A] = Q;
    }, G)[U.S](Q), G);
}
                                    

#48 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 802e4db9e313c3c461d96e83fa86cd5266149dd4fa8fe217fb3e4f49cc0f955e

                                        0,
function(Q, N, U, L, G, I, H) {
    J(Q, 1, 5) ||
        (N = q(Q), G = N.a, L = N.B, U = N.K, H = U.length, 0 == H ? (I = new(L[G])) : 1 == H ? (I = new(L[G])(U[0])) : 2 == H ? (I = new(L[G])(U[0], U[1])) : 3 == H ? (I = new(L[G])(U[0], U[1], U[2])) : 4 == H ? (I = new(L[G])(U[0], U[1], U[2], U[3])) : R(Q, 22), r(Q, N.R, I));
}
                                    

#49 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#50 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#51 JavaScript::Eval (size: 366, repeated: 1) - SHA256: 576edfbfb5987cc8a6954887d03d11f443334cc9551dcb00e7e97b262067a4e3

                                        E = function(Q, N, U, L) {
    try {
        for (L = 0; 79669387488 != L;) {
            Q += (N << 4 ^ N >>> 5) + N ^ L + U[L & 3], L += 2489668359, N += (Q << 4 ^ Q >>> 5) + Q ^ L + U[L >>> 11 & 3];
        }
        return [Q >>> 24, Q >> 16 & 255, Q >> 8 & 255, Q & 255, N >>> 24, N >> 16 & 255, N >> 8 & 255, N & 255];
    } catch (G) {
        throw G;
    }
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1

                                        M
                                    

#53 JavaScript::Eval (size: 88, repeated: 1) - SHA256: f981846c76927c661023c471cfec6090dad9897be6c3d506dffad9c10eaea73b

                                        M = function(Q, N) {
    return Q[N] << 24 | Q[N + 1] << 16 | Q[N + 2] << 8 | Q[N + 3];
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#55 JavaScript::Eval (size: 79, repeated: 1) - SHA256: def4dc120473083449cdadf09df2f0ff7e481ef2d0104cb84a00d911e8c7d169

                                        O = function(Q, N) {
    (Q.i.push(Q.W.slice()), Q.W[0] = void 0, r)(Q, 0, N);
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac

                                        R
                                    

#57 JavaScript::Eval (size: 434, repeated: 1) - SHA256: 07eb4ee9ebe73367a48cf2c973148fd27df9993ddc3f1582cf12a82a930db6d0

                                        R = function(Q, N, U, L, G) {
    U = (((N = [(G = Q.C(215), N), G >> 8 & 255, G & 255], void 0) != L &&
                N.push(L), 0) == Q.C(58).length &&
            (Q.W[58] = void 0, r(Q, 58, N)), L = "", U &&
            (U.message && (L += U.message), U.stack && (L += ":" + U.stack)), Q.C(26)), 3 < U &&
        (L = L.slice(0, U - 3), U -= L.length + 3, L = y(L.replace(/\r\n/g, "\n")), S(Q, 145, w(L.length, 2).concat(L), 12)), r(Q, 26, U);
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#59 JavaScript::Eval (size: 411, repeated: 1) - SHA256: 3fed8e9de734717bf8d6ee6e789f90558f921bffe0d12e959f6f1344b965b09e

                                        S = function(Q, N, U, L, G, n) {
    for (Q = (((G = Q.C(N), 145) == N ? (N = function(Q, N, U, L) {
                if (U = (N = G.length, N) - 4 >> 3, G.I != U) {
                    U = (G.I = (L = [0, 0, 0, n], U), U << 3) - 4;
                    try {
                        G.f = E(M(G, U), M(G, U + 4), L);
                    } catch (I) {
                        throw I;
                    }
                }
                G.push(G.f[N & 7] ^ Q);
            }, n = Q.C(120)) : (N = function(Q) {
                G.push(Q);
            }), L) &&
            N(L & 255), L = 0, U.length); L < Q; L++) {
        N(U[L]);
    }
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 1) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#62 JavaScript::Eval (size: 74, repeated: 1) - SHA256: 02220a6b78438633206ca2224a9765d9a42151b93c4895e6181504170f3599c9

                                        Y = function(Q, N, U, L) {
    U = l(Q), L = l(Q), S(Q, L, w(Q.C(U), N));
}
                                    

#63 JavaScript::Eval (size: 2, repeated: 11) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#64 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

                                        b
                                    

#65 JavaScript::Eval (size: 127, repeated: 1) - SHA256: 251a09013ddc7c32dea5230336eeb15719d8c1ab237683e677ce2da8f5e9061c

                                        b = function(Q, N, U) {
    return (U = Q.C(0), Q.c) && U < Q.c.length ? (r(Q, 0, Q.c.length), O(Q, N)) : r(Q, 0, N), k(Q, U);
}
                                    

#66 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#67 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#68 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#69 JavaScript::Eval (size: 83, repeated: 1) - SHA256: d740a4ade3f7716539a01290a2db5be3bd531b9d9a74eb0071a33e72ae302c8f

                                        f = function(Q, N) {
    return N = l(Q), N & 128 && (N = N & 127 | l(Q) << 7), N;
}
                                    

#70 JavaScript::Eval (size: 1, repeated: 1) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

                                        h
                                    

#71 JavaScript::Eval (size: 116, repeated: 1) - SHA256: 3d01ddb7d6dd744f8a88f6594da95b6fac5f9a4a74ca4a913e922e3241a03425

                                        h = function(Q, N, U, L) {
    for (U = l(Q), L = 0; 0 < N; N--) {
        L = L << 8 | l(Q);
    }
    r(Q, U, L);
}
                                    

#72 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#73 JavaScript::Eval (size: 594, repeated: 1) - SHA256: 006327c235b513a897dfdfe218b294eb637c85c93667505d231429a569d90e09

                                        k = function(Q, N, U, L, G, n, d) {
    Q.H++;
    try {
        for (n = (L = 5001, 0), G = void 0, U = Q.c.length;
            (--L || Q.N) && (n = Q.C(0)) < U;) {
            try {
                r(Q, 215, n), d = l(Q), (G = Q.C(d)) && G.call ? G(Q) : R(Q, 21, 0, d), Q.V = true, J(Q, 0, 2);
            } catch (C) {
                C != Q.U && (Q.C(254) ? R(Q, 22, C) : r(Q, 254, C));
            }
        }
        L || R(Q, 33);
    } catch (C) {
        try {
            R(Q, 22, C);
        } catch (x) {
            u(Q, x);
        }
    }
    return U = Q.C(237), N && r(Q, 0, N), Q.H--, U;
}
                                    

#74 JavaScript::Eval (size: 1, repeated: 1) - SHA256: acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0

                                        l
                                    

#75 JavaScript::Eval (size: 287, repeated: 1) - SHA256: c953c05cd3e082ff2196dfce8ff8acae94ec682c268d280fa35b16033f5c6aca

                                        l = function(Q, N, U) {
    if (!((N = Q.C(0), N) in Q.c)) {
        throw R(Q, 31), Q.U;
    }
    return (void 0 == Q.P && (Q.P = M(Q.c, N - 4), Q.w = void 0), Q.w != N >> 3) &&
        (Q.w = N >> 3, U = [0, 0, 0, Q.C(13)], Q.X = E(Q.P, Q.w, U)), r(Q, 0, N + 1), Q.c[N] ^ Q.X[N % 8];
}
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#77 JavaScript::Eval (size: 272, repeated: 1) - SHA256: 45e5d8892efe1c1e157791fe852399285d95584094a1159091458fc4aff5f433

                                        m = function(Q, N, U, L, G, n) {
    return function() {
        var d = L & 1,
            C = [6, N, U, void 0, G, n, arguments];
        if (L & 2) {
            var x = (v(Q, C), z(Q, true, false, false));
        } else {
            d && Q.J.length ? v(Q, C) : d ? (v(Q, C), z(Q, true, false, false)) : (x = t(Q, C));
        }
        return x;
    };
}
                                    

#78 JavaScript::Eval (size: 9, repeated: 1) - SHA256: ebf49dcd836f810084c14e0f2dab4dc1768bbdc5980481bf201fcf76771dff7a

                                        navigator
                                    

#79 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#80 JavaScript::Eval (size: 258, repeated: 1) - SHA256: 2c72a710ab5b917cd3b62797d6461848379677052b65224a8a31a8bb9cf7b6fb

                                        q = function(Q, N, U, L, G, n) {
    for (L = ((U = l((N = {}, Q)), N).R = l(Q), N.K = [], l(Q) - 1), G = l(Q), n = 0; n < L; n++) {
        N.K.push(l(Q));
    }
    for (N.a = Q.C(U), N.B = Q.C(G); L--;) {
        N.K[L] = Q.C(N.K[L]);
    }
    return N;
}
                                    

#81 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#82 JavaScript::Eval (size: 321, repeated: 1) - SHA256: 57899cf8bc73bf376de29d522917b510825b27aaccfc35503cde1bff57d79aa5

                                        r = function(Q, N, U) {
    if (0 == N || 215 == N) {
        if (Q.W[N]) {
            Q.W[N][Q.S](U);
        } else {
            Q.W[N] = Q.L(U);
        }
    } else if (251 != N && 145 != N && 127 != N && 58 != N || !Q.W[N]) {
        Q.W[N] = Q.Y(U, Q.C);
    }
    13 == N && (Q.P = void 0, r(Q, 0, Q.C(0) + 4));
}
                                    

#83 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa

                                        y
                                    

#84 JavaScript::Eval (size: 487, repeated: 1) - SHA256: de6bb9d98f3fbc05431abc15b9f067cb4249541fdcb518ee45a4066643cdf464

                                        y = function(Q, N, U, L, G) {
    for (L = U = (N = [], 0); L < Q.length; L++) {
        G = Q.charCodeAt(L), 128 > G ? (N[U++] = G) : (2048 > G ? (N[U++] = G >> 6 | 192) : (55296 == (G & 64512) &&
            L + 1 < Q.length && 56320 == (Q.charCodeAt(L + 1) & 64512) ? (G = 65536 + ((G & 1023) << 10) + (Q.charCodeAt(++L) & 1023), N[U++] = G >> 18 | 240, N[U++] = G >> 12 & 63 | 128) : (N[U++] = G >> 12 | 224), N[U++] = G >> 6 & 63 | 128), N[U++] = G & 63 | 128);
    }
    return N;
}
                                    

Executed Writes (11)

#1 JavaScript::Write (size: 0, repeated: 2) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 2296, repeated: 1) - SHA256: db893acf3932a63444d67469f9c01d830ede8fc999331f15dfcede1409e139b7

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-2222385521793316"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171113/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_format="900x90";google_ad_slot="2327461989";google_ad_client="ca-pub-2222385521793316";google_adsbygoogle_status="done";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=4;google_responsive_formats=3;google_ad_width=900;google_ad_height=90;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=1;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["4089042","21061122"],"loeids":[]};google_loader_used="aa";google_reactive_tag_first=true;google_ad_unit_key="3265937839";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1512072728048;google_pub_vars="JTdCJTIyZ29vZ2xlX2FkX2Zvcm1hdCUyMiUzQSUyMjkwMHg5MCUyMiUyQyUyMmdvb2dsZV9hZF9zbG90JTIyJTNBJTIyMjMyNzQ2MTk4OSUyMiUyQyUyMmdvb2dsZV9hZF9jbGllbnQlMjIlM0ElMjJjYS1wdWItMjIyMjM4NTUyMTc5MzMxNiUyMiUyQyUyMmdvb2dsZV9hZHNieWdvb2dsZV9zdGF0dXMlMjIlM0ElMjJkb25lJTIyJTJDJTIyZ29vZ2xlX2Z1bGxfd2lkdGhfcmVzcG9uc2l2ZV9hbGxvd2VkJTIyJTNBZmFsc2UlMkMlMjJnb29nbGVfZndyX25vbl9leHBhbnNpb25fcmVhc29uJTIyJTNBNCUyQyUyMmdvb2dsZV9yZXNwb25zaXZlX2Zvcm1hdHMlMjIlM0EzJTJDJTIyZ29vZ2xlX2FkX3dpZHRoJTIyJTNBOTAwJTJDJTIyZ29vZ2xlX2FkX2hlaWdodCUyMiUzQTkwJTJDJTIyZ29vZ2xlX2FkX3Jlc2l6YWJsZSUyMiUzQXRydWUlMkMlMjJnb29nbGVfb3ZlcnJpZGVfZm9ybWF0JTIyJTNBMSUyQyUyMmdvb2dsZV9yZXNwb25zaXZlX2F1dG9fZm9ybWF0JTIyJTNBMSUyQyUyMmdvb2dsZV9sb2FkZXJfZmVhdHVyZXNfdXNlZCUyMiUzQTEyOCUyQyUyMmdvb2dsZV9hZF9tb2RpZmljYXRpb25zJTIyJTNBJTdCJTIycGxsZSUyMiUzQXRydWUlMkMlMjJlaWRzJTIyJTNBJTVCJTIyNDA4OTA0MiUyMiUyQyUyMjIxMDYxMTIyJTIyJTVEJTJDJTIybG9laWRzJTIyJTNBJTVCJTVEJTdEJTJDJTIyZ29vZ2xlX2xvYWRlcl91c2VkJTIyJTNBJTIyYWElMjIlMkMlMjJnb29nbGVfcmVhY3RpdmVfdGFnX2ZpcnN0JTIyJTNBdHJ1ZSUyQyUyMmdvb2dsZV9hZF91bml0X2tleSUyMiUzQSUyMjMyNjU5Mzc4MzklMjIlMkMlMjJnb29nbGVfYWRfZG9tX2ZpbmdlcnByaW50JTIyJTNBJTIyODA3MDQ4Mzk0JTIyJTdE";google_bpp=9;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20171113/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 2094, repeated: 1) - SHA256: 65058097210a1263761c9cd11f5405355c9fec1bb69dd2a6a598dba261a551a6

                                        < !doctype html > < html > < body > < script > google_ad_format = "900x90";
google_ad_slot = "2187861180";
google_ad_client = "ca-pub-2222385521793316";
google_adsbygoogle_status = "done";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 3;
google_ad_width = 900;
google_ad_height = 90;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["4089042", "21061122"],
    "loeids": []
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_unit_key = "1512129485";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1512072728986;
google_pub_vars = "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";
google_bpp = 157;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171113 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#4 JavaScript::Write (size: 1565, repeated: 1) - SHA256: e0e32c1ecd31b467d4edf616b7cdd2e23c8c126e1c54847af2f563a164f6b581

                                        < !doctype html > < html > < body > < script > google_ad_slot = "6757661585";
google_ad_client = "ca-pub-2222385521793316";
google_adsbygoogle_status = "done";
google_ad_width = 300;
google_ad_height = 250;
google_available_width = 0;
google_ad_modifications = {
    "plle": true,
    "eids": ["4089042", "21061122"],
    "loeids": []
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_format = "300x250";
google_ad_unit_key = "3336137519";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1512072728811;
google_pub_vars = "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";
google_bpp = 14;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171113 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#5 JavaScript::Write (size: 1660, repeated: 1) - SHA256: 648da202eeb38a31605b0c1d8d3f1395982b22c6b4c3a7532feb98a60718c559

                                        < !doctype html > < html > < body > < script > google_reactive_ads_config = {};
google_ad_client = "ca-pub-2222385521793316";
google_adsbygoogle_status = "done";
google_ad_width = 0;
google_ad_height = 0;
google_loader_features_used = 256;
google_responsive_auto_format = 12;
google_ad_modifications = {
    "plle": true,
    "eids": ["4089042", "21061122"],
    "loeids": []
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_format = "0x0";
google_ad_unit_key = "1223701170";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_3";
google_start_time = 1512072728986;
google_pub_vars = "JTdCJTIyZ29vZ2xlX3JlYWN0aXZlX2Fkc19jb25maWclMjIlM0ElN0IlN0QlMkMlMjJnb29nbGVfYWRfY2xpZW50JTIyJTNBJTIyY2EtcHViLTIyMjIzODU1MjE3OTMzMTYlMjIlMkMlMjJnb29nbGVfYWRzYnlnb29nbGVfc3RhdHVzJTIyJTNBJTIyZG9uZSUyMiUyQyUyMmdvb2dsZV9hZF93aWR0aCUyMiUzQTAlMkMlMjJnb29nbGVfYWRfaGVpZ2h0JTIyJTNBMCUyQyUyMmdvb2dsZV9sb2FkZXJfZmVhdHVyZXNfdXNlZCUyMiUzQTI1NiUyQyUyMmdvb2dsZV9yZXNwb25zaXZlX2F1dG9fZm9ybWF0JTIyJTNBMTIlMkMlMjJnb29nbGVfYWRfbW9kaWZpY2F0aW9ucyUyMiUzQSU3QiUyMnBsbGUlMjIlM0F0cnVlJTJDJTIyZWlkcyUyMiUzQSU1QiUyMjQwODkwNDIlMjIlMkMlMjIyMTA2MTEyMiUyMiU1RCUyQyUyMmxvZWlkcyUyMiUzQSU1QiU1RCU3RCUyQyUyMmdvb2dsZV9sb2FkZXJfdXNlZCUyMiUzQSUyMmFhJTIyJTJDJTIyZ29vZ2xlX3JlYWN0aXZlX3RhZ19maXJzdCUyMiUzQXRydWUlMkMlMjJnb29nbGVfYWRfZm9ybWF0JTIyJTNBJTIyMHgwJTIyJTJDJTIyZ29vZ2xlX2FkX3VuaXRfa2V5JTIyJTNBJTIyMTIyMzcwMTE3MCUyMiUyQyUyMmdvb2dsZV9hZF9kb21fZmluZ2VycHJpbnQlMjIlM0ElMjI4MDcwNDgzOTQlMjIlN0Q=";
google_bpp = 583;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171113 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#6 JavaScript::Write (size: 54, repeated: 1) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#7 JavaScript::Write (size: 26763, repeated: 1) - SHA256: f80e930c78fd312d6725cb0339b0555554d214163cf31dfc8a1c0b79394e9df9

                                        < !doctype html > < html > < head > < script >
    var google_casm = ["", 0, null, 0, 0, null, 1]; < /script><style>a { color: #000000 }</style > < script > (function() {
    var h = function(a, e, b, f, g) {
        if (g) b = a + ("&" + e + "=" + b);
        else {
            var c = "&" + e + "=",
                d = a.indexOf(c);
            0 > d ? b = a + c + b : (d += c.length, c = a.indexOf("&", d), b = 0 <= c ? a.substring(0, d) + b + a.substring(c) : a.substring(0, d) + b)
        }
        return 2E3 < b.length ? void 0 !== f ? h(a, e, f, void 0, g) : a : b
    };
    window.bgz = function(a) {
        if (a = document.getElementById(a)) a.href = h(a.href, "bg", "10")
    };
}).call(this);
(function() {
    var f = this,
        g = function(a, b, c) {
            return a.call.apply(a.bind, arguments)
        },
        h = function(a, b, c) {
            if (!a) throw Error();
            if (2 < arguments.length) {
                var d = Array.prototype.slice.call(arguments, 2);
                return function() {
                    var c = Array.prototype.slice.call(arguments);
                    Array.prototype.unshift.apply(c, d);
                    return a.apply(b, c)
                }
            }
            return function() {
                return a.apply(b, arguments)
            }
        },
        k = function(a, b, c) {
            Function.prototype.bind && -1 != Function.prototype.bind.toString().indexOf("native code") ? k = g : k = h;
            return k.apply(null, arguments)
        },
        l = function(a, b) {
            a = a.split(".");
            var c = f;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        };
    var m = document;
    var n = function(a, b) {
        if (!a || !b) return !1;
        if (a.contains && 1 == b.nodeType) return a == b || a.contains(b);
        if ("undefined" != typeof a.compareDocumentPosition) return a == b || !!(a.compareDocumentPosition(b) & 16);
        for (; b && a != b;) b = b.parentNode;
        return b == a
    };
    var p = {
            capture: !0
        },
        r = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a = !1;
            try {
                var b = Object.defineProperty({}, "passive", {get: function() {
                        a = !0
                    }
                });
                f.addEventListener("test", null, b)
            } catch (c) {}
            return a
        });

    function t(a) {
        return a ? a.passive && r() ? a : a.capture || !1 : a
    }
    var u = function(a, b, c, d) {
        a.addEventListener ? a.addEventListener(b, c, t(d)) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var v = function(a, b, c, d, e) {
        window.css ? css(b, c, d, e, void 0) : a && (b = a.href, e ? d = b + ("&" + c + "=" + d) : (e = "&" + c + "=", c = b.indexOf(e), 0 > c ? d = b + e + d : (c += e.length, e = b.indexOf("&", c), d = 0 <= e ? b.substring(0, c) + d + b.substring(e) : b.substring(0, c) + d)), a.href = 2E3 < d.length ? b : d)
    };
    var w = !1,
        x = !1,
        y = null,
        z = function() {
            document.addEventListener && u(document, "click", function(a) {
                y = a
            }, p)
        },
        A = function() {
            var a = y ? y : window.event;
            return a ? w || x ? !1 : (a.preventDefault ? a.preventDefault() : a.returnValue = !1, !0) : !1
        },
        B = function() {
            u(document, "mousedown", function() {
                w = !0
            });
            u(document, "keydown", function() {
                x = !0
            });
            z()
        };
    var D = function(a, b) {
            if (0 > b || parseInt(b, 10) !== b) b = 17;
            C(a, b)
        },
        E = function(a, b) {
            C(a, b || 1)
        },
        F = function(a) {
            C(a, 2)
        },
        G = function(a, b) {
            C(a, b || 0)
        },
        H = {},
        C = function(a, b) {
            void 0 !== H[a] || (H[a] = []);
            var c = H[a][b];
            c || (H[a][b] = !0);
            c || v(document.getElementById(a), a, "nb", b, !0)
        };
    var I = function() {
        this.g = this.h = null;
        m.addEventListener && m.addEventListener("mousedown", k(this.i, this), !0);
        u(m, "DOMContentLoaded", k(function() {
            this.g = m.getElementById("common_15click_anchor")
        }, this))
    };
    I.prototype.i = function(a) {
        this.h = a
    };
    var J = function(a, b, c) {
        var d = a.id || "";
        v(a, d, "nx", b);
        v(a, d, "ny", c)
    };
    var K = [0, 2, 1],
        L = null,
        M = function(a) {
            if (a) {
                var b;
                if (b = window.event || L) {
                    var c;
                    (c = b.which ? 1 << K[b.which - 1] : b.button) && b.shiftKey && (c |= 8);
                    c && b.altKey && (c |= 16);
                    c && b.ctrlKey && (c |= 32);
                    b = c
                } else b = null;
                b && v(a, a.id, "mb", b)
            }
        };
    document.addEventListener && document.addEventListener("mousedown", function(a) {
        L = a
    }, !0);
    window.mb = M;
    var N = {},
        O = function(a) {
            void 0 !== N[a] ? N[a] ++ : N[a] = 1;
            v(document.getElementById(a), a, "nm", N[a])
        };
    l("init_ssb", function(a, b, c, d, e) {
        a && (B(), l("accbk", A));
        b && (l("cla", D), l("cll", E), l("clb", F), l("clh", G));
        if (c) {
            var q = new I;
            l("xy", function(a, b, c) {
                c = c || b;
                var d = a || q.h;
                if (d && b && c && !n(q.g, d.target) && (a = m.querySelector("a.one-point-five-click.rhbutton"), !a || !n(a, d.target))) {
                    var e = Math.round(d.clientX - c.offsetLeft);
                    c = Math.round(d.clientY - c.offsetTop);
                    J(b, e, c);
                    q.g && J(q.g, e, c);
                    a && J(a, e, c)
                }
            })
        }
        d && l("mb", M);
        e && l("ss", O)
    });
}).call(this);
init_ssb(true, false, true, true, true);
if (typeof(ss) === "undefined") {
    ss = function() {};
}

function st(id) {
    var a = document.getElementById(id);
    if (a) {
        xy(window.event, a, document.body);
        mb(a);
    }
    bgz(id);
}

function ha(a, x) {
    if (accbk()) return;
    bgz(a);
}

function hb(u) {
    return bgy(u);
}

function ia(a, e, x) {
    if (accbk()) return;
    bgz(a);
}

function ja(a, x) {
    if (accbk()) return;
    bgz(a);
}

function ga(o, e, x) {
        if (document.getElementById) {
            var a = o.id.substring(1),
                p = "",
                r = "",
                g = e.target,
                t, f, h;
            if (g) {
                t = g.id;
                f = g.parentNode;
                if (f) {
                    p = f.id;
                    h = f.parentNode;
                    if (h) r = h.id;
                }
            } else {
                h = e.srcElement;
                f = h.parentNode;
                if (f) p = f.id;
                t = h.id;
            }
            if (t == a || p == a || r == a) return true;
            ia(a, e, x);
            top.location.href = document.getElementById(a).href;
        }
    } < /script><style>html, body {width:100%;height:100%;}body {display:table;text-align:center;}#google_center_div {display:table-cell;}#google_image_div { display:inline-block; }</style > < /head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0" style="background:transparent" ><div id="google_center_div"><div id="google_image_div"style="height: 90px; width: 728px; overflow:hidden; position:relative"><a id="aw0" target="_top" href="/aclk ? sa = L & ai = C3mOJGGYgWvnYMo2yYcOAuogI0Ljo4E6KuoiXtAZkEAEgy_DfO2DD3KSFmBjIAQKpAtCUn2ef9rM - qAMByAPJBKoEmwFP0Jk8xHG - FWPotRhFw34Sdp1ecqRHLh2IdfYEmKWpdWao5bdB_DtlLamPholqksaj0SbZVxWaSufDyfNMpRQFK2xOVm8OqMsDyaiNG1mIkAXaPjECpQwr1r9YkJEK7DFX2tMvRYNDTi65VA1OA_gpDJe6SJfBDytjknnrHNpsVs - NdpaCFmVHR6UpEpQKmuKzs1C - XtAhdQzNcaAGAoAH9vzEcagHpr4b2AcB0ggHCIBhEAEYArEJS8ikSqffq1GACgHYEwo & num = 1 & sig = AOD64_1b0lt2XcRdoDvd422PYpZUnz - 3 - w & client = ca - pub - 2222385521793316 & adurl = http : //scnem.com/slt.php%3Ft%3Dih890w.1ial375"><img src="https://tpc.googlesyndication.com/simgad/6397070912387116373" border="0" width="728" alt="" class="img_ad"  /></a><style>div,ul,li{margin:0;padding:0;}.abgc{display:block;height:15px;overflow:hidden;position:absolute;right:16px;top:0px;text-rendering:geometricPrecision;width:15px;z-index:9020;}.abgb{display:block;height:15px;width:15px;}.abgc{cursor:pointer;}.cbb{background-image: url('https://tpc.googlesyndication.com/pagead/images/x_button_blue2.png');background-repeat: no-repeat;background-position: top right;cursor:pointer;height:15px;width:15px;z-index:9020;}.cbb:hover{background-image: url('https://tpc.googlesyndication.com/pagead/images/x_button_dark.png');cursor:pointer;}.abgb{position:absolute;right:0px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgc img{display:block;}.abgc svg{display:block;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgi{fill-opacity:1.0;fill:#00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:#cdcccc;stroke:none;}.abgtxt{fill:black;font-family:'Arial';font-size:100px;overflow:visible;stroke:none;}.abgac{position:fixed;left:0px;top:0px;z-index:9100;display:none;width:100%;height:100%;background-color:#FAFAFA;}</style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div><div id=abgs class=abgs><a id=abgl class=abgl href="https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://africouleur.com.ourssite.com/%26gl%3DNO%26hl%3Den%26client%3Dca-pub-2222385521793316%26ai0%3DC3mOJGGYgWvnYMo2yYcOAuogI0Ljo4E6KuoiXtAZkEAEgy_DfO2DD3KSFmBjIAQKpAtCUn2ef9rM-qAMByAPJBKoEmwFP0Jk8xHG-FWPotRhFw34Sdp1ecqRHLh2IdfYEmKWpdWao5bdB_DtlLamPholqksaj0SbZVxWaSufDyfNMpRQFK2xOVm8OqMsDyaiNG1mIkAXaPjECpQwr1r9YkJEK7DFX2tMvRYNDTi65VA1OA_gpDJe6SJfBDytjknnrHNpsVs-NdpaCFmVHR6UpEpQKmuKzs1C-XtAhdQzNcaAGAoAH9vzEcagHpr4b2AcB0ggHCIBhEAEYArEJS8ikSqffq1GACgHYEwo&amp;usg=AFQjCNHNcWuGdT65Dmofg2i4txws91qKTA" target=_blank></a></div></div><div id="cbb" class="cbb" aria-hidden="true"></div><div id="mute_panel" aria-hidden="true"></div><div id="abgac" class="abgac" aria-hidden="true"></div><script>var abgp={hw:15,sw:75,hh:15,sh:15,himg:'https://tpc.googlesyndication.com'+'/pagead/images/adchoices/icon.png',simg:'https://tpc.googlesyndication.com'+'/pagead/images/adchoices/en.png',alt:'AdChoices',t:'AdChoices',tw:53,t2:'',t2w:0,tbo:0,att:'adchoices',ff:'',halign:'right',fe:false,iba:false,lttp:true,uic:true,uit:true,ci:'',icd:{"creatives":[],"height":90,"width":728,"attribution":{"user_feedback_data":{"mute_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","pub_feedback_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","conversion_url":"https://googleads.g.doubleclick.net/pagead/conversion/?ai=C3mOJGGYgWvnYMo2yYcOAuogI0Ljo4E6KuoiXtAZkEAEgy_DfO2DD3KSFmBjIAQKpAtCUn2ef9rM-qAMByAPJBKoEmwFP0Jk8xHG-FWPotRhFw34Sdp1ecqRHLh2IdfYEmKWpdWao5bdB_DtlLamPholqksaj0SbZVxWaSufDyfNMpRQFK2xOVm8OqMsDyaiNG1mIkAXaPjECpQwr1r9YkJEK7DFX2tMvRYNDTi65VA1OA_gpDJe6SJfBDytjknnrHNpsVs-NdpaCFmVHR6UpEpQKmuKzs1C-XtAhdQzNcaAGAoAH9vzEcagHpr4b2AcB0ggHCIBhEAEYArEJS8ikSqffq1GACgHYEwo\u0026sigh=XRQ92-t6hbE","close_button_token":"6fhSvzZODF8IirqIl7QGEKfBwNgDGPLH43EiGHd3dy5kb2xvbWl0aXN1cGVyc2tpLmNvbTIICAUTGMynIhRCF2NhLXB1Yi0yMjIyMzg1NTIxNzkzMzE2SAxYAnAB","interaction_conversion":{"label":"user_feedback_menu_interaction","label_instance":"","include_close_button_token":false},"survey_header":"What was wrong with this ad?","back_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png","mute_confirmation_header":"Thanks for the feedback!","mute_confirmation_text":"Well review this ad to improve the experience in the future.","pub_feedback_confirmation_header":"Thanks for the feedback!","pub_feedback_confirmation_text":"Well use your feedback to review ads on this site.","undo_text":"Undo","close_message":"{\"msg_type\":\"ablate-me\",\"key_value\":[{\"key\":\"collapse-after-close\",\"value\":\"animate\"},{\"key\":\"secs-to-countdown\",\"value\":\"1\"},{\"key\":\"countdown\",\"value\":\"3\"},{\"key\":\"message-tick\",\"value\":\"1\"}],\"googMsgType\":\"sth\"}","closing_countdown_text":"Closing ad: %1$d","attribution_text":"AdChoices","attribution_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png","attribution_destination_url":"https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://africouleur.com.ourssite.com/%26gl%3DNO%26hl%3Den%26client%3Dca-pub-2222385521793316%26ai0%3DC3mOJGGYgWvnYMo2yYcOAuogI0Ljo4E6KuoiXtAZkEAEgy_DfO2DD3KSFmBjIAQKpAtCUn2ef9rM-qAMByAPJBKoEmwFP0Jk8xHG-FWPotRhFw34Sdp1ecqRHLh2IdfYEmKWpdWao5bdB_DtlLamPholqksaj0SbZVxWaSufDyfNMpRQFK2xOVm8OqMsDyaiNG1mIkAXaPjECpQwr1r9YkJEK7DFX2tMvRYNDTi65VA1OA_gpDJe6SJfBDytjknnrHNpsVs-NdpaCFmVHR6UpEpQKmuKzs1C-XtAhdQzNcaAGAoAH9vzEcagHpr4b2AcB0ggHCIBhEAEYArEJS8ikSqffq1GACgHYEwo\u0026usg=AFQjCNHNcWuGdT65Dmofg2i4txws91qKTA","ad_feedback_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","is_rtl_language":false,"feedback_options":[{"text":"Report this ad","conversion":{"label":"user_feedback_menu_option","label_instance":"1","include_close_button_token":true},"survey":{"header":"What was wrong with this ad?","options":[{"text":"Ad covered content","conversion":{"label":"mute_survey_option","label_instance":"3","include_close_button_token":true}},{"text":"Seen this ad multiple times","conversion":{"label":"mute_survey_option","label_instance":"2","include_close_button_token":true}},{"text":"Ad was inappropriate","conversion":{"label":"mute_survey_option","label_instance":"8","include_close_button_token":true}},{"text":"Not interested in this ad","conversion":{"label":"mute_survey_option","label_instance":"7","include_close_button_token":true}}]},"undo_conversion":{"label":"user_feedback_undo","label_instance":"1","include_close_button_token":true}}],"mute_panel_data":{"adchoices_icon_url":"https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png","adchoices_button_text":"AdChoices","closed_message_text":"Ad closed by %1$s","enable_lightbox":false,"google_logo_url":"https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png","report_ad_button_text":"Report this ad","confirmation_text":"We'll try not to show that ad again","protocol_gstatic_host":"https://www.gstatic.com","jake_mta_context":"","overlay_message_text":"Ads by %1$s"}}},"flags":[{"name":"enable_settings_click_collapse","value":"true"},{"name":"jake_enable_native_scroll_and_small_grid","value":"true"},{"name":"defer_jake_mta_render_to_expand","value":"true"},{"name":"jake_ui_extension","value":"jake_default_ui"},{"name":"jake_transition_timeout","value":"-1"}]},opi:false,ti:false,re:false,mob:false,osd:false,il:false,eaca:false,ejar:false,eda:false};</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171113/r20110914/abg.js"></script><iframe frameborder=0 height=0 width=0 src="https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211" style="position:absolute"></iframe></div></div><script src="https://tpc.googlesyndication.com/pagead/js/r20171113/r20110914/client/ext/m_js_controller.js"></script><script>buildAdSlot([[[1,0,728,90,"http://scnem.com/slt.php?t=ih890w.1ial375","https://googleads.g.doubleclick.net/pagead/conversion/?ai=C3mOJGGYgWvnYMo2yYcOAuogI0Ljo4E6KuoiXtAZkEAEgy_DfO2DD3KSFmBjIAQKpAtCUn2ef9rM-qAMByAPJBKoEmwFP0Jk8xHG-FWPotRhFw34Sdp1ecqRHLh2IdfYEmKWpdWao5bdB_DtlLamPholqksaj0SbZVxWaSufDyfNMpRQFK2xOVm8OqMsDyaiNG1mIkAXaPjECpQwr1r9YkJEK7DFX2tMvRYNDTi65VA1OA_gpDJe6SJfBDytjknnrHNpsVs-NdpaCFmVHR6UpEpQKmuKzs1C-XtAhdQzNcaAGAoAH9vzEcagHpr4b2AcB0ggHCIBhEAEYArEJS8ikSqffq1GACgHYEwo\u0026sigh=XRQ92-t6hbE",null,null,null,null,null,null,null,null,"http://www.dolomitisuperski.com/lp-2017-18/no?utm_source=google_nor\u0026utm_medium=banner\u0026utm_campaign=ds-europa-2017",null,null,null,null,null,null,null,"",null,null,null,0,"","",0,0,""]],728,90,0,0,null,"CPnEge-N59cCFQ1ZGAodQ4AOgQ","GGYgWr_3MY-RYee6isAO",null,"ca-pub-2222385521793316",728,90,0,"_top",null,null,0,"https://tpc.googlesyndication.com",null,0,0,-1029029457,[["open_applinks_adding_gclid","False"],["pass_gclid_to_deeplink_url","False"]],null,null,null,null,[1,1,1,1,0,0],null,null,null,null,null,1,null,null,null,null,"https://www.gstatic.com",null,null,[0,0],0]);</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171113/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dC3mOJGGYgWvnYMo2yYcOAuogI0Ljo4E6KuoiXtAZkEAEgy_DfO2DD3KSFmBjIAQKpAtCUn2ef9rM-qAMByAPJBKoEmwFP0Jk8xHG-FWPotRhFw34Sdp1ecqRHLh2IdfYEmKWpdWao5bdB_DtlLamPholqksaj0SbZVxWaSufDyfNMpRQFK2xOVm8OqMsDyaiNG1mIkAXaPjECpQwr1r9YkJEK7DFX2tMvRYNDTi65VA1OA_gpDJe6SJfBDytjknnrHNpsVs-NdpaCFmVHR6UpEpQKmuKzs1C-XtAhdQzNcaAGAoAH9vzEcagHpr4b2AcB0ggHCIBhEAEYArEJS8ikSqffq1GACgHYEwo\x26sigh\x3dXRQ92-t6hbE","GGYgWr_3MY-RYee6isAO","CPnEge-N59cCFQ1ZGAodQ4AOgQ",true,true,true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171113/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BRLaAGGYgWvnYMo2yYcOAuogIAIq6iJe0BgAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAQ','',3265937839,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d1786809266\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dBRLaAGGYgWvnYMo2yYcOAuogIAIq6iJe0BgAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAQ');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171113/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,0,1,0,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CPnEge-N59cCFQ1ZGAodQ4AOgQ"></div><div style="bottom:0;right:0;width:246px;height:90px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB9SURBVBjTbZEBFoAgCEPHDXb/02YwJvTCl0l+5kLgP6LivM/aGcDcPTM5siRQA87eHR6OCdOZ6bA6lnZVtnY7QSwnDpJcvoGhLm1QdjCHuKxrVDRHQc4sYFD92EgVqcBO5aLZ20G1Jb/M4/sPdwdlY9Gi4qvdpkv93mUMzw87cQWvSAnbqgAAAABJRU5ErkJggg==') !important"></div><script>var ad = buildImageAd(adSlot, 0);adSlot.addAd(ad);adSlot.finalize('google_image_div');</script><script>(function(_){var pk=function(){this.g=[];this.l={}},qk=function(a){var b=[a.key,a.value];_.q(a.va)&&b.push(a.va);return b};pk.prototype.report=function(){for(var a=[],b=0;b<this.g.length;++b)a.push(qk(this.g[b]));return a};var rk={};var sk={1:0,45:0,46:0,48:0,2:1,4:8,5:6,8:11,9:2,6:9,34:25,26:15,3:7,20:12,24:26,33:11,25:0,40:9,36:19},tk=function(a,b,c,d){var e=sk[b];4==b&&(b=(d=d.currentTarget)?d.getAttribute("data-absm"):c.getAttribute(b,"data-absm"),"e"==b?e=12:"db"==b?e=29:"dd"==b&&(e=30));(0,window.ja)(a,e)},uk=function(a){return function(){a()}},vk=function(a){return a.report()};_.u("registerAd",function(a,b){_.q(rk[b])||(rk[b]=new pk);a.registerClickUrlModifier(_.x(vk,rk[b]));for(var c=[1,45,46,48,2,4,8,6,9,5,3,20,34,26,24,33,25,40,36],d=0;d<c.length;d++)_.v(window.st)&&a.listen(c[d],"mousedown",uk(_.x(window.st,b))),a.listen(c[d],"click",_.x(tk,b));a.listen(15,"click",_.x(tk,b));_.v(window.st)&&a.listen(15,"mousedown",uk(_.x(window.st,b)));_.v(window.ss)&&(a.listen(0,"mouseover",uk(_.x(window.ss,b))),a.listen(0,"focus",uk(_.x(window.ss,b))),a.listen(1,"focus",uk(_.x(window.ss,b))),a.listen(1,"mouseover",uk(_.x(window.ss,b))));return a},void 0);_.u("css",function(a,b,c,d,e){a=rk[a];_.q(a)&&(!_.q(a.l[b])||d?(d=a.g.length,a.l[b]=d,a.g[d]={key:b,value:c,va:e}):(b=a.g[a.l[b]],b.value=c,b.va=e))},void 0);})(window.hydra=window.hydra||{});</script><script>registerAd(ad, 'aw0');</script> <script>(function(){var h=this;var k;var l=function(a,b,c,d,e){if(e)c=a+("&"+b+"="+c);else{var f="&"+b+"=",g=a.indexOf(f);0>g?c=a+f+c:(g+=f.length,f=a.indexOf("&",g),c=0<=f?a.substring(0,g)+c+a.substring(f):a.substring(0,g)+c)}return 2E3<c.length?void 0!==d?l(a,b,d,void 0,e):a:c};var n=function(){this.g="";this.h=m},m={};var p=function(a,b){b instanceof n&&b.constructor===n&&b.h===m?b=b.g:("object"!=typeof b||!b||b instanceof Array||b instanceof Object||Object.prototype.toString.call(b),b="type_error:TrustedResourceUrl");a.src=b};var q=function(a){var b=new n;b.g=a;return b};var r=function(a){this.g=a||h.document||document};var t=function(a,b){var c=window;c.addEventListener?c.addEventListener(a,b,void 0):c.attachEvent&&c.attachEvent("on"+a,b)};var w=function(a){var b=u,c=v;a=void 0===a?document:a;var d=(a?new r(9==a.nodeType?a:a.ownerDocument||a.document):k||(k=new r)).g.createElement("SCRIPT");d.type="text/javascript";c&&(void 0!==d.onreadystatechange?d.onreadystatechange=function(){if("complete"==d.readyState||"loaded"==d.readyState)try{c()}catch(f){}}:d.onload=c);p(d,q(b));var e=a.getElementsByTagName("head")[0];if(e)try{h.setTimeout(function(){e.appendChild(d)},0)}catch(f){}};var u,x,y,z,A,B=function(){var a=window,b=B;a.removeEventListener?a.removeEventListener("load",b,void 0):a.detachEvent&&a.detachEvent("onload",b);!A&&(a=document.createElement("IFRAME"),a.frameBorder=0,a.style.height=0,a.style.width=0,a.style.position="absolute",A=a,document.body&&(document.body.appendChild(a),a=A))&&(a=a.contentWindow)&&(y="1",a.document.open(),a.document.write("<!doctype html><html><head></head><body></body></html>"),a.document.close(),w(a.document))},v=function(){var a=A;if(a&&(a=a.contentWindow))if(y="",a.botguard){var b=a.botguard.bg;if(b)try{C(function(){z=new b(x)})}catch(c){y="5"}else y="3"}else y="2"},D=function(){var a=null;try{a=window.rvdt,"number"==typeof a?a=36E5>a?""+a:"M":a=null}catch(b){}return a},F=function(){return["bg",E(),"9"]},C=function(a){window.wrpfc=a;window.wrpfc()},E=function(){var a=z;if(y)return y;if(!a)return"5";if(!a.invoke)return"4";var b;try{C(function(){a.invoke(function(a){b=a})})}catch(c){return"6"}return b&&b.length?3>b.length?"7":1124<b.length?(t("unload",function(){var a=["bg",b],d=["id","bg"];if(d&&a&&d.length&&a.length&&d.length==a.length){for(var e=["https","://","pagead2.googlesyndication.com","/pagead/gen_204"],f="?",g=0;g<d.length;g++)e.push(f+d[g]+"="+a[g]),f="&";a=e.join("");d=window;d.google_image_requests||(d.google_image_requests=[]);e=d.document.createElement("img");e.src=a;d.google_image_requests.push(e)}}),"8"):b:"6"};window.bga=function(a,b,c){u=a;x=b;y="0";c&&window.osdlac&&window.osdlac(F);t("load",B)};window.bgy=function(a){var b=D();b&&(a=l(a,"rvdt",b));return l(a,"bg",E(),"9")};window.bgz=function(a){var b=document.getElementById(a);if(b){var c=D();c&&(window.css?css(a,"rvdt",c,void 0,void 0):b&&(b.href=l(b.href,"rvdt",c,void 0,void 0)));c=E();window.css?css(a,"bg",c,!1,"9"):b&&(b.href=l(b.href,"bg",c,"9",!1))}};}).call(this);bga('https://pagead2.googlesyndication.com/bg/PQMXuY6MlKBLQCoydS_eTwE-g1k9WHzhWAyB_BDUb3g.js','nKh71VcSim8hFNx9hOxr1zHeRfxwyxYUMNrVmVOqoASX8/1paD8WYG4n4E4eRvcLc51iGd4HXhImWuFnbY5jl3RHyAZAo0NVSXS+KBVgzQvTkMz29bgrKRgwWCynnVAgrg7kSxLvVoHrV4gTPnlONhLcS6g0bwz4vKmY8k32OOrEpll0Z3/alFZzStSGyKWlydPpCSqR6hpcIVvA49Cdt9YPlwSx03I4HlpO/ENQiSBpCf2M1OAN8aFKak5/Sx9sxhRuW1uinIP0O/KLbg1zaP1j2Z+2uaeX5agGR3pnu4lJEU6U+4zUQ3siEhanKSjt57tCBCIESx1GeArm2LFfkg5ZoDkOvlWqrI0VwJCpe4mUy4PdqF5/OVuYFlJfnK2i2SE7D6Fg0K16xPqGpqvQK9rwMFChd0DPeSZ93zgSAnurIneb8Np6IiGsQHXaW4zvPxk9vZI4HCgTrswigel0RalSpFU6WebYcI8sKuC3MORqSUminrN9AYM1ztJPVpmVat3NLbtVF4M3xVUP87sLyOnjZW/I6d2mZgIps3mMqklpdJE93V+YIcqo2xx7WODzIgxLA+dn/mSbEBIRPyV/+RlZlGMtLmGZoMuZwezUw9j/u874HBs1gDVODR9pYCYAXDnHJAJvkSMHyRZbpsfN6VC78blk8Dg55SiwOOUUFHLisReuL4p2SRt+ACB3K/8Pm7c2v4KdRIju2U6gFRksd6YAw+s6mmXJnJzG95ykCo22E1gu4B0yMnp9lsq74Vp6QnOWhFEv7CFYtmSRWbOjD3VVeka+Drh/irEh4DQuMWkI/iDFZgyeyZy8Oulos7Lva+d5xX/rAt9zb0DuVIdoddERcogdaYXbcCy19eqM+NU1flhwOQLld64u/X83+QpAF9boPCZFK65UQBH6Moz8wAGG6/h6a/BWqPFRNaxEX6ETB2sYH1Tkgv/tkNwfVuBhR8hKrOpIV9CZaOc5vZtICMEizTDjc5VZTf8Me0jcy+0Ut5DldgJ2TtNX0w77t3MDsged9ihDX63Q9EePsU58pDu8/SqUJb1dUTFIZesJiGFBVR6QjtuDeg7AQPJ63WfgFlNFfzAzJbYgDtfAjde2ulV57XkpyGKpJ9dtmPhmC2mCXcyrgpGR/5B09ZJ5YdPl2F7JWi/XVW16Gz8wCz1NJv2vYcCZLbrCWpBfnHmIiAhWvBlb2tSZ/qswo0/CR5z9/dRm6cf7QBJ1A7/S0J/8yAJrnjYsjShDXLMbFyeK8C+Wdr7GTD4yc1KYGAQUusr6LwvIZzMTlkK+TEPgjv/nsU2DE2wF6fG28mBs799COGk4USjN34Kg44O7u5yHb9Fjx8z6IlZToFweB5dKkwJqVqTCGO5vVUTB9sR+5jNY8DDGZIcY5lk1RERPx2Gdk9YOyXpJEjCD2S0+cvjHZKJgu0CcjY68t2xE8Z+5rmPyw15azsc3nsqTiAw0tVIg/7JL2jTjBxmnQ0yTq//wIcVzEVafbXK4Ban74mAgtQNhZT4URVklJ2p2A4ENZqJ7v8ar5D1PfVkyublAw9AOle+1UP92tyNhVeKttGR9H0UCMAMaOwPhV14HNQD+7f/jFQl1QxK2KkO+fX3RNQsVgXgfpw/nkBywqAEP4tFZpEDDiAcp48lZK7DPvKS4J6CuY+q0LS/q1EU1HxXOFIG2voobMIbjvdqbeQSXrwpnhS0xpsidvJzZ9+HYcJYybIC7xN2oLbf/BsORXTbKnad7Bs+53vkHnVqMN59PPbUonxPK6Y97zWutHoG2pWAEQBdVZiqtJlW9sw93cTJMCGpeMYo3uUKuthRKP1A2L2bzb+nJelt90lSDqshFG+gqYZljLAjtLPgJPc1Voa+2Rr6H/V/4yISHv80GZDumZz+EYEyRdeKKaeJ8knO0djZAZRbr7U3W+ttXTlBJmS6maQQmqXY1oiCnh1x5bCZmc1AobufoK3GAMI6WGx1CeXF3UE+/tQnL8eGYvZmUOS6pEVk2tNf0/E4hpTayBph8ojnZgGV8na1TK5wSy1vyGvg5az7gYfJVffTnV+HeIoVepypLLzR3Jfu5/3Awj5RpVRbKBC1kPl6nWyEdSqbCgJ0D+jPKdr7wFQ0oYoLG9ZhZ9at4bxOuoUQEvGgTV6ppU2C4dRnfcdYs1bgUWaPiCemhMtRVOqYHIoLAgAwxpUvvR5AYNFfWdV2FPIKcH/o73SVTXFmihoCNl7cxvkiObtQsdktjTe/dCdOz5P68XMQcyOFtwqckzLNPTHjcZDw2oP+0qzfJnH/NL8WeVsRJFNFgUVGwl/swx0EnOhmuwfnAEEU61eO3AxqZHvWbhFuDFgwDcAqMMm3irdPJgDQi2gN97WvMa2VBRr8JVcuJ52jT+oR0MFjlPrt5QFP7Z1dp3n1+nSr9A27ZY9pb8ztnBzjBtKcKyIpNMIPJuiDvSg1YAIRUok+/5Be1iEd78cDpZeudNugwf3J66OTMski70CThTBrOuq3qzwSwDz6OgUniWUQ/Kee8RqDUzE6bO4OlvA4xhIb94H9uc1nam8he8V9qewz7akl7OZRBzXsPkM3bbvyZczZ0zJdZZpUe6GPqxPLuo1AYb1jDueSuzTeeUEvgc0xfX6wpmqr/Ivk/pfOxABKc04eru3Bd3pHA6wh5aGeyVdTKzuFOi6JslHOqsB2lU49U6+njqSObllnx+ckClsD54VklNKVkeBOZLmduO3xD43xoMrr+8Tw+G6FPK5p4BF06Ea1YyXQ57Jy8cC6CR0cCt7+fHUuPOQ6NDR2mPGTT5ToZurVUbgMyPERfdoR/xFlMXNP7aMlVEWIv5TZJ7gEXeFLP8pXO1f614+AR1olWkomlbe+3fpm+nOU3Axko+GZk0lSqB8t+DQUUOjWc96O3dG8FxBhRGE1z8Nt/ocVqFM+FkVtjvoXSJhzEGniL2knFy2SakGHHVAj1sE1OEYzkFJvDbfDdsj66FFUTF6isDR18UwZZiOr8gz/EzRykOuesD9S1TFS09tFN8qxldS64ZfsHRVUqfzsDLPzYxnGkm+TQjt78brfkdAFF+hY9cWOkB+ZtoUd7BYQqhMx+wiIuY6deaikTtbSIxIv5VvowujNa9BH6bskIfyzpzoaKSNO6Yp15MzGar2+OTEck3uGCbWMsmVhQQMRRdKt6/x53Sm6ImCE0+nIttdF5Rhl/i4WhFYBLVgX1minQRkX+1bA/hLFixNAlH1Vm72xGJeplU2wf2ibruQeXizyerTfrIRArMhOWIWkQm2Aa/i+3plzgDad/VoFuswsBr5Dnd5V3TT13dC+nRu3t8B4DBd0Sm3C9lyBdp7HAYu6+QzTrQCoa+w2mEgNfmCCIbDFCLwUAYokgIDuiq2VDATjFYCafcEujfePjZnawdt8IN2Y+bM9HnHdp0CnhwpJrfsjuSLgc50ToP1E4kJKVhc/wh2KT6cscF14okIaYR4eNFifqocxLf/snzXWmXwouC4ZjnvkxGXiaEqLISDio8w/hWtdm11dee4Yz02KitR0qyLQDbMMYk5aDnhJT3q9x0BVHGyEaYr0r0hpGke8SOytRRsxJktDEA2tlGOFqs8Cp9FB9ZRwrx0kpmwgSLRQ7QO+5ewjgtGtwqWLGrsyliFGiSyvyW8jXjswC7QJXYtgl3FuL8Srb6aub8X2/g05RmKZD2qtU6DJqEq3kViRMEJZBVRqGPu8dI9CAgvc/gJhdyCx5T+BkMWMUQUsvHiWp7yXo5//G00xmoNoHq5jSz8MltLiteLCjUVYFjSsQt7tDiJY1jseuWvYXA4QHB0BTlpyxlGt2/bKl4dLyFsvHPk1DPkuCHvt/+6GPl08vYT0ZEoHhBQ7viK+wElHunGvp5M06wU4y/ClqtXGR020HbBbqUYsj3cVKOuQC8y8rNZ2zdUgcmzG0zP+sCevVL9feXdLW9rK19zIEhXHYiLLkd0Fg9CUqtC0v+f+hQT5mWlCuPZNnkVwo17S6TMbY9LTD5GPvdCDcwlCdQKIzzAqBQ0ZMVLNzM5JUbBmKeRUH+mt+JJo9MH+0Abcq+xf/far/FjoAwarE5ZVVHF2KIxryBPCQ7NF4OGDWH++dMC2/RDaW6AOXNpH9/8bghZfwf6hrzzlZXb8eqRpNlGdUC1PaF0hejBkKNaks4kC1YFhFQOgL6rGERE3q6mlWboQiwM1XF680CMNqJ6Odw2tPGAxX0bbALitLnIj6DVdGXxnXGC6NEkw4BSfodhGwv5ZxpOPfxmJNE+3i5NzA+W/gqvlKE+P7BktYWRIY6+08Z1JmDZDJgm6RAGiJ2QfXgzmRs/qKuWxlpno8SuMIUTJ0EvebuMDjfmI05yfknMfNm6XScVrsaGzujio1ryB0YVymRswF9Hg/QdU5hfWEn8mZlFW2od0KjkOsc1P3PmlBk8ghL2LqTxF4KGgLTiUAtlWzjL/nxffB1tyDAevyvAsowpluplgM0ZJKwUkTw4S5/Nb/krU6eciIECXfsHNWOpNtdSMCK226nWShNvTSZn2Qn4vGD7LfoiqaBsURl5bF+9d+0acVlQGnNioi6oDpuAYIWZMKVDz9JIGVXG5MG5cdH2Br/y3b5W/+h+PGftlGfS9cO7wBfAoqawO9uIVyEvuNer5jw6LTc01ih+znbCPn97vxpLJTJ327kKMfoVu8OG9pYLsNmhgcP1DwWzJkLuNKJm3VYaUKXGE1RAlAH6SpyNi8YUwICwOB9HfDf61ADb6k1vPTFeiGqNtI+EusNnea6RFzxsp8y04Cx9ByAG3FPwi2CPGiRsTHvZ298dZsc7zFrH1nu9FvFKI05l7xAQ+kVxhuv2uOS+1/f9mq8LBVsugcdJYvmty2EHv9DQag2mhC7wKaQRJjKmkS0w1Be6XqOx0iGEzkC3HA3brxEtQ8C49ohbhxGhu680PXVFVKK24sNAVq/ujOyAzs+cbOxq9gEsmdVoclThwMr2Q0yavBQW/qrYy19avLbb0+GnFuxBjkT9WFDo8NIKGf2Nk2O2KLJvnkFkF2Qu1tKGTGrfrZVo+9W6iJ52rbi7gavJyCH6T7eiY+/sV7eJNs5QouvwzxIaGak3WnOCfRCOinuX1sNPgLdKY0GNiBvRKhqyn7OwS/Mwzq5FPtw9tr5YIPc3FFevfBRXFNjB0SN4GnVefcHIiXNf+8Ai/giIdOkXKO46xTR/d10ck6Af97lXM16hx9lXgeB2/KkAWxkXdrv4snl8ckIyBx7sPvzSS/PiahkgwBO8+JDb154bvDJp1N9Mr+KXZvhhjNEBewYfWc0DUF9O22zc9KWQkKXRfX1gp3qCium+HfK9UuQLdU0B2hxgFqrKOynryX3g2RRXY/QMHAMBETBeDNKbTMQKV/TiZxvEocKNhULCKqTW2qWyqzANgzjq/PmSf94ExQMcD2I0aGSCfUwiEzFXDw/oCLLnJ5epUGABQn74ZM6EL+y7Ra8tl/Oj8jj2koaCGYvCZCOE5NMtRpbQWGO0LqOqYpUy+XTZ49xV7BxQ6JIHhjFto0dKKc+27PF/JV+De/8zir10kIKu8l21kcwGhyzg6aVeVLG1/C6p1x69yBZNhJGYTpGaJDSq069aMno3huhvUIBM4okc6YuSZ5Umk0DSQ7BhIqT7EeKHa3SNIY1MmP589mkDZqy23/x9h8lQX6Dv6gTtbMeT48shmvRD+SvpS66p+abiFlxR/mxzPeUiWy+1y9R7dbQw/VggwT5CQUhqtbOcsR8B/KxxPn6eGM6QZDQHfzfovqiqjwgxM3HfnwA2JgmeEjSyNNBNZFzXYDaVKjcYvaHNbOQJRJQJ+EhYdWCfQVUuqwnDsJj7ytU76ee73h8u3E0AX3RD/27DZHxdpMm9GGWeJBEuT00YhWSfWrP1/QZvOWy6E');</script></body></html>
                                    

#8 JavaScript::Write (size: 1327, repeated: 1) - SHA256: 220a704abcc707fb9845a197bd83c9c411655bdd4a6f0700edb12c499c9d7c71

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "900"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&amp;output=html&amp;h=90&amp;slotname=2327461989&amp;adk=3265937839&amp;adf=807048394&amp;w=900&amp;fwrn=4&amp;lmt=1512072726&amp;rafmt=1&amp;format=900x90&amp;url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;adsid=NT&amp;dt=1512072728048&amp;bpp=9&amp;fdt=18&amp;idt=246&amp;shv=r20171113&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=4304193369203&amp;frm=20&amp;ga_vid=628461206.1512072729&amp;ga_sid=1512072729&amp;ga_hid=2095278181&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=138&amp;ady=140&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;eid=4089042%2C21061122%2C370204012&amp;oid=3&amp;nmo=1&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;dtd=647"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#9 JavaScript::Write (size: 1316, repeated: 1) - SHA256: 465bb8023040a3a3f298c703e3ea68eed5df99c9f5362b3327855b2f5f0c41a7

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&amp;output=html&amp;h=250&amp;slotname=6757661585&amp;adk=3336137519&amp;adf=807048394&amp;w=300&amp;lmt=1512072726&amp;format=300x250&amp;url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&amp;ea=0&amp;flash=10.0.45&amp;avail_w=0&amp;wgl=0&amp;adsid=NT&amp;dt=1512072728811&amp;bpp=14&amp;fdt=17&amp;idt=150&amp;shv=r20171113&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=900x90&amp;correlator=4304193369203&amp;frm=20&amp;ga_vid=628461206.1512072729&amp;ga_sid=1512072729&amp;ga_hid=2095278181&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=138&amp;ady=310&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;eid=4089042%2C21061122%2C370204012&amp;oid=3&amp;nmo=1&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;dtd=168"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 1410, repeated: 1) - SHA256: acf6cb4099031f2255ed9dbdb5a904d388cf5a97e452e33695720182313a28ef

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "0"
height = "0"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&amp;output=html&amp;h=0&amp;adk=1223701170&amp;adf=807048394&amp;w=0&amp;lmt=1512072726&amp;plat=1%3A1085448%2C2%3A1085448%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C25%3A32768%2C26%3A32768&amp;rafmt=12&amp;format=0x0&amp;url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&amp;ea=0&amp;flash=10.0.45&amp;pra=5&amp;wgl=0&amp;adsid=NT&amp;dt=1512072728986&amp;bpp=583&amp;fdt=586&amp;idt=725&amp;shv=r20171113&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=900x90%2C300x250%2C900x90&amp;correlator=4304193369203&amp;frm=20&amp;ga_vid=628461206.1512072729&amp;ga_sid=1512072729&amp;ga_hid=2095278181&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=4089042%2C21061122%2C370204012&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cr%7C&amp;abl=CS&amp;ppjl=u&amp;fu=272&amp;bc=1&amp;ifi=3&amp;dtd=755"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#11 JavaScript::Write (size: 1373, repeated: 1) - SHA256: e7265f1c889b9f9e9636bf622f8a292003ecacc9bfcc469eefeec72265375db7

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "900"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&amp;output=html&amp;h=90&amp;slotname=2187861180&amp;adk=1512129485&amp;adf=807048394&amp;w=900&amp;fwrn=4&amp;lmt=1512072726&amp;rafmt=1&amp;format=900x90&amp;url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;adsid=NT&amp;dt=1512072728986&amp;bpp=157&amp;fdt=182&amp;idt=533&amp;shv=r20171113&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=900x90%2C300x250&amp;correlator=4304193369203&amp;frm=20&amp;ga_vid=628461206.1512072729&amp;ga_sid=1512072729&amp;ga_hid=2095278181&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=130&amp;ady=599&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=4089042%2C21061122%2C370204012&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=3&amp;dtd=564"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (64)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: africouleur.com.composesite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         69.30.245.206
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 30 Nov 2017 20:12:34 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
X-Powered-By: PHP/5.4.16
Location: http://africouleur.com.ourssite.com/
Content-Length: 3
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode text, with no line terminators
Size:   3
Md5:    ecaa88f7fa0bf610a5a26cf545dcd3aa
Sha1:   57218c316b6921e2cd61027a2387edc31a2d9471
Sha256: f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
                                        
                                            GET / HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 30 Nov 2017 20:12:35 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
X-Powered-By: PHP/5.4.16
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8144
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8144
Md5:    f219a3d130d77be7af85d166b9033d42
Sha1:   9650c71be0b39f5bd25ac6f2f486ff11e3431a75
Sha256: acfc8e047496d1918133a0de61e7251ae4df60c9e2647b478d55749fe076bbb5
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 20:12:07 GMT
Expires: Thu, 30 Nov 2017 20:12:07 GMT
Cache-Control: private, max-age=3600
Etag: 12776485510455936688
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25030
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25030
Md5:    a423860ceb2c8c77d8ebc0c53c42b973
Sha1:   7b7356f04ba4343658bcab5c173e0d4c1d01422c
Sha256: c510ba492b6ceb2602fcea7296eaff8c3ab3166b7f4297ae68dbf13c54e5869f
                                        
                                            GET /s2/favicons?domain_url=tissu.net HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Thu, 30 Nov 2017 20:12:07 GMT
Date: Thu, 30 Nov 2017 20:12:07 GMT
Cache-Control: private, max-age=28800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=d1cbBW-itqaWr11w7KB0wGAf54E5FLOvXgznBN_q2p7oRrEpak7EVAZoi2b2J1-CAfNpS1iNloXjU-6rX2yy2P3JwsLcEH-b1yOcdEw6NL73b-JsOFp1tRbhzERfjFIW;Domain=.google.com;Path=/;Expires=Fri, 01-Jun-2018 20:12:07 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   492
Md5:    3ca64f83fdcf25135d87e08af65e68c9
Sha1:   b82d0979d555bd137b33c15021129e06cbeea59a
Sha256: 2e30ff33270fd8687b0eb4d12652bfd967f23975f158bf8da93bece2ba4ab947
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Thu, 30 Nov 2017 20:12:35 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Fri, 02 Dec 2016 13:25:18 GMT
Etag: "25be-542acde7b8b80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1531
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1531
Md5:    e1d8cf4a7b0ecfd4aa18fa4d96bb3acf
Sha1:   cd4c089bceb1c6b9d70756fcc45f10e65b7c88bd
Sha256: 4c256f96944e6c57e68a20992f12c515298e091512644aa377e05633b576769a
                                        
                                            GET /css/style.css HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 30 Nov 2017 20:12:36 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Thu, 23 Feb 2017 06:22:00 GMT
Etag: "81e-5492ca178f200-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 833
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   833
Md5:    fd31671826b3b6256e47efd67674b727
Sha1:   6ad57285d3e74500227faaf2457d489768d2f5c5
Sha256: 5d355a9f74d28cc0357b75059f66af75b64fd8512b06a66c6af2ec82a623f594
                                        
                                            GET /s2/favicons?domain_url=tildafrance.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Thu, 30 Nov 2017 20:12:07 GMT
Date: Thu, 30 Nov 2017 20:12:07 GMT
Cache-Control: private, max-age=86400
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt;Domain=.google.com;Path=/;Expires=Fri, 01-Jun-2018 20:12:07 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   91
Md5:    0c08e47cb451b4e42b54520256023323
Sha1:   5623797e875a7fb3983a675c1ce686d29a435e39
Sha256: 8ff30cd9dc11cc06a7377bb427946861d492966ac3d4e4f663dd2ad9d1ad6941
                                        
                                            GET /images/logo.png HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 30 Nov 2017 20:12:36 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Fri, 02 Dec 2016 13:36:52 GMT
Etag: "10ab-542ad07d92500"
Accept-Ranges: bytes
Content-Length: 4267
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 87 x 50, 8-bit/color RGBA, non-interlaced
Size:   4267
Md5:    4909f826d7171d97b4a94ffcc4917146
Sha1:   6d77e119f5ceb281c14f4781cd1011c006be0a30
Sha256: cff4e6df81de5e4ffbca51fbfb7c025d18aa9fb0db43db9f18ddba73846d8fce
                                        
                                            GET /css/bootstrap.min.css HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 30 Nov 2017 20:12:36 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Tue, 29 Nov 2016 04:46:35 GMT
Etag: "1de99-5426945e220c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19881
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19881
Md5:    e7ed4e0436d499cb2b5368fd4631f5d4
Sha1:   2e576de4167e805203f93a85029645d3ff469227
Sha256: da1c43b0a8b9379b2adb99cb7c4b7b7741409df973c3e2d0ea06cefb44f249c0
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 30 Nov 2017 20:12:07 GMT
Expires: Mon, 04 Dec 2017 20:12:07 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    7c53e3ab09bb59d68a9f88ead8d76968
Sha1:   43ee61631d4a50b3ac9383e136c27777b9edcda7
Sha256: 71cf765916ec84edb49b63eadf3fbd995335cb72f3b2fe9d60762bf5938da1e6
                                        
                                            GET /s2/favicons?domain_url=bijoux-cadeaux-deco.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Thu, 30 Nov 2017 20:12:07 GMT
Date: Thu, 30 Nov 2017 20:12:07 GMT
Cache-Control: private, max-age=86400
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=mlOgQyce8jIc9RjOy9YEWQ1AYGDhHk88Qfc2bm7M8uSCDFhvsN1LMsvbH4YulAes1FE4U7qwNw83sCrlfb4AGD99lI5ft0vhSeTn7sMFDWIyCobx0ux4VNDzVNR3qSNm;Domain=.google.com;Path=/;Expires=Fri, 01-Jun-2018 20:12:07 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   640
Md5:    4f44427d761e3c8b255a2f1820b53765
Sha1:   943817aff4cfbeac04b58cc20342f6f3d10c50c5
Sha256: 941e20ce414c1e854038c6125881b31411881127e2283b0f1b1d1d0f48564e57
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=357202, public, no-transform, must-revalidate
Last-Modified: Mon, 27 Nov 2017 23:23:24 GMT
Expires: Mon, 4 Dec 2017 23:23:24 GMT
Date: Thu, 30 Nov 2017 20:12:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    7737d4262461890127770c12fd0c6110
Sha1:   9d26b26c72e7be81263075fefc06160096c0c5f7
Sha256: 078c3d323b3b64d0aa265e14329d3d1948a3fa0fdb47e29f6f4b6eac4e2c13d9
                                        
                                            GET /s2/favicons?domain_url=atelierbacchetta.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Thu, 30 Nov 2017 20:12:07 GMT
Date: Thu, 30 Nov 2017 20:12:07 GMT
Cache-Control: private, max-age=86400
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=mbBIAuMLPMgg3v0ohe7eosffOQe_ct4jNOkEiz2JKaLH3RTKFhAFx0j9TcttQAhmHGeTgFheud2_B1m2LXtJve7m4s33w18Ca0IYuwx336O9Nbj9VEqcHo7PPH2_GMOI;Domain=.google.com;Path=/;Expires=Fri, 01-Jun-2018 20:12:07 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   327
Md5:    d7e74d2abb1cf01ccc5664cefc3fb059
Sha1:   c88cf44d0372ce5ac8747b618edd5a27cc18e908
Sha256: 7f80e650f9aea07caa3599b2df168b26b054f2e61da9894ee8ba18dbff432f8e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 30 Nov 2017 20:12:07 GMT
Expires: Mon, 04 Dec 2017 20:12:07 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b4fcd38e1d118f12692d3c8709d93dbd
Sha1:   6281253f62994feaef854cd222df61f89e478a1d
Sha256: 5a0a11c7e36598d264f0dac8ab203b8be957f639f40b70dd45339f57ba66f983
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 30 Nov 2017 20:12:07 GMT
Expires: Mon, 04 Dec 2017 20:12:07 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /js/bootstrap.js HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 30 Nov 2017 20:12:36 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Tue, 29 Nov 2016 04:46:35 GMT
Etag: "10d1a-5426945e220c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14122
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14122
Md5:    26f4999e950b1eb56b2eed47daaf2fb8
Sha1:   9c48761bf800b7b9fcc52f77b3676930663d3078
Sha256: 3607fbc04d9ce1c2b4624a92ed4a04a8ed3e30039c410cf7899d3a609dd3e629
                                        
                                            GET /adsid/integrator.js?domain=africouleur.com.ourssite.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Thu, 30 Nov 2017 20:12:08 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=africouleur.com.ourssite.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Thu, 30 Nov 2017 20:12:08 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /graph?u=africouleur.com HTTP/1.1 
Host: traffic.alexa.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         107.23.109.249
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 30 Nov 2017 20:12:08 GMT
Server: nginx
Via: 1.1 ip-172-30-35-233 (squid/3.5.20)
X-Cache: MISS from ip-172-30-35-233
X-Cache-Lookup: MISS from ip-172-30-35-233:3128
Content-Length: 3865
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 340 x 150, 8-bit/color RGB, non-interlaced
Size:   3865
Md5:    b3a570a471225e9ef10844f5c1a7c4ad
Sha1:   248779f196513e226eb1eab1f462ce4b56615575
Sha256: 22080c43d6af477a8ff898149824a1f95273a8b9d4f463e60fd7557ca853310c
                                        
                                            GET /js/jquery-1.11.2.min.js HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 30 Nov 2017 20:12:36 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 30 Nov 2016 09:39:42 GMT
Etag: "176de-542817bfdd380-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33306
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33306
Md5:    9d7b11557f97272349d4919322760ab8
Sha1:   1ea68d0f1731fbd8c3924ec0ed797a4f552e4373
Sha256: 821b9113ec291d3baf792b3595dfb095f832d1705756e8784b30055d6564eb91
                                        
                                            GET /pagead/js/r20171113/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 20:12:08 GMT
Expires: Thu, 30 Nov 2017 20:12:08 GMT
Cache-Control: private, max-age=1209600
Etag: 9903024058478159295
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67605
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67605
Md5:    5d1d8e54568dda8a25c5f5eb9989d1c5
Sha1:   0ec0ecee99d71ab7a201308da1f51348e55e4a4b
Sha256: 551fccc36f19585daa10eb882367ecedee6b09f04629a46d9997dd0389053bb7
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 30 Nov 2017 20:12:08 GMT
Expires: Mon, 04 Dec 2017 20:12:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    7ef757980c6a1874c507043fe32307a3
Sha1:   08fa7247a06b66fceb990f8650d829b4559f1288
Sha256: 5488cbace98d41db961aacf3622e542d831ec650884a11264aebd81b6900534f
                                        
                                            GET /s2/favicons?domain_url=modetissus.fr HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Thu, 30 Nov 2017 20:12:08 GMT
Date: Thu, 30 Nov 2017 20:12:08 GMT
Cache-Control: private, max-age=86400
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=Q_eHBw-08Qw3CPm3grpldaZKGdEJ4NCYZKb6ur9p-dMNkaduOAuz79_eMhLQuwJifrq1hV3LMZJjpzAjD9sBKUeeroj11imMEFmsyBNgKhOMinZLN-UO4ODou1m-BZar;Domain=.google.com;Path=/;Expires=Fri, 01-Jun-2018 20:12:08 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   485
Md5:    f18f82c44f3a4d396f1e9fadc306cd66
Sha1:   9099e73c97a0d609b8d012f5de79843b5f8bf67e
Sha256: 1e47e3c40a81bc119a4fd163292c0cc11b193cd24871e92eb8c2ad61e17c1cf4
                                        
                                            GET /s2/favicons?domain_url=palaisdesvents.fr HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 04:12:08 GMT
Date: Thu, 30 Nov 2017 20:12:08 GMT
Cache-Control: public, max-age=28800
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   492
Md5:    3ca64f83fdcf25135d87e08af65e68c9
Sha1:   b82d0979d555bd137b33c15021129e06cbeea59a
Sha256: 2e30ff33270fd8687b0eb4d12652bfd967f23975f158bf8da93bece2ba4ab947
                                        
                                            GET /s2/favicons?domain_url=afrique-arts.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:08 GMT
Date: Thu, 30 Nov 2017 20:12:08 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGB, non-interlaced
Size:   684
Md5:    1f5bd3fa97b5226caf493ff256225ad4
Sha1:   955990fad7ecf005cb8d8589fc984232e5e65e61
Sha256: a74d951ef89b2daaaaa983e87df1f1d4be3e7c033cab02fec44663659abf86c3
                                        
                                            GET /s2/favicons?domain_url=bijoux-creafrika.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Thu, 30 Nov 2017 20:12:08 GMT
Date: Thu, 30 Nov 2017 20:12:08 GMT
Cache-Control: private, max-age=86400
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=RQTm4coRvtTwxA0R2XAtm52jA-3NccZK7N8Xf7BytEtqBOUEvgqUmq4hfimwUKpudbUqQ6aZqWyEDbcQ8QyGiBF96IKSN3NVnZ8ypuidqQuvkOEekQk8CfFDy1ZoZTzq;Domain=.google.com;Path=/;Expires=Fri, 01-Jun-2018 20:12:08 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   493
Md5:    226e0d8b9519ccdc469503e65ef2c379
Sha1:   584f2fb01a32bc6ccf82bfea3f38778f96bee76d
Sha256: f47a6f7847db61f12041e1cf6f46a7c12f9a840d87fda398691a3a000d89bc0c
                                        
                                            GET /js/amcharts.js HTTP/1.1 
Host: africouleur.com.ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 30 Nov 2017 20:12:36 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 30 Nov 2016 09:38:53 GMT
Etag: "30443-5428179122540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56572
Md5:    c5bf696404c38713263f4e8f0bb50bb0
Sha1:   4c6a744b2d3b3e35b83531c11a5bd7d37f96ea6d
Sha256: 7a412f5ef1276a8753e9ab79564588d72e5d7bc4ee4e920f2d8c877f957f7734
                                        
                                            GET /images/email.png HTTP/1.1 
Host: ourssite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         69.197.177.234
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 30 Nov 2017 20:12:37 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Thu, 23 Feb 2017 06:13:45 GMT
Etag: "11cd-5492c83f7d840"
Accept-Ranges: bytes
Content-Length: 4557
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 190 x 22, 8-bit/color RGBA, non-interlaced
Size:   4557
Md5:    20b9ce81df582e1b50f3c6d95f1b0cfd
Sha1:   00b25ea2e2845be6f2fad0276c7409e0064ac6f0
Sha256: 4e0170c8fbb1f31fe298a3d5c8923f8dd35b05cb33d37c19f549600f74a50d0d
                                        
                                            GET /pagead/html/r20171113/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 28 Nov 2017 01:42:54 GMT
Expires: Tue, 12 Dec 2017 01:42:54 GMT
Etag: 1606340084474353950
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6793
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 239354
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6793
Md5:    b39f70164150f65acc6dd7bdf718d2bf
Sha1:   a4e19d0a569180d2df6e7904ad23db2b3dae3fef
Sha256: 471c43d7388186e24d2b7466fdf4c3c138bc5194322089bcb88872618d0b999e
                                        
                                            GET /pub-config/r20160913/ca-pub-2222385521793316.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Thu, 30 Nov 2017 20:12:08 GMT
Expires: Fri, 01 Dec 2017 08:12:08 GMT
Last-Modified: Wed, 29 Nov 2017 22:46:11 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 0
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /pagead/js/r20171113/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 28 Nov 2017 07:22:20 GMT
Expires: Tue, 12 Dec 2017 07:22:20 GMT
Etag: 14067721879039205164
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29589
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 218988
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29589
Md5:    69abc46630003f406aa4005a9068ad9f
Sha1:   14f8ddf583e85276427104367c695dbcf107de42
Sha256: dd2f65553870c2f94bc64698cbf7c63583bb8c2bdb3fb9e0a7fb64255508b735
                                        
                                            GET /pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 30 Nov 2017 20:12:08 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 30-Nov-2017 20:27:08 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 30 Nov 2017 20:12:08 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13235
Md5:    f04c4c6b4a70fda36307c99aa9669a49
Sha1:   5daade973ec7e4445d97d98b5f8162e813531223
Sha256: 5309f1887f1eccd110bf1870b529f1a46a7241c070de8681a2f4306ca36e750b
                                        
                                            GET /s2/favicons?domain_url=milan-montereau.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 04:12:09 GMT
Date: Thu, 30 Nov 2017 20:12:09 GMT
Cache-Control: public, max-age=28800
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   492
Md5:    3ca64f83fdcf25135d87e08af65e68c9
Sha1:   b82d0979d555bd137b33c15021129e06cbeea59a
Sha256: 2e30ff33270fd8687b0eb4d12652bfd967f23975f158bf8da93bece2ba4ab947
                                        
                                            GET /pagead/ads?client=ca-pub-2222385521793316&output=html&h=250&slotname=6757661585&adk=3336137519&adf=807048394&w=300&lmt=1512072726&format=300x250&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&avail_w=0&wgl=0&adsid=NT&dt=1512072728811&bpp=14&fdt=17&idt=150&shv=r20171113&cbv=r20170110&saldr=aa&prev_fmts=900x90&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=310&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=168 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 30 Nov 2017 20:12:09 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 30-Nov-2017 20:27:09 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 30 Nov 2017 20:12:09 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   368
Md5:    2fe03769c3b9c6691626ed2bd6676c46
Sha1:   c79e388347b3d5895313273bcc032d3af81cec4b
Sha256: 208cf55547d4f892eed29635c11ba4d7dfe0f715d213ef3329ad53d658e18755
                                        
                                            GET /s2/favicons?domain_url=bijouxcherie.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:09 GMT
Date: Thu, 30 Nov 2017 20:12:09 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 14 x 16, 8-bit/color RGBA, non-interlaced
Size:   511
Md5:    6ad09c9e00f884513d0c21d20c3143fb
Sha1:   9c0cc54d0faea63a82b4eeb6bdb6049d1550b90e
Sha256: 028637e4ab700edb071414e2049e75aebb3c6a6bf25796ccaab94c2fc6200b27
                                        
                                            GET /s2/favicons?domain_url=olga-et-caetera.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:09 GMT
Date: Thu, 30 Nov 2017 20:12:09 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   552
Md5:    a35c4c741e1040c0e7711db042372259
Sha1:   242a6b45c2270015a3ed3242da5f67792499af19
Sha256: 22cc03c2326349001735f7b6930518af7dc5e519c69b49c29945112fd983482d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 30 Nov 2017 20:12:09 GMT
Expires: Mon, 04 Dec 2017 20:12:09 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c55c69e1186c749e5867b8e666bc59bd
Sha1:   71a6493f3c9bbc5a5b1f8e88e94952237655e4d9
Sha256: 6417713e09bdf1e90651a5ef48b74ea2e4a6662c11bfd28f70cacaf7e3ba0dbd
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 18:48:08 GMT
Expires: Thu, 30 Nov 2017 20:48:08 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Cache-Control: public, max-age=7200
Age: 5041
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 30 Nov 2017 20:12:09 GMT
Expires: Mon, 04 Dec 2017 20:12:09 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6232a13136c3395dadb7c6378109ff41
Sha1:   c40a90e749c90e614c339767e0e8a5eb5f08f188
Sha256: 4ed5bb35fbd5823d398a66be132a5eee010fde430861f2a1e1833cc1a7760510
                                        
                                            GET /simgad/6397070912387116373 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 22428
Date: Tue, 21 Nov 2017 17:28:16 GMT
Expires: Wed, 21 Nov 2018 17:28:16 GMT
Last-Modified: Tue, 21 Nov 2017 12:19:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 787433
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   22428
Md5:    fdb024ed14b26913dd4bb1fadd062597
Sha1:   32ed13574166a9c59bdc6db8142d2f805424806f
Sha256: f2c6c70f731c8eaa1cb766040625b8e21a7ba0685d1e61447616eb36033e165a
                                        
                                            GET /pagead/js/r20171113/r20110914/abg.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 11:28:36 GMT
Expires: Thu, 14 Dec 2017 11:28:36 GMT
Etag: 4010855262006972355
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25236
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 31413
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25236
Md5:    97f7423eb47689dade2eb9328959e30b
Sha1:   31eccd3560669d0412ab4dfd7df982d7203e2f70
Sha256: 2672f0a2aba3f65248eb02cfe7a89cc1a8662f6104a7d0a2590e5c8eba706d60
                                        
                                            GET /r/collect?v=1&_v=j66&a=2095278181&t=pageview&_s=1&dl=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ul=en-us&de=UTF-8&dt=africouleur.com%20-%20Africouleur%20-%20Mode%20et%20d%C3%A9coration%20africaine%2C%20tissus%20et%20bijoux%20africains&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAEQ~&jid=388257233&gjid=2053590092&cid=628461206.1512072729&tid=UA-88826244-3&_gid=810644592.1512072730&_r=1&z=953491911 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 30 Nov 2017 20:12:09 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2187861180&adk=1512129485&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728986&bpp=157&fdt=182&idt=533&shv=r20171113&cbv=r20170110&saldr=aa&prev_fmts=900x90%2C300x250&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=130&ady=599&biw=1159&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=564 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 30 Nov 2017 20:12:09 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUkW_uEJ6aCeAQjTbtzkAMnljtgwJfWO_EAKlj-SDzUC5qDpAXx8AxeL8Hf6; expires=Sat, 30-Nov-2019 20:12:09 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 30 Nov 2017 20:12:09 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   368
Md5:    6d06cc30debd207b3dab9ae34f7a4883
Sha1:   e6b02b1985fc37b197b7301169c1bd235121f5f0
Sha256: e0a9ab67423011ca0d55185a6b0721dc41d9d205fe863443ee25ee599bdc7a71
                                        
                                            GET /getconfig/ama?client=ca-pub-2222385521793316&plah=africouleur.com.ourssite.com&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Origin: http://africouleur.com.ourssite.com

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Date: Thu, 30 Nov 2017 20:12:09 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 30-Nov-2017 20:27:09 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 30 Nov 2017 20:12:09 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/images/x_button_blue2.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 19:49:40 GMT
Expires: Fri, 01 Dec 2017 19:49:40 GMT
Etag: 291775052866240956
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Age: 1350
Cache-Control: public, max-age=86400
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 16 x 15, 8-bit/color RGB, non-interlaced
Size:   145
Md5:    60b7612b7cde75ce329db6a6b0415b23
Sha1:   66c106bf496bb1ca11ecd7dda5816b36e7165a0e
Sha256: bc8347bb6ce7622050ab41f67dda0513db000d96158eceab4cfc01963d27fa58
                                        
                                            GET /pagead/ads?client=ca-pub-2222385521793316&output=html&h=0&adk=1223701170&adf=807048394&w=0&lmt=1512072726&plat=1%3A1085448%2C2%3A1085448%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C25%3A32768%2C26%3A32768&rafmt=12&format=0x0&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&pra=5&wgl=0&adsid=NT&dt=1512072728986&bpp=583&fdt=586&idt=725&shv=r20171113&cbv=r20170110&saldr=aa&prev_fmts=900x90%2C300x250%2C900x90&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1159&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cr%7C&abl=CS&ppjl=u&fu=272&bc=1&ifi=3&dtd=755 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 30 Nov 2017 20:12:09 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUl6oqNMcYFRKIBe55Tig5ZqcGmzQXFjFZx9mlaQtBQhPCckpEMURBvEHv4r; expires=Sat, 30-Nov-2019 20:12:09 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 30 Nov 2017 20:12:09 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   64
Md5:    0781e865abae44cf8b10dc725d63f539
Sha1:   c9f5024f2a546880e819749c32e23830fef111cb
Sha256: 24a7e2c0a5b68aec6126a39465b792b761aab892d7060d78fbab1e14a4cf3363
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 30 Nov 2017 19:28:50 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 2600
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            GET /pagead/js/r20171113/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 11:28:36 GMT
Expires: Thu, 14 Dec 2017 11:28:36 GMT
Etag: 410984267434061409
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 12808
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 31414
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12808
Md5:    4aca86fbd3dafdf533cdd86af3eab8dd
Sha1:   da28bc38c029caa2cf39d7a60a70b9dc55368e9f
Sha256: 6b681b0d23be690c8f99167c96cd9a3d2ef712d6abf6997633415a851707df33
                                        
                                            GET /pagead/js/r20171113/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 11:28:36 GMT
Expires: Thu, 14 Dec 2017 11:28:36 GMT
Etag: 9566754754863973915
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3648
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 31414
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3648
Md5:    ae83c6831051fa005b0183ed93561065
Sha1:   a456bc8023b55f1972d00f9b8515d7a6ec157109
Sha256: f23a56e02c8a4ba7f9a735326ed5a2cfb12c41524c4d5b3ba9713530d6cb0302
                                        
                                            GET /pagead/js/r20171113/r20110914/client/ext/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 11:28:36 GMT
Expires: Thu, 14 Dec 2017 11:28:36 GMT
Etag: 12277688339511803289
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 18009
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 31414
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18009
Md5:    7939460901fc18b0a6cfb3298d971b7d
Sha1:   d2d251089adf1c2a1122c3928d2709d6971813a2
Sha256: 5663f69ecfd2e65be2e99aebef3dff8ae526c1602e50f6659d0e3b6c3d101e59
                                        
                                            GET /pagead/js/r20171113/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 11:28:36 GMT
Expires: Thu, 14 Dec 2017 11:28:36 GMT
Etag: 11176212102450413199
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1218
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 31414
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1218
Md5:    3e1fe1160846d42504041240ac99abe1
Sha1:   02ec6880848b4f1926bf63676be67f24c15be952
Sha256: 14d566db627806fc4353b915bab1ac3c5b2737cede5cd0b4a3a9a673a92ea183
                                        
                                            GET /s2/favicons?domain_url=pagnifik.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Thu, 30 Nov 2017 20:12:10 GMT
Date: Thu, 30 Nov 2017 20:12:10 GMT
Cache-Control: private, max-age=86400
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=118=ESazZt71kOEtT3TyLXSb0HGGmUfh8P8JnpOx6k3dpKOxgCjrgVMlLtn7EqMD7BkN-7uCGkpnqIcHxRH9lGxkqH-__CIygtiuHlmGzTKW_bN-tSfRREvOuCH4dvJzvYHk;Domain=.google.com;Path=/;Expires=Fri, 01-Jun-2018 20:12:10 GMT;HttpOnly


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGB, non-interlaced
Size:   592
Md5:    55b9413824fe0f1c31dc2923e020c162
Sha1:   e26efda27f827df5dec71d5b70bfda183d61d699
Sha256: a3a725f0a762e2c963d55a4419c6127e7c304ba1ed2bd259b73367acf79c06b5
                                        
                                            GET /pagead/images/transparent.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 07:40:40 GMT
Expires: Fri, 01 Dec 2017 07:40:40 GMT
Etag: 2462972746714251406
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 45090
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   67
Md5:    3f318b569cc43578a73d1c38270b6857
Sha1:   244717a495885a727dc67313ebb1ef7b447dfe7d
Sha256: bdf72009ad226c17f1954ba602292902a780b80af07dbcbab1322bdf5c32be66
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=118=ESazZt71kOEtT3TyLXSb0HGGmUfh8P8JnpOx6k3dpKOxgCjrgVMlLtn7EqMD7BkN-7uCGkpnqIcHxRH9lGxkqH-__CIygtiuHlmGzTKW_bN-tSfRREvOuCH4dvJzvYHk

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 30 Nov 2017 20:12:10 GMT
Expires: Mon, 04 Dec 2017 20:12:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ac3e4c73213e2c0d75693c47c6c923a0
Sha1:   7a932c0adf5c2220f08cb0c09ecf3fb427b9c0d9
Sha256: bace068a0a5b8461acab78a4a135919424861507b7e8574ca1bf7569691d6ebf
                                        
                                            GET /activeview?avi=BRLaAGGYgWvnYMo2yYcOAuogIAIq6iJe0BgAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAQ&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20171113 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Thu, 30 Nov 2017 20:12:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=118=RQTm4coRvtTwxA0R2XAtm52jA-3NccZK7N8Xf7BytEtqBOUEvgqUmq4hfimwUKpudbUqQ6aZqWyEDbcQ8QyGiBF96IKSN3NVnZ8ypuidqQuvkOEekQk8CfFDy1ZoZTzq

                                         
                                         64.233.161.106
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Thu, 30 Nov 2017 20:12:10 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUl6oqNMcYFRKIBe55Tig5ZqcGmzQXFjFZx9mlaQtBQhPCckpEMURBvEHv4r

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Thu, 30 Nov 2017 20:12:10 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Thu, 30-Nov-2017 21:12:10 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 30 Nov 2017 20:12:10 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /bg/PQMXuY6MlKBLQCoydS_eTwE-g1k9WHzhWAyB_BDUb3g.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2222385521793316&output=html&h=90&slotname=2327461989&adk=3265937839&adf=807048394&w=900&fwrn=4&lmt=1512072726&rafmt=1&format=900x90&url=http%3A%2F%2Fafricouleur.com.ourssite.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1512072728048&bpp=9&fdt=18&idt=246&shv=r20171113&cbv=r20170110&saldr=aa&correlator=4304193369203&frm=20&ga_vid=628461206.1512072729&ga_sid=1512072729&ga_hid=2095278181&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=138&ady=140&biw=1176&bih=754&abxe=1&eid=4089042%2C21061122%2C370204012&oid=3&nmo=1&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=647

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4705
Date: Thu, 16 Nov 2017 14:50:31 GMT
Expires: Fri, 16 Nov 2018 14:50:31 GMT
Last-Modified: Mon, 06 Nov 2017 15:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1228899
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4705
Md5:    34736fb7cd6695389c56db17cf5fd095
Sha1:   7fafc11dff50c384759a6533ed14f68d40c8edb6
Sha256: 871423dbde78ff1ec1e0b9e0ea6942854ec1dfc84f03c9d0b847e790e79838ce
                                        
                                            GET /s2/favicons?domain_url=milena-moda.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:10 GMT
Date: Thu, 30 Nov 2017 20:12:10 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGB, non-interlaced
Size:   536
Md5:    eb3618979e7e6969e32d4a37904bd5c3
Sha1:   8da40972cd40545fdd9727e1cccca99ca53071b9
Sha256: b837fd164ecaa5d24dd6e70ad1b0b0c9fed5a36309cd35ed8f59420f917f8e06
                                        
                                            GET /s2/favicons?domain_url=bijoux-crinoline.fr HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:10 GMT
Date: Thu, 30 Nov 2017 20:12:10 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   362
Md5:    90d56e6d6eb73716d38f77bd7128226d
Sha1:   a1ed6e0f7c25cab7ada7a3f84691b7b1d314aad5
Sha256: 4ae94b2bd01fc43a34b65ac0cc14b93d6a30911e855240c5f961d2d9983a16a3
                                        
                                            GET /s2/favicons?domain_url=direct-mode.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:11 GMT
Date: Thu, 30 Nov 2017 20:12:11 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   868
Md5:    e9e70452cdbbee46e18d1b2d13489906
Sha1:   5f7072c4ec85264f4dcaacf1914a337cf9d1e4ed
Sha256: 93ad6749b3e599781df1447f3117f871edd8ced9a41dbe31b64beea410a56ffe
                                        
                                            GET /s2/favicons?domain_url=sidonieetgedeon.fr HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 04:12:12 GMT
Date: Thu, 30 Nov 2017 20:12:12 GMT
Cache-Control: public, max-age=28800
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   492
Md5:    3ca64f83fdcf25135d87e08af65e68c9
Sha1:   b82d0979d555bd137b33c15021129e06cbeea59a
Sha256: 2e30ff33270fd8687b0eb4d12652bfd967f23975f158bf8da93bece2ba4ab947
                                        
                                            GET /s2/favicons?domain_url=solarenza.com HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:12 GMT
Date: Thu, 30 Nov 2017 20:12:12 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   388
Md5:    fa6ad166cca27573eb12c2f0af889528
Sha1:   d50564975e83b3ff92200b609107522b6a28ca8e
Sha256: 72809e1f2445b651c4990911cf3bf68b4c038164e96505ebcd57dc1c9f9ee366
                                        
                                            GET /s2/favicons?domain_url=autourdelle.fr HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://africouleur.com.ourssite.com/
Cookie: NID=118=Eciz7312GRy32dhrwDZHJxbUSPkwwzzNAP5DWCWGWXIu6poaCM3qXE11AzS288g77wmLwy5F8higT9EIZTJYYqEIaQYdOoN5E7DZAPKQV_qrPmYX1lhXFloEsZ_3Givt

                                         
                                         64.233.161.106
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 01 Dec 2017 20:12:13 GMT
Date: Thu, 30 Nov 2017 20:12:13 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/FaviconHttp/cspreport
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit colormap, non-interlaced
Size:   362
Md5:    6261907dacf48866b6db9b262b409fb8
Sha1:   7af9d9d7a0703131ee9612253c33e326f1a10774
Sha256: da49674dffc118ca95a7f8f8c79ef2a0409e9c50db5362fae0fd04b5c6d62a22