Overview

URL paramourdespoupees.com.w3cdomain.com/
IP69.30.245.206
ASNAS32097 WholeSale Internet, Inc.
Location United States
Report completed2018-02-13 12:04:47 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-02-13 2 cdn.minescripts.info/c/NDj2.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 69.30.245.206

Date UQ / IDS / BL URL IP
2018-04-30 11:50:48 +0200
0 - 1 - 0 ajoyfulnoisepreschool.com.w3cdomain.com/ 69.30.245.206
2018-04-29 05:13:11 +0200
0 - 1 - 0 photo-agape.com.w3cdomain.com/ 69.30.245.206
2018-03-25 13:43:19 +0200
0 - 1 - 0 simplybetterhomes.com.w3cdomain.com/ 69.30.245.206
2018-03-25 11:56:01 +0200
0 - 1 - 0 mp3raid.com.w3cdomain.com/ 69.30.245.206
2018-03-24 11:07:21 +0100
0 - 1 - 0 dwyercattle.com.w3cdomain.com/ 69.30.245.206
2018-02-13 16:17:06 +0100
0 - 0 - 1 mantaro.net.composesite.com/ 69.30.245.206
2018-02-13 15:20:25 +0100
0 - 0 - 1 dystingo.com.composesite.com/ 69.30.245.206
2018-02-13 15:15:21 +0100
0 - 0 - 1 dietketat.com.composesite.com/ 69.30.245.206
2018-02-13 14:57:28 +0100
0 - 0 - 1 gross-sander.de.composesite.com/ 69.30.245.206
2018-02-13 14:51:34 +0100
0 - 0 - 1 cddentistry.com.composesite.com/ 69.30.245.206

Last 10 reports on ASN: AS32097 WholeSale Internet, Inc.

Date UQ / IDS / BL URL IP
2018-08-16 08:16:07 +0200
0 - 0 - 1 xxwpbw.info/vip/m27.html 173.208.136.213
2018-08-16 08:09:57 +0200
0 - 0 - 1 tcjqgb.loan/kaifa 173.208.133.67
2018-08-16 08:04:00 +0200
0 - 0 - 1 vb1l7ebq.ltd/b46.php 173.208.133.68
2018-08-16 08:01:52 +0200
0 - 0 - 2 btkfu.info/inter 173.208.133.69
2018-08-16 08:01:40 +0200
0 - 0 - 1 y95hw0ln.ltd/b59.php 173.208.133.67
2018-08-16 08:00:47 +0200
0 - 0 - 1 dwrxi.info/b96.php 173.208.133.69
2018-08-16 07:59:28 +0200
0 - 0 - 1 fscvg.info/bvv 173.208.133.70
2018-08-16 07:59:28 +0200
0 - 0 - 1 fscvg.info/bvv 173.208.133.70
2018-08-16 07:56:48 +0200
0 - 0 - 1 drtwqc.loan/sitemap.html 173.208.133.66
2018-08-16 07:55:42 +0200
0 - 0 - 1 ekudu.info/sitemap.html 173.208.133.69

No other reports on domain: w3cdomain.com



JavaScript

Executed Scripts (87)


Executed Evals (87)

#1 JavaScript::Eval (size: 31, repeated: 5) - SHA256: 7a8c20ef55544a4104ff81127b414d36132dd8d896f498d2df40bee78140bb35

                                        0,
function(Z) {
    B(Z, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 5) - SHA256: 2e588a2a5d3c27665ca10b42d6a170e528f32d2de2959a380de0275c1ade93e1

                                        0,
function(Z) {
    B(Z, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 5) - SHA256: 4653c9b649ed897e5fece4329f4b737fafea3f19f0fc0fb5224d93d1bf92a4d7

                                        0,
function(Z) {
    B(Z, 4);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 5) - SHA256: d6e127bd29297c747026ff32276a64f4179fd295c7fcfe49eeda3061f4c6f970

                                        0,
function(Z) {
    Z.H(0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 5) - SHA256: ecc26fcbaef854185d8c80dd67ac1b1f388b538989d24d9d55b6147962b6a9cf

                                        0,
function(Z) {
    Z.H(3);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 5) - SHA256: 346c56538a3b8be715810bbc10574cd48a46fb6f1f7edee874c7f684f2de51c2

                                        0,
function(Z) {
    Z.H(4);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 5) - SHA256: c8ad7eba57c7193378696817bc2908e55047cc109b1143dbfe2877983ad9a846

                                        0,
function(Z) {
    Z.H(7);
}
                                    

#8 JavaScript::Eval (size: 38, repeated: 5) - SHA256: c5169478f0eb7739c404bee77ab1bf0172a3388b044475e06a4cb7e68bca2847

                                        0,
function(Z) {
    Z.K && d(Z, 0);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 5) - SHA256: d6a70c0fa32cf217273c52ada9f43efb53b7a2f8c206e6fb75727bdc1fa7c049

                                        0,
function(Z) {
    m(Z, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 5) - SHA256: f84b2ef24cd61663af1055023a92cea54c187bc816014f49ac3c550e6a472b8d

                                        0,
function(Z) {
    m(Z, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 5) - SHA256: d4769cdffe17ea14780900fe66717ac659ef34b9ca2799aff7ba06f37d1cfd37

                                        0,
function(Z) {
    m(Z, 4);
}
                                    

#12 JavaScript::Eval (size: 95, repeated: 5) - SHA256: bb5de887a71abeb9160b11cef4ca96347d43764da2f53cd2d4eeed902fb75902

                                        0,
function(Z, u) {
    Z = (u = Z.D(), Z.g(u)), Z[0].removeEventListener(Z[1], Z[2], false);
}
                                    

#13 JavaScript::Eval (size: 513, repeated: 5) - SHA256: 00b13489cf4933e25a1fb6f23d63ba666af186823feb121b5b31db658b2b2dc9

                                        0,
function(Z, u) {
    if (this.w) {
        return Z = Z ? this.w().shift() : this.U().shift(), this.w().length ||
            this.U().length || (this.U = this.w = void 0, this.V--), Z;
    }
    if (!(Z = this.g(240), Z in this.l)) {
        throw c(this, 31), this.X;
    }
    return (void 0 == this.G && (this.G = k(this.l, Z - 4), this.W = void 0), this.W != Z >> 3 &&
        (this.W = Z >> 3, u = [0, 0, 0, this.g(104)], this.C = X(this.G, this.W, u)), G(this, 240, Z + 1), this).l[Z] ^ this.C[Z % 8];
}
                                    

#14 JavaScript::Eval (size: 125, repeated: 5) - SHA256: ba86aeba53f9c0c9f6ef588edeb1951326c852172cc1d6f3282521c058ead1dc

                                        0,
function(Z, u) {
    if (void 0 === (u = this.L[Z], u)) {
        throw c(this, 30, 0, Z), this.X;
    }
    return u();
}
                                    

#15 JavaScript::Eval (size: 83, repeated: 5) - SHA256: d109d4fb838ba298e58c2a6d60ba4e0840e7c41029c4b0e8107b0b97cfb11ead

                                        0,
function(Z, u) {
    t(Z, 1, 5) || (u = h(Z), G(Z, u.S, u.B.apply(u.s, u.o)));
}
                                    

#16 JavaScript::Eval (size: 50, repeated: 5) - SHA256: 4d07a83bda5331c93f09315f36f92aa2b930dd01119c1aafc9e7fc8769f4ecfd

                                        0,
function(Z, u) {
    u = Z.g(Z.D()), x(Z, u);
}
                                    

#17 JavaScript::Eval (size: 183, repeated: 5) - SHA256: 92a90ba81c5479c70cc21d7dab9deb818cd5b13be8405c5a4cee260dad651576

                                        0,
function(Z, u) {
    u.push(Z[0] << 24 | Z[1] << 16 | Z[2] << 8 | Z[3]), u.push(Z[4] << 24 | Z[5] << 16 | Z[6] << 8 | Z[7]), u.push(Z[8] << 24 | Z[9] << 16 | Z[10] << 8 | Z[11]);
}
                                    

#18 JavaScript::Eval (size: 80, repeated: 5) - SHA256: a2b96a7b3667582924d9784b3989b6c5f725377077238cbd652c51e9c074280c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) % Z.g(u));
}
                                    

#19 JavaScript::Eval (size: 80, repeated: 5) - SHA256: 82db8025c043a7618fbeeb4c23553d32d2a224138f6623baca027e74301f0f74

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) * Z.g(u));
}
                                    

#20 JavaScript::Eval (size: 80, repeated: 5) - SHA256: 9505de4c53f5741c59436b7f2dfcbe99e590a0bac5a3f23363d9c51db6c9b90c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) + Z.g(u));
}
                                    

#21 JavaScript::Eval (size: 80, repeated: 5) - SHA256: c5dc2480ad566977a5ef2b294da1a3ed861f0ed748a6b46f9bf4bad3baae5e54

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) - Z.g(u));
}
                                    

#22 JavaScript::Eval (size: 90, repeated: 5) - SHA256: d0b54ffb9c33c33b23ff9f9366c2a4713eb62445648ba0140e98910cfff86e9b

                                        0,
function(Z, u, U) {
    (u = (U = (u = Z.D(), Z).D(), Z.L)[u] && Z.g(u), G)(Z, U, u);
}
                                    

#23 JavaScript::Eval (size: 81, repeated: 5) - SHA256: 9b6460a9786ac9cff04a8b1eb3b1df8ec9940f5ffa023c13e49900fa66dc06a8

                                        0,
function(Z, u, U) {
    (u = (u = Z.D(), U = Z.D(), Z).g(u), G)(Z, U, D(u));
}
                                    

#24 JavaScript::Eval (size: 88, repeated: 5) - SHA256: 6356af2218e63df3518023fed6819b49f125721f04737b4193acc52ffb3ceea7

                                        0,
function(Z, u, U) {
    0 != (U = (u = Z.D(), Z.D()), Z).g(u) && G(Z, 240, Z.g(U));
}
                                    

#25 JavaScript::Eval (size: 74, repeated: 5) - SHA256: 699160dbfe8f8f5ab7736b77370fca83a7b4e3af931d52932cb74975b5a3291a

                                        0,
function(Z, u, U) {
    U = (u = Z.D(), Z).D(), G(Z, U, "" + Z.g(u));
}
                                    

#26 JavaScript::Eval (size: 244, repeated: 5) - SHA256: ee6e90631daf3d1f701046e71362ab0e5755517cfb75ed87acded9972daec977

                                        0,
function(Z, u, U) {
    if (3 == Z.length) {
        for (U = 0; 3 > U; U++) {
            u[U] += Z[U];
        }
        for (Z = [13, 8, 13, 12, 16, 5, (U = 0, 3), 10, 15]; 9 > U; U++) {
            u[3](u, U % 3, Z[U]);
        }
    }
}
                                    

#27 JavaScript::Eval (size: 135, repeated: 5) - SHA256: bccf254664371ff7675cf89d3d27bb194454ec2cd66505b469ccf7bbca9ea0e1

                                        0,
function(Z, u, U) {
    return u = (U = function() {
        return Z;
    }, function() {
        return U();
    }), u[this.J] = function(T) {
        Z = T;
    }, u;
}
                                    

#28 JavaScript::Eval (size: 123, repeated: 5) - SHA256: 994fb96e949de5a3146044ae18e6c47be2d72ce0ed048a3f4fd2e51d2ff571c2

                                        0,
function(Z, u, U) {
    t(Z, 1, 5) ||
        (u = Z.D(), U = Z.D(), G(Z, U, function(Z) {
            return eval(Z);
        }(Z.g(u))));
}
                                    

#29 JavaScript::Eval (size: 95, repeated: 5) - SHA256: d7099c0bf4e7176d804ef49742c07e3fbfd79730f4f8f58130c22b864eefce8b

                                        0,
function(Z, u, U, H) {
    (H = (U = (u = Z.D(), Z).D(), Z.D()), Z).g(u)[Z.g(U)] = Z.g(H);
}
                                    

#30 JavaScript::Eval (size: 202, repeated: 5) - SHA256: 2ae10b1bc54e0178acea428e4aa48201c8a785253b64373c6718a23375c8f796

                                        0,
function(Z, u, U, H) {
    (U = (H = (u = Z & 4, Z &= 3, U = this.D(), this).D(), this.g(U)), u) &&
    (U = S(("" + U).replace(/\r\n/g, "\n"))), Z && Y(this, H, V(U.length, 2)), Y(this, H, U);
}
                                    

#31 JavaScript::Eval (size: 106, repeated: 5) - SHA256: 4cb1a01a8f7e6f722d7072b114db4a4194f61e2d6b5298038c7ac641f8cc274f

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) == Z.g(U), G)(Z, H, +u);
}
                                    

#32 JavaScript::Eval (size: 105, repeated: 5) - SHA256: ba00c0cd7a300e73a96574266f5780aa95123c1d5566b67961b87ac4331cd344

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) > Z.g(U), G)(Z, H, +u);
}
                                    

#33 JavaScript::Eval (size: 109, repeated: 5) - SHA256: f8353467a4e34aea78252df2b38e6f965986a788f0d5b20fc80c10b67e081eeb

                                        0,
function(Z, u, U, H) {
    (u = (U = (u = Z.D(), U = Z.D(), H = Z.D(), Z).g(U), Z.g(u)), G)(Z, H, u[U]);
}
                                    

#34 JavaScript::Eval (size: 99, repeated: 5) - SHA256: 3cd952db7b02e8da8f7082b9360fcde714cc032b768e051f688f8e3720a29921

                                        0,
function(Z, u, U, H) {
    (u = Z.D(), U = Z.D(), H = Z.D(), G)(Z, H, (Z.g(u) in Z.g(U)) + 0);
}
                                    

#35 JavaScript::Eval (size: 90, repeated: 5) - SHA256: c0e493ecdd7246df3ae8a84671adcad56b7daf415bd404f02e9a51d98c891bcc

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) << U);
}
                                    

#36 JavaScript::Eval (size: 90, repeated: 5) - SHA256: f048b4eeb2e1e8cb8260e970f5422277c8d0a1a0b2da48918436a64a76719636

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) >> U);
}
                                    

#37 JavaScript::Eval (size: 92, repeated: 5) - SHA256: ecaeea8d4c530a73a506bcc811b2fffb71c61e917a609f1a3593a931623dffed

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) | Z.g(U));
}
                                    

#38 JavaScript::Eval (size: 93, repeated: 5) - SHA256: 31605db04521bc3ce2a625d2cfe94544af6becfc7e62ee185492c0e49fc90d5c

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) || Z.g(U));
}
                                    

#39 JavaScript::Eval (size: 155, repeated: 5) - SHA256: 935f91adb84b2a2774d964e9c69f44def1efdf3ffe16477848fb07f87a774e76

                                        0,
function(Z, u, U, H) {
    for (; U--;) {
        240 != U &&
            222 != U && u.L[U] && (u.L[U] = u[H](u[Z](U), this));
    }
    u[Z] = this;
}
                                    

#40 JavaScript::Eval (size: 239, repeated: 5) - SHA256: 76ca6257c7a64247dc63d37068d5b38143bbcbe36329ca5c8d97baec8f263880

                                        0,
function(Z, u, U, H) {
    if ((u = Z.a.pop())) {
        for (U = Z.D(); 0 < U; U--) {
            H = Z.D(), u[H] = Z.L[H];
        }
        u[50] = Z.L[50], u[6] = Z.L[6], Z.L = u;
    } else {
        G(Z, 240, Z.l.length);
    }
}
                                    

#41 JavaScript::Eval (size: 170, repeated: 5) - SHA256: 1dfbe6a0b21f319a6a08f36ae6256a8296c5a03d0d6d807f398899946ab718af

                                        0,
function(Z, u, U, H) {
    try {
        H = Z[(u + 2) % 3], Z[u] = Z[u] - Z[(u + 1) % 3] - H ^ (1 == u ? H << U : H >>> U);
    } catch (K) {
        throw K;
    }
}
                                    

#42 JavaScript::Eval (size: 227, repeated: 5) - SHA256: 04fde92960a1000180bb8db8f6fe02f9cea76368ff130bd47f438a3101e9a647

                                        0,
function(Z, u, U, H, K) {
    (H = (U = (K = (u = (H = (u = Z.D(), U = Z.D(), Z.D()), Z.g(u)), Z.g(Z.D())), Z).g(U), Z.g(H)), 0) !== u &&
        (H = E(Z, H, K, 1, u, U), u.addEventListener(U, H, P), G(Z, 24, [u, U, H]));
}
                                    

#43 JavaScript::Eval (size: 128, repeated: 5) - SHA256: f56c1874ffe56ac1eb8291ce97cbaa02083da09b6762814647b05485d93d2c25

                                        0,
function(Z, u, U, H, K) {
    K = (H = (u = Z.D(), U = Z.D(), Z).g(Z.D()), Z.g(Z.D())), U = Z.g(U), G(Z, u, E(Z, U, H, K));
}
                                    

#44 JavaScript::Eval (size: 136, repeated: 5) - SHA256: 73345e8ba79ec6ca5b36ff70ad95c29ce240f708b31f79202e5327349b0666c9

                                        0,
function(Z, u, U, H, K) {
    for (K = (u = Z.D(), U = b(Z), 0), H = []; K < U; K++) {
        H.push(Z.D());
    }
    G(Z, u, H);
}
                                    

#45 JavaScript::Eval (size: 405, repeated: 5) - SHA256: 045ce9f38982a4e6d36aa5b2612bda68f1c91a43b70419e0cfd834050c11ec83

                                        0,
function(Z, u, U, H, K, g) {
    if (!t(Z, 1, 255)) {
        if ((Z = (U = (K = (H = (U = (u = Z.D(), Z.D()), Z).D(), Z).D(), u = Z.g(u), Z).g(U), H = Z.g(H), Z).g(K), "object") == D(u)) {
            for (g in K = [], u) {
                K.push(g);
            }
            u = K;
        }
        for (g = (K = 0, u.length); K < g; K += H) {
            U(u.slice(K, K + H), Z);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 216, repeated: 5) - SHA256: 6c4a302aac210ccafdacbcc5d4aa19b17c86b85cc9643c62df9a28a05ace6fb4

                                        0,
function(Z, u, U, H, K, g) {
    return ((U = (K = function() {
        return H();
    }, H = function() {
        return H[U.R + (K[U.A] === u) - !g[U.A]];
    }, this), g = U.T, K)[U.J] = function(Z) {
        H[U.f] = Z;
    }, K[U.J])(Z), Z = K;
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 5) - SHA256: fc500907927c808f5b8ac42d6ef1912fdedb4679cce110a893b0e4d445adfbb8

                                        0,
function(Z, u, U, H, K, g, r) {
    t(Z, 1, 5) ||
        (u = h(Z), H = u.s, K = u.B, U = u.o, r = U.length, 0 == r ? (g = new(H[K])) : 1 == r ? (g = new(H[K])(U[0])) : 2 == r ? (g = new(H[K])(U[0], U[1])) : 3 == r ? (g = new(H[K])(U[0], U[1], U[2])) : 4 == r ? (g = new(H[K])(U[0], U[1], U[2], U[3])) : c(Z, 22), G(Z, u.S, g));
}
                                    

#48 JavaScript::Eval (size: 780, repeated: 5) - SHA256: cdb338ac77bb593da3fdc731c38ae54facdf120785bb2b7c0669a7cc70976066

                                        0,
function(Z, u, U, H, K, g, r, l, R, M, q, N, e) {
    for (r = (K = (H = U = (u = Z.D(), 0), function(u, K) {
            for (; H < u;) {
                U |= Z.D() << H, H += 8;
            }
            return H -= u, K = U & (1 << u) - 1, U >>= u, K;
        }), g = K(3) + 1, K(5)), l = [], M = R = 0; M < r; M++) {
        q = K(1), l.push(q), R += q ? 0 : 1;
    }
    for (N = (R = (M = 0, (R - 1).toString(2).length), []); M < r; M++) {
        l[M] || (N[M] = K(R));
    }
    for (M = 0; M < r; M++) {
        l[M] && (N[M] = Z.D());
    }
    for (e = (M = g, []); M--;) {
        e.push(Z.g(Z.D()));
    }
    G(Z, u, function(Z, u, U, H, K) {
        for (U = (H = 0, []), Z.V++, u = []; H < r; H++) {
            if (K = N[H], !l[H]) {
                for (; K >= u.length;) {
                    u.push(Z.D());
                }
                K = u[K];
            }
            U.push(K);
        }(Z.w = Z.I(e.slice(), Z.D), Z).U = Z.I(U, Z.D);
    });
}
                                    

#49 JavaScript::Eval (size: 296, repeated: 5) - SHA256: 3920539a2b2e324824fc0fdc94eb4262bf6056d771a746613cca03a010ba61f2

                                        0,
function(Z, u, U, K, F, g, r) {
    if ((K = (U = (u = Z.D(), b(Z)), ""), Z.L)[12]) {
        for (F = Z.g(12), r = F.length, g = 0; U--;) {
            g = (g + b(Z)) % r, K += H[F[g]];
        }
    } else {
        for (; U--;) {
            K += H[Z.D()];
        }
    }
    G(Z, u, K);
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 5) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 5) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#52 JavaScript::Eval (size: 80, repeated: 5) - SHA256: 692a15dc84ece73227ea2be0d865708bba433a1d1441f1e8ef4d7fcefe935842

                                        B = function(Z, u, U, H) {
    (H = (U = Z.D(), Z).D(), Y)(Z, H, V(Z.g(U), u));
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 5) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#54 JavaScript::Eval (size: 272, repeated: 5) - SHA256: a2118fff9784ea11899e855e06847ae9cc1881d1beb4b981252ac2b5d7ad2f14

                                        E = function(Z, u, U, H, K, T) {
    return function() {
        var y = H & 1,
            C = [6, u, U, void 0, K, T, arguments];
        if (H & 2) {
            var Q = (O(Z, C), J(Z, true, false, false));
        } else {
            y && Z.h.length ? O(Z, C) : y ? (O(Z, C), J(Z, true, false, false)) : (Q = p(Z, C));
        }
        return Q;
    };
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#56 JavaScript::Eval (size: 328, repeated: 5) - SHA256: fe59ce24069b39f4d0514725e4608b6ef0914aad2ddad32d79bd6ed70a3712c9

                                        G = function(Z, u, U) {
    if (240 == u || 222 == u) {
        if (Z.L[u]) {
            Z.L[u][Z.J](U);
        } else {
            Z.L[u] = Z.O(U);
        }
    } else if (182 != u && 227 != u && 165 != u && 50 != u || !Z.L[u]) {
        Z.L[u] = Z.I(U, Z.g);
    }
    104 == u && (Z.G = void 0, G(Z, 240, Z.g(240) + 4));
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#58 JavaScript::Eval (size: 135, repeated: 5) - SHA256: e15c85884b12e779222c68cfa73b03de870f99de4e3ed0518aaefea67c9300b9

                                        L = function(Z, u, U) {
    return ((U = Z.g(240), Z.l) && U < Z.l.length ? (G(Z, 240, Z.l.length), x(Z, u)) : G(Z, 240, u), a)(Z, U);
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#60 JavaScript::Eval (size: 487, repeated: 5) - SHA256: 0f79e1bb699f725a6fe7d6c9d7ef162f6816fe4e9e1b1526f205e50dc70fd357

                                        S = function(Z, u, U, H, K) {
    for (H = (u = [], U = 0); H < Z.length; H++) {
        K = Z.charCodeAt(H), 128 > K ? (u[U++] = K) : (2048 > K ? (u[U++] = K >> 6 | 192) : (55296 == (K & 64512) &&
            H + 1 < Z.length && 56320 == (Z.charCodeAt(H + 1) & 64512) ? (K = 65536 + ((K & 1023) << 10) + (Z.charCodeAt(++H) & 1023), u[U++] = K >> 18 | 240, u[U++] = K >> 12 & 63 | 128) : (u[U++] = K >> 12 | 224), u[U++] = K >> 6 & 63 | 128), u[U++] = K & 63 | 128);
    }
    return u;
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 3) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#62 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#63 JavaScript::Eval (size: 366, repeated: 5) - SHA256: c8d8a624870dd52177e5fe61a6d3ca4fff26b6200bcbbb81be31640033b8befd

                                        X = function(Z, u, U, H) {
    try {
        for (H = 0; 79669387488 != H;) {
            Z += (u << 4 ^ u >>> 5) + u ^ H + U[H & 3], H += 2489668359, u += (Z << 4 ^ Z >>> 5) + Z ^ H + U[H >>> 11 & 3];
        }
        return [Z >>> 24, Z >> 16 & 255, Z >> 8 & 255, Z & 255, u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255];
    } catch (K) {
        throw K;
    }
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 8) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#65 JavaScript::Eval (size: 407, repeated: 5) - SHA256: 13e306994eb7a39b6d18bed68817db4e931351adda79fb004ca3ac1f0eaa05ef

                                        Y = function(Z, u, U, H, K, T) {
    for (Z = (H = (227 == (K = Z.g(u), u) ? (u = function(Z, u, U, H) {
            if ((U = (u = K.length, u) - 4 >> 3, K.N) != U) {
                U = (H = [(K.N = U, 0), 0, 0, T], (U << 3) - 4);
                try {
                    K.$ = X(k(K, U), k(K, U + 4), H);
                } catch (g) {
                    throw g;
                }
            }
            K.push(K.$[u & 7] ^ Z);
        }, T = Z.g(243)) : (u = function(Z) {
            K.push(Z);
        }), H && u(H & 255), 0), U.length); H < Z; H++) {
        u(U[H]);
    }
}
                                    

#66 JavaScript::Eval (size: 2, repeated: 91) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#67 JavaScript::Eval (size: 1, repeated: 5) - SHA256: ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

                                        a
                                    

#68 JavaScript::Eval (size: 635, repeated: 5) - SHA256: bd01bf725642a4469b7c9228f655781b2a5094604616a37e8f0d655df58459fb

                                        a = function(Z, u, U, H, K, T, y) {
    Z.V++;
    try {
        for (U = (T = 0, K = void 0, H = 5001, Z.l.length);
            (--H || Z.b) && (Z.w || (T = Z.g(240)) < U);) {
            try {
                Z.w ? (K = Z.D(true)) : (G(Z, 222, T), y = Z.D(), K = Z.g(y)), K && K.call ? K(Z) : c(Z, 21, 0, y), Z.F = true, t(Z, 0, 2);
            } catch (C) {
                C != Z.X && (Z.g(130) ? c(Z, 22, C) : G(Z, 130, C));
            }
        }
        H || c(Z, 33);
    } catch (C) {
        try {
            c(Z, 22, C);
        } catch (Q) {
            v(Z, Q);
        }
    }
    return U = Z.g(163), u && G(Z, 240, u), Z.V--, U;
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

                                        b
                                    

#70 JavaScript::Eval (size: 87, repeated: 5) - SHA256: 53c2584a3a78fa65a9d6fc2e512b0f607bb2e76bb52ccc90590630b685e1b9be

                                        b = function(Z, u) {
    return (u = Z.D(), u & 128) && (u = u & 127 | Z.D() << 7), u;
}
                                    

#71 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#72 JavaScript::Eval (size: 414, repeated: 5) - SHA256: bf2dcd4c4277f43a92ac18588c2a72c995fd29116fbacd4b2ae82ffa4a6b565f

                                        c = function(Z, u, U, H, K) {
    (((K = Z.g(222), u = [u, K >> 8 & 255, K & 255], void 0 != H && u.push(H), 0 == Z.g(50).length && (Z.L[50] = void 0, G(Z, 50, u)), H = "", U) &&
            (U.message && (H += U.message), U.stack && (H += ":" + U.stack)), U = Z.g(6), 3 < U) &&
        (H = H.slice(0, U - 3), U -= H.length + 3, H = S(H.replace(/\r\n/g, "\n")), Y(Z, 227, V(H.length, 2).concat(H), 12)), G)(Z, 6, U);
}
                                    

#73 JavaScript::Eval (size: 35, repeated: 5) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#74 JavaScript::Eval (size: 29, repeated: 3) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#75 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#76 JavaScript::Eval (size: 1, repeated: 5) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

                                        h
                                    

#77 JavaScript::Eval (size: 263, repeated: 5) - SHA256: 92bec85f7692d5c06a3fdc8954c7aedb790b0aa84bfe276a839297ed2a82bdfc

                                        h = function(Z, u, U, H, K, T) {
    for (H = ((u = {}, U = Z.D(), u.S = Z.D(), u).o = [], Z.D() - 1), K = Z.D(), T = 0; T < H; T++) {
        u.o.push(Z.D());
    }
    for ((u.B = Z.g(U), u).s = Z.g(K); H--;) {
        u.o[H] = Z.g(u.o[H]);
    }
    return u;
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#79 JavaScript::Eval (size: 88, repeated: 5) - SHA256: 391af8958d875f00a8cdda33090f528f9dc3bada049c172fea39b34ac22cd6f7

                                        k = function(Z, u) {
    return Z[u] << 24 | Z[u + 1] << 16 | Z[u + 2] << 8 | Z[u + 3];
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#81 JavaScript::Eval (size: 118, repeated: 5) - SHA256: daee4d2cd35cab9d80d51564c9cca3c337673369f0908849a2b801e0322e5590

                                        m = function(Z, u, U, H) {
    for (U = Z.D(), H = 0; 0 < u; u--) {
        H = H << 8 | Z.D();
    }
    G(Z, U, H);
}
                                    

#82 JavaScript::Eval (size: 9, repeated: 1) - SHA256: ebf49dcd836f810084c14e0f2dab4dc1768bbdc5980481bf201fcf76771dff7a

                                        navigator
                                    

#83 JavaScript::Eval (size: 4, repeated: 3) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this
                                    

#84 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#85 JavaScript::Eval (size: 6, repeated: 6) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#86 JavaScript::Eval (size: 1, repeated: 5) - SHA256: 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881

                                        x
                                    

#87 JavaScript::Eval (size: 83, repeated: 5) - SHA256: cf8b322b97217d388cdd9e394e21ca6c8285afe0d87a8d0873fcda44334b32f1

                                        x = function(Z, u) {
    (Z.a.push(Z.L.slice()), Z.L[240] = void 0, G)(Z, 240, u);
}
                                    

Executed Writes (26)

#1 JavaScript::Write (size: 0, repeated: 11) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 4152, repeated: 1) - SHA256: 310346732afa036d67cf157007ca06e52fdde6963b18dfbd3458eb7f7ed639ce

                                        < script >
    var abgp = {
        hw: 15,
        sw: 91,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/fr.png',
        alt: 'AdChoices',
        t: 'Choisir sa pub',
        tw: 69,
        t2: '',
        t2w: 0,
        tbo: 0,
        att: 'adchoices',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 250,
            "width": 300,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=C1spXtseCWuXbHIqeYYqLiPANkZGrslDIgPiciwfwLhABIMqEnB9gw9ykhZgYoAHI4P2LA8gBCakCpt3jmimktD6oAwGqBNABT9DS9SrWolrA4BrkXEuyHW1N-Uc9A4-x9ZK6ad68krjMmuBDardoAVdl7Tgj1kxGoJOvKkjlIxFVZC9B0vVyCmPPzCxL-gNpv-ojlO-rDfpHsu_CVpmKm2AnOuAuT1EqGvu1Dw3fhRPbTnp2JPxckb-s_p2CQ4pCJKXEGYl_YZ3ruyWRqq6cGqTxISyhqQeIdJfm7gKqs5T77TkDoPIHENhvetrhcqh30O5N7e93bTi7lFOmj8xgZX-89BsRJF9pKU3Kyrk5jICeAbN3rwyVouAEA5AGAaAGTYAHoJ-CdKgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw\u0026sigh=N0XOUBtO1Mw\u0026cid=CAASBORokvA",
                    "close_button_token": "0kLwNN0W4cAIyID4nIsHEL_GlvcDGKzXoHRCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": "Merci de vos commentaires.",
                    "mute_confirmation_text": "Nous examinerons cette annonce afin d'am�liorer l'exp�rience utilisateur � l'avenir.",
                    "pub_feedback_confirmation_header": "Merci de vos commentaires.",
                    "pub_feedback_confirmation_text": "Nous utilisons vos commentaires pour �valuer les annonces sur ce site.",
                    "closing_countdown_text": "Fermeture de l'annonce en cours�: %1$d",
                    "attribution_text": "AdChoices",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://paramourdespoupees.com.w3cdomain.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\u0026usg=AFQjCNG5UQVvw14pu74t7-honJTL7IV0jQ",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": "Signaler cette annonce",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                            "options": [{
                                "text": "Annonce affich�e trop souvent",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inappropri�e",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inint�ressante",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Contenu masqu�",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "Choisir sa pub",
                        "closed_message_text": "Annonce ferm�e par %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": "Signaler cette annonce",
                        "confirmation_text": "Nous allons essayer de ne plus vous montrer cette annonce.",
                        "see_my_google_ad_settings_text": "Afficher mes param�tres relatifs aux annonces Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": "Annonces %1$s"
                    }
                }
            },
            "flags": [{
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        eda: false
    }; < /script>
                                    

#3 JavaScript::Write (size: 4152, repeated: 1) - SHA256: 7f5879a49af8a55f0eb0e2a06b9380d68c979b0e6cd18605d3ebbb766e308918

                                        < script >
    var abgp = {
        hw: 15,
        sw: 91,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/fr.png',
        alt: 'AdChoices',
        t: 'Choisir sa pub',
        tw: 69,
        t2: '',
        t2w: 0,
        tbo: 0,
        att: 'adchoices',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 600,
            "width": 160,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=C7VoctseCWvKSHMWqYZuksogOwZ7HtlDQ7MDZyQbwLhABIMqEnB9gw9ykhZgYyAEJqQKm3eOaKaS0PqgDAcgDAqoE1AFP0La4pRELfeXnIH0F0xBGVNs_g3qq0zaZj90b0JAFhlvhMbC4fKuUbMHDI2FclUAiTTb6Y5LbK_4qUgHauj9qP6q7vMa6bJYUxGuGovpfDvoij2Y62MG-nwaF7e5abiEzjTAAcUJWgtxkpCedhwEpClIisnsxSNXLpORyb78GoCNbF1jvvND7oZlcpC-B5ARBzhu99z-y6WD5tAm0rDA8A_Z0f5RlvBxfVv-2iqYtlAbM1f5lMZPxFDawxT4t4ftCL1XdCaCZgPo-rWCiZQPJrSWb9uAEA5AGAaAGTIAHo--yeqgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw\u0026sigh=NZeSrrW0LaE\u0026cid=CAASBORonJc",
                    "close_button_token": "IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": "Merci de vos commentaires.",
                    "mute_confirmation_text": "Nous examinerons cette annonce afin d'am�liorer l'exp�rience utilisateur � l'avenir.",
                    "pub_feedback_confirmation_header": "Merci de vos commentaires.",
                    "pub_feedback_confirmation_text": "Nous utilisons vos commentaires pour �valuer les annonces sur ce site.",
                    "closing_countdown_text": "Fermeture de l'annonce en cours�: %1$d",
                    "attribution_text": "AdChoices",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://paramourdespoupees.com.w3cdomain.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\u0026usg=AFQjCNG5UQVvw14pu74t7-honJTL7IV0jQ",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": "Signaler cette annonce",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                            "options": [{
                                "text": "Annonce inappropri�e",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce affich�e trop souvent",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inint�ressante",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Contenu masqu�",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "Choisir sa pub",
                        "closed_message_text": "Annonce ferm�e par %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": "Signaler cette annonce",
                        "confirmation_text": "Nous allons essayer de ne plus vous montrer cette annonce.",
                        "see_my_google_ad_settings_text": "Afficher mes param�tres relatifs aux annonces Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": "Annonces %1$s"
                    }
                }
            },
            "flags": [{
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        eda: false
    }; < /script>
                                    

#4 JavaScript::Write (size: 1835, repeated: 1) - SHA256: 46adc297121b0abbde664db656b17637fac984ff5fd4b5d9fb5f736d897d4fb2

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-2612317953771423"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180207/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="4621556595";google_ad_client="ca-pub-2612317953771423";google_adsbygoogle_status="done";google_ad_width=160;google_ad_height=600;google_ad_modifications={"plle":true,"eids":["368226200","38893302","21061122","191880502"],"loeids":["368226210","38893312"]};google_loader_used="aa";google_reactive_tag_first=true;google_ad_format="160x600";google_ad_unit_key="250578660";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1518520244081;google_pub_vars="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";google_bpp=122;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180207/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#5 JavaScript::Write (size: 2448, repeated: 1) - SHA256: 475780c1e661242c6c2f0c70a8d3e1bf417532776dafeafd0b32269a46611305

                                        < !doctype html > < html > < body > < script > google_ad_format = "595x60";
google_ad_slot = "1861849391";
google_ad_client = "ca-pub-2612317953771423";
google_adsbygoogle_status = "done";
gfwroml = "";
gfwromr = "";
gfwroh = "";
gfwrow = "";
gfwroz = "";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 3;
google_ad_width = 595;
google_ad_height = 60;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["368226200", "38893302", "21061122", "191880502"],
    "loeids": ["368226210", "38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_unit_key = "3739162967";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1518520245557;
google_pub_vars = "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";
google_bpp = 30;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#6 JavaScript::Write (size: 1629, repeated: 1) - SHA256: e2a2b3665fcfef7c06cbc1481578f475b681a83743c46014c51663d639047ba8

                                        < !doctype html > < html > < body > < script > google_ad_slot = "1528489394";
google_ad_client = "ca-pub-2612317953771423";
google_adsbygoogle_status = "done";
google_ad_width = 160;
google_ad_height = 600;
google_ad_modifications = {
    "plle": true,
    "eids": ["368226200", "38893302", "21061122", "191880502"],
    "loeids": ["368226210", "38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_format = "160x600";
google_ad_unit_key = "60347125";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 4;
google_async_iframe_id = "aswift_3";
google_start_time = 1518520245838;
google_pub_vars = "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";
google_bpp = 28;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#7 JavaScript::Write (size: 1709, repeated: 1) - SHA256: b18f421f84bdfa0486855d0f240e63d6e1b6b12bda2579dfca2382dcc0682727

                                        < !doctype html > < html > < body > < script > google_ad_slot = "3005222594";
google_ad_client = "ca-pub-2612317953771423";
google_adsbygoogle_status = "done";
google_ad_width = 300;
google_ad_height = 250;
google_available_width = 304;
google_ad_modifications = {
    "plle": true,
    "eids": ["368226200", "38893302", "21061122", "191880502"],
    "loeids": ["368226210", "38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_format = "300x250";
google_ad_unit_key = "897082944";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1518520245753;
google_pub_vars = "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";
google_bpp = 26;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#8 JavaScript::Write (size: 1413, repeated: 1) - SHA256: 2598c08bc5847e87f7796e0faa486d604c9bc7fd4f785c6606c9de262afdd514

                                        < !doctype html > < html > < body > < script > google_reactive_ads_config = {};
google_ad_client = "ca-pub-2612317953771423";
google_ad_modifications = {
    "plle": true,
    "eids": ["368226200", "38893302", "21061122", "191880502"],
    "loeids": ["368226210", "38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = true;
google_ad_format = "0x0";
google_ad_unit_key = "1812271804";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 4;
google_async_iframe_id = "aswift_4";
google_start_time = 1518520245838;
google_pub_vars = "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";
google_bpp = 2430;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#9 JavaScript::Write (size: 54, repeated: 2) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#10 JavaScript::Write (size: 6, repeated: 4) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#11 JavaScript::Write (size: 1827, repeated: 1) - SHA256: b91e70b2cfdf5f6f2a4a89bed9b459143e81a878b43509e6c6b98d9b90d31891

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjstV6ea-RLdqf6sXD7ZFrpDDfEWzgPnEejNJ6Ybnzw7myGu26CGg8GdUhV1IyXsCa6qwrAORsksNCmiCf1kn0Kjw3PzTvvvfK4HgDImb7aDUEsLw24wBEaO6uje_Y-PGaH-onYsTL2CS5uOPHRfO04aiVQQ2nfGk7g&amp;sig=Cg0ArKJSzDaglvrgF9O6&amp;urlfix=1&amp;adurl=https://secure-media.msg.dotomi.com/w/click.here%3Fsid%3D97975%26cid%3D11043029%26mid%3D2278866%26tp%3D12%26m%3D10%26forced_click%3Dhttps://googleads.g.doubleclick.net/dbm/clk%253Fsa%253DL%2526ai%253DC1spXtseCWuXbHIqeYYqLiPANkZGrslDIgPiciwfwLhABIMqEnB9gw9ykhZgYoAHI4P2LA8gBCakCpt3jmimktD6oAwGqBNABT9DS9SrWolrA4BrkXEuyHW1N-Uc9A4-x9ZK6ad68krjMmuBDardoAVdl7Tgj1kxGoJOvKkjlIxFVZC9B0vVyCmPPzCxL-gNpv-ojlO-rDfpHsu_CVpmKm2AnOuAuT1EqGvu1Dw3fhRPbTnp2JPxckb-s_p2CQ4pCJKXEGYl_YZ3ruyWRqq6cGqTxISyhqQeIdJfm7gKqs5T77TkDoPIHENhvetrhcqh30O5N7e93bTi7lFOmj8xgZX-89BsRJF9pKU3Kyrk5jICeAbN3rwyVouAEA5AGAaAGTYAHoJ-CdKgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw%2526num%253D1%2526cid%253DCAASBORokvA%2526sig%253DAOD64_3Xny4KmSmE-jJUXO2QfCmZSGtAHA%2526client%253Dca-pub-2612317953771423%2526dbm_c%253DAKAmf-BdPMG9FyWQradfX0I8-4ULnADWnQ8mvfalmilCYsB8nzjiKnvP0Hffoc3LIqbv0EsJujHZ%2526dbm_d%253DAKAmf-AvaZSY6IksBNwVcByqLqhXFI1SCOMFjDcd9ALEwXUT4nc4bw5k1rzd0j9PJuNZgLwcoSF1zyjY5ZVfS1q6vn92G1JqLVlZKczAopBfhmRwCh5PtyyRAuGmZ1J-T5VdhFJ1bZfps3X0s9M4ehfmTGbd72zXoUhYs09NRRVR66riPg_jUu4%2526adurl%253Dhttps://promo-no.eurosport.com/winter-olympics%253Fns_campaign%253Dplayer-norway-prospect-generic%2526ns_mchannel%253Ddisplay%2526ns_source%253Dmullenlowe%2526ns_linkname%253Dbanner%2526utm_campaign%253Dplayer-norway-prospect-generic%2526utm_medium%253Ddisplay%2526utm_source%253Dmullenlowe%2526utm_content%253Dbanner%2526dclid%253D%2525edclid!" > < img src = "https://s0.2mdn.net/8043815/300x250_ES_OWG2018_GENERIC.jpg"
alt = "Advertisement"
border = "0"
width = "300"
height = "250" > < /a>
                                    

#12 JavaScript::Write (size: 1303, repeated: 1) - SHA256: 66ad359266b687c11606021ad47f16fd6b57b7acec8a64e2b879264a0cfaeab8

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjsthVPtSAMcbEvT2vGQ3bPn9pWAu8yxBGJ5bZgcRh0ovrr4BnwB_UgGkz5vzhIT4HKY2rp3O57EhCtFzOZz7iIfUZy6VEm-UGgVv-LIgpjIpzTIwTbs-u08qR1SaN8b1zDY8VOX8frPl0iskBZJw-FbY4CcOEHK8sSRLIMDHc7HvHvvsomjsCCF4KIWSRVgxnLeCR8-JdR_XQtYcipCZUFNh2hmp-dH-aURBDU2wwINA7qjaC1CB2gYyPKm-tzGrnmJh6pXStKP2IzJZO3qSncTXDh3JLK6HQUuE06Nngz6XE-YXo5E2RA4prkywdJ31djHcWkUyuE9miWHijyVCHF8lqKZRoFIh1RWIV_TBYsL4Ut198Z4OF-ft4Ar5evwGwbYRZAEM3dFXufTPCiUcxsm0VgP0Hfxg8-5SLM0sdy0CDypvKzNR4bxoyczz0yMSugHPpn97mpzBQ-NJmWG_gTdc4b-k8zjGVEL3lDZ4wxGZ1ehmejGxIQDKfehNG4fwD18NLwVIpGQjC5eFuU9aOPrJj_R_Xbm2WN73XFhlq395NtNXnmr_4mQrKy9v5JxJlxSNtJ1NtNlQ2UTQU7OWErpLLxblPNt5A4p7MLjiATwdjijtWr-XQjsFpvUG9pkQkUrAhXa-lSpU8tERJn0Ekiu71AhjbS6xeNeeuaaSCcHO3_NaRzHmgrUfMphQaEYssFmtkhcxBeedaAssyNAMsbvSRHjbJKrRAXbqAo0HcC8bfF3_pu-OOoW1js4LGzNnw-WN7A6zjMqE1fWvbKwZJMGws-I1StX499qnR8FkeTAQsVKtl2bFtfQ1VQvgpSNP_imfctmgc13DoTxdy6eQvK0_t2tR2OEnnobaHK0FuUG7S5o6BF0J3DchfRnKgjaQ-S50L8rq&amp;sai=AMfl-YReIXihRWw5TgD47StEry1QjS4JbKmOFBTGkoV8j31DJyTPJV_dy7-j1ILwZbth79R8VnxeZiRNZbfQ_f_MGzKH5zUYPjOOPL2c9XV2JII&amp;sig=Cg0ArKJSzGPy43vpiJvR&amp;urlfix=1&amp;adurl=https://www.priceline.com/" > < img src = "https://s0.2mdn.net/8405476/priceline_160x600.jpg"
alt = "Advertisement"
border = "0"
width = "160"
height = "600" > < /a>
                                    

#13 JavaScript::Write (size: 75, repeated: 1) - SHA256: d1f709b8a92f028747dfe08ff92094fd2c0f3275faaaad54bba02dec137bceb7

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_2033383921" >
                                    

#14 JavaScript::Write (size: 75, repeated: 1) - SHA256: 7e3cefbc5fb655dd0d2be2014589bee01e227b239d965625eeff0254c3666293

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_4209181723" >
                                    

#15 JavaScript::Write (size: 18, repeated: 2) - SHA256: 0304f6f192da1241555759cbd47b6e2f7267f1661188f93500fb12bab9c28a87

                                        < div id = "ad_unit" >
                                    

#16 JavaScript::Write (size: 1360, repeated: 1) - SHA256: 727a0b057d2beaeea859611563e86b42de0847b6b886ed931aff3ce985e9a70e

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "160"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&amp;output=html&amp;h=600&amp;slotname=4621556595&amp;adk=250578660&amp;adf=807048394&amp;w=160&amp;lmt=1518520243&amp;loeid=368226210%2C38893312&amp;format=160x600&amp;url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1518520244081&amp;bpp=122&amp;fdt=128&amp;idt=389&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=8279629434588&amp;frm=20&amp;ga_vid=1373778678.1518520245&amp;ga_sid=1518520245&amp;ga_hid=1757523518&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=101&amp;ady=94&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;dtd=1315"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#17 JavaScript::Write (size: 1428, repeated: 1) - SHA256: a3fe639910c6aaee6cbbbf7435ff672c65995d0f7d59b59fa1ece3cbf46fc7b4

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "595"
height = "60"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&amp;output=html&amp;h=60&amp;slotname=1861849391&amp;adk=3739162967&amp;adf=807048394&amp;w=595&amp;fwrn=4&amp;lmt=1518520243&amp;loeid=368226210%2C38893312&amp;rafmt=1&amp;format=595x60&amp;url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;adsid=NT&amp;dt=1518520245557&amp;bpp=30&amp;fdt=35&amp;idt=152&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=160x600&amp;correlator=8279629434588&amp;frm=20&amp;ga_vid=1373778678.1518520245&amp;ga_sid=1518520245&amp;ga_hid=1757523518&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=287&amp;ady=200&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=187"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#18 JavaScript::Write (size: 1405, repeated: 1) - SHA256: b6c6527bbebdf57f544915bd3040637acacb29592a3097d6f822b5db7c4850d2

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&amp;output=html&amp;h=250&amp;slotname=3005222594&amp;adk=897082944&amp;adf=807048394&amp;w=300&amp;lmt=1518520243&amp;loeid=368226210%2C38893312&amp;format=300x250&amp;url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&amp;ea=0&amp;flash=10.0.45&amp;avail_w=304&amp;wgl=0&amp;adsid=NT&amp;dt=1518520245753&amp;bpp=26&amp;fdt=57&amp;idt=267&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=160x600%2C595x60&amp;correlator=8279629434588&amp;frm=20&amp;ga_vid=1373778678.1518520245&amp;ga_sid=1518520245&amp;ga_hid=1757523518&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=291&amp;ady=471&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=3&amp;dtd=327"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#19 JavaScript::Write (size: 1440, repeated: 1) - SHA256: aeb4d37398f89b3bd4afa569de9154faf9211415886f8579751eb18918d077e5

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&amp;output=html&amp;adk=1812271804&amp;adf=807048394&amp;lmt=1518520243&amp;loeid=368226210%2C38893312&amp;plat=1%3A1085448%2C2%3A1085448%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C25%3A32768%2C26%3A32768&amp;format=0x0&amp;url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&amp;ea=0&amp;flash=10.0.45&amp;pra=5&amp;wgl=0&amp;adsid=NT&amp;dt=1518520245838&amp;bpp=2430&amp;fdt=2433&amp;idt=2519&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=160x600%2C595x60%2C300x250%2C160x600&amp;correlator=8279629434588&amp;frm=20&amp;ga_vid=1373778678.1518520245&amp;ga_sid=1518520245&amp;ga_hid=1757523518&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&amp;oid=3&amp;rx=0&amp;eae=6&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cr%7C&amp;abl=CS&amp;ppjl=u&amp;fu=16&amp;bc=1&amp;ifi=4&amp;dtd=2541"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#20 JavaScript::Write (size: 1398, repeated: 1) - SHA256: 0e706bc915d2341d09757dcb8df87f0362c6696bfe1f13c0255d979cc8601950

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
width = "160"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&amp;output=html&amp;h=600&amp;slotname=1528489394&amp;adk=60347125&amp;adf=807048394&amp;w=160&amp;lmt=1518520243&amp;loeid=368226210%2C38893312&amp;format=160x600&amp;url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1518520245838&amp;bpp=28&amp;fdt=296&amp;idt=404&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=160x600%2C595x60%2C300x250&amp;correlator=8279629434588&amp;frm=20&amp;ga_vid=1373778678.1518520245&amp;ga_sid=1518520245&amp;ga_hid=1757523518&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=903&amp;ady=94&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=4&amp;dtd=446"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#21 JavaScript::Write (size: 1351, repeated: 1) - SHA256: a2ab0d9480335be4ac317fe3a896d24db5c4d01d6eb8b338ac10cca76295fe58

                                        < script src = "https://ad.doubleclick.net/ddm/adj/N415003.280211CONVERSANTMEDIA/B20653325.213008569;dc_ver=41.108;sz=300x250;dc_adk=837489143;ord=yu079m;click=https%3A%2F%2Fsecure-media.msg.dotomi.com%2Fw%2Fclick.here%3Fsid%3D97975%26cid%3D11043029%26mid%3D2278866%26tp%3D12%26m%3D10%26forced_click%3Dhttps%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%253Fsa%253DL%2526ai%253DC1spXtseCWuXbHIqeYYqLiPANkZGrslDIgPiciwfwLhABIMqEnB9gw9ykhZgYoAHI4P2LA8gBCakCpt3jmimktD6oAwGqBNABT9DS9SrWolrA4BrkXEuyHW1N-Uc9A4-x9ZK6ad68krjMmuBDardoAVdl7Tgj1kxGoJOvKkjlIxFVZC9B0vVyCmPPzCxL-gNpv-ojlO-rDfpHsu_CVpmKm2AnOuAuT1EqGvu1Dw3fhRPbTnp2JPxckb-s_p2CQ4pCJKXEGYl_YZ3ruyWRqq6cGqTxISyhqQeIdJfm7gKqs5T77TkDoPIHENhvetrhcqh30O5N7e93bTi7lFOmj8xgZX-89BsRJF9pKU3Kyrk5jICeAbN3rwyVouAEA5AGAaAGTYAHoJ-CdKgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw%2526num%253D1%2526cid%253DCAASBORokvA%2526sig%253DAOD64_3Xny4KmSmE-jJUXO2QfCmZSGtAHA%2526client%253Dca-pub-2612317953771423%2526dbm_c%253DAKAmf-BdPMG9FyWQradfX0I8-4ULnADWnQ8mvfalmilCYsB8nzjiKnvP0Hffoc3LIqbv0EsJujHZ%2526dbm_d%253DAKAmf-AvaZSY6IksBNwVcByqLqhXFI1SCOMFjDcd9ALEwXUT4nc4bw5k1rzd0j9PJuNZgLwcoSF1zyjY5ZVfS1q6vn92G1JqLVlZKczAopBfhmRwCh5PtyyRAuGmZ1J-T5VdhFJ1bZfps3X0s9M4ehfmTGbd72zXoUhYs09NRRVR66riPg_jUu4%2526adurl%253D;dc_rfl=2,,http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F$0;xdt=1;crlt=HcE*5_UAXZ;sttr=627;prcl=s?" > < /script>
                                    

#22 JavaScript::Write (size: 2031, repeated: 1) - SHA256: affe93edf5f9cf966253a55e372a9f1f2bf0b54ce2094fa7b8f2b1f785cde35d

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BCeWlo54bASiCb_HVg9nKDr1jE0Q7zRPizUWqs59dpl55D7XDjtlXI1Fz0pICpzZbxrwlK&dbm_d=AKAmf-DQDR5gA2QauanCAzYapvT51XmqoEZGH05Aw5c20hFLuNnFVcOBRNs8UE-_yeBuo8fgucpbDkoEC_RExSaoxeAMxIsXeSm7q3ncqpZJBbW3WxuqR-Fd8JFtgOIoNEm0jR5xclTrCjDY4tZCIIP9y1wuR2GPbJSKtkAGEArM__A3CxtiWVyoM_Ho2aX29_01HbbuFaXR_H6LmBkDfiTH5oSTBO9tpeQKkZb6inxsZMVnXXcvXz4cGWxGOv6ihoMvux3-ratlsDRlocNLVPOxZhkT3cwrAi-7-xRMrMr4Iy_St3-VYON4YoifWy6iZ5dGxcQ5ep30UCWGRRXtMAW_mVREcbDhUYRT5HoT_0coxnuqJJg30EdEYIYrcZuxOoRjwkwP8WhQxKnOsCa8Sh3_a76VpGtb4juihc606rjiOwuEuFFCKJst4zz55TO3FRKDYtmZKPUPRc3b5ulk113sRC2SJxJ1qpuY-nVwea4_-X_8mWXvuOiOQXcbIjF70q7Sqm5GSRxvX7sIWSdSas2zqNmh6INo0k68oanUQmcL3q0wjnQbuOTvkVuekDF_GYhFbymjFtHiuzNLzqY_M1_lpgU50orTAMnQUY8EWhL5zAs4ufTTg-_45XgLFTihbOS_YOS6hMU_n4CinTYzCXY7YvaOTjX6guvzlpdLCP549hVi2GZyqpdnweY2lYi7Lwq3KJ3i5SdX65YgGJknA3-lBidjX-r9fXDviCBhochwLq6SI1qw8Bh5YV-1uWU0bg8jEUXCDbFAbduGInCVAA5-Jo9zBvzHfMgmiRHI0WBtVRDf9SlrZXcN_qQpYrWDGrmaNmXrqM6-0ntB9ygQP32QwCv-7o_I2j8qv-vOUey3fZSpOoip-frpvh3bzBKxqVdHSihAt2V6swsn-Hitp27lblENbYDS_b6IFGJsDrn8H7idDycDlhXkfRPh3FBkRPZSpymnVmlFdaj_d71AFuvTIC09N-OvRqu_beVesZfjamwBOTxxP76WJk2IQxaXZcbW-Rr-LlaiLg7s-qlLFm02cfmgShh-GLrVMkVnED-ZVRgPTIFoHsL2-atjp8jFEb3zV57fYP-9zT7xNJ-1ibhX9N9JBxMfy8g0lbEZsustef69eNC4PMvnkMpcWlE_wLDGnR-J-ljHUhXiVu2q5ngwM51Z9Ef1oLRk4xgayE-veXYydOj7SmGqPO3NfQmrR1elZ10cjrCzoqeSBR2r1vxkr7i0njS-CdVW7HXonUW5RBDl592kPzZF1CD2CL1tcOUMfo91Bu5NR18aPG5JGe1eKrgArYwITxgte8utM8qWi-xdPk5t87jPgk7OR4Hvj8bikgujNwAGnzE0igvFiAFLYVlAJbMV3NAzLqCxTDiO-8DY9BPUNndyAEUduRRh_NEQilkYWhQ9euxYZX3TDTdZ1BlRhJ_W0IArmyLPcXTxMhw6kxXS3o4HOK5WFo9_wAMHQhm4p-N8VGn3C8P4syAOqtJ315O9Y9g4-bF-krf2-ISDF9bvFRQrdInJwx0kpzerUrZ_ng1hRaiubD1rkUBJZBoZIZw88b2AX6Sxhz5IGtTPNvo3fhN5Gtwc6crItd0TgreR1g84gSvXiz58eDFcx1x6b2y8vBlIBxUCCVmKJMMTcazuLe68p2TABnaA7yfla48nfXqtGnyUunZjtYQTPAqDlaSgv9rcdN1vMtZBAACNTp8Qikm-vOfBeud8Vy1v3KK_g_v-V_CwiSEgfszdSHCxVufrEdSuFDW1g5OVsUwU5C48nTo&cid=CAASBORokvA&rfl=2%2C%2Chttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%240" > < /script>
                                    

#23 JavaScript::Write (size: 2031, repeated: 1) - SHA256: 940f4223f999550e63a74e18972e4ce2bc21502953bceb4028a7328796dbdaae

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BrXje6YteyrvcSvEoWVYWKOH_jGs5htqTPP51k6RsFHvB8PO5RE3_7H9OR3guQAXuSEd9S&dbm_d=AKAmf-Dbq8CuBMtqjoEWjmFOVSIui9ecALKLw1elP5jlD-66eg_C_ayCRlU34poPoYn_e6Ofpnr8BP_7BJLjz8UPqNhkWD8271zxHrMWTG_1uQFa3SqzCa2Q9gEaYOuwHqHX8fR1C_GaDsGnK3YMCm4F27R_zar3VtbTVSlJ_vc1xt7rvwsjQ1kwJl3_FOJiJP1NAla_tZgoYVGFP1W3_OFQznEtz6jkW_iMPF6fOX1hoW_VW80Rup0Q2LaOeXW5pv4xV5K8VxVdwJApJ9dr_Zj1nJ9C_W-o63QdPozY2s-8FTpansZ5v3aplvhlCxb6-UL7aEKsHAk0k7jS-GHsGO4Dil6PAxOPwL2plZsYO8AvzQVqPguxxOaccNWYrpOxLoZCvPeCWN3k4andtXWCHjkxrri_3JdqRN3TA_LY0N2pS3YPK6Nkp49F-EiNXtErOUqaMiR7YmI4vXZY_fEM5DZuEUMbYl_k01U6ja8KBjP0iIo8jsKD0GIMvRNIKtC-PPWRmAStDWbZjUhxOuzGMoaAVw0j2dMio8fZ_bL84IJQLF-lX-063pR-gBn8-lShjkxlCRy40ANyqlweMjnyR71nc4aBFX0JYjd6pPCxEzmCNek-qdIsHmoXZK0FoDXGALtO9ing8U0Bo4ddW5Bnhr4WXdWCWSJlMf4m2wwAgL3eLekSR8UWZqFZsK2CuneDNtEufLp3HaAExa0wUgqLbEXU1AboAXGZQQgPrmZQCYV2dMBUY7GJ2tSfjtVaFN5RlcqJexfw_gd3LkFbCoFM5Qc6OeyWLqtTFxUs3bth3aDz7ThClArfVbT3l4N-uiDHcjeybO2S7tU2vkLc_QmKK6pgLVq-390PUACXS6sK6yai4i61G51e3nHSnveoEeNL9K2AW2Um2EOHVFSnlvTQMIvB_NpH8k4zTev70bBJNoBDEqsNSdtCDueIdOQb494I-D4KNHoGV-97xTb-dVE_dLona0nte_xLvVVu7bdDw52F9uh-x2WNJr2FEgcmaRro1fr5moy1srwbuyUk5o11WqxPP-eaTY9I-zMluLqKk9m6wFtmu57qyd7zZRAiv-6vTzi8W2YI8G1j-iidOif7d7zQS8kPYYIdyoW3syBKWPOlX_avDtoYiIuOimPnykB2oBweq3UEOpyrljbfu94qWNsVy2Ur6OkPrZWAKN43ClkBq6xyJ9dPV_KG18VRfaYLUHYNpXIIj22ZFJA00gPtyDuzn2pWpe96l0zJ6LjdHB-Yr-QzjhHHAvNqmMo6chz0gc7eNQR4ZbrB0vpiye6wnTAz5fR5yQbjAjj4NCU3MVP6iIfNTgifwQItsk3b0EqJoXO1KXd4cDOZCKhA-jWuDOO4di8JlZZb5qqaYjSoZJ3J7qD83gG5lovWgrw41JdOZ23Od8LmW-LhBQF0nwKdSLLctJlV2ytYU38x7o1YcnxHeXeFWbB9UkNEeaYGXmYfZ1kaFV9X1NYWZW2i9-A4ZqSz_CEnvoQMw5t1uHydJd5y9xL9GvRk5xpA8dqvuWb44O6l-xc_I_qCqkBY28K3XvHCdIUaCkkVNsbq0v6X6J3AnrbuWtHzmkLcvKk235Gvntv1oYhEe33PQC--w0khY-fQLM1soQYYOjrQhBLlOeN4q_9Ov5dSV-NkVgV-VV_quCKuKApPxZPOH1pD-GG2xc6O25evWbV5RopwOESuUJ3AQvwelQyTXRJAR3yBL3RbyveQ8br7hqhjxbYAaB8jXHuiCu6_3WxyF8BHArlSVSF4dkL4R0bXmZM&cid=CAASBORonJc&rfl=2%2C%2Chttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%240" > < /script>
                                    

#24 JavaScript::Write (size: 73, repeated: 1) - SHA256: c0e0f84664f600fb051c67d220552b60b5008f5fb5d11926d61b2a0250902fcd

                                        < script src = "https://www.googletagservices.com/dcm/impl_v41.js" > < /script>
                                    

#25 JavaScript::Write (size: 6981, repeated: 1) - SHA256: c8ebcfc18223725b341432131f1130b9a0d615a020287e984e6676b11eb5fbbf

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 16 px;top: 0 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc, .abgcp, .cbb {
    opacity: 0;
}.jar.abgc, .jar.abgcp, .jar.cbb {
    opacity: 1;
}.jaa.abgc, .jaa.abgcp, .jaa.cbb {
    display: none;
}.abgc {
    cursor: pointer;
}.cbb {
    cursor: pointer;height: 15 px;width: 15 px;z - index: 9020;
}.cbb svg {
    position: absolute;top: 0;right: 0;height: 15 px;width: 15 px;
}.cbb.cbbbg {
    fill - opacity: 1.0;
    fill: # cdcccc;
    stroke: none;
}.cbb.cbbcross {
    stroke: #00aecd;stroke-width: 1.25;}.cbb:hover{cursor:pointer;}.cbb:hover .cbbbg {fill: # 58585 a;
}.cbb: hover.cbbcross {
    stroke: # ffffff;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 0 px;top: 0 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# cdcccc;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://paramourdespoupees.com.w3cdomain.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D&amp;usg=AFQjCNG5UQVvw14pu74t7-honJTL7IV0jQ"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"><svg><path class="cbbbg" d="M0,0l15,0l0,15l-15,0Z"/ > < path class = "cbbcross"
d = "M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5" / > < /svg></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:91,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/fr.png\',alt:\'AdChoices\',t:\'Choisir sa pub\',tw:69,t2:\'\',t2w:0,tbo:0,att:\'adchoices\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:600,\x22width\x22:160,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dC7VoctseCWvKSHMWqYZuksogOwZ7HtlDQ7MDZyQbwLhABIMqEnB9gw9ykhZgYyAEJqQKm3eOaKaS0PqgDAcgDAqoE1AFP0La4pRELfeXnIH0F0xBGVNs_g3qq0zaZj90b0JAFhlvhMbC4fKuUbMHDI2FclUAiTTb6Y5LbK_4qUgHauj9qP6q7vMa6bJYUxGuGovpfDvoij2Y62MG-nwaF7e5abiEzjTAAcUJWgtxkpCedhwEpClIisnsxSNXLpORyb78GoCNbF1jvvND7oZlcpC-B5ARBzhu99z-y6WD5tAm0rDA8A_Z0f5RlvBxfVv-2iqYtlAbM1f5lMZPxFDawxT4t4ftCL1XdCaCZgPo-rWCiZQPJrSWb9uAEA5AGAaAGTIAHo--yeqgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw\\u0026sigh\x3dNZeSrrW0LaE\\u0026cid\x3dCAASBORonJc\x22,\x22close_button_token\x22:\x22IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22mute_confirmation_text\x22:\x22Nous examinerons cette annonce afin d\x27am�liorer l\x27exp�rience utilisateur � l\x27avenir.\x22,\x22pub_feedback_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22pub_feedback_confirmation_text\x22:\x22Nous utilisons vos commentaires pour �valuer les annonces sur ce site.\x22,\x22closing_countdown_text\x22:\x22Fermeture de l\x27annonce en cours�: %1$d\x22,\x22attribution_text\x22:\x22AdChoices\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://paramourdespoupees.com.w3cdomain.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\\u0026usg\x3dAFQjCNG5UQVvw14pu74t7-honJTL7IV0jQ\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22Signaler cette annonce\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22options\x22:[{\x22text\x22:\x22Annonce inappropri�e\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce affich�e trop souvent\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inint�ressante\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Contenu masqu�\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22Choisir sa pub\x22,\x22closed_message_text\x22:\x22Annonce ferm�e par %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22Signaler cette annonce\x22,\x22confirmation_text\x22:\x22Nous allons essayer de ne plus vous montrer cette annonce.\x22,\x22see_my_google_ad_settings_text\x22:\x22Afficher mes param�tres relatifs aux annonces Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22Annonces %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20110914 / abg.js "></script>
                                    

#26 JavaScript::Write (size: 6981, repeated: 1) - SHA256: a10444b054ad4aa2f03f2a3935c3db325f5c80e154c31c51c66b6548e0d31aaa

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 17 px;top: 1 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc, .abgcp, .cbb {
    opacity: 0;
}.jar.abgc, .jar.abgcp, .jar.cbb {
    opacity: 1;
}.jaa.abgc, .jaa.abgcp, .jaa.cbb {
    display: none;
}.abgc {
    cursor: pointer;
}.cbb {
    cursor: pointer;height: 15 px;width: 15 px;z - index: 9020;
}.cbb svg {
    position: absolute;top: 0;right: 0;height: 15 px;width: 15 px;
}.cbb.cbbbg {
    fill - opacity: 1.0;
    fill: # ffffff;
    stroke: none;
}.cbb.cbbcross {
    stroke: #00aecd;stroke-width: 1.25;}.cbb:hover{cursor:pointer;}.cbb:hover .cbbbg {fill: # 58585 a;
}.cbb: hover.cbbcross {
    stroke: # ffffff;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 1 px;top: 1 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# ffffff;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://paramourdespoupees.com.w3cdomain.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D&amp;usg=AFQjCNG5UQVvw14pu74t7-honJTL7IV0jQ"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"><svg><path class="cbbbg" d="M0,0l15,0l0,15l-15,0Z"/ > < path class = "cbbcross"
d = "M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5" / > < /svg></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:91,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/fr.png\',alt:\'AdChoices\',t:\'Choisir sa pub\',tw:69,t2:\'\',t2w:0,tbo:0,att:\'adchoices\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:250,\x22width\x22:300,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dC1spXtseCWuXbHIqeYYqLiPANkZGrslDIgPiciwfwLhABIMqEnB9gw9ykhZgYoAHI4P2LA8gBCakCpt3jmimktD6oAwGqBNABT9DS9SrWolrA4BrkXEuyHW1N-Uc9A4-x9ZK6ad68krjMmuBDardoAVdl7Tgj1kxGoJOvKkjlIxFVZC9B0vVyCmPPzCxL-gNpv-ojlO-rDfpHsu_CVpmKm2AnOuAuT1EqGvu1Dw3fhRPbTnp2JPxckb-s_p2CQ4pCJKXEGYl_YZ3ruyWRqq6cGqTxISyhqQeIdJfm7gKqs5T77TkDoPIHENhvetrhcqh30O5N7e93bTi7lFOmj8xgZX-89BsRJF9pKU3Kyrk5jICeAbN3rwyVouAEA5AGAaAGTYAHoJ-CdKgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw\\u0026sigh\x3dN0XOUBtO1Mw\\u0026cid\x3dCAASBORokvA\x22,\x22close_button_token\x22:\x220kLwNN0W4cAIyID4nIsHEL_GlvcDGKzXoHRCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22mute_confirmation_text\x22:\x22Nous examinerons cette annonce afin d\x27am�liorer l\x27exp�rience utilisateur � l\x27avenir.\x22,\x22pub_feedback_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22pub_feedback_confirmation_text\x22:\x22Nous utilisons vos commentaires pour �valuer les annonces sur ce site.\x22,\x22closing_countdown_text\x22:\x22Fermeture de l\x27annonce en cours�: %1$d\x22,\x22attribution_text\x22:\x22AdChoices\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://paramourdespoupees.com.w3cdomain.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\\u0026usg\x3dAFQjCNG5UQVvw14pu74t7-honJTL7IV0jQ\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22Signaler cette annonce\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22options\x22:[{\x22text\x22:\x22Annonce affich�e trop souvent\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inappropri�e\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inint�ressante\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Contenu masqu�\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22Choisir sa pub\x22,\x22closed_message_text\x22:\x22Annonce ferm�e par %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22Signaler cette annonce\x22,\x22confirmation_text\x22:\x22Nous allons essayer de ne plus vous montrer cette annonce.\x22,\x22see_my_google_ad_settings_text\x22:\x22Afficher mes param�tres relatifs aux annonces Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22Annonces %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20110914 / abg.js "></script>
                                    


HTTP Transactions (138)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: paramourdespoupees.com.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 11:11:07 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Vary: Host,Accept-Encoding
X-Powered-By: PHP/5.4.16
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 3827
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3827
Md5:    d4b95de2c8b759cc0bead0f60de8bf01
Sha1:   63a33421c1b53d248d4a02a7fc2b8c7d213ee9dd
Sha256: e59ccbbef51b47ca85a1927b7682d1dc853272ad8862e6308eec7c67685a836c
                                        
                                            GET /css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 13 Feb 2018 11:10:43 GMT
Date: Tue, 13 Feb 2018 11:10:43 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   380
Md5:    6c338b6e383e98f1146ce20464fea235
Sha1:   36e9626638f993659e9776fbdd25a9b30d6fa67d
Sha256: 9abd34a2f08ef68311846bd4be20ff3b378f0067a7ba8b940b82145e12f404e3
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:43 GMT
Expires: Tue, 13 Feb 2018 11:10:43 GMT
Cache-Control: private, max-age=3600
Etag: 6502682663518856185
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26103
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26103
Md5:    6ef11d0463c07a28cd7cf2803534c33b
Sha1:   22c83cf48df58218feda2b7c44729bbbd3c43fdc
Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
                                        
                                            GET /graph?&w=575&h=235&o=f&c=1&y=r&b=ffffff&r=6m&u=paramourdespoupees.com HTTP/1.1 
Host: traffic.alexa.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         35.170.0.108
HTTP/1.1 308 Permanent Redirect
                                        
Date: Tue, 13 Feb 2018 11:10:43 GMT
Location: /graph/error
Server: nginx
Via: 1.1 ip-172-30-38-210 (squid/3.5.20)
X-Cache: MISS from ip-172-30-38-210
X-Cache-Lookup: MISS from ip-172-30-38-210:3128
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:43 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fcd56e1351782e87ef4f73d429e4ded4
Sha1:   f6f1ce80b96c014e654132c41d109a131ee5bc3c
Sha256: 340ac1b5b28c1c9c0280d32661fe3b614a32fc66f327fb93f5a98fdbe0c176b0
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:43 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:43 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4bb2e4074fe5f9f8d715e5888d0b4188
Sha1:   8d020c92f7f3278b86d901ebef396c31d5e39d51
Sha256: cc9e9c93a83b6c3b89cfb24126cc32cfb0876f7705046b642039176859c160e0
                                        
                                            GET /css/style.css HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 11:11:08 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 17 Aug 2016 02:07:02 GMT
Etag: "24cb-53a3aebcabd80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 1793
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1793
Md5:    db54e0fc931dd2ed277a731076d3ce6c
Sha1:   a86546a8289c7828780bd9b59e7ea34af7b7c682
Sha256: 4ac01dfaa03fa44dd549f54811d95ba7895cadc09674ae2d0a2063cfd462c0d2
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=557283, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT
Expires: Mon, 19 Feb 2018 21:56:01 GMT
Date: Tue, 13 Feb 2018 11:10:43 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    dab664d03e303a7b1deba30189c57d23
Sha1:   1a87b2335fc304a7783b6f7ffdb5ff97367d30de
Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
                                        
                                            GET /adsid/integrator.js?domain=paramourdespoupees.com.w3cdomain.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:43 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=paramourdespoupees.com.w3cdomain.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:43 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Tue, 13 Feb 2018 11:11:08 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Mon, 15 Feb 2016 08:09:40 GMT
Etag: "25be-52bca89de7900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 2412
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2412
Md5:    6d09ac2c8fed06eb2d88fb2883ebdb8b
Sha1:   9ce4fa67f4e1f1af4f2989c7be78b0e6b90b5e83
Sha256: cfc7a2105b66ee35a5976b6b0899e44b499fff49b50cc0399385815ef74bd536
                                        
                                            GET /img/logo.png HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 11:11:08 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Mon, 15 Feb 2016 08:09:40 GMT
Etag: "285d-52bca89de7900"
Accept-Ranges: bytes
Content-Length: 10333
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 290 x 120, 8-bit/color RGBA, non-interlaced
Size:   10333
Md5:    7e388e9131519714f66019119289d40c
Sha1:   3f32ce6bc5f22bc848a4a10a58b082bcde14d9b7
Sha256: a168afbee05c5e37ade53313dd9519ce5dc636eadbed3e019c2322414b89469a
                                        
                                            GET /bootstrap/css/bootstrap.css HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 11:11:08 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 09 Mar 2016 11:31:34 GMT
Etag: "23a04-52d9c0a451180-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 21323
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   21323
Md5:    861bba63cd5042be11af5752ab27d487
Sha1:   afaff54fd1e1bba109a07262d774b84557aa5ab6
Sha256: 2781d3893992a42ba0250cf00bc01c65b57b3dc295cbc6015fff9ee11812ee77
                                        
                                            GET /s/opensans/v15/mem8YaGs126MiZpBA-UFVZ0d.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic
Origin: http://paramourdespoupees.com.w3cdomain.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17704
Date: Mon, 12 Feb 2018 15:47:20 GMT
Expires: Tue, 12 Feb 2019 15:47:20 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 69804


--- Additional Info ---
Magic:  data
Size:   17704
Md5:    bf2d0783515b7d75c35bde69e01b3135
Sha1:   0e92462e402c15295366d912a7b8be303d0257d8
Sha256: 054349dda27b80bb105fbc59b5973ef9889ed976aca1fbe39f77688dcff8c552
                                        
                                            GET /s/opensans/v15/mem5YaGs126MiZpBA-UN_r8OUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic
Origin: http://paramourdespoupees.com.w3cdomain.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18280
Date: Mon, 12 Feb 2018 16:51:57 GMT
Expires: Tue, 12 Feb 2019 16:51:57 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 65927


--- Additional Info ---
Magic:  data
Size:   18280
Md5:    521d17bc9f3526c690e8ada6eee55bec
Sha1:   0c74bab4a4ebdafe080c8a35bd61d38f1b692358
Sha256: 624b3c987e1731e2871567be1451a257be8ebcaa2abebaa45651d3d95fa99492
                                        
                                            GET /s/opensans/v15/mem5YaGs126MiZpBA-UN7rgOUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic
Origin: http://paramourdespoupees.com.w3cdomain.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18476
Date: Mon, 12 Feb 2018 14:05:51 GMT
Expires: Tue, 12 Feb 2019 14:05:51 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 75893


--- Additional Info ---
Magic:  data
Size:   18476
Md5:    623e3205570002af47fc2b88f9335d19
Sha1:   b5f79d1934da79c8a4ba381092dad82ffb0582cb
Sha256: 5e03e0c7668266486cab9529702019d75c219fcec2b1e82a7c11797ba9b78506
                                        
                                            GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:44 GMT
Expires: Tue, 13 Feb 2018 11:10:44 GMT
Cache-Control: private, max-age=1209600
Etag: 4433304288936196502
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67646
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67646
Md5:    cce91a88f525640083b0ebe057a30af4
Sha1:   b9cf4be249b5af3dda774dfb75e73d482da706c5
Sha256: dd6dac5265c4b1796715889313e4b9271b4547f66739424357f89dc45eac882b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:44 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6ea90b04815236e9005a97e76148e394
Sha1:   256637485a6d2ab91f66dfc94598aafaa31250c0
Sha256: 98fe9ca5bbe415d51e7c4c01f2ccbfd26909479017bb040d52309743c3eb0dba
                                        
                                            GET /js/300/addthis_widget.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         104.122.220.14
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Last-Modified: Mon, 05 Feb 2018 17:46:41 GMT
Etag: "5a789881-57b6f"
Cache-Tag: client_dist
Surrogate-Key: client_dist
Timing-Allow-Origin: *
Cache-Control: public, max-age=600
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
X-Distribution: 99
X-Host: s7.addthis.com


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   114498
Md5:    10d880bad1879e7acb100e6bce81ed29
Sha1:   837b74173a703800410309d25621f15c255b3a8e
Sha256: 1bb5342eebb85e269be4f9301d0d09a86438558f3e1cdd8fe4928fb150a461b7
                                        
                                            GET /pub-config/r20160913/ca-pub-2612317953771423.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 13 Feb 2018 08:33:17 GMT
Expires: Tue, 13 Feb 2018 20:33:17 GMT
Last-Modified: Sun, 11 Feb 2018 21:16:22 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 9448
Cache-Control: public, max-age=43200
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /graph?&w=575&h=235&o=f&c=1&y=r&b=ffffff&r=6m&u=paramourdespoupees.com HTTP/1.1 
Host: traffic.alexa.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         35.170.0.108
HTTP/1.1 308 Permanent Redirect
                                        
Date: Tue, 13 Feb 2018 11:10:45 GMT
Location: /graph/error
Server: nginx
Via: 1.1 ip-172-30-63-191 (squid/3.5.20)
X-Cache: MISS from ip-172-30-63-191
X-Cache-Lookup: MISS from ip-172-30-63-191:3128
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /maps?f=q&source=s_q&hl=en&geocode=&ie=UTF8&iwloc=A&output=embed&z=8&ll=, HTTP/1.1 
Host: maps.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.21.142
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 11:10:46 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen
Server: mafe
Content-Length: 275
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  HTML document text
Size:   275
Md5:    7cfdd7e2cc3ef5f1e542fcda7ba85cc0
Sha1:   3f2837ef442d11ef0ba8dd6bb7a9dbdd70d48c4f
Sha256: d2de4beb00be8fc5638548f81cbcccf2775686bb135cfb834d6c8a355e384d12
                                        
                                            GET /script/jquery-1.12.0.min.js HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 11:11:10 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Mon, 15 Feb 2016 07:15:32 GMT
Etag: "17c52-52bc9c845ed00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 33845
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33845
Md5:    fde39286a223c97c2bec62b170b440ab
Sha1:   28dd45e300383d2c50033aef613071f51f265eb9
Sha256: 9b67a811bbcda494f4a1cc94104f82edd5b1b28137343cf898f6ed9c0c541702
                                        
                                            GET /pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:46 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 11:25:46 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17783
Md5:    4922fafd019ed9a252d51d46239a699e
Sha1:   77b613cb6ece08a958764aef6a739e53cd1f610f
Sha256: 15561cad8c89f6b8508d606fbda08ed4aaccea6031ab42a4539289e80cb5cdf3
                                        
                                            GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 18:42:53 GMT
Expires: Wed, 21 Feb 2018 18:42:53 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 491273
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6819
Md5:    8caea4ee531aab9f5d9328f80b7b23f3
Sha1:   3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:46 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3f8666a5bea36283578bc10ee5cd930f
Sha1:   526a530c3057adf847bbba35e96736f4d641585b
Sha256: 166a98b8491197265873aa5ff9f1e46c79443bc0e509cd240513fed08e9578a9
                                        
                                            GET /bootstrap/js/bootstrap.min.js HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 11:11:10 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Mon, 15 Feb 2016 07:12:32 GMT
Etag: "9004-52bc9bd8b5800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 9765
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9765
Md5:    da6fb4b64d1f22f682dcaa0433b4dec7
Sha1:   56493cb828703ebeb1e9fbefc163793613b65e7f
Sha256: 7d59f0296a0b229f7d0ffc0b4f02930d6a7b56070167c7429004d6b1649c9d64
                                        
                                            GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 11:52:19 GMT
Expires: Thu, 22 Feb 2018 11:52:19 GMT
Etag: 14152819666964886147
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29995
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 429507
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29995
Md5:    ca42dee86b721494eb2a8c4f93c4508d
Sha1:   17ee6f68a61be238ce54d20d056a7a5834c52d80
Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
                                        
                                            GET /pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:46 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 11:25:46 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5019
Md5:    53a14cb7e020e852499ccc5965b4edae
Sha1:   3b2e57e2f8bb1a88d163e53b4d2d7640f466f883
Sha256: 27b03005d491417696931673c12dfb693959139411bc7a387c68a9cc277c54b2
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 18:19:18 GMT
Expires: Mon, 26 Feb 2018 18:19:18 GMT
Etag: 2112876643077467119
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1203
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 60688
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1203
Md5:    9a504624fadda2dcec8340bf93b2252c
Sha1:   fa6dbebcf9b5450a1dd2f2371c971e838ff627c0
Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
                                        
                                            GET /pagead/ads?client=ca-pub-2612317953771423&output=html&h=60&slotname=1861849391&adk=3739162967&adf=807048394&w=595&fwrn=4&lmt=1518520243&loeid=368226210%2C38893312&rafmt=1&format=595x60&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1518520245557&bpp=30&fdt=35&idt=152&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=287&ady=200&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=187 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:46 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 11:25:46 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18169
Md5:    d3e3ce22b54d12a7ef2ede5dfb13a0fa
Sha1:   b676448eb4f81f49ebeee9b32a8d85e327a1e922
Sha256: 097dcaa7fb722bb8cea5cbe6be12997f4ed3ea846fe5ddecb407f4b8badbfa3c
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 15:54:48 GMT
Expires: Mon, 26 Feb 2018 15:54:48 GMT
Etag: 14820661455479886896
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 14807
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 69358
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14807
Md5:    ec3fe9161e1fa8ced1bfa9e9ffc139d8
Sha1:   b5c33a392a091c215f6dbbd5d2ae62c34c97d565
Sha256: 2633c11b454330f3f64517934f750c4d7c8cbef4e41ad1082bd734e1cfc25c37
                                        
                                            GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 15:02:16 GMT
Expires: Wed, 21 Feb 2018 15:02:16 GMT
Etag: 4319863517479632446
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29527
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 504510
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29527
Md5:    cb7c5d42c8b00cdec8b3bfb65909c20b
Sha1:   df39b61e2fd957f8b9ade02e65c59ec51cec5c46
Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
                                        
                                            GET /pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:46 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 11:25:46 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5708
Md5:    5b7d9bdac80bb3253fdc36127ae50c51
Sha1:   ad7141df4248044b534073401a0afc0fafba8fbe
Sha256: 13e0e8468714c27a14bf39bb47d8cd4b60143ea7652f272dca00f5fea3ff54ee
                                        
                                            GET /script/gvChart/jsapi.js HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 11:11:11 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 17 Feb 2016 06:05:26 GMT
Etag: "5d1d-52bf109423580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 5951
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5951
Md5:    9ce286610ebc4c1ee3ee839a5f7d67c5
Sha1:   e5a930084d09cf5c69b2ba41633be7fae247a758
Sha256: 2a2c4089f7b61739b825c34cd7ec927023fb43f40e6ec7e6156116edee55cfd9
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:46 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    43c59dba0ac2ae1b32d24d9a53fd520d
Sha1:   a3ab8f07ad5fb32629f6ef097e171d8a7cf254fd
Sha256: bbd5374e4d4571ac009dbd8d82d14bdac577de1d454713836d228df96e4a68d0
                                        
                                            GET /bootstrap/fonts/glyphicons-halflings-regular.woff HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.w3cdomain.com/bootstrap/css/bootstrap.css
Origin: http://paramourdespoupees.com.w3cdomain.com

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Tue, 13 Feb 2018 11:11:11 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Mon, 15 Feb 2016 07:12:32 GMT
Etag: "5b80-52bc9bd8b5800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 23138
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   23138
Md5:    132937b5980f263f6db262e054f53c2a
Sha1:   a18b87186c6caa33d84a2b745a183b0350e08c9e
Sha256: efb328f086e8f215765f1acccf43235c6465c0742bae51ff1ccabd124650b44c
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-BrXje6YteyrvcSvEoWVYWKOH_jGs5htqTPP51k6RsFHvB8PO5RE3_7H9OR3guQAXuSEd9S&dbm_d=AKAmf-Dbq8CuBMtqjoEWjmFOVSIui9ecALKLw1elP5jlD-66eg_C_ayCRlU34poPoYn_e6Ofpnr8BP_7BJLjz8UPqNhkWD8271zxHrMWTG_1uQFa3SqzCa2Q9gEaYOuwHqHX8fR1C_GaDsGnK3YMCm4F27R_zar3VtbTVSlJ_vc1xt7rvwsjQ1kwJl3_FOJiJP1NAla_tZgoYVGFP1W3_OFQznEtz6jkW_iMPF6fOX1hoW_VW80Rup0Q2LaOeXW5pv4xV5K8VxVdwJApJ9dr_Zj1nJ9C_W-o63QdPozY2s-8FTpansZ5v3aplvhlCxb6-UL7aEKsHAk0k7jS-GHsGO4Dil6PAxOPwL2plZsYO8AvzQVqPguxxOaccNWYrpOxLoZCvPeCWN3k4andtXWCHjkxrri_3JdqRN3TA_LY0N2pS3YPK6Nkp49F-EiNXtErOUqaMiR7YmI4vXZY_fEM5DZuEUMbYl_k01U6ja8KBjP0iIo8jsKD0GIMvRNIKtC-PPWRmAStDWbZjUhxOuzGMoaAVw0j2dMio8fZ_bL84IJQLF-lX-063pR-gBn8-lShjkxlCRy40ANyqlweMjnyR71nc4aBFX0JYjd6pPCxEzmCNek-qdIsHmoXZK0FoDXGALtO9ing8U0Bo4ddW5Bnhr4WXdWCWSJlMf4m2wwAgL3eLekSR8UWZqFZsK2CuneDNtEufLp3HaAExa0wUgqLbEXU1AboAXGZQQgPrmZQCYV2dMBUY7GJ2tSfjtVaFN5RlcqJexfw_gd3LkFbCoFM5Qc6OeyWLqtTFxUs3bth3aDz7ThClArfVbT3l4N-uiDHcjeybO2S7tU2vkLc_QmKK6pgLVq-390PUACXS6sK6yai4i61G51e3nHSnveoEeNL9K2AW2Um2EOHVFSnlvTQMIvB_NpH8k4zTev70bBJNoBDEqsNSdtCDueIdOQb494I-D4KNHoGV-97xTb-dVE_dLona0nte_xLvVVu7bdDw52F9uh-x2WNJr2FEgcmaRro1fr5moy1srwbuyUk5o11WqxPP-eaTY9I-zMluLqKk9m6wFtmu57qyd7zZRAiv-6vTzi8W2YI8G1j-iidOif7d7zQS8kPYYIdyoW3syBKWPOlX_avDtoYiIuOimPnykB2oBweq3UEOpyrljbfu94qWNsVy2Ur6OkPrZWAKN43ClkBq6xyJ9dPV_KG18VRfaYLUHYNpXIIj22ZFJA00gPtyDuzn2pWpe96l0zJ6LjdHB-Yr-QzjhHHAvNqmMo6chz0gc7eNQR4ZbrB0vpiye6wnTAz5fR5yQbjAjj4NCU3MVP6iIfNTgifwQItsk3b0EqJoXO1KXd4cDOZCKhA-jWuDOO4di8JlZZb5qqaYjSoZJ3J7qD83gG5lovWgrw41JdOZ23Od8LmW-LhBQF0nwKdSLLctJlV2ytYU38x7o1YcnxHeXeFWbB9UkNEeaYGXmYfZ1kaFV9X1NYWZW2i9-A4ZqSz_CEnvoQMw5t1uHydJd5y9xL9GvRk5xpA8dqvuWb44O6l-xc_I_qCqkBY28K3XvHCdIUaCkkVNsbq0v6X6J3AnrbuWtHzmkLcvKk235Gvntv1oYhEe33PQC--w0khY-fQLM1soQYYOjrQhBLlOeN4q_9Ov5dSV-NkVgV-VV_quCKuKApPxZPOH1pD-GG2xc6O25evWbV5RopwOESuUJ3AQvwelQyTXRJAR3yBL3RbyveQ8br7hqhjxbYAaB8jXHuiCu6_3WxyF8BHArlSVSF4dkL4R0bXmZM&cid=CAASBORonJc&rfl=2%2C%2Chttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:46 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUnkwiTuKLnSPntVsfFAWg72EDOGM4TMQCXu0GMN6uQoARBg4jUyhGVpLpY3; expires=Thu, 13-Feb-2020 11:10:46 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11075
Md5:    6ebd81df570bedd7f34854816ad34548
Sha1:   d0c2a31fb9edee13e3d590ebc6ba531aee44a999
Sha256: 830c69da9771977630f7d02ce90deda6ef79125d5e89285874cd5015a648a708
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-DVFamy0KeNxlxR8Q6iufQOffkkEBP49Xq_KMzYpjY17rXng_ppIeEo9l7Pbz1uratyAK6iZbbYilRHPz5UNSKMBzJLVGMisn0EYvCGvbne-XLFlps HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:46 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /xbbe/pixel?d=CJ8EENOUfBjBsPgsMAE&v=APEucNU7oRN2kinTC5AI64C1mhDJyDOLug4W7kaKWRM47GTDgZdbTTNH862w_IQi8DP_hDsaz_-T HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:46 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUmmdKktl_umz_XdN8Lo2SHKCGbYIW0cKswOHsqOlDv-xzfcXDy5P-7Rt8se; expires=Thu, 13-Feb-2020 11:10:46 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   214
Md5:    02247d909a831178bfbddac723940ebd
Sha1:   9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
                                        
                                            GET /css?family=Roboto:300&lang=en HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=60&slotname=1861849391&adk=3739162967&adf=807048394&w=595&fwrn=4&lmt=1518520243&loeid=368226210%2C38893312&rafmt=1&format=595x60&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1518520245557&bpp=30&fdt=35&idt=152&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=287&ady=200&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=187

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Date: Tue, 13 Feb 2018 11:10:46 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   190
Md5:    97f4e9a129cf977856d28e62071ec1d0
Sha1:   c414e7b9472d848b04a793cf0a35234d22fc3789
Sha256: 22466361177128a90d5eb6c49eaadb37e21c2aa15cf366042b09d71757c29479
                                        
                                            GET /pagead/images/nessie_icon_tiamat_black.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=60&slotname=1861849391&adk=3739162967&adf=807048394&w=595&fwrn=4&lmt=1518520243&loeid=368226210%2C38893312&rafmt=1&format=595x60&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1518520245557&bpp=30&fdt=35&idt=152&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=287&ady=200&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=187

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:33:44 GMT
Expires: Wed, 14 Feb 2018 09:33:44 GMT
Etag: 9737793026190189471
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 231
X-XSS-Protection: 1; mode=block
Age: 5822
Cache-Control: public, max-age=86400
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 26 x 42, 8-bit/color RGBA, non-interlaced
Size:   231
Md5:    3e18b7cc8a94a6dc5ae05d989e215d7f
Sha1:   64245169a8278b3446572ba9d09c10996d8fb3fa
Sha256: e3ed9fe6d7937eed1d598d79c1455f1bb8287cb9991778f73e07e5f4b690083b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:47 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d49329b6cf95ee35d707f7e0ab3f891e
Sha1:   bad43a85defedc6449b6bdaf779ee85d18278544
Sha256: 0580cfb371d0324bff4fc549e97d614659eade3215fc737e749308947ad948be
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-BCeWlo54bASiCb_HVg9nKDr1jE0Q7zRPizUWqs59dpl55D7XDjtlXI1Fz0pICpzZbxrwlK&dbm_d=AKAmf-DQDR5gA2QauanCAzYapvT51XmqoEZGH05Aw5c20hFLuNnFVcOBRNs8UE-_yeBuo8fgucpbDkoEC_RExSaoxeAMxIsXeSm7q3ncqpZJBbW3WxuqR-Fd8JFtgOIoNEm0jR5xclTrCjDY4tZCIIP9y1wuR2GPbJSKtkAGEArM__A3CxtiWVyoM_Ho2aX29_01HbbuFaXR_H6LmBkDfiTH5oSTBO9tpeQKkZb6inxsZMVnXXcvXz4cGWxGOv6ihoMvux3-ratlsDRlocNLVPOxZhkT3cwrAi-7-xRMrMr4Iy_St3-VYON4YoifWy6iZ5dGxcQ5ep30UCWGRRXtMAW_mVREcbDhUYRT5HoT_0coxnuqJJg30EdEYIYrcZuxOoRjwkwP8WhQxKnOsCa8Sh3_a76VpGtb4juihc606rjiOwuEuFFCKJst4zz55TO3FRKDYtmZKPUPRc3b5ulk113sRC2SJxJ1qpuY-nVwea4_-X_8mWXvuOiOQXcbIjF70q7Sqm5GSRxvX7sIWSdSas2zqNmh6INo0k68oanUQmcL3q0wjnQbuOTvkVuekDF_GYhFbymjFtHiuzNLzqY_M1_lpgU50orTAMnQUY8EWhL5zAs4ufTTg-_45XgLFTihbOS_YOS6hMU_n4CinTYzCXY7YvaOTjX6guvzlpdLCP549hVi2GZyqpdnweY2lYi7Lwq3KJ3i5SdX65YgGJknA3-lBidjX-r9fXDviCBhochwLq6SI1qw8Bh5YV-1uWU0bg8jEUXCDbFAbduGInCVAA5-Jo9zBvzHfMgmiRHI0WBtVRDf9SlrZXcN_qQpYrWDGrmaNmXrqM6-0ntB9ygQP32QwCv-7o_I2j8qv-vOUey3fZSpOoip-frpvh3bzBKxqVdHSihAt2V6swsn-Hitp27lblENbYDS_b6IFGJsDrn8H7idDycDlhXkfRPh3FBkRPZSpymnVmlFdaj_d71AFuvTIC09N-OvRqu_beVesZfjamwBOTxxP76WJk2IQxaXZcbW-Rr-LlaiLg7s-qlLFm02cfmgShh-GLrVMkVnED-ZVRgPTIFoHsL2-atjp8jFEb3zV57fYP-9zT7xNJ-1ibhX9N9JBxMfy8g0lbEZsustef69eNC4PMvnkMpcWlE_wLDGnR-J-ljHUhXiVu2q5ngwM51Z9Ef1oLRk4xgayE-veXYydOj7SmGqPO3NfQmrR1elZ10cjrCzoqeSBR2r1vxkr7i0njS-CdVW7HXonUW5RBDl592kPzZF1CD2CL1tcOUMfo91Bu5NR18aPG5JGe1eKrgArYwITxgte8utM8qWi-xdPk5t87jPgk7OR4Hvj8bikgujNwAGnzE0igvFiAFLYVlAJbMV3NAzLqCxTDiO-8DY9BPUNndyAEUduRRh_NEQilkYWhQ9euxYZX3TDTdZ1BlRhJ_W0IArmyLPcXTxMhw6kxXS3o4HOK5WFo9_wAMHQhm4p-N8VGn3C8P4syAOqtJ315O9Y9g4-bF-krf2-ISDF9bvFRQrdInJwx0kpzerUrZ_ng1hRaiubD1rkUBJZBoZIZw88b2AX6Sxhz5IGtTPNvo3fhN5Gtwc6crItd0TgreR1g84gSvXiz58eDFcx1x6b2y8vBlIBxUCCVmKJMMTcazuLe68p2TABnaA7yfla48nfXqtGnyUunZjtYQTPAqDlaSgv9rcdN1vMtZBAACNTp8Qikm-vOfBeud8Vy1v3KK_g_v-V_CwiSEgfszdSHCxVufrEdSuFDW1g5OVsUwU5C48nTo&cid=CAASBORokvA&rfl=2%2C%2Chttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:46 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmVpW6GS6XLG5BlSOapYlrPFPz7s3cgVBLWcDxPdTDkR-Wp6MRw-6-egTmx; expires=Thu, 13-Feb-2020 11:10:46 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8082
Md5:    d44371283b90d6e0e68d19929e0f945a
Sha1:   bdc2ee49773b643d8f94b495d42c5060d2bf0050
Sha256: 7a3e66411e710ea06635576e1426748e91ab48d4c1d8b34d8a8f7f0d428b82c8
                                        
                                            GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWiYmO8a3eH0pFPztVuZL2fvRh2VMIzZlV-rtgpf97YZrkNCarrXGn-Zxz4rjWJhXpF6YrY HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:46 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUmdLYCkkgzuxzdVF_3Waw9gQW8c_kgJ-Ft9re33wJ6ghLS_7rNR4Sl1rJBj; expires=Thu, 13-Feb-2020 11:10:46 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   214
Md5:    02247d909a831178bfbddac723940ebd
Sha1:   9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:47 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    5289678502e45b7c84be54d657cdce16
Sha1:   9c1f771b0c06ede1e2b84feb75acaaca2f6f1cd7
Sha256: 0b9ad5e4279e597f5255824f6f1d67c6fc391498c4c75eda2c634a66d222f463
                                        
                                            GET /8405476/priceline_160x600.jpg HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 49027
Date: Tue, 13 Feb 2018 10:55:22 GMT
Expires: Wed, 14 Feb 2018 10:55:22 GMT
Last-Modified: Tue, 13 Feb 2018 08:54:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 925
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data
Size:   49027
Md5:    672d02c52593f30011886fc325cd6d43
Sha1:   addb929dca6638df017628fe9fc876776fd8cf4c
Sha256: 8c7279d1adf9212b1f4abe84b05f297da466d43888808e57f80d0c55ee7a2b49
                                        
                                            GET /pcs/view?xai=AKAOjssDEwAMWlcWDc4kUi_nr1NaAyGRpLJSjoOGb_4OVJp9dVLq3QHi-zKXyUKMowHiSsjfLLWodhcgfSOwgoOXuQcgEMntqEb8VosLKBu605EnV_XLdqtUdWL9CuOzQK-IY4mCRHHdlVwcitxwtnpcZFF7wYNWPRGt9aJf55K_pRG_NF7NU1EyqsITOl_lBsD8muxZVEP3T_tnPfykSMTtSSzcVgELKVu6HoeofB8WRHsrm4ERbRjK6idLx9RWjdZL2ej44JliYWo95RIlZDUMDOI0zyR_NrzZDfcSeVzxZGNgxLHiaGBbHgS48a1bPEvQZ0Lq-rWcucZcwU8wtil0ppsAtan_Di09hQVDN3DH9k4YTYSgRqa2T8FJj1dUKXXuZ4FmBT3cznnSfM6Th2n2J7bXkAHb2iYYMGZEUtx13D2zzAFlIFZe-kjR8o1qrEwU4AnQUmv_svta7VwuM90YT7KR8ALg2T0P7ApotU4GgVeV2oQ2APFv9t0bTAshifLVAjjM66LnbfdYPs2pmB73FpQp1s8EJQNCklDdjsw5273vG6IoZtmdMK-Stf0Fx-dDuIQWI_yNnlp85a-_Rcayi-47NcpYGzw14mHPCNZpzByS8ydddL0yKQk9LQYF6jaOd9RJVK807_YeEb_EHyOMt4vWTbhJYJflHeXnV3hJCfvVbVYP9PTPNIUsU2F5cNEdptOxTC19oC1z8Sm52f3KJum1xGde44EFCHs6Q04ar5Rt9d5bjAzYZv-js8sI_9l52rak1HTk-dJgecT_Pn1Qi5ZW0-llhrmK9EVxyJ7BqRbnnGup3EDVwhXRJULUU9vICtz25um1vVqjxOG4XWdRAGErwywokZQMF8RGhUkpSEmpCnmWU6qnkeA-1XVuRi4iytsjkXpG&sai=AMfl-YR63Q_MBmEv-YMexOB4_ieVUUeKC9JhtiObyoBOqoZFhdR81BF1U6H1xgF3hNmQhDNDpidltzyy1xVkBipj0uzL0m7ZRQKS&sig=Cg0ArKJSzALYYo0FeZxoEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446
Cookie: IDE=AHWqTUnkwiTuKLnSPntVsfFAWg72EDOGM4TMQCXu0GMN6uQoARBg4jUyhGVpLpY3

                                         
                                         216.58.207.194
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:47 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 11:10:47 GMT
Etag: "5a827c8d-1d7"
Expires: Thu, 15 Feb 2018 11:10:47 GMT
Last-Modified: Tue, 13 Feb 2018 05:50:05 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bc4bbf33d4b48791256b284353802c7f
Sha1:   d3d1bc4bd77a719ea1ba38b08435d3acfd89bd34
Sha256: 4f0214c8831d6e02f3d3d3a1b5775c9b87c0cd0c9ac0d9890fba5e7811f1c0f1
                                        
                                            GET /script/gvChart/corechart.js HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 11:11:11 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 17 Feb 2016 06:05:26 GMT
Etag: "63673-52bf109423580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   152073
Md5:    dd4bf20794e7d8cf6dc6a2e670af5296
Sha1:   8a6a805d1da9886906fb8d254100407f9654c65f
Sha256: b2c05682327077303e817f8e59500b96f46c81715a469147f17975ae92a5e66b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 11:10:47 GMT
Etag: "5a827c95-1d7"
Expires: Thu, 15 Feb 2018 11:10:47 GMT
Last-Modified: Tue, 13 Feb 2018 05:50:13 GMT
Server: ECS (arn/467B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bdd676092b32d438cdb3958993ee99de
Sha1:   f8f6992c4867e6f721a4e8776321b1c5d590c17c
Sha256: 6c57d66bbd3413d976bd02ca92c9434b6c259a91a153fddbc476a44a468a1888
                                        
                                            GET /sodar/V6zvOIoD.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15146
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 75951
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15146
Md5:    6a56e1d1c9c0c105245cbce244c876f3
Sha1:   6613490ab3735f37499d311c6efba3f689ec4abb
Sha256: ad20ef401ac229a0ab07b057ed9350c85816118a662c7cfa240fa5cd86c718f0
                                        
                                            GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 04:54:07 GMT
Expires: Thu, 22 Feb 2018 04:54:07 GMT
Etag: 1003077525306946769
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21796
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 454600
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21796
Md5:    9c7168207979b5f6ab6777d97a8a0963
Sha1:   9cf64cc271ecf30cfd8043002730eae9b47c2bf8
Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
                                        
                                            GET /script/gvChart/jquery.gvChart-1.0.1.min.js HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 11:11:12 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 17 Feb 2016 06:05:26 GMT
Etag: "83b-52bf109423580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 977
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   977
Md5:    b523dcc82cd543071dddca26a8db8cdd
Sha1:   15ad06a529e96bb67417bcf93411e8657c163c1b
Sha256: bb63dd5668d151db3d734555757ecce26c2a7b3dc8048e048b29a11a7998b39b
                                        
                                            GET /sodar/6uQTKQJz.html HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7233
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 75951
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7233
Md5:    30bf1c51eb9c0ba258ea2df31d24bc98
Sha1:   d13abffacc94ee31dfd5a094bfa975cca8e4d292
Sha256: 25a3afe99572ebbe3af74f504252d7fe97ebd580d47f5b734c286cc40a82131e
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJ8EENOUfBjBsPgsMAE&v=APEucNU7oRN2kinTC5AI64C1mhDJyDOLug4W7kaKWRM47GTDgZdbTTNH862w_IQi8DP_hDsaz_-T
Cookie: IDE=AHWqTUmmdKktl_umz_XdN8Lo2SHKCGbYIW0cKswOHsqOlDv-xzfcXDy5P-7Rt8se

                                         
                                         216.58.207.194
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESENtAm-4sLPM0RD1KqVoxzFA&google_cver=1
Date: Tue, 13 Feb 2018 11:10:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   290
Md5:    f154b6758169aeb500d0f8bed6100b56
Sha1:   f3e612069caf7f1a3ecc1c7d6239e4635e73ea06
Sha256: 37f22c2021c6ccaf74b3e8f78742aadd68b9f20816333fe611b982c5bdebccf4
                                        
                                            GET /script/gvChart/jquery.ba-resize.min.js HTTP/1.1 
Host: www.w3cdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         69.30.245.206
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 11:11:12 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 17 Feb 2016 06:05:26 GMT
Etag: "451-52bf109423580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Content-Length: 617
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   617
Md5:    dd1ec39ec789adecd298a281e75532f5
Sha1:   62e2047d2a0df176ed66eaefb9358ffcf3641f5b
Sha256: ec9b2ec69810b73174f9fc9efae6e6b5af6a9d667863594732eab7008dbf4aa1
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:48 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=d1b530701877a86b8f277fe751a84e6ef1518520248; expires=Wed, 13-Feb-19 11:10:48 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Tue, 13 Feb 2018 08:31:54 GMT
Expires: Sat, 17 Feb 2018 08:31:54 GMT
Etag: "696a2de404403db027238fecbb3b4a4fafd880b6"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 3ec757df708c42af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    62e6a35cfcc71b5d733e3c2df61b1f41
Sha1:   696a2de404403db027238fecbb3b4a4fafd880b6
Sha256: faf3017f0d9fe4c4cb84d9a9e7c5765f3bd567831dedcedc9116071b716c4d32
                                        
                                            GET /bg/IOA8y9bJh23yzX_Xx1Lzdpvil-FmhhSrkRF2am8kUAc.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4991
Date: Tue, 06 Feb 2018 02:17:32 GMT
Expires: Wed, 06 Feb 2019 02:17:32 GMT
Last-Modified: Mon, 05 Feb 2018 09:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 636795
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4991
Md5:    35c97f406c207e558268924a05d5cfb0
Sha1:   410bd15d5b2dbffb516605c9d5a2a52d8d8d6eed
Sha256: 536f40cf7ac29a53a42ac183eefd062e0228e22f034f8ad2e8f1ffaaa771f5ed
                                        
                                            GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJ8EENOUfBjBsPgsMAE&v=APEucNU7oRN2kinTC5AI64C1mhDJyDOLug4W7kaKWRM47GTDgZdbTTNH862w_IQi8DP_hDsaz_-T

                                         
                                         217.12.15.83
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 11:10:47 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=3gt36ghd85htn&b=3&s=ha; expires=Wed, 13-Feb-2019 11:10:47 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=tGP6zYA1TgqPWp1VMwcckEqr
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=Ce7GstseCWqykHJSRYYm5krALiImhrFC_1ozrkAPAjbcBEAEgyoScH2DD3KSFmBigAZnbq9cDyAEBqAMByAPLBKoEuQFP0NbKHu1sF-GdUomq0HksKebq-LsvbFk9JmmmRaaKXqDeI_EtIHwAfuFS37w0-Ko1Pe7xLLXkDg9S8HREAUkXwg3E424aAU8b4YT59aX6cZFaDQ_ABMfpEghV0c5mxGZmqG-A3xNAIc_Wq7sSDLBn5sfqa2L9L9jGgTapZZqXJRNwFRTXa5dSBUYeD7-GLVoU8oMoZ_-nRfLEg-dWXf08gwf0_w0erdvkrP7pFNonLIh1cG23YCDO7MAEx72S4SGSBQQIBBgBkgUECAUYBIAHz6TUKKgHpr4b2AcB8gcEEPaOBNIIBwiAYRABGAKACgHYEww&sigh=Mu6kYP3SnOk&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=60&slotname=1861849391&adk=3739162967&adf=807048394&w=595&fwrn=4&lmt=1518520243&loeid=368226210%2C38893312&rafmt=1&format=595x60&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1518520245557&bpp=30&fdt=35&idt=152&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=287&ady=200&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=187
Cookie: IDE=AHWqTUmmdKktl_umz_XdN8Lo2SHKCGbYIW0cKswOHsqOlDv-xzfcXDy5P-7Rt8se

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:47 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 19:26:03 GMT
Expires: Mon, 26 Feb 2018 19:26:03 GMT
Etag: 18254379283724408787
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3642
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 56684
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3642
Md5:    24d24f1211524aff604a7a982bfb33ed
Sha1:   15c0f03407eb77a3da6a7476c6ffb4b8993eaefb
Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
                                        
                                            GET /w/impix.cgi?sid=97975&rand=1518520246470501&mid=2278866&cid=11043029&tp=12&m=10 HTTP/1.1 
Host: secure-media.msg.dotomi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         63.215.202.75
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 13 Feb 2018 11:10:48 GMT
Server: Apache/2.2.31 (Unix) mod_apreq2-20090110/2.8.0
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Content-Length: 43
Set-Cookie: DotomiUser=121333740012585542$3$42; domain=.dotomi.com; path=/; expires=Sun, 10-Mar-2019 11:10:48 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID DEVo TAIo PSAo HISo OTPo OUR DELo BUS COM NAV INT DSP COR"
Keep-Alive: timeout=5, max=99909
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:48 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b015fbc365fe3cce393b24bd23b77ee2
Sha1:   8e492cd749cd053db6e0053a5391231cb7f45ff5
Sha256: ac7228a68968cb091d78fcea2e0873fde2505cff554825d8760e8d7bce6072fe
                                        
                                            GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=BpHxltseCWu6DK46fYbmdgsACAAAAADgB4AQC&bg=!z8ylzNREg51pLpIPQKMCAAAAr1IAAAAUCgAGExtfZZ7tmQEjvQiHOriaIHVhjfBNYjRZ2awfWWVgZJZ4VB41UcxLskB1neXIEuieo1vll22xNgVphu8xV30FjnhNbVKLV36Xv-CPkm_odq0qh8-M021tNfGeZ5tL39phfpKv-E99HuBP-lcTH8P94X_e59V_IEbfglcGIJT9GIGr7EMrcB7C2MDqlYE0pOluqWH1q7dLQL12SvrVEM4hyI5wdryjHlolmn_ht0Lsv0QkKKW7ua_QiwzmKiIZ_IfLxHAlGxCXlscriH___dupmZlGtRF-vfc2t1dh0A0R2xrJUFCPyK5UBYrrH3eXm5mWU00-9wOJ7XGSRSZNoxC3mTA3E3XK-IKPgPx8LAJHWTpBRemmgmJkCrJHjfN2-ENWpqw5lWrhTzyilgSW HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:48 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWiYmO8a3eH0pFPztVuZL2fvRh2VMIzZlV-rtgpf97YZrkNCarrXGn-Zxz4rjWJhXpF6YrY
Cookie: IDE=AHWqTUmdLYCkkgzuxzdVF_3Waw9gQW8c_kgJ-Ft9re33wJ6ghLS_7rNR4Sl1rJBj

                                         
                                         216.58.207.194
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESEDHzS6DWd5K9HJzMMYJImWs&google_cver=1
Date: Tue, 13 Feb 2018 11:10:48 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   290
Md5:    d4c096e3ef6a6ec5a9465102a906d5c5
Sha1:   3e1b616935cd2b8d8f400b8cad36a42869183b5b
Sha256: d314d343909df90a9d7f460c03cc421a08ebcff63ab13cb30cd3b6237fe8b6b2
                                        
                                            GET /pagead/js/lidar.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 10:53:37 GMT
Expires: Tue, 13 Feb 2018 11:53:37 GMT
Etag: 6831844447556634063
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 34299
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1031
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   34299
Md5:    4af480d154ceb9d4226b2a21f80b6b9e
Sha1:   514b804d0a119a0063bfc1d9e20f7b7c7004d80c
Sha256: e45497d04a8eb2999ade55e5f45265811efc3e5ab7eaf6929db863b133d6f181
                                        
                                            GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=Bx8Bkt8eCWuEaxppilfaGwAoAAAAAOAHgBAI&bg=!oKOlo7tE5q9xVUmR-6ECAAABC1IAAAAUCgAGZEkPR5SOmQEjFijj7pIeZRi3qQuXJ6tytleCPfdYklKMV5FiCk677PcANftVypKmnXdsBajEZJK4i4KpZJOjIxs9DOhKor9QQlmc4KjP-mj-ljKGV8Bx9tdFnCamd7IhIRZ0aOjP1NhyeFv2S1HQ9M24P38qoqC6U-qZM-l-m4UBLfKdafZTsvo1ZO570MfkI30QnhpsKsF7VOCCK_sNpIIS17c-v5yJj0xR8IOYPDNt0zS1nJpH7W5vQetV_a6a9MNaKsq5icyqZVeVV_lFuy3jgcro0F6m8roQNE8bYlJyEfftMWGlPjACGHRXStCJdF1_f_JSmWrlEkIL_TVlGpcsM7cLMPgEGq5SGMvzzRuL1o-3vcVfFLAPt_PEMNuwU3XjxpGMBt3XwD1j HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/adview?ai=CkMnPtseCWo3OCI64YM2kmsAH5ZPdtVDQ5NrOzAXPt77PiAoQASDKhJwfYMPcpIWYGKABqsunvgPIAQKpAj7ez1qq-oA-qAMByAPJBKoEuwFP0OYXhw3rzHnw-rPbty2Uzq3H0Yt6n9Q6EHHDNHjH7aBQ4GayZkkl00u08pND9uA2DVe5lHZ0tVOe7hDkejJOVIcJGwsmqK6-VvPOo1KuJtJFU8pFg7Ffo8ondFbcNzScqJF_YTn4x7fEjJpt-ok8bem-K8zbSrA1FPK04FnLq7AcS-uhE5Y0tU89FzWXO50n2RSssgWGdZTjMZGKtpJcwnNO3nhjeQGoiu8Ho837ioEUQkWHrsnOHABUwASr276HqgGSBQQIBBgBkgUECAUYBKAGAoAHvrTYQagHpr4b2AcB8gcEEMn5BNIIBwiAYRABGAKACgHYEwI&sigh=lcn6cc5xrzY&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:46 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUkbLuxv8k8pM9aMtD5X7xl86S9h9yrQn6xRfVILXEOS-wCgpdXycfhqGJJv; expires=Thu, 13-Feb-2020 11:10:46 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:46 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmSU5fBBc-.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Roboto:300&lang=en
Origin: https://googleads.g.doubleclick.net

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19916
Date: Mon, 12 Feb 2018 18:19:29 GMT
Expires: Tue, 12 Feb 2019 18:19:29 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 60680
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   19916
Md5:    a1471d1d6431c893582a5f6a250db3f9
Sha1:   ff5673d89e6c2893d24c87bc9786c632290e150e
Sha256: 3ab30e780c8b0bcc4998b838a5b30c3bfe28edead312906dc3c12271fae0699a
                                        
                                            GET /pagead/ads?client=ca-pub-2612317953771423&output=html&adk=1812271804&adf=807048394&lmt=1518520243&loeid=368226210%2C38893312&plat=1%3A1085448%2C2%3A1085448%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C25%3A32768%2C26%3A32768&format=0x0&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&pra=5&wgl=0&adsid=NT&dt=1518520245838&bpp=2430&fdt=2433&idt=2519&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250%2C160x600&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=6&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cr%7C&abl=CS&ppjl=u&fu=16&bc=1&ifi=4&dtd=2541 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/
Cookie: IDE=AHWqTUmdLYCkkgzuxzdVF_3Waw9gQW8c_kgJ-Ft9re33wJ6ghLS_7rNR4Sl1rJBj

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 11:10:49 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   64
Md5:    0781e865abae44cf8b10dc725d63f539
Sha1:   c9f5024f2a546880e819749c32e23830fef111cb
Sha256: 24a7e2c0a5b68aec6126a39465b792b761aab892d7060d78fbab1e14a4cf3363
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1034
Content-Transfer-Encoding: binary
Cache-Control: max-age=361039, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 15:25:41 GMT
Expires: Sat, 17 Feb 2018 15:25:41 GMT
Date: Tue, 13 Feb 2018 11:10:49 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1034
Md5:    baf34d986c00b66407375ac23eec7499
Sha1:   4451f614115ab7a166b37973aafa4dcae9e2a93f
Sha256: ac2f7c04a4378ed2d8a2a21de045d89445cf8eab3c7bf989ea332c181f7c56b2
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-Btf4Apm7WMteSYsgekxx26Wtx7wK5XlKP7IZpwDkr19MhVxX_YJsrYmPVEjf923c2th8vksmBZ6vCVrx5-qUjm1Q14zEpdpj2q1zvLAxXoqgUwmnI HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:28:22 GMT
Expires: Tue, 13 Feb 2018 11:28:22 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Cache-Control: public, max-age=7200
Age: 6147
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /dcm/dcmads.js HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1391
Date: Tue, 13 Feb 2018 10:56:30 GMT
Expires: Tue, 13 Feb 2018 11:56:30 GMT
Last-Modified: Fri, 06 Oct 2017 16:32:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 859
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1391
Md5:    2cec847621d20ac6ebaa8b4f1d4af929
Sha1:   dc295b4bcf09900bf21fb7134fda5d3d8cfbc85a
Sha256: d8e7f1c63e39a8b3bf433743e693b65c391dba95122fdcd378d93a66c5c23530
                                        
                                            GET /setuid?entity=101&code=CAESENtAm-4sLPM0RD1KqVoxzFA&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJ8EENOUfBjBsPgsMAE&v=APEucNU7oRN2kinTC5AI64C1mhDJyDOLug4W7kaKWRM47GTDgZdbTTNH862w_IQi8DP_hDsaz_-T

                                         
                                         185.33.223.215
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Tue, 13 Feb 2018 11:10:51 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 8933d028-a45e-441f-9aed-0ead4627a9ea
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2IljmV#%U!]tbPB*SPcQwTQLTYe%/_dQ@C])cbs^0*D%>St[:SKkkZD=DyMU*.Tfrk+[+]>gv>23$)#%nug>5XUXR; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 11:10:51 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 11:10:51 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.27:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 17:32:19 GMT
Expires: Mon, 26 Feb 2018 17:32:19 GMT
Etag: 1003077525306946769
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21796
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 63510
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21796
Md5:    9c7168207979b5f6ab6777d97a8a0963
Sha1:   9cf64cc271ecf30cfd8043002730eae9b47c2bf8
Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:49 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 17:56:39 GMT
Expires: Mon, 19 Feb 2018 17:56:39 GMT
Etag: 6E1390A0BD1EA29D9D3CAFC2B28D81858CED524B
Cache-Control: max-age=542149,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 278
Connection: close


--- Additional Info ---
Magic:  data
Size:   278
Md5:    c9d0f8a0c103fd3f76a3231d292019e3
Sha1:   6e1390a0bd1ea29d9d3cafc2b28d81858ced524b
Sha256: c2561fc07b4706316266d5a4d9b40e09479226c56d94d7fc92effeb96bf25de1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 11:10:50 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: 8E242477BF0882B1319BC4C53887CEDD2AF131E2
Cache-Control: max-age=519002,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp15
Content-Length: 313
Connection: close


--- Additional Info ---
Magic:  data
Size:   313
Md5:    f5c0f9572b3e8f64a0cbc1a07f453401
Sha1:   8e242477bf0882b1319bc4c53887cedd2af131e2
Sha256: 32ad01098f31aba2f0060dc68180378325772eea6370174e99e0d1f6131978f4
                                        
                                            GET /dcm/impl_v41.js HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9137
Date: Tue, 06 Feb 2018 06:15:50 GMT
Expires: Wed, 06 Feb 2019 06:15:50 GMT
Last-Modified: Tue, 03 Oct 2017 18:46:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 622499
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9137
Md5:    89ee08c5e2745ea7a075d413155a4ec9
Sha1:   3e1eb7d15bbfeb920d37418707378c8029bc727c
Sha256: 94ae9e135806f8076e0e0d6822e688f11398358de657ef0f6a9c0bbb074a1260
                                        
                                            GET /activeview?avi=BxdFjtseCWqykHJSRYYm5krALAL_WjOuQAwAAEAE4AcgBAcgDywTSCAUIgGEQAcITBhiZ26vXAw&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=60&slotname=1861849391&adk=3739162967&adf=807048394&w=595&fwrn=4&lmt=1518520243&loeid=368226210%2C38893312&rafmt=1&format=595x60&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&adsid=NT&dt=1518520245557&bpp=30&fdt=35&idt=152&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=287&ady=200&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=187

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:50 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /r/collect?v=1&_v=j66&a=1757523518&t=pageview&_s=1&dl=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ul=en-us&de=UTF-8&dt=paramourdespoupees.com%20-%20PAR%20AMOUR%20DES%20POUPEES%20%3A%3A%20Bienvenue%20dans%20le%20Monde%20enchant%C3%A9%20des%20Poup%C3%A9es%20%3A%20ce%20forum%20a%20pour%20vocation%20d%27offrir%20aux%20amoureuses%20et%20amoureux%20des%20poup%C3%A9es%20de%20toutes%20%C3%A9poques%2C%20de%20toutes%20marqu&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAEQ~&jid=2128023506&gjid=1605140883&cid=1373778678.1518520245&tid=UA-71796347-6&_gid=618802392.1518520250&_r=1&z=621795602 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /simgad/5403688902488474100 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 58526
Date: Mon, 12 Feb 2018 17:17:56 GMT
Expires: Tue, 12 Feb 2019 17:17:56 GMT
Last-Modified: Fri, 08 Sep 2017 09:47:30 GMT
X-Content-Type-Options: nosniff
x-dns-prefetch-control: off
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 64373
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   58526
Md5:    d7af75b0fa86f855cb7e65230e42ce8b
Sha1:   8f16cde297a56dcc74dbb46cfc0897cd8caf7d0d
Sha256: 6050ad06670b6de24e4036441331f83bb65d26da661f041f9d5005c7cca0ae41
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315
Cookie: IDE=AHWqTUkbLuxv8k8pM9aMtD5X7xl86S9h9yrQn6xRfVILXEOS-wCgpdXycfhqGJJv

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 10:53:32 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1038
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            GET /maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paramourdespoupees.com.w3cdomain.com/

                                         
                                         172.217.21.132
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 11:10:49 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Vary: Accept-Language
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: mafe
X-XSS-Protection: 1; mode=block
Set-Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h; expires=Wed, 15-Aug-2018 11:10:49 GMT; path=/; domain=.google.com; HttpOnly
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   509
Md5:    5be2dc54057b8c677f72d66592ee2b17
Sha1:   197894f88662572ca91e3502643a4fb6585e40f1
Sha256: 5866fc42133e485047e4aed43312a884d292bc190d6d5810faec5c29237f9fdf
                                        
                                            GET /c/NDj2.js HTTP/1.1 
Host: cdn.minescripts.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         104.18.46.158
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 11:10:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=df28127c80b1b64323fc489a5d7ab297a1518520250; expires=Wed, 13-Feb-19 11:10:50 GMT; path=/; domain=.minescripts.info; HttpOnly
Last-Modified: Tue, 13 Feb 2018 08:47:22 GMT
Etag: W/"5a82a61a-26a1a"
Expires: Tue, 13 Feb 2018 15:10:50 GMT
Cache-Control: public, max-age=14400
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 3ec757ec88c1427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   39531
Md5:    1c9c37ee94ec3e1c6d5f4714d1360779
Sha1:   a1570f3c3ee93136527182865f70fd8c9fbca2a4
Sha256: 410d40e0587fd552a61e4870c7cfc56382e5b76b0ce9ef5b9afdb5e157246c11

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /activeview?avi=Bn86VtseCWo3OCI64YM2kmsAHANDk2s7MBQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhiqy6e-Aw&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=4621556595&adk=250578660&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520244081&bpp=122&fdt=128&idt=389&shv=r20180207&cbv=r20170110&saldr=aa&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=101&ady=94&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1315

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:50 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /xbbe/match?xid=tGP6zYA1TgqPWp1VMwcckEqr HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJ8EENOUfBjBsPgsMAE&v=APEucNU7oRN2kinTC5AI64C1mhDJyDOLug4W7kaKWRM47GTDgZdbTTNH862w_IQi8DP_hDsaz_-T
Cookie: IDE=AHWqTUmdLYCkkgzuxzdVF_3Waw9gQW8c_kgJ-Ft9re33wJ6ghLS_7rNR4Sl1rJBj

                                         
                                         172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:50 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pcs/activeview?xai=AKAOjsuwNQobLTQPxqzkwaUp2i3COw7WHII4a-wcVi00oQKIzNKcG7btBdTyzEVSiwuohy2HqiirfFyvKcnqTedY&sig=Cg0ArKJSzBHBOorkkSQoEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&opac=1&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=1572&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2612317953771423%26output%3Dhtml%26h%3D600%26slotname%3D1528489394%26adk%3D60347125%26adf%3D807048394%26w%3D160%26lmt%3D1518520243%26loeid%3D368226210%252C38893312%26format%3D160x600%26url%3Dhttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1518520245838%26bpp%3D28%26fdt%3D296%26idt%3D404%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D160x600%252C595x60%252C300x250%26correlator%3D8279629434588%26frm%3D20%26ga_vid%3D1373778678.1518520245%26ga_sid%3D1518520245%26ga_hid%3D1757523518%26ga_fc%3D0%26pv%3D1%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D903%26ady%3D94%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D368226200%252C38893302%252C21061122%252C191880502%252C20040065%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D784%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257C%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D16%26bc%3D1%26ifi%3D4%26dtd%3D446&referrer=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2612317953771423%26output%3Dhtml%26h%3D600%26slotname%3D1528489394%26adk%3D60347125%26adf%3D807048394%26w%3D160%26lmt%3D1518520243%26loeid%3D368226210%252C38893312%26format%3D160x600%26url%3Dhttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%26ea%3D0%26flash%3D10.0.45%26w HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:50 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /activeview?avi=BTHbqtseCWvKSHMWqYZuksogOANDswNnJBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB&cid=CAASBORonJc&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=600&slotname=1528489394&adk=60347125&adf=807048394&w=160&lmt=1518520243&loeid=368226210%2C38893312&format=160x600&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518520245838&bpp=28&fdt=296&idt=404&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60%2C300x250&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=903&ady=94&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=446

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:50 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h

                                         
                                         172.217.21.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:50 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /maps-api-v3/embed/js/31/8a/init_embed.js HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 60724
Date: Mon, 12 Feb 2018 17:31:49 GMT
Expires: Tue, 12 Feb 2019 17:31:49 GMT
Last-Modified: Tue, 30 Jan 2018 06:54:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 63541
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   60724
Md5:    a2a470d3125ee3b7603430f8d223dce5
Sha1:   03471a9b46c80043fc0535034c3e255736edf115
Sha256: 61d3a97f03e73aa8d5e9382953702750816e5f2ef2e4a68c6418645090eb2f11
                                        
                                            GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 11:09:18 GMT
Expires: Tue, 13 Feb 2018 11:39:18 GMT
Content-Encoding: gzip
Server: mafe
Content-Length: 28593
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=1800
Age: 92
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28593
Md5:    e6397abe5afc6027318ebf627fb89667
Sha1:   980ef71e640f9ef8ad9c4f4b61527b68b0076604
Sha256: 1efd460e48fecfa2ddca0227d7e24b2a9f466373dca2c081df76cadf7c0566e8
                                        
                                            GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWiYmO8a3eH0pFPztVuZL2fvRh2VMIzZlV-rtgpf97YZrkNCarrXGn-Zxz4rjWJhXpF6YrY

                                         
                                         217.12.15.83
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 11:10:50 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=cer4tkpd85htq&b=3&s=62; expires=Wed, 13-Feb-2019 11:10:50 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=CcOiQfZlTAwQqXaSD42R5KzT
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"


--- Additional Info ---
                                        
                                            GET /setuid?entity=101&code=CAESEDHzS6DWd5K9HJzMMYJImWs&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWiYmO8a3eH0pFPztVuZL2fvRh2VMIzZlV-rtgpf97YZrkNCarrXGn-Zxz4rjWJhXpF6YrY

                                         
                                         185.33.223.215
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Tue, 13 Feb 2018 11:10:52 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 5a29ad2e-5407-44b9-8c7e-123563a67870
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2Il`mV#%U!]tbPB*SPcQwTQLTYe%/_dQ@C]/FNN^fN12QU.*bPOFgIHpwd7HOwK'X+W11]>gv>23$)#%nug>52o<E; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 11:10:52 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 11:10:52 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 315.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.73:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUkbLuxv8k8pM9aMtD5X7xl86S9h9yrQn6xRfVILXEOS-wCgpdXycfhqGJJv

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:51 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Tue, 13-Feb-2018 12:10:51 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:51 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h

                                         
                                         172.217.21.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:51 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /xbbe/match?xid=CcOiQfZlTAwQqXaSD42R5KzT HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNWiYmO8a3eH0pFPztVuZL2fvRh2VMIzZlV-rtgpf97YZrkNCarrXGn-Zxz4rjWJhXpF6YrY
Cookie: IDE=AHWqTUkbLuxv8k8pM9aMtD5X7xl86S9h9yrQn6xRfVILXEOS-wCgpdXycfhqGJJv

                                         
                                         172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:51 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /ddm/adj/N415003.280211CONVERSANTMEDIA/B20653325.213008569;dc_ver=41.108;sz=300x250;dc_adk=837489143;ord=yu079m;click=https%3A%2F%2Fsecure-media.msg.dotomi.com%2Fw%2Fclick.here%3Fsid%3D97975%26cid%3D11043029%26mid%3D2278866%26tp%3D12%26m%3D10%26forced_click%3Dhttps%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%253Fsa%253DL%2526ai%253DC1spXtseCWuXbHIqeYYqLiPANkZGrslDIgPiciwfwLhABIMqEnB9gw9ykhZgYoAHI4P2LA8gBCakCpt3jmimktD6oAwGqBNABT9DS9SrWolrA4BrkXEuyHW1N-Uc9A4-x9ZK6ad68krjMmuBDardoAVdl7Tgj1kxGoJOvKkjlIxFVZC9B0vVyCmPPzCxL-gNpv-ojlO-rDfpHsu_CVpmKm2AnOuAuT1EqGvu1Dw3fhRPbTnp2JPxckb-s_p2CQ4pCJKXEGYl_YZ3ruyWRqq6cGqTxISyhqQeIdJfm7gKqs5T77TkDoPIHENhvetrhcqh30O5N7e93bTi7lFOmj8xgZX-89BsRJF9pKU3Kyrk5jICeAbN3rwyVouAEA5AGAaAGTYAHoJ-CdKgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw%2526num%253D1%2526cid%253DCAASBORokvA%2526sig%253DAOD64_3Xny4KmSmE-jJUXO2QfCmZSGtAHA%2526client%253Dca-pub-2612317953771423%2526dbm_c%253DAKAmf-BdPMG9FyWQradfX0I8-4ULnADWnQ8mvfalmilCYsB8nzjiKnvP0Hffoc3LIqbv0EsJujHZ%2526dbm_d%253DAKAmf-AvaZSY6IksBNwVcByqLqhXFI1SCOMFjDcd9ALEwXUT4nc4bw5k1rzd0j9PJuNZgLwcoSF1zyjY5ZVfS1q6vn92G1JqLVlZKczAopBfhmRwCh5PtyyRAuGmZ1J-T5VdhFJ1bZfps3X0s9M4ehfmTGbd72zXoUhYs09NRRVR66riPg_jUu4%2526adurl%253D;dc_rfl=2,,http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F$0;xdt=1;crlt=HcE*5_UAXZ;sttr=627;prcl=s? HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327
Cookie: IDE=AHWqTUkbLuxv8k8pM9aMtD5X7xl86S9h9yrQn6xRfVILXEOS-wCgpdXycfhqGJJv

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:51 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7940
Md5:    64e3d9724b9e8dd01818ceb6b9287b37
Sha1:   b578802413709703b19b24b0f7aeeb32bc3f758a
Sha256: e6a0b13d7ee7c2c112bae698c2f4f5f57673aeed1d899c0c8f42706cc12d3ea8
                                        
                                            GET /csi?v=2&s=mapsapi3&v3v=31.8a&action=apiboot2&libraries=geometry%2Csearch&e=google-maps-embed,10_1_0,10_2_0&rt=main.9 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:51 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUkbLuxv8k8pM9aMtD5X7xl86S9h9yrQn6xRfVILXEOS-wCgpdXycfhqGJJv; DSID=NO_DATA

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:51 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Tue, 13-Feb-2018 12:10:51 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 11:10:51 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /activeview?avi=BWhvytseCWuXbHIqeYYqLiPANAMiA-JyLBwAAEAE4AcgBCeAEA6AGTdIIBQiAYRABwhMGGMjg_YsD&cid=CAASBORokvA&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:51 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /8043815/300x250_ES_OWG2018_GENERIC.jpg HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 11403
Date: Mon, 12 Feb 2018 20:37:23 GMT
Expires: Tue, 13 Feb 2018 20:37:23 GMT
Last-Modified: Wed, 31 Jan 2018 15:28:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 52409
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   11403
Md5:    e676e71e1bf6ada143ceeff5adcc157a
Sha1:   c143f8f82000d3506b64e3a65b064823d086bd59
Sha256: 0c8e908160bd2a7a4444f3698a8172deddb30fe92e717c8d97d63f33a6e1af50
                                        
                                            GET /csi?v=2&s=mapsapi3&v3v=31.8a&action=apiboot2&libraries=geometry%2Csearch&e=google-maps-embed,10_1_0,10_2_0&rt=firstmap.1026 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pcs/view?xai=AKAOjstV6ea-RLdqf6sXD7ZFrpDDfEWzgPnEejNJ6Ybnzw7myGu26CGg8GdUhV1IyXsCa6qwrAORsksNCmiCf1kn0Kjw3PzTvvvfK4HgDImb7aDUEsLw24wBEaO6uje_Y-PGaH-onYsTL2CS5uOPHRfO04aiVQQ2nfGk7g&sig=Cg0ArKJSzCoXXnDl-C6wEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327
Cookie: IDE=AHWqTUkbLuxv8k8pM9aMtD5X7xl86S9h9yrQn6xRfVILXEOS-wCgpdXycfhqGJJv; DSID=NO_DATA

                                         
                                         216.58.207.194
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 11:10:52 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=BKz7Xu8eCWvSICYWNZsnSh6ADAAAAADgB4AQC&bg=!nJ-ln4dE5FFw_2fbCcoCAAAAtVIAAAASCgAGqcoWJ9JEmQEjgaHnkwIpvnF6BN2LSRlMi8KTs_17nG4y0P3rbWqSFRJq-qhyH-ubVosfOld_kFwaVuL0PWb7xzrGHaNjzbwS_NrhPvh3SyaTYMqfSZ5o90e-fKLxwFU6wD1XH5xD5UCFjJdRW-PCLQLXgrx53TKjMXaDCnwFJtgRIxiMFb9EdR_HGTbvq2pGzNoO5-63NBUb6zpU2D6ZvCEcSI1fdXDDSF1xK-n8mG3zqKQBaa9tbxnW806KTb2B5q1MDhTdG4-XomEt0AWL_Fwy_PoL5vws7nfLqGPwNbzyIvteJxSt8iXWrCRTVmGP2y6Njv7kbOJsYWxpKmH2gbn73wp3sRpLwzGxYZLWvkVDTnrJ549WQwzehmZTgIT7sClaqkuq0eLdyEve HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /maps-api-v3/api/js/31/8a/common.js HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 41147
Date: Sat, 03 Feb 2018 22:15:12 GMT
Expires: Sun, 03 Feb 2019 22:15:12 GMT
Last-Modified: Tue, 30 Jan 2018 06:54:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 824140
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   41147
Md5:    7b212854feb454834aa0bd3ce8ef80de
Sha1:   e993a2b7f377bccb041c5c919de9ecc101a07686
Sha256: 03bf50fd03da7a2a0b7c5b02da40c1a34770d8217c5ec2d2a597f3a6914d0906
                                        
                                            GET /pcs/activeview?xai=AKAOjsvte-_fZlVTewZkq6bm9GI6b_2kGU0CJ-P6xG-8PBKqcuRvyl0ZPgNif4Dg14jITH1WTUn9EGNUyNGZfCS81Js&sig=Cg0ArKJSzB-fAl-rWaCuEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,255,300&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=6&bs=1184,715&bos=1184,863&ps=-12245933,-12245933&ss=1176,885&pt=2753&xde=1&deb=1-2-2-0-1-2&tvt=2&is=300,250&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2612317953771423%26output%3Dhtml%26h%3D250%26slotname%3D3005222594%26adk%3D897082944%26adf%3D807048394%26w%3D300%26lmt%3D1518520243%26loeid%3D368226210%252C38893312%26format%3D300x250%26url%3Dhttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%26ea%3D0%26flash%3D10.0.45%26avail_w%3D304%26wgl%3D0%26adsid%3DNT%26dt%3D1518520245753%26bpp%3D26%26fdt%3D57%26idt%3D267%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D160x600%252C595x60%26correlator%3D8279629434588%26frm%3D20%26ga_vid%3D1373778678.1518520245%26ga_sid%3D1518520245%26ga_hid%3D1757523518%26ga&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2612317953771423%26output%3Dhtml%26h%3D250%26slotname%3D3005222594%26adk%3D897082944%26adf%3D807048394%26w%3D300%26lmt%3D1518520243%26loeid%3D368226210%252C38893312%26format%3D300x250%26url%3Dhttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%26ea%3D0%26flash%3D10.0.45%26avail_w%3D304%26wgl%3D0%26adsid%3DNT%26dt%3D1518520245753%26bpp%3D26%26fdt%3D57%26idt%3D267%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D160x600%252C595x60%26correlator%3D8279629434588%26frm%3D20%26ga_vid%3D1373778678.1518520245%26ga_sid%3D1518520245%26ga_hid%3D1757523518%26ga&referrer=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&itpl=0&avms=xde&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pcs/activeview?xai=AKAOjsu_KjvHgfjcI3uxq9_ONqCtUPbYU9ny_wtRWjWInd-Elv9yNMgIOTAsLWaeL4Nu0eFAYimVzX8n6R3Y6A3W&sig=Cg0ArKJSzIVfOL4-HMJREAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,275,300&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=2750&ss=1176,885&pt=-1&deb=1-2-0-0-0--1&tvt=0&is=300,250&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2612317953771423%26output%3Dhtml%26h%3D250%26slotname%3D3005222594%26adk%3D897082944%26adf%3D807048394%26w%3D300%26lmt%3D1518520243%26loeid%3D368226210%252C38893312%26format%3D300x250%26url%3Dhttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%26ea%3D0%26flash%3D10.0.45%26avail_w%3D304%26wgl%3D0%26adsid%3DNT%26dt%3D1518520245753%26bpp%3D26%26fdt%3D57%26idt%3D267%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D160x600%252C595x60%26correlator%3D8279629434588%26frm%3D20%26ga_vid%3D1373778678.1518520245%26ga_sid%3D1518520245%26ga_hid%3D1757523518%26ga&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2612317953771423%26output%3Dhtml%26h%3D250%26slotname%3D3005222594%26adk%3D897082944%26adf%3D807048394%26w%3D300%26lmt%3D1518520243%26loeid%3D368226210%252C38893312%26format%3D300x250%26url%3Dhttp%253A%252F%252Fparamourdespoupees.com.w3cdomain.com%252F%26ea%3D0%26flash%3D10.0.45%26avail_w%3D304%26wgl%3D0%26adsid%3DNT%26dt%3D1518520245753%26bpp%3D26%26fdt%3D57%26idt%3D267%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D160x600%252C595x60%26correlator%3D8279629434588%26frm%3D20%26ga_vid%3D1373778678.1518520245%26ga_sid%3D1518520245%26ga_hid%3D1757523518%26ga&referrer=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&itpl=0&avms=geo&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2612317953771423&output=html&h=250&slotname=3005222594&adk=897082944&adf=807048394&w=300&lmt=1518520243&loeid=368226210%2C38893312&format=300x250&url=http%3A%2F%2Fparamourdespoupees.com.w3cdomain.com%2F&ea=0&flash=10.0.45&avail_w=304&wgl=0&adsid=NT&dt=1518520245753&bpp=26&fdt=57&idt=267&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=160x600%2C595x60&correlator=8279629434588&frm=20&ga_vid=1373778678.1518520245&ga_sid=1518520245&ga_hid=1757523518&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=291&ady=471&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226200%2C38893302%2C21061122%2C191880502%2C20040065&oid=3&rx=0&eae=4&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=327

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /maps-api-v3/api/js/31/8a/overlay.js HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 735
Date: Sat, 03 Feb 2018 22:30:16 GMT
Expires: Sun, 03 Feb 2019 22:30:16 GMT
Last-Modified: Tue, 30 Jan 2018 06:54:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 823236
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   735
Md5:    eb0fc36423f73d09ca626d1036426e24
Sha1:   9590da28ea05e380b3d18507be1311b496da0f93
Sha256: 4c6fee392d3c400b7e67e5a974f83d84f56a31e93a774abf78b9a55989e29e9d
                                        
                                            GET /maps-api-v3/api/js/31/8a/map.js HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12474
Date: Sat, 03 Feb 2018 22:17:25 GMT
Expires: Sun, 03 Feb 2019 22:17:25 GMT
Last-Modified: Tue, 30 Jan 2018 06:54:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 824007
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12474
Md5:    f586f086b6f85b3adb016b9b651d2348
Sha1:   2b71a4a101da8ba2ffb64f007f1d6f88c8b77d42
Sha256: 3c4969af4c46b04dec0b76e8cbd61899273f2915ba106ed9a78cc821931606f9
                                        
                                            GET /mapfiles/embed/images/google4.png HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 2073
Date: Tue, 13 Feb 2018 11:10:52 GMT
Expires: Tue, 13 Feb 2018 11:10:52 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Wed, 07 Dec 2016 16:58:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 66 x 26, 8-bit/color RGBA, non-interlaced
Size:   2073
Md5:    1ae05ad3b3c8e112e4734b2c0228e3ce
Sha1:   30c2cb03a841178ffee8aa65b1000a556f22638b
Sha256: 721fb9398629ae4ac2169b208a651f09a7d5e5a370323fcf8891428acc94a4ea
                                        
                                            GET /maps-api-v3/api/js/31/8a/util.js HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 53026
Date: Sat, 03 Feb 2018 22:36:09 GMT
Expires: Sun, 03 Feb 2019 22:36:09 GMT
Last-Modified: Tue, 30 Jan 2018 06:54:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 822883
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   53026
Md5:    7b23c1dc1d715063d80673031e70c007
Sha1:   862a7eba4a2ceeb32a3a90c4552506f1e15f3fff
Sha256: 064d6e92c11ec77591bad1a4e683ebfd15800385fd4f621adc783ab3cf53b0e6
                                        
                                            GET /mapfiles/openhand_8_8.cur HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: image/bmp
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 326
Date: Tue, 13 Feb 2018 11:10:52 GMT
Expires: Tue, 13 Feb 2018 11:10:52 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Wed, 07 Dec 2016 16:58:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  Lotus 1-2-3
Size:   326
Md5:    feff9159f56cb2069041d660b484eb07
Sha1:   0d0a08cf25a258511957f357b89d3908f3c5e6e3
Sha256: 7342f390b12f636d14e25f698fc5e38cf6240994dc0c07fefbbb4e78ec4d03c7
                                        
                                            GET /maps-api-v3/api/js/31/8a/onion.js HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11668
Date: Sat, 03 Feb 2018 22:24:28 GMT
Expires: Sun, 03 Feb 2019 22:24:28 GMT
Last-Modified: Tue, 30 Jan 2018 06:54:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 823584
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11668
Md5:    c69a15b8bbfa1209ae0c80e88ea56aa7
Sha1:   e91bdba4049570bff09d97fcc4c63c6c8a28af1b
Sha256: 2b062fac519652743cf3133ea93e95622072024604c3520421a01bf42f44f5f7
                                        
                                            GET /maps-api-v3/api/js/31/8a/controls.js HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24076
Date: Sat, 03 Feb 2018 22:05:40 GMT
Expires: Sun, 03 Feb 2019 22:05:40 GMT
Last-Modified: Tue, 30 Jan 2018 06:54:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 824712
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   24076
Md5:    576fb6b6e41791b278d4ebef4199590b
Sha1:   7f685c8194aa379d9a70aba93384b6bba90a6ba5
Sha256: 5deaf96a6ccffed80f2b7921d9c97798dba726f95ffacef7514c242b21765fb3
                                        
                                            GET /csi?v=2&s=mapsapi3&v3v=31.8a&action=map2&firstmap=true&hdpi=false&mob=false&staticmap=true&size=400x300&hadviewport=true&libraries=geometry%2Csearch&e=google-maps-embed,10_1_0,10_2_0&rt=visreq.355 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /maps/api/js/ViewportInfoService.GetViewportInfo?1m6&1m2&1d-77.39967354626498&2d-82.55965178268264&2m2&1d82.55965178268265&2d82.55965178268264&2u0&4sen&5e2&7b0&8e0&11e289&callback=_xdc_._k87gnt&token=45915 HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Disposition: attachment
Content-Encoding: gzip
Server: mafe
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2850
Md5:    e961262c98bf8a0835f12c89d3a37bbb
Sha1:   122cef61e85026c00c0e4c6a3d0f95e3563f50b5
Sha256: e34013daf09c23a925dc6fbc5b15520a9d305ba8346757d804c75f0fd20ed6de
                                        
                                            GET /maps/api/js/ViewportInfoService.GetViewportInfo?1m6&1m2&1d-90&2d-180&2m2&1d90&2d180&2u1&4sen&5e0&6sm%40410000000&7b0&8e0&11e289&callback=_xdc_._ksxs1r&token=77347 HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Disposition: attachment
Content-Encoding: gzip
Server: mafe
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2864
Md5:    5711ae193ed4c302ce3f9e26bc6a85e2
Sha1:   5d508f891fbb09b2dd0b268781302b2dee3aa7d7
Sha256: 56274e8a504420d50c1f4e071871cb3c7c8446ac6aeef714fe402ae758b66520
                                        
                                            GET /kh?v=773&hl=en&x=0&y=0&z=0 HTTP/1.1 
Host: khms0.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Allow-Origin: *
Date: Mon, 12 Feb 2018 19:07:14 GMT
Expires: Tue, 13 Feb 2018 19:07:14 GMT
Last-Modified: Fri, 01 Jan 2010 01:00:00 GMT
Access-Control-Allow-Credentials: true
Vary: Origin
X-Content-Type-Options: nosniff
Server: HTTP server (unknown)
Content-Length: 9417
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=86400
Age: 57818
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9417
Md5:    7d6eb1aed8b79b14ef81527e65894cdd
Sha1:   e36431ad638c7e16c56fd8b8ae32892556c34fb1
Sha256: daec3ad488eeac27b2be6ab2d4029b1ff90654d3ca7accf7c6b66a55a84ecc78
                                        
                                            GET /csi?v=2&s=mapsapi3&v3v=31.8a&action=map2&firstmap=true&hdpi=false&mob=false&staticmap=true&size=400x300&hadviewport=true&libraries=geometry%2Csearch&e=google-maps-embed,10_1_0,10_2_0&rt=visres.539 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /maps/vt?pb=!1m5!1m4!1i1!2i0!3i0!4i256!2m3!1e0!2sm!3i410109502!3m9!2sen!3sUS!5e289!12m1!1e68!12m3!1e37!2m1!1ssmartmaps!4e0!23i4111425&token=108386 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen
Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h

                                         
                                         172.217.21.132
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 09:09:04 GMT
Expires: Sun, 28 Oct 2018 13:59:26 GMT
Access-Control-Allow-Origin: *
Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none'
X-Content-Type-Options: nosniff
Server-Timing: dur=0.795; Paint
Server: paintfe
Content-Length: 12936
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=22222222
Age: 7308
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 256 x 256, 8-bit colormap, non-interlaced
Size:   12936
Md5:    bc4885ef43ea161f448877a714244f54
Sha1:   6d7c8907d6fb55a7c7424578da25e27f7bba0661
Sha256: 494c078c18f54c3c0ea9d66bdd709c9b324cddda6a3aa826b114ba2f9404e12e
                                        
                                            GET /mapfiles/api-3/images/tmapctrl.png HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 1031
Date: Tue, 13 Feb 2018 11:10:52 GMT
Expires: Tue, 13 Feb 2018 11:10:52 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Wed, 07 Dec 2016 16:58:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 120 x 54, 8-bit/color RGBA, non-interlaced
Size:   1031
Md5:    6adcaf13c423b2b062a29da3ead06577
Sha1:   df0dd5c1035f42ffd8b630843ce3a8ece41be48c
Sha256: 73c96e4e34eb5e87b67e3c3057fbb4be84ee10c8fbce004192c666a0f1f9759c
                                        
                                            GET /maps/vt?pb=!1m4!1m3!1i1!2i0!3i0!1m4!1m3!1i1!2i0!3i1!1m4!1m3!1i1!2i1!3i0!1m4!1m3!1i1!2i1!3i1!2m3!1e0!2sm!3i410109502!3m9!2sen!3sUS!5e289!12m1!1e68!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!23i4111425&token=81713 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen
Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h

                                         
                                         172.217.21.132
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 09:09:04 GMT
Expires: Sun, 28 Oct 2018 13:59:26 GMT
Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none'
X-Content-Type-Options: nosniff
Server-Timing: dur=1.296; Paint
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: paintfe
Content-Length: 81
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=22222222
Age: 7308
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   81
Md5:    605b04f2b40a59fc6f98f155dcc93584
Sha1:   b84bf828efbf1e1d96c6c6e8badc81c721e8a26f
Sha256: 8394568a669217440dda366a1a17222b1f05ceb9a607107ae882c8b2b3a78cca
                                        
                                            GET /mapfiles/transparent.png HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 68
Date: Tue, 13 Feb 2018 11:10:52 GMT
Expires: Tue, 13 Feb 2018 11:10:52 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Wed, 07 Dec 2016 16:58:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit gray+alpha, non-interlaced
Size:   68
Md5:    8327a6037ae00a5be9f75e63ee1b9fbe
Sha1:   a812c79b0d125e4946b33446eae0353f518627e2
Sha256: fe67e12a6497f8518ef1673fd8cf5622871935ff85f204715e78b2009dd48588
                                        
                                            GET /maps/vt?pb=!1m5!1m4!1i1!2i0!3i1!4i256!2m3!1e0!2sm!3i410109502!3m9!2sen!3sUS!5e289!12m1!1e68!12m3!1e37!2m1!1ssmartmaps!4e0!23i4111425&token=111981 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen
Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h

                                         
                                         172.217.21.132
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 09:09:04 GMT
Expires: Sun, 28 Oct 2018 13:59:26 GMT
Access-Control-Allow-Origin: *
Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none'
X-Content-Type-Options: nosniff
Server-Timing: dur=0.786; Paint
Server: paintfe
Content-Length: 5150
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=22222222
Age: 7308
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 256 x 256, 8-bit colormap, non-interlaced
Size:   5150
Md5:    b36a9aab26359a4f0e49c1911b11026b
Sha1:   b3beab4f934d335e72fc86252d63393804d195d9
Sha256: 0492655b8de7df892cdcd6ae71c8b8b18c097c3209764e23e75a8023f6bef3c1
                                        
                                            GET /csi?v=2&s=mapsapi3&v3v=31.8a&action=map2&firstmap=true&hdpi=false&mob=false&staticmap=true&size=400x300&hadviewport=true&libraries=geometry%2Csearch&e=google-maps-embed,10_1_0,10_2_0&rt=firsttile.872,firstpixel.872 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /mapfiles/api-3/images/mapcnt6.png HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 2259
Date: Tue, 13 Feb 2018 11:10:52 GMT
Expires: Tue, 13 Feb 2018 11:10:52 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Wed, 07 Dec 2016 16:58:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 59 x 492, 8-bit colormap, non-interlaced
Size:   2259
Md5:    dd0e6c4d2d20690dbee1474a857731b1
Sha1:   4da0348c93538feba473eacc2dd39bcb5a931b7a
Sha256: b421aba899c9a1ad7949612305adf544ac5f82d2dd45372c26c2ef7914ebc242
                                        
                                            GET /css?family=Roboto:300,400,500,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 13 Feb 2018 11:10:52 GMT
Date: Tue, 13 Feb 2018 11:10:52 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   263
Md5:    29c8dec9eba9c2d0cd3641668d01f783
Sha1:   a00cf8c895c6ba50b1250e6f42843d3f2b346746
Sha256: a2b3e7ef2599ec0081c5cc17366abbd9b96ccb9cae69f51cbc6b2d7cc3aa02f8
                                        
                                            GET /maps/vt?pb=!1m5!1m4!1i1!2i1!3i1!4i256!2m3!1e0!2sm!3i410109502!3m9!2sen!3sUS!5e289!12m1!1e68!12m3!1e37!2m1!1ssmartmaps!4e0!23i4111425&token=33095 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen
Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h

                                         
                                         172.217.21.132
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 09:09:04 GMT
Expires: Sun, 28 Oct 2018 13:59:26 GMT
Access-Control-Allow-Origin: *
Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none'
X-Content-Type-Options: nosniff
Server-Timing: dur=0.718; Paint
Server: paintfe
Content-Length: 4348
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=22222222
Age: 7308
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 256 x 256, 8-bit colormap, non-interlaced
Size:   4348
Md5:    450b00b5c2139ac6090ae5b7c3ebc5bb
Sha1:   567b25b07f47623c5c988fb849e63c9a82cabc2b
Sha256: feba25dd91f68d3f26c4051731261484446ca6e7d7401869682205edbb79727f
                                        
                                            GET /maps/vt?pb=!1m5!1m4!1i1!2i1!3i0!4i256!2m3!1e0!2sm!3i410109502!3m9!2sen!3sUS!5e289!12m1!1e68!12m3!1e37!2m1!1ssmartmaps!4e0!23i4111425&token=29500 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen
Cookie: NID=123=kYX7H2AIWX2i4g_XiN6ePTIKVUsKGydY7Tw2YbcpuY911li1W_-pXKMeFOOUF31zvvRmEcnDb10OfKZXrk178jUdcsn9Sat2Z5m0pXSDeNc956nL5EVLITnYbOkoET2h

                                         
                                         172.217.21.132
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 09:09:04 GMT
Expires: Sun, 28 Oct 2018 13:59:26 GMT
Access-Control-Allow-Origin: *
Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none'
X-Content-Type-Options: nosniff
Server-Timing: dur=1.039; Paint
Server: paintfe
Content-Length: 15518
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=22222222
Age: 7308
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 256 x 256, 8-bit colormap, non-interlaced
Size:   15518
Md5:    502593b7fb720a4400abe618f5875a4f
Sha1:   9f78c35283445b4d589ba8bdecabd147d5cc31d9
Sha256: 6616fb8c1ef0223cbe9d315ad6e2179bac7181ba4286a7c975479564195a0656
                                        
                                            GET /csi?v=2&s=mapsapi3&v3v=31.8a&action=map2&firstmap=true&hdpi=false&mob=false&staticmap=true&size=400x300&hadviewport=true&libraries=geometry%2Csearch&e=google-maps-embed,10_1_0,10_2_0&rt=tilesloaded.951,allpixels.951 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.209.131
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /maps/api/js/AuthenticationService.Authenticate?1shttps%3A%2F%2Fwww.google.com%2Fmaps%2Fembed%3Forigin%3Dmfe%26pb%3D!1m1!6i8!3m1!1sen!5m1!1sen&2sgoogle-maps-embed&callback=_xdc_._vafp98&token=23552 HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/embed?origin=mfe&pb=!1m1!6i8!3m1!1sen!5m1!1sen

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Tue, 13 Feb 2018 11:10:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Disposition: attachment
Content-Encoding: gzip
Server: mafe
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   57
Md5:    47081d36dac13b818fc0ee585ec59a6b
Sha1:   bd272c1ee03024ac99d16aa89340d9a29591a24d
Sha256: 05e68fe7016bf3a86cb820ea24833d78cf54dd3ec5dfe43e842369b8eb239e95