GET / HTTP/1.1
Host: michaelnativel.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Set-Cookie: statcountmichaelnativel13=ok; expires=Wed, 14-Feb-2018 14:02:26 GMT; Max-Age=86400; path=/; domain=michaelnativel.wifeo.com
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5217
Connection: close
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 5217
Md5: 831f9abf8643d1243ded59a344974f3a
Sha1: ee85e593b6870da7c560a53b802743ceff5aa9bd
Sha256: aa1308d4b696a49fc55f4603c6792a5a6fafa333d7f171d09d4487e4ea7afcaa
|
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30028
Date: Mon, 12 Feb 2018 19:25:14 GMT
Expires: Tue, 12 Feb 2019 19:25:14 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 67032
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 30028
Md5: 543b05db46ecc6a1312a23e7e7a8820e
Sha1: aff453218f0b6c281ed53da6997d4b1b9e990007
Sha256: 31c0d9866a5018d56375949c0222370a5b48d6ea6442d04b0c689217a68dffac
|
GET /ui/1.12.1/jquery-ui.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
94.31.29.54
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Date: Tue, 13 Feb 2018 14:02:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2016 16:34:16 GMT
Vary: Accept-Encoding
Etag: W/"57d97c08-3dee4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 83774
Md5: ecd6894f51622e86cb5fbf4b5b76fa3e
Sha1: c153c836d34a21a0f3cd7f493057afa4e70530bb
Sha256: 6e73982fc6ce2f215fd90c977d6f71839a438dd8633f19c5743d51eb1a59566b
|
GET /format.css?1517595825 HTTP/1.1
Host: michaelnativel.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
Cookie: statcountmichaelnativel13=ok
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Sat, 13 Jan 2018 11:07:35 GMT
Etag: "292c-562a66370023f-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 142842853
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 2298
Md5: 8372588c9f00a839ceebcc538fb07b68
Sha1: aed952758dbfa24d23d251e78cbcbd7065e06367
Sha256: 6515d60c65d2383c47558d0048bb36fc97b8aa3e8713cbbc5b942be345550747
|
GET /images/m/mic/Michael-Nativel-2013-6-.JPG HTTP/1.1
Host: michaelnativel.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
Cookie: statcountmichaelnativel13=ok
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Sat, 24 Jan 2015 10:14:43 GMT
Etag: "f25b-50d632c87b776"
Accept-Ranges: bytes
Content-Length: 62043
Vary: User-Agent
Connection: close
--- Additional Info ---
Magic: JPEG image data, JFIF standard 1.01
Size: 62043
Md5: bb2335b031557d88c78c3ed8b7898a72
Sha1: c1e29448b76168ca113034eaaf9dd108b6a29561
Sha256: dd40909d65705ad6cf17fa5d3973f0e90a0388a30472ce6027ca468b96f18733
|
GET /wifeostatic-s3/ressources/bootstrap4/override-bootstrap.min.css?v1.31 HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Thu, 01 Feb 2018 18:16:02 GMT
Etag: "1512-5642a96a81a13-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 143657890
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 1506
Md5: d4e62396546f6095730831eb5f5fda6a
Sha1: 6c5d7f7836f9ba33bd8f93510717a43f01d20617
Sha256: 357e2e41dc254f51f3dbc7735bf2594966b3f5ab099c9ade250842b8a8f56ad3
|
GET /images/c/cou/couverture-de-wesh-.jpg HTTP/1.1
Host: michaelnativel.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
Cookie: statcountmichaelnativel13=ok
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Access-Control-Allow-Origin: http://shop.wifeo.com
Last-Modified: Sat, 01 Apr 2017 17:07:25 GMT
Etag: "1a8a7-54c1df5ced000"
Vary: User-Agent
Expires: Sat, 14 Apr 2018 14:02:26 GMT
Cache-Control: max-age = 2592000
X-Varnish: 143529248
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: JPEG image data, JFIF standard 1.01
Size: 108711
Md5: af025d0c248e1e836a0bb7f0eb24692b
Sha1: 127e2424c3ecc3e29bc354240cbd684d785cba41
Sha256: 62ea136aff29fd2cc7d9232a8f4c4cc9c5061c4812266734db3909c36821639c
|
GET /wifeostatic-s3/ressources/bootstrap4/css/bootstrap.min.css?v1 HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Wed, 13 Dec 2017 10:10:24 GMT
Etag: "1defc-56035f9cf47e4-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 142401995
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 19956
Md5: 28d3bfd1e27cb53c747cdeb900c24bc9
Sha1: 2308c55b1740d281e4fd5a778391df8b0f6d01c2
Sha256: f33aa667ef9d81d76aa28ec9166a996ad9e5874ce413be6d33f839b0cee8108d
|
GET /ads/promo/showads.js HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Sun, 07 Aug 2016 13:34:56 GMT
Etag: "16-5397b5d84d85a"
Vary: User-Agent
Expires: Sat, 14 Apr 2018 14:02:26 GMT
Cache-Control: max-age = 2592000
X-Varnish: 142402005
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Content-Length: 22
Accept-Ranges: bytes
--- Additional Info ---
Magic: ASCII text, with no line terminators
Size: 22
Md5: 980a6c3dda1f57bedff29b069d7394e1
Sha1: 5d303a833981c96a17b06b1177010ba04c2f1736
Sha256: 3a769c0c24dc5601ec54f39b6a608148dd6664a9378eb888fa9e72da3206c92f
|
GET /wifeolib.js?v2 HTTP/1.1
Host: michaelnativel.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
Cookie: statcountmichaelnativel13=ok
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Sat, 06 Jan 2018 16:05:33 GMT
Etag: "1c2-5621dbc21ad27-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 142784201
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 296
Md5: 488fa183cd71c5e3a5d7df28b301715e
Sha1: b487fa1a22c7de619827eed453d9642e177c4ebb
Sha256: bbf6021d61648130c130202c6f04249f56ee63ac203cff38726ac0bb236d35c5
|
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:26 GMT
Expires: Tue, 13 Feb 2018 14:02:26 GMT
Cache-Control: private, max-age=3600
Etag: 6502682663518856185
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26103
X-XSS-Protection: 1; mode=block
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 26103
Md5: 6ef11d0463c07a28cd7cf2803534c33b
Sha1: 22c83cf48df58218feda2b7c44729bbbd3c43fdc
Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
|
GET /wifeostatic-s3/ressources/modules/diaporama/lib.min.js HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Mon, 26 Jun 2017 12:20:58 GMT
Etag: "2ddc-552dbfbb92688-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Expires: Sat, 14 Apr 2018 14:02:26 GMT
Cache-Control: max-age = 2592000
X-Varnish: 143496350
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 2871
Md5: 69b86adc42e0a4eac12212456419cd76
Sha1: 0fbe0531bc79088d521f49a43c47ed1dfb454330
Sha256: a43cf679482b0506b59d7922534849fad7f6f6b47b0c2b95db8fd6fab3f212df
|
GET /wifeostatic-s3/ressources/wifeocss/common-vz.min.css?v1 HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: text/css
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Tue, 16 Jan 2018 14:35:44 GMT
Etag: "1850-562e5a557b6d4-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 143529263
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 1958
Md5: 300893f7bd28eb1607279ed8ad2b60a4
Sha1: 811094e55d549ea270d0a7debf1b3e24949b1b72
Sha256: ccdb2a9d9e13d8a1ad6f96f0edff0cca0283c849e5a6d8de6598ea05cbcd869a
|
GET /wifeostatic-s3/ressources/wifeojs/masonry.min.js?v1 HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Mon, 04 Dec 2017 19:54:23 GMT
Etag: "5e12-55f8915c1ffa8-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 142784204
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 7356
Md5: 161527114a2803aff504bcfb294f422f
Sha1: 64f32ea2a09a4cc0d0d0eb52245954bc387d8dcf
Sha256: af0b36296aa50c8194a84c2a2dcf7cd3049f75a1b3c41df121047837cb5ad4d9
|
GET //wifeostatic-s3/ressources/wifeojs/common-vz.min.js?v1 HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Sun, 04 Feb 2018 16:33:28 GMT
Etag: "4356-5646581615483-gzip"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Varnish: 143496356
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 5204
Md5: e2c72120b1d395a6e2ed0b1a9b5e4872
Sha1: ed44ea6f6e70337921507029dfc5110ea426acb1
Sha256: 9bd5164d85c8e69dba75f30e73275ae1a29a4cd90c3c23bcbbcf3e32a055d5e0
|
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request
|
178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 23:25:56 GMT
Expires: Mon, 19 Feb 2018 23:25:56 GMT
Etag: AE647C8BDA24ECE75914CDAC478CC0851A182CAB
Cache-Control: max-age=551609,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 472
Connection: close
--- Additional Info ---
Magic: data
Size: 472
Md5: 7d3d17abde90664c86b73397e2762d19
Sha1: ae647c8bda24ece75914cdac478cc0851a182cab
Sha256: bd2cf3a65ef71b899a20502a517cbd41c1d3ac5ebeb5f4986ccab0cb3789a289
|
GET /images/i/img/IMG_20161021_211359_630.jpg HTTP/1.1
Host: michaelnativel.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
Cookie: statcountmichaelnativel13=ok
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/jpeg
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Access-Control-Allow-Origin: http://shop.wifeo.com
Last-Modified: Sun, 23 Oct 2016 15:07:01 GMT
Etag: "32e1a-53f89a0a655ea"
Vary: User-Agent
Expires: Sat, 14 Apr 2018 14:02:26 GMT
Cache-Control: max-age = 2592000
X-Varnish: 143657898
Age: 0
Via: 1.1 varnish-v4
X-Cache: MISS
Transfer-Encoding: chunked
Accept-Ranges: bytes
--- Additional Info ---
Magic: JPEG image data, EXIF standard
Size: 208410
Md5: e037656418114a7e399d8bb9fedfea81
Sha1: 5605a3a8ddae175578e2533b3718ee73f4fa1a00
Sha256: 7ce7ca65c5b8b875d2d18cc4a07e62cc02d7ee43f3bc2e267603c0c66f2e997e
|
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:27 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: 6300C75D0A453F081EC693DE6CD52E28574DC944
Cache-Control: max-age=508705,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 727
Connection: close
--- Additional Info ---
Magic: data
Size: 727
Md5: 8f6cb4f522fb2149c4306d80e30d1119
Sha1: 6300c75d0a453f081ec693de6cd52e28574dc944
Sha256: 12a51058b7548f36c2b0386ed26ce51fdfb5e44a35e2b4fe4592824e86412e4e
|
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:27 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: A32733318C0757E7E15BCFE416EE0611FBC2B84D
Cache-Control: max-age=508705,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp15
Content-Length: 471
Connection: close
--- Additional Info ---
Magic: data
Size: 471
Md5: 7f5c6479a459bb50ceaa9705d300762b
Sha1: a32733318c0757e7e15bcfe416ee0611fbc2b84d
Sha256: 2b27b2dd62db5b06bcdf8ecedeab57fb595b54ae7ec58e7be99923c30b442886
|
GET /ajax/libs/popper.js/1.12.3/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
104.19.193.102
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Date: Tue, 13 Feb 2018 14:02:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 18 Aug 2017 12:49:19 GMT
Expires: Sun, 03 Feb 2019 14:02:27 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 3ec8535068ab426d-OSL
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 6945
Md5: c0a9fcd5dfac23b1d6dcd36293b069ee
Sha1: e77b4837de0228dcdece730f9600e70254ef31cb
Sha256: 91599d91f72d19f93c85ebf2e4587b67abf0f6e577d681c2d985da6b2a5b3ee6
|
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request
|
178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:27 GMT
Server: Apache
Last-Modified: Tue, 13 Feb 2018 08:37:59 GMT
Expires: Tue, 20 Feb 2018 08:37:59 GMT
Etag: 5B20DA2AB6D29D82474FA8EAEFF7B7D7928D7FD1
Cache-Control: max-age=584731,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 472
Connection: close
--- Additional Info ---
Magic: data
Size: 472
Md5: 53f02023b13fb3270939962d6a7d09c9
Sha1: 5b20da2ab6d29d82474fa8eaeff7b7d7928d7fd1
Sha256: 52d473e60e56e7f8320732587a6f570c38d51e5c3455e425968a210662ef7e28
|
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:27 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: DCB6634C4C792E97ABC7AB81D1547DED89D9BB54
Cache-Control: max-age=508705,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 727
Connection: close
--- Additional Info ---
Magic: data
Size: 727
Md5: bb036011ba960703bc42715ab357400e
Sha1: dcb6634c4c792e97abc7ab81d1547ded89d9bb54
Sha256: c0e0f50e0154cccbf5b8c799e6106e6a14edd544c65d8e3acac0dff61d652a2d
|
GET /bootstrap/4.0.0-beta.2/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
94.31.29.16
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 13 Feb 2018 14:02:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Oct 2017 19:52:04 GMT
Etag: W/"46b549bdc90920f18a911f186b9dd75c"
Server: NetDNA-cache/2.2
Expires: Fri, 08 Feb 2019 14:02:27 GMT
Cache-Control: max-age=31104000
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
X-Cache: HIT
Content-Encoding: gzip
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 14943
Md5: 47e4f9aae4f1b3315f674638f91badf2
Sha1: a8d261e1d4ce9910561b846fe82b0bbf683d65a7
Sha256: 5cd8e30ca5b6124adc64b6beb1ebfd735c42ad237f1d4613b796e8628a8d48bb
|
GET /favicon-defaut.ico HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
Date: Tue, 13 Feb 2018 14:02:27 GMT
Server: WIFEO
Last-Modified: Fri, 08 Jul 2016 07:27:42 GMT
Etag: "13e-5371abcf74628"
Vary: User-Agent
X-Varnish: 143529301
Age: 0
Via: 1.1 varnish-v4
X-Cache: HIT
Content-Length: 318
Accept-Ranges: bytes
--- Additional Info ---
Magic: MS Windows icon resource - 1 icon
Size: 318
Md5: c94e8785f438295d0ad739fbcb8f5a52
Sha1: 351618b89006dc436ba44a41f02d478f05c15f9f
Sha256: f35ca1fa165fecc632ae1b4d3c1fa2427a6bf8e1ddd35fd5363b5f687c23cd27
|
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:15:47 GMT
Expires: Tue, 13 Feb 2018 15:15:47 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17172
Age: 2800
Cache-Control: public, max-age=7200
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 17172
Md5: 43adefe535269f3b75e0f229d0dba4d6
Sha1: 5e3bed19757401b3aa6c8ab8b5f26aa17add8a3a
Sha256: fc7f9d5234f97de0433021d02e8969a93003d90bf16d40a9cb2d8f5c7bfaa398
|
GET /v5/img/logo-wifeo-160.svg HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
Range: bytes=0-
If-Range: "1963-53d135b636155"
|
194.146.225.153
HTTP/1.1 206 Partial Content
Content-Type: image/svg+xml
Date: Tue, 13 Feb 2018 14:02:27 GMT
Server: WIFEO
Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT
Etag: "1963-53d135b636155"
Accept-Ranges: bytes
Content-Length: 6499
Vary: User-Agent
Content-Range: bytes 0-6498/6499
Connection: close
--- Additional Info ---
Magic: SVG Scalable Vector Graphics image\012 XML document text
Size: 6499
Md5: e036707eac2a661d5e7a7d8950fc6e7f
Sha1: dbec14ebd1fa8d3fe6c8cdddbc4355f93605e808
Sha256: 8291f64e8fb978d4ad3024326d1f4af37aaf998dc1bb8293ad0a96628640a49d
|
GET /r/__utm.gif?utmwv=5.7.1&utms=1&utmn=742798995&utmhn=michaelnativel.wifeo.com&utme=8(affpub)9(oui)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Michael%20Nativel%2C%20accueil%20du%20site&utmhid=1665291383&utmr=-&utmp=%2Fmichaelnativel%2F&utmht=1518530548322&utmac=UA-607176-1&utmcc=__utma%3D1.1006486668.1518530548.1518530548.1518530548.1%3B%2B__utmz%3D1.1518530548.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=573895599&utmredir=1&utmu=qzCAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:28 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 35
Md5: 28d6814f309ea289f847c69cf91194c6
Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 14:02:39 GMT
Etag: "5a829b1f-1d7"
Expires: Thu, 15 Feb 2018 14:02:39 GMT
Last-Modified: Tue, 13 Feb 2018 08:00:31 GMT
Server: ECS (arn/4691)
X-Cache: HIT
Content-Length: 471
--- Additional Info ---
Magic: data
Size: 471
Md5: d2c2e35ef0bacca61d9c0a287eb8f7d5
Sha1: 528206550ee7bd603166c973dd2ad8be497207e2
Sha256: 68a9e5cf773365327ee2392ab3e5ac439750b509156bf8ac5295be90a90167d6
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 14:02:39 GMT
Etag: "5a8292d3-1d7"
Expires: Thu, 15 Feb 2018 14:02:39 GMT
Last-Modified: Tue, 13 Feb 2018 07:25:07 GMT
Server: ECS (arn/4598)
X-Cache: HIT
Content-Length: 471
--- Additional Info ---
Magic: data
Size: 471
Md5: 9ef9b5ee5b90d4f847262ac201fcb1fd
Sha1: 7c541db4cf9b5f9b47a3fd35030be2b260aa486d
Sha256: ca6f48fb3d346f3743dc3665c32f409202707209daa6f2d2706be5154cef7028
|
GET /edacead583.js HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
23.111.9.35
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Tue, 13 Feb 2018 14:02:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: FxHfQfDO/owJ8Plzeu4FcJsmrf5zKxlBSzwPxGjTlv0O8wF7MjEqNYKaiO9MC9b0aKlyAooSF28=
x-amz-request-id: B103B21FDA05EB68
Last-Modified: Fri, 24 Feb 2017 10:38:02 GMT
Etag: W/"a4e19008187b98c3adaeeba10a5cda8a"
Server: NetDNA-cache/2.2
Cache-Control: max-age=0, private, must-revalidate
X-Cache: HIT
Content-Encoding: gzip
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 3860
Md5: de3c523e35fced54fbee82fa93fad81a
Sha1: ee8b93670e2c6ffb0cb713f616bfe93bbf0363d8
Sha256: 58460d8be64a9fd1826ed33519d7b000764714fef4cc17e97099a91e696979d2
|
GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:40 GMT
Expires: Tue, 13 Feb 2018 14:02:40 GMT
Cache-Control: private, max-age=1209600
Etag: 4433304288936196502
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67646
X-XSS-Protection: 1; mode=block
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 67646
Md5: cce91a88f525640083b0ebe057a30af4
Sha1: b9cf4be249b5af3dda774dfb75e73d482da706c5
Sha256: dd6dac5265c4b1796715889313e4b9271b4547f66739424357f89dc45eac882b
|
POST /GTSGIAG3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
--- Additional Info ---
Magic: data
Size: 463
Md5: fcd56e1351782e87ef4f73d429e4ded4
Sha1: f6f1ce80b96c014e654132c41d109a131ee5bc3c
Sha256: 340ac1b5b28c1c9c0280d32661fe3b614a32fc66f327fb93f5a98fdbe0c176b0
|
POST /gsr2 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
--- Additional Info ---
Magic: data
Size: 468
Md5: 6bf50ec404fb4a8b4a94be8390d11938
Sha1: 0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
|
POST /GTSGIAG3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
--- Additional Info ---
Magic: data
Size: 463
Md5: 6ea90b04815236e9005a97e76148e394
Sha1: 256637485a6d2ab91f66dfc94598aafaa31250c0
Sha256: 98fe9ca5bbe415d51e7c4c01f2ccbfd26909479017bb040d52309743c3eb0dba
|
GET /adsid/integrator.js?domain=michaelnativel.wifeo.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:40 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 107
Md5: 5432a558d422eaeaa6f7e8a15c0c1134
Sha1: 252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
|
POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
--- Additional Info ---
Magic: data
Size: 463
Md5: 4bb2e4074fe5f9f8d715e5888d0b4188
Sha1: 8d020c92f7f3278b86d901ebef396c31d5e39d51
Sha256: cc9e9c93a83b6c3b89cfb24126cc32cfb0876f7705046b642039176859c160e0
|
POST / HTTP/1.1
Host: g.symcd.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=546923, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT
Expires: Mon, 19 Feb 2018 21:56:01 GMT
Date: Tue, 13 Feb 2018 14:02:40 GMT
Connection: keep-alive
--- Additional Info ---
Magic: data
Size: 1391
Md5: dab664d03e303a7b1deba30189c57d23
Sha1: 1a87b2335fc304a7783b6f7ffdb5ff97367d30de
Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
|
GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 18:42:53 GMT
Expires: Wed, 21 Feb 2018 18:42:53 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 501587
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 6819
Md5: 8caea4ee531aab9f5d9328f80b7b23f3
Sha1: 3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
|
GET /adsid/integrator.js?domain=michaelnativel.wifeo.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:40 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 107
Md5: 5432a558d422eaeaa6f7e8a15c0c1134
Sha1: 252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
|
GET /pub-config/r20160913/ca-pub-5439285203515723.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 13 Feb 2018 10:17:42 GMT
Expires: Tue, 13 Feb 2018 22:17:42 GMT
Last-Modified: Sun, 11 Feb 2018 21:18:39 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 13498
Cache-Control: public, max-age=43200
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 125
Md5: f80120281945bc2ccdaebc64cbad921d
Sha1: b5c7ef140888ede182fcac94921a4eb502f07a5c
Sha256: 4cb4b9970ec5cedababe29f9a4ab00d00194bbebd2063cb117dec008b8c6982a
|
GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 11:52:19 GMT
Expires: Thu, 22 Feb 2018 11:52:19 GMT
Etag: 14152819666964886147
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29995
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 439821
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 29995
Md5: ca42dee86b721494eb2a8c4f93c4508d
Sha1: 17ee6f68a61be238ce54d20d056a7a5834c52d80
Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
|
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 6231
Md5: 00d16c674d1e6b92c5db9d73c2c3e570
Sha1: e19156917513fca67b3e7108c0c23a8dbcfeeb3e
Sha256: 3b141073b532d1e8da6238a6d06281b4c269edd3bf3fd54c5d3e7ff44fdc415c
|
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 6232
Md5: 7e865ff8d1510a2869827bd73d19ec11
Sha1: 773f8e34d9754a8b4470321d93051d778fd92583
Sha256: 30e6e209612491d0f0edbc0dc74e414245435ca427539657c4feba44dd0c65f0
|
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 5280
Md5: d2c939a9a763084bd2781468e5717aa7
Sha1: da5449a3b7e58d355f4c39f042234925bc483509
Sha256: 1c71cbca09825fd46b70e8b5239f8441e914792bb03ead8bf62b14a670c098ae
|
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 5279
Md5: 961f2d3aa4404957af70f1e9896e17ee
Sha1: 7d406516ce789ffe07cceece2e7d1500aa908360
Sha256: cd6332002eadc9c749ab77dbd1393d22e19879170c80d39c0afd8c0307c36152
|
GET /pagead/adview?ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&sigh=QUTsYDxd6KI&vis=0 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: test_cookie=CheckForPermission
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
IDE=AHWqTUmhamAluVk5VusCF0YB4dFjgUjzMmKMWmdtMqrAmLV-qLxnattUPCYzB7v-; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Cache-Control: private
--- Additional Info ---
|
GET /pagead/adview?ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&sigh=pmkgUjnXBCE&vis=0 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
Cookie: test_cookie=CheckForPermission
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
IDE=AHWqTUlx0HmJEhDMT4WtZ6sCm0-T068xoaRtJGurvmP61rcZ5lBLXFJMjKYbMU7I; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Cache-Control: private
--- Additional Info ---
|
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-Awqk0r7u7292FFhunl1eGEPdh65X2EEJwkBaPpGPrtVeRRi1K0OymG9nAOjxQDeSdjZAchDJ5n_1PcnagK580L84p0Wi8qDIGwne2AdPq1mIk-Ai4 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:41 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
Cookie: test_cookie=CheckForPermission
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
IDE=AHWqTUnKipjzrf9N3358FSf4m_WfIdoKjmxJ6yxoVUFe1NgBsjA95z_LIvLSzvSK; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 214
Md5: 02247d909a831178bfbddac723940ebd
Sha1: 9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
|
GET /dbm/ad?dbm_c=AKAmf-CMFjlCYhF4bXqL7oYsQ_ktpQqAq_4_kFCFyARe5rgRQloDs5jtWqcJpO3OXxtKG-hITomA&dbm_d=AKAmf-Bu8n8zpWL0MZ--6xkxKwTJhHkQJItJ0qr1ue_AJ101guX1nQNBCp_PyGzPKQIJ1jrc2QGN_kWsmdEyndmKDSQVfI74nEslDUkqCD_C8PgNokAKGwTCnKUvOdvML40dX50_vfzW9_JlENFDzIOlatXPhGFOjunS5va2ZTAdv26z4cXFlqXmscnyTvicIxF16e0XM7-eHc5DaTl5qc6476Q1Fd6hOLvP_hNk152Y_fh3cRYnpL8f5R4GqfYdhDIv3t8gJxRwqQVKRZsH1NegexOF8yfWtux3AoG4ChnZP3DmLIwEsLa4JpOIqCn3hYkmTUf-0DgTMba-rqMtKdZw8Hb_AmO6P22GjGKwdRyDvg4VnXnYf8wxNydhAqH069msLhr4-usi5a6GxEHiJ6Tso4uuwcUjO_JFUgoSk-jCbq7rcIVPbQEHuWCG0RUVRV_KIZgkcPvzbg09UacNFQL57p9R1OLNfL5xoTJ7juD6DGEqlnYER9XbRQ_cduaUz0UkuX3H_vX_uDxpr_TA_OKNWsbkP-mvZ731w5podjF-ugYN62Mrj83laH7yLr-tBi3_nxjoM6BNug7sL5fAA5Vk3j5QaRIzGmuzOkngcNMyzuomVaLE5MhWl-QunbaHlvUvC1F1wqdjfz3e9Td3KySZwOuPMvxKycGomjdgwdF03X26hEaRChIbkn5uZCZ-3mAxh91Se_g7O6XK9rUNEi-Xa8AXVX8g6sP67vB568JPyLOzjcGoUZQSmy2_QJrwwi8NowIUwW1m21Hvj4GBxs0DMScN93EN-ekqbFcCtKfFdNDP14LvJT0eopPp1SoDKod5zTf1vStq2U1euV-GZeHBkunBHNOVGxgZHpcgxTPTdqcp0JPPEfpF3dFzC1XUxYEH2tt5lO4w406rl8UxE7MvAW-w34DiW9CPiJ16IrJxHtMXmrxS0WbgnyYAkZll-ysV9pXoXd7ZmFI2OrB20Gsoo3WisJOKspMU2BmiklLvaF0IStnSNNnPoq9UVyxO8x-h3PIySe0ClEVkjJ0MS25N0ILrcBwvPxhy4uECzI6ACkewJ5d93ERxM7jMgUup0oqID6IlOsGEx4Q4OOANXeFbIf6aO9Gg2nf-Y6z8v3uEGeJXQIg1dDxmrFXdz2Tfz6MAcvFXzHiEBZWO8KnXdDvbD201ZSgvWgCgq-uvirH97pYc81kCSN8rEl2Z65nLFJBD55rX3b5xzgHRJItjaHZQWJOi2wv-EZW8ieTjPJ3JVT-gFLS7q4CpiVDkwgZVWYlCKNIJ8YH9sCmlX1CUJy6mqIvg0DEmKy1E2dMAjl8wTS9liQgrXsmzlhxzYyV9MDq03LB_R7zNBEkB7pcTkOBS9cnrPmnPeO-mXfMlgkAkbd91dtxuS2CBiYtCcZH4k2V8lNJ7Rq0w_E08caJEyxjYcdeuSBeTtbHrw0uXm8vkSMshIAZ5taWC71eAqe2ve36VL-EnOgkRBFORSdLoW07KoEXW4Q4CSkyS-b0e4uUaakOWawX5-sOD9GZ-38_-5IAYUZWaUb812tcIgCzDdJQAOqIHvNV-CroCNNuyPoevy6eY8EOuENCtDu1HVDm37DA00wCgxsjNoMaSl_RVSizUXokBKVdKMznZv9Z0w_HrUBheuyTiXTw&cid=CAASBORokGo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
Cookie: test_cookie=CheckForPermission
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:41 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUnn2NtYWl1hZdKDFQWtlBKeVpNX62MFUtF1iTm6eK6fGtFI8OdXNF2X6wUB; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly
test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 10862
Md5: e8af50a817f03b315617f2e8c97e42ed
Sha1: ff7beb18dc4697e24baf6be5baefd155e3a1f7fc
Sha256: 6c5bda340d298836354d705fe351f966af4d68fcd71c383dea346a6dd5d1a1ed
|
GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471
Cookie: test_cookie=CheckForPermission
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 14:02:41 GMT
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 214
Md5: 02247d909a831178bfbddac723940ebd
Sha1: 9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
|
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-BgoA2w1NASbZEJL93drJwYSwO4zfHjrGRquqtovopGJXtHztlGRXKmqc9sBFIOEuI-bOowT_ZNAdHIXl-VDvIo_9ralrmLCi-bIbaBqmqVCmDog7U HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:41 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
POST / HTTP/1.1
Host: gn.symcd.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=372329, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 21:25:53 GMT
Expires: Sat, 17 Feb 2018 21:25:53 GMT
Date: Tue, 13 Feb 2018 14:02:41 GMT
Connection: keep-alive
--- Additional Info ---
Magic: data
Size: 1416
Md5: 3f891a32eed58b6879f292ff7e025afd
Sha1: ed3c9623210bcd94514c81872dadd71ebddc5a9e
Sha256: ed1f2baca5463feb271751d58638701fc1c8f0205ee271890aa95acd71e0992d
|
POST /GTSGIAG3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
--- Additional Info ---
Magic: data
Size: 463
Md5: 3f8666a5bea36283578bc10ee5cd930f
Sha1: 526a530c3057adf847bbba35e96736f4d641585b
Sha256: 166a98b8491197265873aa5ff9f1e46c79443bc0e509cd240513fed08e9578a9
|
GET /adfscript/?bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl= HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Server: nginx
Date: Tue, 13 Feb 2018 14:02:41 GMT
Content-Length: 1548
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: C=1; expires=Tue, 13-Mar-2018 14:02:41 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size: 1548
Md5: c1961ce065e8dc555ec0ca523b8b7353
Sha1: eb5a7b3704eed639d04854ff281d701f932e9e36
Sha256: d4537a48745677e091eb0f7636a9df8edd5264bb4c385e68d32c69ee7a6d66d7
|
GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
|
172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:12:49 GMT
Expires: Wed, 21 Feb 2018 14:12:49 GMT
Etag: 18254379283724408787
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3642
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 517792
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 3642
Md5: 24d24f1211524aff604a7a982bfb33ed
Sha1: 15c0f03407eb77a3da6a7476c6ffb4b8993eaefb
Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
|
POST /GTSGIAG3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
|
172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
--- Additional Info ---
Magic: data
Size: 463
Md5: d49329b6cf95ee35d707f7e0ab3f891e
Sha1: bad43a85defedc6449b6bdaf779ee85d18278544
Sha256: 0580cfb371d0324bff4fc549e97d614659eade3215fc737e749308947ad948be
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 14:02:41 GMT
Etag: "5a82cc43-1d7"
Expires: Thu, 15 Feb 2018 14:02:41 GMT
Last-Modified: Tue, 13 Feb 2018 11:30:11 GMT
Server: ECS (arn/45DF)
X-Cache: HIT
Content-Length: 471
--- Additional Info ---
Magic: data
Size: 471
Md5: fba6a596936f70a6c3179459685d66d7
Sha1: d8146b9ad36a094c9e0ad1b7048a8c40156252ad
Sha256: b0d733f2468aed518111919cb361eef5159385258b13d5549584d241a03239c3
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 14:02:41 GMT
Etag: "5a82cc5f-1d7"
Expires: Thu, 15 Feb 2018 14:02:41 GMT
Last-Modified: Tue, 13 Feb 2018 11:30:39 GMT
Server: ECS (arn/4667)
X-Cache: HIT
Content-Length: 471
--- Additional Info ---
Magic: data
Size: 471
Md5: bdd676092b32d438cdb3958993ee99de
Sha1: f8f6992c4867e6f721a4e8776321b1c5d590c17c
Sha256: 6c57d66bbd3413d976bd02ca92c9434b6c259a91a153fddbc476a44a468a1888
|
GET /8405476/priceline_160x600.jpg HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.21.134
HTTP/1.1 200 OK
Content-Type: image/jpeg
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 49027
Date: Tue, 13 Feb 2018 10:55:22 GMT
Expires: Wed, 14 Feb 2018 10:55:22 GMT
Last-Modified: Tue, 13 Feb 2018 08:54:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 11239
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: JPEG image data
Size: 49027
Md5: 672d02c52593f30011886fc325cd6d43
Sha1: addb929dca6638df017628fe9fc876776fd8cf4c
Sha256: 8c7279d1adf9212b1f4abe84b05f297da466d43888808e57f80d0c55ee7a2b49
|
GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 04:54:07 GMT
Expires: Thu, 22 Feb 2018 04:54:07 GMT
Etag: 1003077525306946769
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21796
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 464914
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 21796
Md5: 9c7168207979b5f6ab6777d97a8a0963
Sha1: 9cf64cc271ecf30cfd8043002730eae9b47c2bf8
Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
|
GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1
Host: ads.yahoo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv
|
217.12.15.54
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Date: Tue, 13 Feb 2018 14:02:41 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=ak4k1bld85s01&b=3&s=8o; expires=Wed, 13-Feb-2019 14:02:41 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=axhjb8NnQko2uD7NmcXs7qDp
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"
--- Additional Info ---
|
GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv
Cookie: IDE=AHWqTUnKipjzrf9N3358FSf4m_WfIdoKjmxJ6yxoVUFe1NgBsjA95z_LIvLSzvSK
|
216.58.209.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESENlU4l1fd9jWe5KXCBrJAFk&google_cver=1
Date: Tue, 13 Feb 2018 14:02:41 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: HTML document text
Size: 290
Md5: e934e5e77b89b3e35c01c2d1c979217f
Sha1: dd50f45ff441fc7c3b571523c35f16624d6acb33
Sha256: 7438d43a2c1a353e5fdfb001c8923b2a6fe1377788b9067d1e811223a87dd1c1
|
GET /adfscript/?bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl= HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Server: nginx
Date: Tue, 13 Feb 2018 14:02:41 GMT
Content-Length: 1557
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: C=1; expires=Tue, 13-Mar-2018 14:02:41 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size: 1557
Md5: 8f36f377196da67f426ca80fc9bc82cf
Sha1: c31a71d1832fefbb744c9af5e27aa1659cbb8f9a
Sha256: f450cccb7e50fd42646676eec3839f6fbeaed2fc8423f1cff7307251fb7b397e
|
GET /dbm/ad?dbm_c=AKAmf-AQ7uQTK6Y3BXPwcPOijzJLpc5QWvIWDsvc06a-ymETLveQJ_D1iB7pudsOps0x6h39xuQ0&dbm_d=AKAmf-CU3de9-V7BBeTGaHBvdvjRFynRkXr6KSHBD6jVV-mQHiS1LjmKZocdZMeO7h5IoBkQxILN5KdmVIKbVbK7u_ZDP11qCuwP0GJjOKvjWH7feXch2hkBfsTwdz7oeZ0xsgx7iebdw4MhOfxEzCeQUQElYQaQh8iZ_VXFwCRTbiO9RKaOyNoFMsWrZejBPpE36LNfdxuA7nIbEzgmhXIoXQSTv1ZNn60pvY9mDAu02szuiPv85gVnD8fg1xq3ii_t6JjZO6QoE0vQZzDHJ0Gs7hLiCey1jYrYHhoxkwbG9Gi9X7mPI8OshZi8NJl-WIwXMt7JvKwIpPkgyOltMUuv5aQfgv5H2E0aI_tGBsneYJGbzgd4Gdsf-l4INzf--Jp4HUH6sucbWrrFye9kPEN1eGXg9mOe8w7_KK3e8RUuccQdw4tiDfUwErkQsBUlyDSm4gps804lEBUNJGyv4EsfhAVXf_7j4CnpZMo8Uxry2vjJsK21LO18eRMsHqJZN80Tyw7rjXm4wVzQMrhRvt-tzk0ZRz5sGfNYY8la4bGfWgKrqzogEJKie5LKk4NMaHr5JSDpLP9oUI-GaRBjwe_b5VC0NALyz2ivwlKZGfw2zRiQgDfYnuc855grfyqc_uf7VC60aHgva-r__FFxROLdTo-3ScwJHflWEcJ4qXNTHGWgbqcRDUUi78DUzt39LtE8NCDaCwJvnmW4L8TnV79aY_WZqkwcoM3P6pAxaOvQBdz4rD11JwiQXAit_QTfi3revowP2vc_uSvEreoUtuT_XwBm9Gp9iHTD_aB4ggNjZMUk2TGXNP-4M7PQi8rge413WKmptXT5p9T9Ph2U4ytXU9BAuyIRNkhXw5vmMgVxkHJ0fh4sZKT96IYD8tY-6PFWE_vyTnsnGJL8wQNNns9_GasCE4HMk4ZeI-VWTuykRrSeNqqXl4WFP3cQ0cny3AR6cqG4DlNpeDQQHGWDZUlKipzsYTVktXsaK_FNks5nD1YLrPXsBhmNDm0fVYqVSpzZLJLNeosgk85uM9Pn12-RP8S0g_9K-XfdkwhfZbxvDUr518UpP3h-VHDVmLImnwdUPa2DlJ0jie6bwDHA1iO4CjpSph8W_6KJCR_CcZUXSQ_ylFzZPR0EhM-yvl70djwTrkmBjpR41aFZ7ohlFQZ0MaEnlM-MILDRuSdjRG8L-dPGaA-ky8U2RbTZHtKt1OsxrnOQWVqR1oxc4qzKU0Dfscsz2gwtZD3EOQvhpCbtp4QG6YEdEhjHSVM8S5CVPSdrVlmRd6QNOpQgEWYGzmIy1Lcwlm3AgnHEl4gqQiU8dQMtl7WPhytPKuZWArJCXwtxxsH-w3hHe_IFDJpTrBPaF3wgSagQ0wlsfRrXvZ1gJpzYFIYa1OA3D1ORoIxGK3wd7hlOwrBN9oN1JCQCKCH7oB3O9zFo1yEfY7a13nqyfBqujNL-3InexkKXFiVViblG-FWvliZbL-65gpOQ0bQucQv0TmhKlyjhhpxNtiHNEQ6rRTZLa71R-mIacBT1K8HNkttVcaqI1Gmc5uASmcMF22-ZaV4pWmYZdGoPeEawxyPPvUgPT4nZxX6JXe--h-20sUpLHYICKILit9yQkcFtaPCgPYQ3FRHDlxRoOuh1ZTCNwP8puDg&cid=CAASBORoCbo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471
Cookie: test_cookie=CheckForPermission
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:41 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly
test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 10917
Md5: 22eded2356288702884d6568dc0a6f07
Sha1: 0e435ed73601f74cec5bf2e0506837026dce0490
Sha256: 7e888c68928f5be110707ec659aeae0eb057a828a05118a56828fefacc3ea7d2
|
GET /pagead/js/lidar.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 13:53:37 GMT
Expires: Tue, 13 Feb 2018 14:53:37 GMT
Etag: 6831844447556634063
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 34299
X-XSS-Protection: 1; mode=block
Age: 544
Cache-Control: public, max-age=3600
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 34299
Md5: 4af480d154ceb9d4226b2a21f80b6b9e
Sha1: 514b804d0a119a0063bfc1d9e20f7b7c7004d80c
Sha256: e45497d04a8eb2999ade55e5f45265811efc3e5ab7eaf6929db863b133d6f181
|
GET /stoat/607/s1.adform.net/bootstrap.js HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
|
37.157.6.234
HTTP/1.1 200 OK
Content-Type: text/javascript
Server: nginx
Date: Tue, 13 Feb 2018 14:02:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT
Cache-Control: public, max-age=100000
Expires: Wed, 14 Feb 2018 17:49:03 GMT
X-Cache-Status: HIT
Content-Encoding: gzip
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 13691
Md5: 7dff8bc845f03fef9414515e1e823030
Sha1: ad7ce3dac1e6eefe12829d27e4a9d2b1ea8eaa3a
Sha256: fc5f373371abfa589671c2a31ae4d5711c0507b578cef62f7eb12d8c836d0bf9
|
GET /pcs/view?xai=AKAOjsslMn2WShmgwPI-Nj-jbqy3P9sGzt1c8Ld_wT9h_KvTUWlaqNj09AU0s8bbEgelnuv2udgF30B4yO4xapZ4sgbzHFopVFPlKz2pj3CUsURt9TtqX54OTSTVilXpr3t55U7UyjT1Dc8XMgzzzJxLPMgLE2b5OFSjP6Xc6kEM-kGW4EH-Ti3fVgSsLtuJbET_fqev4H6gsL-ERqZ7MddXWiEp2kAJNig1uf3U2NzZbmhtiCXrTPH_G2g2Px44ZNpeBPi-wnmc-ZvS2AWUc6adz5wgp9sEfKDY-X3QzEI1X3Ko9TJ53V1lgtOwp0sAyzKRFEsUmhmySgueM2v_ILcRF1FPMYnDOAuAgmNNHEwMIxbF3oMYN7QYVhDKgO2Z7_FiqwM66bzk3UYC1PUJOMeOZnwZ-rcW0uW2fCrRuBjWqrAYfU_T16QFqbUs0Fpr0HYuOgMCLCvCtp8AxJ7DC2EAEKIUO8l0xLVhvtTra-njs_HUU5W5E5ncHFFHHyNhckimfDBmM1K-XfNBmae_myDmARQe2hbl34urUl11iUlGtSA-gjLOxwgRVLMMIhoiNIyn4AXd-vCSANw3vu4v3tmYQFq7nkrBuHK6VG9ASzXLQlVHJFwUk2cGOA-uIdfslLBxAS4pLbg0mjSGCANtQN8023vdGoJsUC9a2brIC1YGZKWkOvovA81H9PAlmhVrn1N2sV63o-VwKQPH1gPCe0QJaNWPLgRtAJvST2hhXkzdVfA204rNFB-Agt-SjHIHn1Nf1PoiLQNBnaIjvgB6qje-hu0yLrCCXQrFf1F5ZdKc2K2ucxc3mSmRi1X5CalifSQ&sai=AMfl-YR3IJkejPzp3_XNsVTmZIlDLIXE-Glq4wZCFi40GHB4EbaTMHW7uUPyGVVb9XOhGwM9xNb2OfnKNjPOIbVFEGu3NhX_lzqb&sig=Cg0ArKJSzCaLGOvj4PcEEAE&urlfix=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
Cookie: IDE=AHWqTUnn2NtYWl1hZdKDFQWtlBKeVpNX62MFUtF1iTm6eK6fGtFI8OdXNF2X6wUB
|
216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 14:02:42 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
|
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:42 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 17:56:39 GMT
Expires: Mon, 19 Feb 2018 17:56:39 GMT
Etag: 6E1390A0BD1EA29D9D3CAFC2B28D81858CED524B
Cache-Control: max-age=531836,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp15
Content-Length: 278
Connection: close
--- Additional Info ---
Magic: data
Size: 278
Md5: c9d0f8a0c103fd3f76a3231d292019e3
Sha1: 6e1390a0bd1ea29d9d3cafc2b28d81858ced524b
Sha256: c2561fc07b4706316266d5a4d9b40e09479226c56d94d7fc92effeb96bf25de1
|
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Feb 2018 14:02:42 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: 8E242477BF0882B1319BC4C53887CEDD2AF131E2
Cache-Control: max-age=508690,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 313
Connection: close
--- Additional Info ---
Magic: data
Size: 313
Md5: f5c0f9572b3e8f64a0cbc1a07f453401
Sha1: 8e242477bf0882b1319bc4c53887cedd2af131e2
Sha256: 32ad01098f31aba2f0060dc68180378325772eea6370174e99e0d1f6131978f4
|
POST / HTTP/1.1
Host: rc.symcd.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
|
23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.12.2
Content-Length: 1034
Content-Transfer-Encoding: binary
Cache-Control: max-age=350825, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 15:25:41 GMT
Expires: Sat, 17 Feb 2018 15:25:41 GMT
Date: Tue, 13 Feb 2018 14:02:42 GMT
Connection: keep-alive
--- Additional Info ---
Magic: data
Size: 1034
Md5: baf34d986c00b66407375ac23eec7499
Sha1: 4451f614115ab7a166b37973aafa4dcae9e2a93f
Sha256: ac2f7c04a4378ed2d8a2a21de045d89445cf8eab3c7bf989ea332c181f7c56b2
|
GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh
Cookie: IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK
|
216.58.209.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESELLkQuC2aJgjs93znAnFf2A&google_cver=1
Date: Tue, 13 Feb 2018 14:02:42 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: HTML document text
Size: 290
Md5: 78f117d56eb092eec05f3bd8aa9ca973
Sha1: 6dbf03572fb90e63e42ce832c31da8763f8fbeed
Sha256: 7960f267fcb48949682d670f1e47643169c5af59e8929ea1d35f2cf36e5c3c34
|
GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
|
172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 15:02:16 GMT
Expires: Wed, 21 Feb 2018 15:02:16 GMT
Etag: 4319863517479632446
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29527
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 514826
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 29527
Md5: cb7c5d42c8b00cdec8b3bfb65909c20b
Sha1: df39b61e2fd957f8b9ade02e65c59ec51cec5c46
Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
|
GET /c/NDj2.js HTTP/1.1
Host: cdn.minescripts.info
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
104.18.46.158
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 13 Feb 2018 14:02:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=df4e123e90d9dae87fdbb975ba44d7fe31518530562; expires=Wed, 13-Feb-19 14:02:42 GMT; path=/; domain=.minescripts.info; HttpOnly
Last-Modified: Tue, 13 Feb 2018 08:47:22 GMT
Etag: W/"5a82a61a-26a1a"
Expires: Tue, 13 Feb 2018 18:02:42 GMT
Cache-Control: public, max-age=14400
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 3ec853b0ca2742b5-OSL
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 39531
Md5: 1c9c37ee94ec3e1c6d5f4714d1360779
Sha1: a1570f3c3ee93136527182865f70fd8c9fbca2a4
Sha256: 410d40e0587fd552a61e4870c7cfc56382e5b76b0ce9ef5b9afdb5e157246c11
Alerts:
Blacklists:
- fortinet: Malware
|
GET /adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=2x;2991;set=en-US|en-US|1176X885|10.0452|450|50|24|8|3|7|1;fd=0|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Server: nginx
Date: Tue, 13 Feb 2018 14:02:42 GMT
Content-Length: 2804
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: cid=4884062866989652075,0,0,0,0; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/
uid=4884062866989652075; domain=adform.net; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size: 2804
Md5: 8eb5236ef924d3a2d8bfd0ae9774edbe
Sha1: 48efe0175e3496065c46f93ed32be89753cbaa72
Sha256: 97f9b4d3cf9e36eed45eb4f3eb61f946b05cd885c666489c41dfeec145b46384
|
GET /adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=1x;3781;set=en-US|en-US|1176X885|10.0452|450|50|24|8|3|7|1;fd=0|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
Cookie: C=1
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Server: nginx
Date: Tue, 13 Feb 2018 14:02:42 GMT
Content-Length: 2804
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: cid=5540862615520228074,0,0,0,0; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/
uid=5540862615520228074; domain=adform.net; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size: 2804
Md5: bcd8e89d4e975bd9c0d0acd5f45fa230
Sha1: e3cb2e4697c159612fc22d94f1fc0a7b37c3f77c
Sha256: d09bc40e582380305190665afea5acf4778fb174e941eb9ec958e63e1fce84e3
|
GET /activeview?avi=Bp8K1APCCWoX0Oc6yYsi5nUgA0OzA2ckGAAAQATgByAEJyAMC4AQDoAZM0ggFCIBhEAE&cid=CAASBORoCbo&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:42 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
GET /setuid?entity=101&code=CAESENlU4l1fd9jWe5KXCBrJAFk&google_cver=1 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv
|
37.252.172.42
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.13.4
Date: Tue, 13 Feb 2018 14:02:45 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 8e6208a8-d455-46e1-aa6c-d24bc605421e
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HaQD2>7N!@wnf]maBDeKuh7<xR))l!Qa3jPw@#/kdWoeE2w.jcU`ykw@)=i7NVvtl2@j@]Ex]**PRPP(dH])q#JQ; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly
sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 247.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.123:80
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 43
Md5: 592ebefc7104d681d57852665e9ad514
Sha1: 15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
|
GET /xbbe/match?xid=axhjb8NnQko2uD7NmcXs7qDp HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv
Cookie: IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK
|
172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 14:02:41 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
|
GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
|
172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Feb 2018 18:19:18 GMT
Expires: Mon, 26 Feb 2018 18:19:18 GMT
Etag: 2112876643077467119
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1203
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 71005
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 1203
Md5: 9a504624fadda2dcec8340bf93b2252c
Sha1: fa6dbebcf9b5450a1dd2f2371c971e838ff627c0
Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
|
GET /sodar/V6zvOIoD.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15146
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 86267
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 15146
Md5: 6a56e1d1c9c0c105245cbce244c876f3
Sha1: 6613490ab3735f37499d311c6efba3f689ec4abb
Sha256: ad20ef401ac229a0ab07b057ed9350c85816118a662c7cfa240fa5cd86c718f0
|
GET /stoat/607/s1.adform.net/load/v/0.0.146/e/0gCDgAA/i/8IG-iAAAAEAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: uid=4884062866989652075
|
37.157.6.234
HTTP/1.1 200 OK
Content-Type: text/javascript
Server: nginx
Date: Tue, 13 Feb 2018 14:02:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT
Cache-Control: public, max-age=100000
Expires: Wed, 14 Feb 2018 17:14:25 GMT
X-Cache-Status: HIT
Content-Encoding: gzip
--- Additional Info ---
Magic: gzip compressed data, from Unix
Size: 35421
Md5: 752645330ed92c2f879fb9161238682f
Sha1: 720b6c7864e5f084dd5e6a0faa196297544b8e60
Sha256: 37a4451a293bcb4c698aadf71e4449da5bf3b901ddba00e220fe221b30103358
|
GET /pcs/activeview?xai=AKAOjss7T9JzbufnjJum1x3S-VQUTcqPDyQIgS1Pl_8sm3Np8e7cDzEOEk2RbUOytqyWt_5jxVXYh9JG9PZPG2xV&sig=Cg0ArKJSzOD6c9FLLLIjEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1<e=-2&bas=-1&bac=-1&if=1&r=pv&tt=802&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560105%26bpp%3D4%26fdt%3D349%26idt%3D445%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D585x60%252C585x60%26correlator%3D2522521449464%26frm%3D20%26ga_vid%3D709438037.1518530560%26ga_sid%3D1518530560%26ga_hid%3D1665291383%26ga_fc%3D0%26pv%3D1%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D490%26ady%3D3781%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D38893302%252C21061122%252C191880502%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D528%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257Cbr%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D144%26bc%3D1%26ifi%3D3%26dtd%3D471&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560105%26bpp%3D4%26fdt%3D349%26idt%3D445%26shv%3D HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
GET /activeview?avi=BKY2BAPCCWrGlOIWyYePbsJgIANDswNnJBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB&cid=CAASBORokGo&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1
Host: ads.yahoo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh
|
217.12.15.54
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Date: Tue, 13 Feb 2018 14:02:43 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=3ohpg51d85s03&b=3&s=8b; expires=Wed, 13-Feb-2019 14:02:43 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=yFGbmNY1RhbxEdy8zxu3LYEo
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"
--- Additional Info ---
|
GET /pcs/activeview?xai=AKAOjsu7uV796Ic6P3uvrcBJUg3c9KLHr55KzkZldL5W375Ph_3C7uo5r1O9G2XNB2FSZz7cCwPMxn84rwt9iu7Y&sig=Cg0ArKJSzN-G0tG55kL8EAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1<e=-2&bas=-1&bac=-1&if=1&r=pv&tt=831&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560109%26bpp%3D5%26fdt%3D496%26idt%3D587%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D585x60%252C585x60%252C178x600%26correlator%3D2522521449464%26frm%3D20%26ga_vid%3D709438037.1518530560%26ga_sid%3D1518530560%26ga_hid%3D1665291383%26ga_fc%3D0%26pv%3D1%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D490%26ady%3D5181%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D38893302%252C21061122%252C191880502%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D528%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257Cbr%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D144%26bc%3D1%26ifi%3D4%26dtd%3D606&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560109%26bpp%3D5%26fdt%3D496%26idt%3D HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
GET /sodar/6uQTKQJz.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606
|
172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7233
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 86267
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 7233
Md5: 30bf1c51eb9c0ba258ea2df31d24bc98
Sha1: d13abffacc94ee31dfd5a094bfa975cca8e4d292
Sha256: 25a3afe99572ebbe3af74f504252d7fe97ebd580d47f5b734c286cc40a82131e
|
GET /csimpr/?bn=21309103&csi=jx8IavnnCjGDnTAnrE_JdeofrBzzXNcj8alussah8sNFVA7t4fWUWQO8_7rsP1jj0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 35
Md5: 28d6814f309ea289f847c69cf91194c6
Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
|
GET /Banners/21767715/21767715.gif?bv=2 HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: uid=5540862615520228074
|
37.157.6.234
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:43 GMT
Content-Length: 17743
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Tue, 19 Sep 2017 08:36:49 GMT
Etag: "59c0d721-454f"
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=604800
Strict-Transport-Security: max-age=0
X-Cache-Status: HIT
Accept-Ranges: bytes
--- Additional Info ---
Magic: GIF image data, version 89a, 468 x 60
Size: 17743
Md5: f567b2253fea74153db2987bdc857b6c
Sha1: 6afa5e35b7e26796b46dba59349afefaf1135673
Sha256: eeb656b80f03b69b29be4e269400c2ae84d0ca2c5b4f854826a13364a76ee938
|
GET /activeview?avi=BGAMsAPCCWrTuOY2fYtW1hBAAvtC4heUCAAAQATgByAEJoAYh0ggFCIBhEAE&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
GET /activeview?avi=Bh1mCAPCCWvfwOdWvYraHqfAPAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 42
Md5: d89746888da2d9510b64a9f031eaecd5
Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
|
GET /xbbe/match?xid=yFGbmNY1RhbxEdy8zxu3LYEo HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh
Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr
|
172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 14:02:43 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
|
GET /setuid?entity=101&code=CAESELLkQuC2aJgjs93znAnFf2A&google_cver=1 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh
|
37.252.172.42
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.13.4
Date: Tue, 13 Feb 2018 14:02:45 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 0ddd4d27-945d-4c5c-b1a3-1e51ca364fd6
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HaQD2>7N!@wnf]maBDeKuh7<xR))l!Qa3jb3'!^lmBWi7:Eak`D<_hW@eyh/egXtl2@j@]Ex]**PRPP(dH]--Iz+; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly
sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 247.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.21:80
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 43
Md5: 592ebefc7104d681d57852665e9ad514
Sha1: 15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
|
GET /bg/IOA8y9bJh23yzX_Xx1Lzdpvil-FmhhSrkRF2am8kUAc.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html
|
172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4991
Date: Sun, 11 Feb 2018 22:21:44 GMT
Expires: Mon, 11 Feb 2019 22:21:44 GMT
Last-Modified: Mon, 05 Feb 2018 09:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 142859
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
Magic: gzip compressed data, max compression
Size: 4991
Md5: 35c97f406c207e558268924a05d5cfb0
Sha1: 410bd15d5b2dbffb516605c9d5a2a52d8d8d6eed
Sha256: 536f40cf7ac29a53a42ac183eefd062e0228e22f034f8ad2e8f1ffaaa771f5ed
|
GET /csimpr/?bn=21309103&csi=kxDSylZW3BOPpRnQbl_qNPzTX0_v58K22U2eWLEEnMqDbTMoIwQorwO8_7rsP1jj0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 35
Md5: 28d6814f309ea289f847c69cf91194c6
Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
|
GET /Banners/21767731/21767731.gif?bv=2 HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
Cookie: uid=5540862615520228074
|
37.157.6.234
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:43 GMT
Content-Length: 15052
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Tue, 19 Sep 2017 08:36:47 GMT
Etag: "59c0d71f-3acc"
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=604800
Strict-Transport-Security: max-age=0
X-Cache-Status: HIT
Accept-Ranges: bytes
--- Additional Info ---
Magic: GIF image data, version 89a, 468 x 60
Size: 15052
Md5: 87742ccf99a1950a3e66f12429ba7615
Sha1: 5b43913981347e76b1914daf4ae701481ce1e86e
Sha256: 3458ad70db311347cc06f1e978796e11a424a4c8ae78a78d505569a1a534808e
|
GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=B5hg3AfCCWuqoDciyYYGEtYAJAAAAADgB4AQC&bg=!p6SlpLxElacSMfm7JpICAAAAuFIAAAARCgAGo8Hx0DrcmQEjD1YeIgB79ttFuyYqRhP5RwrZIF3jvuqNCtdqZfkIX0up7lqlzXBV_dVzbujD2iW9Cq8XcTEbPrtxWEn0kYKdtEPpt_887M4lD3yD-iyqv16kB5sVZdnQ4988pkiLmd9SP8tb1GokhbTx1i5TOs5II_QXvS7rgGGCr9srJvhMeoUDoKp7D7gaHkMYTsEOB2_52OtjcriZ7ArKoQZMbMC-KmJmzc6Kqx4-brwT8J6JJpgIQMnUK3LF_ek2HL0gN6FwlYWUQVNujrrpt2_N00L-L5lHfEBGC4siqXV1qVCIPecapXCthLXEPP6_rEqs9XemAgvbSvq75VjuauvfPAoEtY1fetvf9ZXePTOKvl-sBNp7Bk_eQaRlEJEJZMdOppo7Zbp6 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html
|
172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
|
GET /pcs/view?xai=AKAOjsuRApkmTV_zOPtX8C_Yv6RNDl6UZyibxuoIUE8jRsKROBalMBy_AnKYff3iRT3-Nl2MuxoV8NBZKbW2_j11FCuaY75Nfg9PNzLVQ5rDpbJBQ6QDvxZh9qwU18l90T9yi_65gZhDe6R_1FaHLQShXhpqS6C3p9iCv5DNoiiIyKmlVGhrjq3ILh80Yehpbm2HJXEh8IEn_XOagBvrFsNxq0sER45SKoJHVMIxquy13wj-FdOGAXN9j2XqeLFXbjAdaR94MFsvnV07DwFp4GJaRodQbZNwLOwcl_mglnNmoPZDlEx3d30qrQwJshCS0aDN7P5moifbzHFuI_TqbNdA8nsRnRXetH1WMfdJsN1J0AN3CBm35aMwr8uArxwKi3ZOFE9TaAD78m2UH_9dqckQP99NHDOkRLwtD6hXlzlB3JLb3wt5pTG8BHXnEkqvZyJHQ_hRnZC8dETQMs3xSvydel3QvhwQaQWmMrSfPInP8r4GIvxDJnXScAl4GXAVcTaOAyz2sjkzW2Fx-_AejQOm1Ag4QtZMR_yJqqem5LhvT74JhBuI96TglwvpvjIkJ2cuXnNXIXhbkvcKiGcsJN2xraoshJ5UAhVh_SUnhUOdGUBiBGhHctgBpZ-iSINmGFgWrOBa9jhQP5v7u9-TaxBxbAF9A3gUMHoDSmzu1GlwZTHDGyAwFTEUv7c3f6HstlgCnqY1j_rRqPZeGr9NhHKfzKuyIr-JOJrzRNaUmjEC-4IsyCzVFH0EAFVd-ycts3F43Ys_ldhomdhAMr6R2ScXfnrVJRYyFTMC71UQZzJbsDzpAXQoVVW5PI5SDNsTQQ&sai=AMfl-YT-qokCoRUdycTUnoGNqdhGAqO7yFTAu2BmtKCrg3ra-kB66S1CbG7z7YNcVsTZQ6p1ZVfyZw7sqgwNgasPUpXdYCavovLs&sig=Cg0ArKJSzIXHQQtugRxxEAE&urlfix=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471
Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr
|
216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 14:02:43 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
|
GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=B12fOAfCCWtvJD46GZvuwvugBAAAAADgB4AQC&bg=!wcKlwtpEd5lCiJvNm_YCAAAAtVIAAAASCgAGo7gZNcRwmQEjc4ynGlMxzJserL3M3_iYMcT2Rg6966PaWoSDWuns6NJkT9m87ITGr6cs-V9s6sJfDHQZigUGg0VSi5Dd-TzD-L9q-nNNsoBmha4SOxdK1SZ4uWekLxpSVeRdNsjqo1mA3lXLvZ7_fWggLZmMIVs42zP7PqLfGnQLtvpUIz6tAHzkQrtzGecsqKP7_OruwplyuRol9k6BdZQnLePDg3xvkHKdK4WBRnjwVoMrfEzBvDN_tzflt9THFNNLEVpDZ4a2Tk-PrRAwgedjcVwuiVoQv-uwo9ug1_KPczWCcT2uH1WRmSIsqFUCs_TA_4gYzaXdMXBVlCdO3Tul47eHpl2PyMXI6135uo27AnVyX97wsYMWGrtB6N_h8_ptXxGl9IG6vM2d HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html
|
172.217.22.162
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 14:02:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
--- Additional Info ---
|
GET /serving/unload/?version=15&unload=4884062866989652075@@21309103,6943412087193422675,0|0|0|0|0|0|0|0|0||0|1|1|5a82f000000e77340a188f8d02011ad5_1|||1|0|0|| HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 35
Md5: 28d6814f309ea289f847c69cf91194c6
Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
|
GET /serving/unload/?version=15&unload=4884062866989652075@@21309103,6943412087193422675,0|0|0|0|0|0|0|0|0||0|1|1|5a82f000000e77340a188f8d02011ad5_1|||1|0|0|| HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358
Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 35
Md5: 28d6814f309ea289f847c69cf91194c6
Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
|
GET /serving/unload/?version=15&unload=5540862615520228074@@21309103,7853764838924771920,41|0|0|0|0|0|0|0|0||0|1|1|5a82f000000e78770a1897d5fe0a43b6_1|||1|0|0|| HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 35
Md5: 28d6814f309ea289f847c69cf91194c6
Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
|
GET /serving/unload/?version=15&unload=5540862615520228074@@21309103,7853764838924771920,41|0|0|0|0|0|0|0|0||0|1|1|5a82f000000e78770a1897d5fe0a43b6_1|||1|0|0|| HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264
Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074
|
37.157.6.253
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Tue, 13 Feb 2018 14:02:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
--- Additional Info ---
Magic: GIF image data, version 89a, 1 x 1
Size: 35
Md5: 28d6814f309ea289f847c69cf91194c6
Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
|
GET /v5/img/logo-wifeo-160.svg HTTP/1.1
Host: www.wifeo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://michaelnativel.wifeo.com/
|
194.146.225.153
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Date: Tue, 13 Feb 2018 14:02:26 GMT
Server: WIFEO
Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT
Etag: "1963-53d135b636155"
Accept-Ranges: bytes
Content-Length: 6499
Vary: User-Agent
Connection: close
--- Additional Info ---
|