Overview

URL miki976.beepworld.it/
IP149.202.25.210
ASNAS16276 OVH SAS
Location France
Report completed2018-02-13 13:46:16 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-02-13 2 cdn.minescripts.info/c/NDj2.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 149.202.25.210

Date UQ / IDS / BL URL IP
2018-12-07 12:08:20 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut129.exe 149.202.25.210
2018-12-07 11:39:32 +0100
0 - 0 - 2 hosp-att01.beepworld.it/files/slide-fotos03.exe 149.202.25.210
2018-12-07 08:06:15 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut76.exe 149.202.25.210
2018-12-07 08:05:36 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut49.exe 149.202.25.210
2018-12-07 08:04:57 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut25.exe 149.202.25.210
2018-12-07 08:04:42 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut22.exe 149.202.25.210
2018-12-07 08:03:20 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut86.exe 149.202.25.210
2018-12-07 07:58:54 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut100.exe 149.202.25.210
2018-12-07 04:24:22 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut121.exe 149.202.25.210
2018-12-06 16:19:15 +0100
0 - 0 - 2 fotolog12.beepworld.it/files/slide-orkut29.exe 149.202.25.210

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2018-12-13 12:49:38 +0100
0 - 0 - 1 https://melabatement.ga/workload/binbb.exe 5.196.217.176
2018-12-13 12:38:57 +0100
0 - 0 - 1 juhdnfon.franzhost.com/ 149.202.166.135
2018-12-13 12:21:42 +0100
0 - 0 - 13 www.tailleesurmesure.com/2015/02/ 213.186.33.17
2018-12-13 12:19:45 +0100
2 - 1 - 17 recestudios.com/index.php/catalogsearch/advanced 5.135.28.72
2018-12-13 12:12:33 +0100
0 - 0 - 13 www.tailleesurmesure.com/2012/05/ 213.186.33.17
2018-12-13 11:58:49 +0100
0 - 2 - 0 satiricon.be/Rotary.pdf 213.186.33.19
2018-12-13 11:48:40 +0100
0 - 1 - 1 winmend.com/pad/download/WinMend-Folder-Hidden.exe 37.187.118.25
2018-12-13 11:47:52 +0100
0 - 0 - 1 gamefon.net/content/book/file/232_1286661913.jar 51.254.62.96
2018-12-13 11:47:31 +0100
0 - 0 - 2 mcvillars.com/applicationfolder/ifile.exe 213.186.33.18
2018-12-13 11:47:03 +0100
0 - 0 - 2 fastxpressdownload.com/fast/zippy/wallet.exe 188.165.124.186

No other reports on domain: beepworld.it



JavaScript

Executed Scripts (36)


Executed Evals (87)

#1 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 7a8c20ef55544a4104ff81127b414d36132dd8d896f498d2df40bee78140bb35

                                        0,
function(Z) {
    B(Z, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 2e588a2a5d3c27665ca10b42d6a170e528f32d2de2959a380de0275c1ade93e1

                                        0,
function(Z) {
    B(Z, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 4653c9b649ed897e5fece4329f4b737fafea3f19f0fc0fb5224d93d1bf92a4d7

                                        0,
function(Z) {
    B(Z, 4);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 1) - SHA256: d6e127bd29297c747026ff32276a64f4179fd295c7fcfe49eeda3061f4c6f970

                                        0,
function(Z) {
    Z.H(0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: ecc26fcbaef854185d8c80dd67ac1b1f388b538989d24d9d55b6147962b6a9cf

                                        0,
function(Z) {
    Z.H(3);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 346c56538a3b8be715810bbc10574cd48a46fb6f1f7edee874c7f684f2de51c2

                                        0,
function(Z) {
    Z.H(4);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: c8ad7eba57c7193378696817bc2908e55047cc109b1143dbfe2877983ad9a846

                                        0,
function(Z) {
    Z.H(7);
}
                                    

#8 JavaScript::Eval (size: 38, repeated: 1) - SHA256: c5169478f0eb7739c404bee77ab1bf0172a3388b044475e06a4cb7e68bca2847

                                        0,
function(Z) {
    Z.K && d(Z, 0);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: d6a70c0fa32cf217273c52ada9f43efb53b7a2f8c206e6fb75727bdc1fa7c049

                                        0,
function(Z) {
    m(Z, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: f84b2ef24cd61663af1055023a92cea54c187bc816014f49ac3c550e6a472b8d

                                        0,
function(Z) {
    m(Z, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: d4769cdffe17ea14780900fe66717ac659ef34b9ca2799aff7ba06f37d1cfd37

                                        0,
function(Z) {
    m(Z, 4);
}
                                    

#12 JavaScript::Eval (size: 95, repeated: 1) - SHA256: bb5de887a71abeb9160b11cef4ca96347d43764da2f53cd2d4eeed902fb75902

                                        0,
function(Z, u) {
    Z = (u = Z.D(), Z.g(u)), Z[0].removeEventListener(Z[1], Z[2], false);
}
                                    

#13 JavaScript::Eval (size: 513, repeated: 1) - SHA256: 00b13489cf4933e25a1fb6f23d63ba666af186823feb121b5b31db658b2b2dc9

                                        0,
function(Z, u) {
    if (this.w) {
        return Z = Z ? this.w().shift() : this.U().shift(), this.w().length ||
            this.U().length || (this.U = this.w = void 0, this.V--), Z;
    }
    if (!(Z = this.g(240), Z in this.l)) {
        throw c(this, 31), this.X;
    }
    return (void 0 == this.G && (this.G = k(this.l, Z - 4), this.W = void 0), this.W != Z >> 3 &&
        (this.W = Z >> 3, u = [0, 0, 0, this.g(104)], this.C = X(this.G, this.W, u)), G(this, 240, Z + 1), this).l[Z] ^ this.C[Z % 8];
}
                                    

#14 JavaScript::Eval (size: 125, repeated: 1) - SHA256: ba86aeba53f9c0c9f6ef588edeb1951326c852172cc1d6f3282521c058ead1dc

                                        0,
function(Z, u) {
    if (void 0 === (u = this.L[Z], u)) {
        throw c(this, 30, 0, Z), this.X;
    }
    return u();
}
                                    

#15 JavaScript::Eval (size: 83, repeated: 1) - SHA256: d109d4fb838ba298e58c2a6d60ba4e0840e7c41029c4b0e8107b0b97cfb11ead

                                        0,
function(Z, u) {
    t(Z, 1, 5) || (u = h(Z), G(Z, u.S, u.B.apply(u.s, u.o)));
}
                                    

#16 JavaScript::Eval (size: 50, repeated: 1) - SHA256: 4d07a83bda5331c93f09315f36f92aa2b930dd01119c1aafc9e7fc8769f4ecfd

                                        0,
function(Z, u) {
    u = Z.g(Z.D()), x(Z, u);
}
                                    

#17 JavaScript::Eval (size: 183, repeated: 1) - SHA256: 92a90ba81c5479c70cc21d7dab9deb818cd5b13be8405c5a4cee260dad651576

                                        0,
function(Z, u) {
    u.push(Z[0] << 24 | Z[1] << 16 | Z[2] << 8 | Z[3]), u.push(Z[4] << 24 | Z[5] << 16 | Z[6] << 8 | Z[7]), u.push(Z[8] << 24 | Z[9] << 16 | Z[10] << 8 | Z[11]);
}
                                    

#18 JavaScript::Eval (size: 80, repeated: 1) - SHA256: a2b96a7b3667582924d9784b3989b6c5f725377077238cbd652c51e9c074280c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) % Z.g(u));
}
                                    

#19 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 82db8025c043a7618fbeeb4c23553d32d2a224138f6623baca027e74301f0f74

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) * Z.g(u));
}
                                    

#20 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 9505de4c53f5741c59436b7f2dfcbe99e590a0bac5a3f23363d9c51db6c9b90c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) + Z.g(u));
}
                                    

#21 JavaScript::Eval (size: 80, repeated: 1) - SHA256: c5dc2480ad566977a5ef2b294da1a3ed861f0ed748a6b46f9bf4bad3baae5e54

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) - Z.g(u));
}
                                    

#22 JavaScript::Eval (size: 90, repeated: 1) - SHA256: d0b54ffb9c33c33b23ff9f9366c2a4713eb62445648ba0140e98910cfff86e9b

                                        0,
function(Z, u, U) {
    (u = (U = (u = Z.D(), Z).D(), Z.L)[u] && Z.g(u), G)(Z, U, u);
}
                                    

#23 JavaScript::Eval (size: 81, repeated: 1) - SHA256: 9b6460a9786ac9cff04a8b1eb3b1df8ec9940f5ffa023c13e49900fa66dc06a8

                                        0,
function(Z, u, U) {
    (u = (u = Z.D(), U = Z.D(), Z).g(u), G)(Z, U, D(u));
}
                                    

#24 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 6356af2218e63df3518023fed6819b49f125721f04737b4193acc52ffb3ceea7

                                        0,
function(Z, u, U) {
    0 != (U = (u = Z.D(), Z.D()), Z).g(u) && G(Z, 240, Z.g(U));
}
                                    

#25 JavaScript::Eval (size: 74, repeated: 1) - SHA256: 699160dbfe8f8f5ab7736b77370fca83a7b4e3af931d52932cb74975b5a3291a

                                        0,
function(Z, u, U) {
    U = (u = Z.D(), Z).D(), G(Z, U, "" + Z.g(u));
}
                                    

#26 JavaScript::Eval (size: 244, repeated: 1) - SHA256: ee6e90631daf3d1f701046e71362ab0e5755517cfb75ed87acded9972daec977

                                        0,
function(Z, u, U) {
    if (3 == Z.length) {
        for (U = 0; 3 > U; U++) {
            u[U] += Z[U];
        }
        for (Z = [13, 8, 13, 12, 16, 5, (U = 0, 3), 10, 15]; 9 > U; U++) {
            u[3](u, U % 3, Z[U]);
        }
    }
}
                                    

#27 JavaScript::Eval (size: 135, repeated: 1) - SHA256: bccf254664371ff7675cf89d3d27bb194454ec2cd66505b469ccf7bbca9ea0e1

                                        0,
function(Z, u, U) {
    return u = (U = function() {
        return Z;
    }, function() {
        return U();
    }), u[this.J] = function(T) {
        Z = T;
    }, u;
}
                                    

#28 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 994fb96e949de5a3146044ae18e6c47be2d72ce0ed048a3f4fd2e51d2ff571c2

                                        0,
function(Z, u, U) {
    t(Z, 1, 5) ||
        (u = Z.D(), U = Z.D(), G(Z, U, function(Z) {
            return eval(Z);
        }(Z.g(u))));
}
                                    

#29 JavaScript::Eval (size: 95, repeated: 1) - SHA256: d7099c0bf4e7176d804ef49742c07e3fbfd79730f4f8f58130c22b864eefce8b

                                        0,
function(Z, u, U, H) {
    (H = (U = (u = Z.D(), Z).D(), Z.D()), Z).g(u)[Z.g(U)] = Z.g(H);
}
                                    

#30 JavaScript::Eval (size: 202, repeated: 1) - SHA256: 2ae10b1bc54e0178acea428e4aa48201c8a785253b64373c6718a23375c8f796

                                        0,
function(Z, u, U, H) {
    (U = (H = (u = Z & 4, Z &= 3, U = this.D(), this).D(), this.g(U)), u) &&
    (U = S(("" + U).replace(/\r\n/g, "\n"))), Z && Y(this, H, V(U.length, 2)), Y(this, H, U);
}
                                    

#31 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 4cb1a01a8f7e6f722d7072b114db4a4194f61e2d6b5298038c7ac641f8cc274f

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) == Z.g(U), G)(Z, H, +u);
}
                                    

#32 JavaScript::Eval (size: 105, repeated: 1) - SHA256: ba00c0cd7a300e73a96574266f5780aa95123c1d5566b67961b87ac4331cd344

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) > Z.g(U), G)(Z, H, +u);
}
                                    

#33 JavaScript::Eval (size: 109, repeated: 1) - SHA256: f8353467a4e34aea78252df2b38e6f965986a788f0d5b20fc80c10b67e081eeb

                                        0,
function(Z, u, U, H) {
    (u = (U = (u = Z.D(), U = Z.D(), H = Z.D(), Z).g(U), Z.g(u)), G)(Z, H, u[U]);
}
                                    

#34 JavaScript::Eval (size: 99, repeated: 1) - SHA256: 3cd952db7b02e8da8f7082b9360fcde714cc032b768e051f688f8e3720a29921

                                        0,
function(Z, u, U, H) {
    (u = Z.D(), U = Z.D(), H = Z.D(), G)(Z, H, (Z.g(u) in Z.g(U)) + 0);
}
                                    

#35 JavaScript::Eval (size: 90, repeated: 1) - SHA256: c0e493ecdd7246df3ae8a84671adcad56b7daf415bd404f02e9a51d98c891bcc

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) << U);
}
                                    

#36 JavaScript::Eval (size: 90, repeated: 1) - SHA256: f048b4eeb2e1e8cb8260e970f5422277c8d0a1a0b2da48918436a64a76719636

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) >> U);
}
                                    

#37 JavaScript::Eval (size: 92, repeated: 1) - SHA256: ecaeea8d4c530a73a506bcc811b2fffb71c61e917a609f1a3593a931623dffed

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) | Z.g(U));
}
                                    

#38 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 31605db04521bc3ce2a625d2cfe94544af6becfc7e62ee185492c0e49fc90d5c

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) || Z.g(U));
}
                                    

#39 JavaScript::Eval (size: 155, repeated: 1) - SHA256: 935f91adb84b2a2774d964e9c69f44def1efdf3ffe16477848fb07f87a774e76

                                        0,
function(Z, u, U, H) {
    for (; U--;) {
        240 != U &&
            222 != U && u.L[U] && (u.L[U] = u[H](u[Z](U), this));
    }
    u[Z] = this;
}
                                    

#40 JavaScript::Eval (size: 239, repeated: 1) - SHA256: 76ca6257c7a64247dc63d37068d5b38143bbcbe36329ca5c8d97baec8f263880

                                        0,
function(Z, u, U, H) {
    if ((u = Z.a.pop())) {
        for (U = Z.D(); 0 < U; U--) {
            H = Z.D(), u[H] = Z.L[H];
        }
        u[50] = Z.L[50], u[6] = Z.L[6], Z.L = u;
    } else {
        G(Z, 240, Z.l.length);
    }
}
                                    

#41 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 1dfbe6a0b21f319a6a08f36ae6256a8296c5a03d0d6d807f398899946ab718af

                                        0,
function(Z, u, U, H) {
    try {
        H = Z[(u + 2) % 3], Z[u] = Z[u] - Z[(u + 1) % 3] - H ^ (1 == u ? H << U : H >>> U);
    } catch (K) {
        throw K;
    }
}
                                    

#42 JavaScript::Eval (size: 227, repeated: 1) - SHA256: 04fde92960a1000180bb8db8f6fe02f9cea76368ff130bd47f438a3101e9a647

                                        0,
function(Z, u, U, H, K) {
    (H = (U = (K = (u = (H = (u = Z.D(), U = Z.D(), Z.D()), Z.g(u)), Z.g(Z.D())), Z).g(U), Z.g(H)), 0) !== u &&
        (H = E(Z, H, K, 1, u, U), u.addEventListener(U, H, P), G(Z, 24, [u, U, H]));
}
                                    

#43 JavaScript::Eval (size: 128, repeated: 1) - SHA256: f56c1874ffe56ac1eb8291ce97cbaa02083da09b6762814647b05485d93d2c25

                                        0,
function(Z, u, U, H, K) {
    K = (H = (u = Z.D(), U = Z.D(), Z).g(Z.D()), Z.g(Z.D())), U = Z.g(U), G(Z, u, E(Z, U, H, K));
}
                                    

#44 JavaScript::Eval (size: 136, repeated: 1) - SHA256: 73345e8ba79ec6ca5b36ff70ad95c29ce240f708b31f79202e5327349b0666c9

                                        0,
function(Z, u, U, H, K) {
    for (K = (u = Z.D(), U = b(Z), 0), H = []; K < U; K++) {
        H.push(Z.D());
    }
    G(Z, u, H);
}
                                    

#45 JavaScript::Eval (size: 405, repeated: 1) - SHA256: 045ce9f38982a4e6d36aa5b2612bda68f1c91a43b70419e0cfd834050c11ec83

                                        0,
function(Z, u, U, H, K, g) {
    if (!t(Z, 1, 255)) {
        if ((Z = (U = (K = (H = (U = (u = Z.D(), Z.D()), Z).D(), Z).D(), u = Z.g(u), Z).g(U), H = Z.g(H), Z).g(K), "object") == D(u)) {
            for (g in K = [], u) {
                K.push(g);
            }
            u = K;
        }
        for (g = (K = 0, u.length); K < g; K += H) {
            U(u.slice(K, K + H), Z);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 216, repeated: 1) - SHA256: 6c4a302aac210ccafdacbcc5d4aa19b17c86b85cc9643c62df9a28a05ace6fb4

                                        0,
function(Z, u, U, H, K, g) {
    return ((U = (K = function() {
        return H();
    }, H = function() {
        return H[U.R + (K[U.A] === u) - !g[U.A]];
    }, this), g = U.T, K)[U.J] = function(Z) {
        H[U.f] = Z;
    }, K[U.J])(Z), Z = K;
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 1) - SHA256: fc500907927c808f5b8ac42d6ef1912fdedb4679cce110a893b0e4d445adfbb8

                                        0,
function(Z, u, U, H, K, g, r) {
    t(Z, 1, 5) ||
        (u = h(Z), H = u.s, K = u.B, U = u.o, r = U.length, 0 == r ? (g = new(H[K])) : 1 == r ? (g = new(H[K])(U[0])) : 2 == r ? (g = new(H[K])(U[0], U[1])) : 3 == r ? (g = new(H[K])(U[0], U[1], U[2])) : 4 == r ? (g = new(H[K])(U[0], U[1], U[2], U[3])) : c(Z, 22), G(Z, u.S, g));
}
                                    

#48 JavaScript::Eval (size: 780, repeated: 1) - SHA256: cdb338ac77bb593da3fdc731c38ae54facdf120785bb2b7c0669a7cc70976066

                                        0,
function(Z, u, U, H, K, g, r, l, R, M, q, N, e) {
    for (r = (K = (H = U = (u = Z.D(), 0), function(u, K) {
            for (; H < u;) {
                U |= Z.D() << H, H += 8;
            }
            return H -= u, K = U & (1 << u) - 1, U >>= u, K;
        }), g = K(3) + 1, K(5)), l = [], M = R = 0; M < r; M++) {
        q = K(1), l.push(q), R += q ? 0 : 1;
    }
    for (N = (R = (M = 0, (R - 1).toString(2).length), []); M < r; M++) {
        l[M] || (N[M] = K(R));
    }
    for (M = 0; M < r; M++) {
        l[M] && (N[M] = Z.D());
    }
    for (e = (M = g, []); M--;) {
        e.push(Z.g(Z.D()));
    }
    G(Z, u, function(Z, u, U, H, K) {
        for (U = (H = 0, []), Z.V++, u = []; H < r; H++) {
            if (K = N[H], !l[H]) {
                for (; K >= u.length;) {
                    u.push(Z.D());
                }
                K = u[K];
            }
            U.push(K);
        }(Z.w = Z.I(e.slice(), Z.D), Z).U = Z.I(U, Z.D);
    });
}
                                    

#49 JavaScript::Eval (size: 296, repeated: 1) - SHA256: 3920539a2b2e324824fc0fdc94eb4262bf6056d771a746613cca03a010ba61f2

                                        0,
function(Z, u, U, K, F, g, r) {
    if ((K = (U = (u = Z.D(), b(Z)), ""), Z.L)[12]) {
        for (F = Z.g(12), r = F.length, g = 0; U--;) {
            g = (g + b(Z)) % r, K += H[F[g]];
        }
    } else {
        for (; U--;) {
            K += H[Z.D()];
        }
    }
    G(Z, u, K);
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 1) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#52 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 692a15dc84ece73227ea2be0d865708bba433a1d1441f1e8ef4d7fcefe935842

                                        B = function(Z, u, U, H) {
    (H = (U = Z.D(), Z).D(), Y)(Z, H, V(Z.g(U), u));
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#54 JavaScript::Eval (size: 272, repeated: 1) - SHA256: a2118fff9784ea11899e855e06847ae9cc1881d1beb4b981252ac2b5d7ad2f14

                                        E = function(Z, u, U, H, K, T) {
    return function() {
        var y = H & 1,
            C = [6, u, U, void 0, K, T, arguments];
        if (H & 2) {
            var Q = (O(Z, C), J(Z, true, false, false));
        } else {
            y && Z.h.length ? O(Z, C) : y ? (O(Z, C), J(Z, true, false, false)) : (Q = p(Z, C));
        }
        return Q;
    };
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#56 JavaScript::Eval (size: 328, repeated: 1) - SHA256: fe59ce24069b39f4d0514725e4608b6ef0914aad2ddad32d79bd6ed70a3712c9

                                        G = function(Z, u, U) {
    if (240 == u || 222 == u) {
        if (Z.L[u]) {
            Z.L[u][Z.J](U);
        } else {
            Z.L[u] = Z.O(U);
        }
    } else if (182 != u && 227 != u && 165 != u && 50 != u || !Z.L[u]) {
        Z.L[u] = Z.I(U, Z.g);
    }
    104 == u && (Z.G = void 0, G(Z, 240, Z.g(240) + 4));
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#58 JavaScript::Eval (size: 135, repeated: 1) - SHA256: e15c85884b12e779222c68cfa73b03de870f99de4e3ed0518aaefea67c9300b9

                                        L = function(Z, u, U) {
    return ((U = Z.g(240), Z.l) && U < Z.l.length ? (G(Z, 240, Z.l.length), x(Z, u)) : G(Z, 240, u), a)(Z, U);
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#60 JavaScript::Eval (size: 487, repeated: 1) - SHA256: 0f79e1bb699f725a6fe7d6c9d7ef162f6816fe4e9e1b1526f205e50dc70fd357

                                        S = function(Z, u, U, H, K) {
    for (H = (u = [], U = 0); H < Z.length; H++) {
        K = Z.charCodeAt(H), 128 > K ? (u[U++] = K) : (2048 > K ? (u[U++] = K >> 6 | 192) : (55296 == (K & 64512) &&
            H + 1 < Z.length && 56320 == (Z.charCodeAt(H + 1) & 64512) ? (K = 65536 + ((K & 1023) << 10) + (Z.charCodeAt(++H) & 1023), u[U++] = K >> 18 | 240, u[U++] = K >> 12 & 63 | 128) : (u[U++] = K >> 12 | 224), u[U++] = K >> 6 & 63 | 128), u[U++] = K & 63 | 128);
    }
    return u;
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#63 JavaScript::Eval (size: 366, repeated: 1) - SHA256: c8d8a624870dd52177e5fe61a6d3ca4fff26b6200bcbbb81be31640033b8befd

                                        X = function(Z, u, U, H) {
    try {
        for (H = 0; 79669387488 != H;) {
            Z += (u << 4 ^ u >>> 5) + u ^ H + U[H & 3], H += 2489668359, u += (Z << 4 ^ Z >>> 5) + Z ^ H + U[H >>> 11 & 3];
        }
        return [Z >>> 24, Z >> 16 & 255, Z >> 8 & 255, Z & 255, u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255];
    } catch (K) {
        throw K;
    }
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#65 JavaScript::Eval (size: 407, repeated: 1) - SHA256: 13e306994eb7a39b6d18bed68817db4e931351adda79fb004ca3ac1f0eaa05ef

                                        Y = function(Z, u, U, H, K, T) {
    for (Z = (H = (227 == (K = Z.g(u), u) ? (u = function(Z, u, U, H) {
            if ((U = (u = K.length, u) - 4 >> 3, K.N) != U) {
                U = (H = [(K.N = U, 0), 0, 0, T], (U << 3) - 4);
                try {
                    K.$ = X(k(K, U), k(K, U + 4), H);
                } catch (g) {
                    throw g;
                }
            }
            K.push(K.$[u & 7] ^ Z);
        }, T = Z.g(243)) : (u = function(Z) {
            K.push(Z);
        }), H && u(H & 255), 0), U.length); H < Z; H++) {
        u(U[H]);
    }
}
                                    

#66 JavaScript::Eval (size: 2, repeated: 23) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

                                        a
                                    

#68 JavaScript::Eval (size: 635, repeated: 1) - SHA256: bd01bf725642a4469b7c9228f655781b2a5094604616a37e8f0d655df58459fb

                                        a = function(Z, u, U, H, K, T, y) {
    Z.V++;
    try {
        for (U = (T = 0, K = void 0, H = 5001, Z.l.length);
            (--H || Z.b) && (Z.w || (T = Z.g(240)) < U);) {
            try {
                Z.w ? (K = Z.D(true)) : (G(Z, 222, T), y = Z.D(), K = Z.g(y)), K && K.call ? K(Z) : c(Z, 21, 0, y), Z.F = true, t(Z, 0, 2);
            } catch (C) {
                C != Z.X && (Z.g(130) ? c(Z, 22, C) : G(Z, 130, C));
            }
        }
        H || c(Z, 33);
    } catch (C) {
        try {
            c(Z, 22, C);
        } catch (Q) {
            v(Z, Q);
        }
    }
    return U = Z.g(163), u && G(Z, 240, u), Z.V--, U;
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

                                        b
                                    

#70 JavaScript::Eval (size: 87, repeated: 1) - SHA256: 53c2584a3a78fa65a9d6fc2e512b0f607bb2e76bb52ccc90590630b685e1b9be

                                        b = function(Z, u) {
    return (u = Z.D(), u & 128) && (u = u & 127 | Z.D() << 7), u;
}
                                    

#71 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#72 JavaScript::Eval (size: 414, repeated: 1) - SHA256: bf2dcd4c4277f43a92ac18588c2a72c995fd29116fbacd4b2ae82ffa4a6b565f

                                        c = function(Z, u, U, H, K) {
    (((K = Z.g(222), u = [u, K >> 8 & 255, K & 255], void 0 != H && u.push(H), 0 == Z.g(50).length && (Z.L[50] = void 0, G(Z, 50, u)), H = "", U) &&
            (U.message && (H += U.message), U.stack && (H += ":" + U.stack)), U = Z.g(6), 3 < U) &&
        (H = H.slice(0, U - 3), U -= H.length + 3, H = S(H.replace(/\r\n/g, "\n")), Y(Z, 227, V(H.length, 2).concat(H), 12)), G)(Z, 6, U);
}
                                    

#73 JavaScript::Eval (size: 35, repeated: 2) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#74 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#75 JavaScript::Eval (size: 35, repeated: 2) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

                                        h
                                    

#77 JavaScript::Eval (size: 263, repeated: 1) - SHA256: 92bec85f7692d5c06a3fdc8954c7aedb790b0aa84bfe276a839297ed2a82bdfc

                                        h = function(Z, u, U, H, K, T) {
    for (H = ((u = {}, U = Z.D(), u.S = Z.D(), u).o = [], Z.D() - 1), K = Z.D(), T = 0; T < H; T++) {
        u.o.push(Z.D());
    }
    for ((u.B = Z.g(U), u).s = Z.g(K); H--;) {
        u.o[H] = Z.g(u.o[H]);
    }
    return u;
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#79 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 391af8958d875f00a8cdda33090f528f9dc3bada049c172fea39b34ac22cd6f7

                                        k = function(Z, u) {
    return Z[u] << 24 | Z[u + 1] << 16 | Z[u + 2] << 8 | Z[u + 3];
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#81 JavaScript::Eval (size: 118, repeated: 1) - SHA256: daee4d2cd35cab9d80d51564c9cca3c337673369f0908849a2b801e0322e5590

                                        m = function(Z, u, U, H) {
    for (U = Z.D(), H = 0; 0 < u; u--) {
        H = H << 8 | Z.D();
    }
    G(Z, U, H);
}
                                    

#82 JavaScript::Eval (size: 4, repeated: 1) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this
                                    

#83 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 4bcdb07a55870e7845bd916aa48b009d0fac0ee85fdb40cdd9b245e7359c7e32

                                        try {
    bw_referer = escape(top.document.referrer);
} catch (e) {
    bw_referer = "";
}
                                    

#84 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#85 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#86 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881

                                        x
                                    

#87 JavaScript::Eval (size: 83, repeated: 1) - SHA256: cf8b322b97217d388cdd9e394e21ca6c8285afe0d87a8d0873fcda44334b32f1

                                        x = function(Z, u) {
    (Z.a.push(Z.L.slice()), Z.L[240] = void 0, G)(Z, 240, u);
}
                                    

Executed Writes (11)

#1 JavaScript::Write (size: 0, repeated: 3) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 3949, repeated: 1) - SHA256: 965c3e9faca5ab1bc58f2574b3884e3ee98845377a75d8f883d432a030505aa0

                                        < script >
    var abgp = {
        hw: 15,
        sw: 68,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/adchoices/it.png',
        alt: 'AdChoices',
        t: 'Scegli Tu!',
        tw: 46,
        t2: '',
        t2w: 0,
        tbo: 0,
        att: 'adchoices',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 90,
            "width": 728,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=C78GGgd-CWpykC4S66wSbq4_4C7Lk3bZQgOzA2ckG8C4QASDOreYZYMPcpIWYGMgBCakCnWlhvrGptD6oAwHIAwKqBJMBT9D6wZSyVXNkQPW6yOFZ2GEyWjcCxW_PG_BLDaL8C6mQTG2B8PeHhpq8UEDt3cdpJVc2vpD_mVN_kwign1VUZ1eMb5BqJoD7hHsd7jr4R3C80Z8qPfFKGjMEnPTjA6xfCpGfA5jA74rm5YWSgw0otAIGqgf3L97dhYhKxdQKPEsl-B590STgY_aLegD_ikRIzHhO4AQDkAYBoAZMgAej77J6qAemvhvYBwDSCAcIgGEQARgCgAoB0BMA2BMD\u0026sigh=EwIjp_suJBM\u0026cid=CAASBORooBQ",
                    "close_button_token": "98sQfwJ_gfUIgOzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": "Che cosa c'era di sbagliato nell'annuncio?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": "Grazie per il feedback.",
                    "mute_confirmation_text": "Esamineremo questo annuncio per migliorare l'esperienza in futuro.",
                    "pub_feedback_confirmation_header": "Grazie per il feedback.",
                    "pub_feedback_confirmation_text": "Il tuo feedback verr� usato per esaminare gli annunci su questo sito.",
                    "closing_countdown_text": "Chiusura annuncio: %1$d",
                    "attribution_text": "AdChoices",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://miki976.beepworld.it/%26gl%3DNO%26hl%3Dit%26ai0%3D\u0026usg=AFQjCNEPkG8JbOz-wf600agSM-65HJK-fA",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": "Segnala questo annuncio",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": "Che cosa c'era di sbagliato nell'annuncio?",
                            "options": [{
                                "text": "L'annuncio non mi interessa",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annuncio visto pi� volte",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Annuncio inappropriato",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "Contenuto nascosto",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "Scegli Tu!",
                        "closed_message_text": "Annuncio chiuso da %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": "Segnala questo annuncio",
                        "confirmation_text": "Proveremo a non mostrare pi� questo annuncio",
                        "see_my_google_ad_settings_text": "Mostra le mie impostazioni degli annunci Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": "Annunci %1$s"
                    }
                }
            },
            "flags": [{
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        eda: false
    }; < /script>
                                    

#3 JavaScript::Write (size: 2653, repeated: 1) - SHA256: 60bae45a69e0a88677389ae476703464253f60ca81f2b780cfc422163bc17cae

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-1870391614265387"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180207/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_client="ca-pub-1870391614265387";google_ad_slot="1761106951";google_ad_format="728x90";google_adsbygoogle_status="done";gfwroml="";gfwromr="";gfwroh="";gfwrow="";gfwroz="";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=4;google_responsive_formats=3;google_ad_width=728;google_ad_height=90;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=1;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["332260000","38893302","21061122","191880502"],"loeids":["332260004","38893312"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_unit_key="1705239155";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1518526335823;google_pub_vars="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";google_bpp=38;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180207/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#4 JavaScript::Write (size: 6, repeated: 2) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#5 JavaScript::Write (size: 1165, repeated: 1) - SHA256: 46b67112cc23cdece81424bb925725d148c8047b7824d51aead6007a55ee44c6

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjstnaiza7UlS1OJKpdrdXbMeVnfwiYPAS_QLHN9WShjxkYfTQITB03DWzIOakAjBbEUCuKIU6X-NkGZK8-PRZwmY3G6nJa0cs9hYBIIdmoOmTPTeajmcFiCoyRfsoPDAyFd7IDLgTpQRkXJCGGa1PlFViRg_jIZalcK6nzJd6sNZ40r5lKNZYw1ZEd8y7DVG2bAGbWwQAGMVlnMIrj8-PnDJTo91FqgFGSVPuw0Ejif0NXK8Q8MkyoZanwHqx0xuS9JLfOUvkjFsy41lR-Hmv840hjCVJvplbqle3msvbiqPc9aInQsppgJzX6Ffc4G-xLP1SfJd9UcaFlqnwBWWJhpKYw4DRSWpknDqR6T8-hasCyflhVW8ED5xfTzyzTL64XCtADeHRy80d_ukIZgqbsXa5_ZFDx_AO_8Eegg6ZhE7S-Ost8vEJXgh7JH4jVdaS-YkxVER4Zl4nTABNBOFOJrGZre7hfz6vp5BIwSiQPGdWwgQR9bV2qzSylA5lYXu6dQB50_xgqk-no9zH3M6qQz62c6Sz1Ic9hmyT5logmpE2DhcahT1WEii5ZgdwtMOt0XlECtG7P4tCnn-DZfwk4pSz45J-eZDwBxhIuHqanQDMIp3tAxfq7u564eqy_TzXdAbAVi5lf1WjQAboD9aW2LAqqyoX64csIcjgeVDfikCxl2I-ldCXIyj3NUx_qWNh6HN289t25qiHTHJusV5Dv0UutFm988vOYdZyznzt1eYhrBXpPie9K5Rh-ikJndz&amp;sai=AMfl-YTfkjSsjvdHzc6KV-KgqD1ddxDicSnlvDDLWxGkT0UzBcq8HLg_1de7g-2dT0PTD7ih9lO9fh11i8of3_57Nz0uCoyq17a8Wvlum5AkAsM&amp;sig=Cg0ArKJSzI61gAHTusmp&amp;urlfix=1&amp;adurl=https://www.priceline.com/" > < img src = "https://s0.2mdn.net/8405476/priceline_728x90.jpg"
alt = "Advertisement"
border = "0"
width = "728"
height = "90" > < /a>
                                    

#6 JavaScript::Write (size: 75, repeated: 1) - SHA256: 59c9343041377c5a71d6ad61af1ffa9a34dcd10c1bdc7051b67a1cd4632ed84a

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_2794309019" >
                                    

#7 JavaScript::Write (size: 18, repeated: 1) - SHA256: 0304f6f192da1241555759cbd47b6e2f7267f1661188f93500fb12bab9c28a87

                                        < div id = "ad_unit" >
                                    

#8 JavaScript::Write (size: 1364, repeated: 1) - SHA256: 3f8be9954a4807cff6f0079beb674b2902b2a671c343aad355ec3a7479ed0e0e

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&amp;output=html&amp;h=90&amp;slotname=1761106951&amp;adk=1705239155&amp;adf=807048394&amp;w=728&amp;fwrn=4&amp;lmt=1424313314&amp;loeid=332260004%2C38893312&amp;rafmt=1&amp;format=728x90&amp;url=http%3A%2F%2Fmiki976.beepworld.it%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;dt=1518526335823&amp;bpp=38&amp;fdt=45&amp;idt=258&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=2881603612786&amp;frm=20&amp;ga_vid=444220722.1518526337&amp;ga_sid=1518526337&amp;ga_hid=973021232&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=216&amp;ady=185&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=332260000%2C38893302%2C21061122%2C191880502&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;dtd=907"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#9 JavaScript::Write (size: 227, repeated: 1) - SHA256: 4edf55974be49c14601ed5ddf7d9183d4407b96d4101c58d01f0888702d25d90

                                        < img style = 'border:0px;'
alt = ''
src = 'http://www.beepworld.it/cgi-bin/hp/apps/visitortracker.pl?wid=3&userid=4283505&pagename=35822573&application_name=page&application_subident=35822573&mobile=0&referer=&cache=1518526335417' / >
                                    

#10 JavaScript::Write (size: 1780, repeated: 1) - SHA256: 3e2585227da6e8f4024b02d59526e40507da0294770cab097e677324f4b5a7f7

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-A6K73fs9889_iBIvT_RXYOvVbo5b-cng_NVFoC-a96lkAs_dDM7dgFw08KRbhR7Zgy9eAX&dbm_d=AKAmf-DoU2lbxWbnnvcYWeA4ebHZ__E1H8ATkKzHQeYkmA22jJGkOYO4L1Ni9VCWXZWFLi46wGMVwJQKHJLfMK4bZthfHYz0tblKibI1Vn88TCd5gZk3dh_229jIhLJh2RJvP080ZveJ5tve9VyLLscDNAE1q9JBkPrgTh4_ob-19m8AN9CBcWv6zTaFmYlfUquhENSfrzBzxsze8f_n1-8C4lrfXU3JPcvQqNQu8mtP33hKVRntiF5jCvWoeJw8ljsne1F5CRmuQ3TA__L7hhJNuUBa8u8N0ODVKPPZDgVC_4jL8em0fDMwac9niNoofL6xje1iLBF_4knklsvyJikW7f5XjOp8tQ5LbLmo4gV7YEVWlvAMHPFlkAzN-t8a0tZKAesOIYaaI9VyO-sC3sooaaRSIoylH28LhKPJGuowxVESyC1EhUt9W0dglM2EWk2TcWKY3HL5DceRGwDwV7bccTj3O9GMbt_wF-LY8NleSBBcoup5Sy67MqIJi_TZTbeQv_6aDVTw3iLytM3hCY9EcPvO3icVhN0xwS_FCANSQhE3VsBa7YLIiXx2ecyCvy5XcofaPheyiVIA9jfBfDtot19Kyyh8RfWndjQy_H5KWbbkr6Mev0I-n45uKuJFX0RGFnpvZ_rq3tKBn2_EbeWZdL1bnnDM_Ge5dldMuf6wKBWFYeuMx0nG4x-CU0s7r5DVllROAVWHMYCW1Lj7hs5VKwsV2ix7kT-TsD3jYK6jCFMLihvVYg94J7xj6wLbiKdUrtRGjV7bdQD9f8-YE9hqFjk5p9coxN5hFEF8iGxq7j-nNisOtmn5ieC_m0EeDhdqG25vrtgCboU73o78xQ9tcCD2j0u8NvDA1-5SDOlZ5G2MyCGi7hloYIc1sHMEf1cZn1IrJBotsWCw7g4jOZhQ-Fta6pSBwJFyiFrJPjhL6NBzs8HV9PB61sNNhzxUCZR23mZkR8I4_yBonRq3pzOpSISaCZN-7FmSD5lUEzy8fLbGnb7GY30XdSE2tXzoB4vviWgJY4R-UCR7lji4DGvzOSD08_YZd4cQinVdsBsU1qXi6UOQzsAXfMOdrSgTmCp6M545LTMyl4FjMePy0bQUGK1IdKXBSowpDhPdDFBt697wWM_xZz2eUvxGyza0VduU_ocnT66QlR-CobPbW6eBwJ0AWa1wfX2dXE8sZl1WAKWEfqK1oUtk3g4Tk72l5inq2l21wYqoiPuRkS-cK7momoUGVXemai7tb-UtqcC5mXtO2F4FmHbGie8SzhZ7V8LjmFDvmKb6rSFgZS8SMQyLk4JmAoRuLIMdd1vCjgmHTPLoAyU8M8gpvGkv5Rz2qRC3sXOd5rxR3s5Y1mxy_IWwN87F860WHviW8GcFN00n1noHJQX4TFVsho7Ku25U4fCOSDOECFMTAXn76-6KaoBDnYurNyeNbp6c5_8c57FBjmds4-XGsTM6Ij9-GF4Wxw_Kgp-1LsgBYYSMWuATctxJrffcTUvJRPqQfbYiwp7JOwO4qVb31ZhBu5E1DdCNjBrKL8cyHXVo&cid=CAASBORooBQ&rfl=2%2C%2Chttp%253A%252F%252Fmiki976.beepworld.it%252F%240" > < /script>
                                    

#11 JavaScript::Write (size: 6756, repeated: 1) - SHA256: 925ffa13c371513ccf30d603e9ee95df7cb7c7ebb5e712fdaa2658c086269392

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 17 px;top: 1 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc, .abgcp, .cbb {
    opacity: 0;
}.jar.abgc, .jar.abgcp, .jar.cbb {
    opacity: 1;
}.jaa.abgc, .jaa.abgcp, .jaa.cbb {
    display: none;
}.abgc {
    cursor: pointer;
}.cbb {
    cursor: pointer;height: 15 px;width: 15 px;z - index: 9020;
}.cbb svg {
    position: absolute;top: 0;right: 0;height: 15 px;width: 15 px;
}.cbb.cbbbg {
    fill - opacity: 1.0;
    fill: # ffffff;
    stroke: none;
}.cbb.cbbcross {
    stroke: #00aecd;stroke-width: 1.25;}.cbb:hover{cursor:pointer;}.cbb:hover .cbbbg {fill: # 58585 a;
}.cbb: hover.cbbcross {
    stroke: # ffffff;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 1 px;top: 1 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# ffffff;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://miki976.beepworld.it/%26gl%3DNO%26hl%3Dit%26ai0%3D&amp;usg=AFQjCNEPkG8JbOz-wf600agSM-65HJK-fA"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"><svg><path class="cbbbg" d="M0,0l15,0l0,15l-15,0Z"/ > < path class = "cbbcross"
d = "M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5" / > < /svg></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:68,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/adchoices/it.png\',alt:\'AdChoices\',t:\'Scegli Tu!\',tw:46,t2:\'\',t2w:0,tbo:0,att:\'adchoices\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:90,\x22width\x22:728,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dC78GGgd-CWpykC4S66wSbq4_4C7Lk3bZQgOzA2ckG8C4QASDOreYZYMPcpIWYGMgBCakCnWlhvrGptD6oAwHIAwKqBJMBT9D6wZSyVXNkQPW6yOFZ2GEyWjcCxW_PG_BLDaL8C6mQTG2B8PeHhpq8UEDt3cdpJVc2vpD_mVN_kwign1VUZ1eMb5BqJoD7hHsd7jr4R3C80Z8qPfFKGjMEnPTjA6xfCpGfA5jA74rm5YWSgw0otAIGqgf3L97dhYhKxdQKPEsl-B590STgY_aLegD_ikRIzHhO4AQDkAYBoAZMgAej77J6qAemvhvYBwDSCAcIgGEQARgCgAoB0BMA2BMD\\u0026sigh\x3dEwIjp_suJBM\\u0026cid\x3dCAASBORooBQ\x22,\x22close_button_token\x22:\x2298sQfwJ_gfUIgOzA2ckGEM-dpPkDGKvO0npCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22Che cosa c\x27era di sbagliato nell\x27annuncio?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22Grazie per il feedback.\x22,\x22mute_confirmation_text\x22:\x22Esamineremo questo annuncio per migliorare l\x27esperienza in futuro.\x22,\x22pub_feedback_confirmation_header\x22:\x22Grazie per il feedback.\x22,\x22pub_feedback_confirmation_text\x22:\x22Il tuo feedback verr� usato per esaminare gli annunci su questo sito.\x22,\x22closing_countdown_text\x22:\x22Chiusura annuncio: %1$d\x22,\x22attribution_text\x22:\x22AdChoices\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://miki976.beepworld.it/%26gl%3DNO%26hl%3Dit%26ai0%3D\\u0026usg\x3dAFQjCNEPkG8JbOz-wf600agSM-65HJK-fA\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22Segnala questo annuncio\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22Che cosa c\x27era di sbagliato nell\x27annuncio?\x22,\x22options\x22:[{\x22text\x22:\x22L\x27annuncio non mi interessa\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annuncio visto pi� volte\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Annuncio inappropriato\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22Contenuto nascosto\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22Scegli Tu!\x22,\x22closed_message_text\x22:\x22Annuncio chiuso da %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22Segnala questo annuncio\x22,\x22confirmation_text\x22:\x22Proveremo a non mostrare pi� questo annuncio\x22,\x22see_my_google_ad_settings_text\x22:\x22Mostra le mie impostazioni degli annunci Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22Annunci %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20110914 / abg.js "></script>
                                    


HTTP Transactions (57)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: miki976.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Tue, 13 Feb 2018 12:52:14 GMT
Server: Apache
Last-Modified: Thu, 19 Feb 2015 02:35:14 GMT
Etag: "1b53-50f67c9213c80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2451
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2451
Md5:    0f7dc38b50e1f0770563fb0f89e7be45
Sha1:   c18d8d5c08eba20ac3a95d08f07b9f2fd8220080
Sha256: a36d8710a79ff9ccb58ff9eebfbf24199da25d7265e3d9dd95aeb8cea55d6772
                                        
                                            GET /appfiles/photoalbum/jquery-1.4.2.min.js HTTP/1.1 
Host: miki976.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 12:55:30 GMT
Server: Apache
Last-Modified: Mon, 11 Jul 2011 09:14:54 GMT
Etag: "119ee-4a7c79dc35f80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=604800
Expires: Tue, 20 Feb 2018 12:55:30 GMT
Content-Length: 24606
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24606
Md5:    73f29c18c6bf146e10cf6ff96f721aa9
Sha1:   e9a49d93652c5fc57e053b142a95e4f02ea45dc3
Sha256: 6ff79b2e46eeb50a24c422cf2e2d1e5389959fe564b8cb53784a00a8394857d8
                                        
                                            GET /appfiles/general.js?version=7 HTTP/1.1 
Host: miki976.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Server: Apache
Last-Modified: Wed, 15 Nov 2017 10:05:56 GMT
Etag: "4dac-55e02a6446900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=604800
Expires: Tue, 20 Feb 2018 12:52:15 GMT
Content-Length: 5290
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5290
Md5:    3668631cfbc0e8d806e7401a0ecd5e28
Sha1:   def02e8fc6f805b7f85db4a1f0de46c72cd07e49
Sha256: ae853c3a05f164fcf5da10d1f8af97d51134ba8ec0a6d252b44f6201a693eb44
                                        
                                            GET /appfiles/general.css?version=7 HTTP/1.1 
Host: miki976.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 12:55:30 GMT
Server: Apache
Last-Modified: Mon, 29 May 2017 08:13:56 GMT
Etag: "25f2-550a544b39900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=604800
Expires: Tue, 20 Feb 2018 12:55:30 GMT
Content-Length: 2530
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2530
Md5:    4b51dd05e531b6e89ea4ad43f0650e3f
Sha1:   8b5251839ce92d3d45d223c0cc5c028627636f61
Sha256: b4a07c19a378eba2fbd44fc43ccd31dc6e3d3465dc00b03c544940011dd8026a
                                        
                                            GET /hp/templatefiles/2574/1/1/style.css HTTP/1.1 
Host: www.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Server: Apache
Last-Modified: Thu, 08 Dec 2011 14:25:27 GMT
Etag: "1105-4b3957092a3c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1268
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1268
Md5:    c176921dd0d3b5b668d57fe478994932
Sha1:   c36bc9f89095580db4e451fbabf83622da528bcb
Sha256: 78a44c5e5533a927c6afb7d53ccf8b22ada5e895c4e9b9aa2e8bc96663719dbc
                                        
                                            GET /media/style.css HTTP/1.1 
Host: fastad.beepworld.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.228
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Accept-Ranges: bytes
Etag: "6916-1455709224000"
Date: Tue, 13 Feb 2018 12:52:15 GMT
Cache-Control: public, max-age=86400
Last-Modified: Wed, 17 Feb 2016 11:40:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1235
Md5:    488d5a49e86d325e8cb20446adf89101
Sha1:   a94808c619382a1f54bbee899bbfd28d7c13f28d
Sha256: ba1dd29f9eb1ff1aa443f7ab6c5d28c9c73734ffd7fbc7b580d1cc4ca639d9f4
                                        
                                            GET /files/angelo_quadro.jpg HTTP/1.1 
Host: miki976.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Server: Apache
Last-Modified: Tue, 12 Oct 2010 07:42:57 GMT
Etag: "4a6b-49266a016a240"
Accept-Ranges: bytes
Content-Length: 19051
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   19051
Md5:    d4f82262f81887a002639be936b95aa2
Sha1:   a61b60fc918fe86a40f2130ad8d07109f44ba9b3
Sha256: 8594fcf9083f74a79d6883f953f543a9f89e79a7746b6f6b7c59c001751188f1
                                        
                                            GET /cgi-bin/usercount/count.php?userid=4283505 HTTP/1.1 
Host: www.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 13 Feb 2018 12:55:30 GMT
Server: Apache
Content-Length: 138
Connection: close


--- Additional Info ---
Magic:  PNG image, 21 x 14, 1-bit colormap, non-interlaced
Size:   138
Md5:    50f73877f05182be731e5b7ddc486b1b
Sha1:   3a16e9c2d32ba5bd604b38c5f93c3badf175c6a8
Sha256: 50bd31fa9d0059182cd990e90dd687524fe6f5d3ceddc18427774feaa1bece3f
                                        
                                            GET /cgi-bin/hp/apps/pebutton.pl?userid=4283505&version=7 HTTP/1.1 
Host: www.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Server: Apache
Cache-Control: no-cache, must-revalidate
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /hp/templatefiles/2574/1/1/images/img01.jpg HTTP/1.1 
Host: www.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beepworld.it/hp/templatefiles/2574/1/1/style.css

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Server: Apache
Last-Modified: Fri, 20 Mar 2009 10:43:39 GMT
Etag: "c053-4658a96ef4cc0"
Accept-Ranges: bytes
Content-Length: 49235
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   49235
Md5:    a5af576be75a7cef3a0a7102f6117837
Sha1:   f032e6d575dddae740c09218e43393001624a5ae
Sha256: ca95fe7859b6e4190155ba65e391ac99b3f1554ce76be11d1ab3c38121f125a6
                                        
                                            GET /campaign/get/3/4283505.js HTTP/1.1 
Host: fastad.beepworld.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.228
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 1004
Etag: "-345607517"
Vary: Accept-Encoding
Date: Tue, 13 Feb 2018 12:52:15 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII text
Size:   1004
Md5:    a12c2cf5255d632a70e1029b60ecd0e1
Sha1:   160b168ce3586376ca2b5df9e9e8882ab8a4db5d
Sha256: 95699b0fd02293beed904af9c775d99f8fc849f2df6d54970a25a33fe188db7f
                                        
                                            GET /hp/templatefiles/2574/1/1/images/img03.gif HTTP/1.1 
Host: www.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beepworld.it/hp/templatefiles/2574/1/1/style.css

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 13 Feb 2018 12:55:31 GMT
Server: Apache
Last-Modified: Fri, 20 Mar 2009 10:43:39 GMT
Etag: "43-4658a96ef4cc0"
Accept-Ranges: bytes
Content-Length: 67
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 5 x 5
Size:   67
Md5:    204c114190aed370cd06ca42f636c3f8
Sha1:   9689f1699d0d6ef5d01cc5d18debc27ef89f6544
Sha256: cb560b268f2155047555270abf240415aabb8dfeb4e9472742b8d28d210be72a
                                        
                                            GET /hp/templatefiles/2574/1/1/images/img02.jpg HTTP/1.1 
Host: www.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beepworld.it/hp/templatefiles/2574/1/1/style.css

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Server: Apache
Last-Modified: Fri, 20 Mar 2009 10:43:39 GMT
Etag: "160-4658a96ef4cc0"
Accept-Ranges: bytes
Content-Length: 352
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   352
Md5:    6ff4529f22b6cd4fa4efa589b03ae273
Sha1:   3c6c45bf318ed548bd629f62b3000ba85fde42b3
Sha256: edec2342b4b0996453dd86bab5b36116ad772cdfa0d995757d567aee0749e403
                                        
                                            GET /cgi-bin/hp/apps/visitortracker.pl?wid=3&userid=4283505&pagename=35822573&application_name=page&application_subident=35822573&mobile=0&referer=&cache=1518526335417 HTTP/1.1 
Host: www.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         149.202.25.210
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Server: Apache
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:52:15 GMT
Expires: Tue, 13 Feb 2018 12:52:15 GMT
Cache-Control: private, max-age=3600
Etag: 6502682663518856185
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26103
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26103
Md5:    6ef11d0463c07a28cd7cf2803534c33b
Sha1:   22c83cf48df58218feda2b7c44729bbbd3c43fdc
Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:15 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fcd56e1351782e87ef4f73d429e4ded4
Sha1:   f6f1ce80b96c014e654132c41d109a131ee5bc3c
Sha256: 340ac1b5b28c1c9c0280d32661fe3b614a32fc66f327fb93f5a98fdbe0c176b0
                                        
                                            GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:52:15 GMT
Expires: Tue, 13 Feb 2018 12:52:15 GMT
Cache-Control: private, max-age=1209600
Etag: 13795034976391437742
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67646
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67646
Md5:    1c34c6076329994a82736fdcdf652737
Sha1:   71f502f321a4f962e8140d9166db4ad7d70585bc
Sha256: 529c803ee50dd637793def1c5b26bcf31b2d7670c9523b358c8a54b8ac1948d7
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4bb2e4074fe5f9f8d715e5888d0b4188
Sha1:   8d020c92f7f3278b86d901ebef396c31d5e39d51
Sha256: cc9e9c93a83b6c3b89cfb24126cc32cfb0876f7705046b642039176859c160e0
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=551159, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT
Expires: Mon, 19 Feb 2018 21:56:01 GMT
Date: Tue, 13 Feb 2018 12:52:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    dab664d03e303a7b1deba30189c57d23
Sha1:   1a87b2335fc304a7783b6f7ffdb5ff97367d30de
Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
                                        
                                            GET /adsid/integrator.js?domain=miki976.beepworld.it HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 12:52:16 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6ea90b04815236e9005a97e76148e394
Sha1:   256637485a6d2ab91f66dfc94598aafaa31250c0
Sha256: 98fe9ca5bbe415d51e7c4c01f2ccbfd26909479017bb040d52309743c3eb0dba
                                        
                                            GET /adsid/integrator.js?domain=miki976.beepworld.it HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 12:52:17 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 04:05:11 GMT
Expires: Thu, 22 Feb 2018 04:05:11 GMT
Etag: 14152819666964886147
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29995
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 463626
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29995
Md5:    ca42dee86b721494eb2a8c4f93c4508d
Sha1:   17ee6f68a61be238ce54d20d056a7a5834c52d80
Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
                                        
                                            GET /pub-config/r20160913/ca-pub-1870391614265387.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 13 Feb 2018 11:41:39 GMT
Expires: Tue, 13 Feb 2018 23:41:39 GMT
Last-Modified: Sun, 11 Feb 2018 21:22:35 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 4238
Cache-Control: public, max-age=43200
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 20:57:24 GMT
Expires: Wed, 21 Feb 2018 20:57:24 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 489293
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6819
Md5:    8caea4ee531aab9f5d9328f80b7b23f3
Sha1:   3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
                                        
                                            GET /pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://miki976.beepworld.it/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 12:52:17 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 13:07:17 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 12:52:17 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4767
Md5:    5ddc3014a6d29432043c783aafa5f155
Sha1:   19efc79af42672685bd49612d13731d4b650008e
Sha256: 7248da9e0f6136be9e92b9c3ffc49f65d7d3d12cd94fa2e7869dceaa480c733c
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-BgA0xv-XMk9_vdRZCoTOu8oQP1T-pNJMW0C9vxjLDyFFftjs8xXnioERrvcEzqcWzeZZFlBBimkxc9wwStH9wtdYM-KI7pVTf5xC_A311rrEkC8hc HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:52:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /xbbe/pixel?d=COD5IRD7n5MBGLHWwi0wAQ&v=APEucNVNbUhxOSbgr-OXgPtcd00JN9rDqSvJi0BqlmDwekEfNO2CwEyde-R04wW9YGi6y2UdlLII HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 12:52:17 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUn3_7PvVCgBdH5HkmrowhX8PenCCZRkGAVWCSGPN_9kQBLjTjIdyPRy8M86; expires=Thu, 13-Feb-2020 12:52:17 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 12:52:17 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   214
Md5:    02247d909a831178bfbddac723940ebd
Sha1:   9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-A6K73fs9889_iBIvT_RXYOvVbo5b-cng_NVFoC-a96lkAs_dDM7dgFw08KRbhR7Zgy9eAX&dbm_d=AKAmf-DoU2lbxWbnnvcYWeA4ebHZ__E1H8ATkKzHQeYkmA22jJGkOYO4L1Ni9VCWXZWFLi46wGMVwJQKHJLfMK4bZthfHYz0tblKibI1Vn88TCd5gZk3dh_229jIhLJh2RJvP080ZveJ5tve9VyLLscDNAE1q9JBkPrgTh4_ob-19m8AN9CBcWv6zTaFmYlfUquhENSfrzBzxsze8f_n1-8C4lrfXU3JPcvQqNQu8mtP33hKVRntiF5jCvWoeJw8ljsne1F5CRmuQ3TA__L7hhJNuUBa8u8N0ODVKPPZDgVC_4jL8em0fDMwac9niNoofL6xje1iLBF_4knklsvyJikW7f5XjOp8tQ5LbLmo4gV7YEVWlvAMHPFlkAzN-t8a0tZKAesOIYaaI9VyO-sC3sooaaRSIoylH28LhKPJGuowxVESyC1EhUt9W0dglM2EWk2TcWKY3HL5DceRGwDwV7bccTj3O9GMbt_wF-LY8NleSBBcoup5Sy67MqIJi_TZTbeQv_6aDVTw3iLytM3hCY9EcPvO3icVhN0xwS_FCANSQhE3VsBa7YLIiXx2ecyCvy5XcofaPheyiVIA9jfBfDtot19Kyyh8RfWndjQy_H5KWbbkr6Mev0I-n45uKuJFX0RGFnpvZ_rq3tKBn2_EbeWZdL1bnnDM_Ge5dldMuf6wKBWFYeuMx0nG4x-CU0s7r5DVllROAVWHMYCW1Lj7hs5VKwsV2ix7kT-TsD3jYK6jCFMLihvVYg94J7xj6wLbiKdUrtRGjV7bdQD9f8-YE9hqFjk5p9coxN5hFEF8iGxq7j-nNisOtmn5ieC_m0EeDhdqG25vrtgCboU73o78xQ9tcCD2j0u8NvDA1-5SDOlZ5G2MyCGi7hloYIc1sHMEf1cZn1IrJBotsWCw7g4jOZhQ-Fta6pSBwJFyiFrJPjhL6NBzs8HV9PB61sNNhzxUCZR23mZkR8I4_yBonRq3pzOpSISaCZN-7FmSD5lUEzy8fLbGnb7GY30XdSE2tXzoB4vviWgJY4R-UCR7lji4DGvzOSD08_YZd4cQinVdsBsU1qXi6UOQzsAXfMOdrSgTmCp6M545LTMyl4FjMePy0bQUGK1IdKXBSowpDhPdDFBt697wWM_xZz2eUvxGyza0VduU_ocnT66QlR-CobPbW6eBwJ0AWa1wfX2dXE8sZl1WAKWEfqK1oUtk3g4Tk72l5inq2l21wYqoiPuRkS-cK7momoUGVXemai7tb-UtqcC5mXtO2F4FmHbGie8SzhZ7V8LjmFDvmKb6rSFgZS8SMQyLk4JmAoRuLIMdd1vCjgmHTPLoAyU8M8gpvGkv5Rz2qRC3sXOd5rxR3s5Y1mxy_IWwN87F860WHviW8GcFN00n1noHJQX4TFVsho7Ku25U4fCOSDOECFMTAXn76-6KaoBDnYurNyeNbp6c5_8c57FBjmds4-XGsTM6Ij9-GF4Wxw_Kgp-1LsgBYYSMWuATctxJrffcTUvJRPqQfbYiwp7JOwO4qVb31ZhBu5E1DdCNjBrKL8cyHXVo&cid=CAASBORooBQ&rfl=2%2C%2Chttp%253A%252F%252Fmiki976.beepworld.it%252F%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:52:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUkEsfzl1BqSzIKEQFjMN2_qs2-bndFiCMyHm5y9PNNdTr43RSYp7xZNbwV_; expires=Thu, 13-Feb-2020 12:52:17 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   10704
Md5:    9f08969c40a7d1448d3bb759dd9c9ce5
Sha1:   f5bcf79ac93d8db1d34645cc6c3667b370f757dd
Sha256: f33b352eac6c1eccea4c2cbf40beee875859c328f021add20ac5e5357e7285d6
                                        
                                            GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 18:07:31 GMT
Expires: Wed, 21 Feb 2018 18:07:31 GMT
Etag: 1003077525306946769
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21796
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 499486
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21796
Md5:    9c7168207979b5f6ab6777d97a8a0963
Sha1:   9cf64cc271ecf30cfd8043002730eae9b47c2bf8
Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
                                        
                                            GET /pagead/js/lidar.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:00:12 GMT
Expires: Tue, 13 Feb 2018 13:00:12 GMT
Etag: 6831844447556634063
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 34299
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 3125
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   34299
Md5:    4af480d154ceb9d4226b2a21f80b6b9e
Sha1:   514b804d0a119a0063bfc1d9e20f7b7c7004d80c
Sha256: e45497d04a8eb2999ade55e5f45265811efc3e5ab7eaf6929db863b133d6f181
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 12:52:17 GMT
Etag: "5a827c8d-1d7"
Expires: Thu, 15 Feb 2018 12:52:17 GMT
Last-Modified: Tue, 13 Feb 2018 05:50:05 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bc4bbf33d4b48791256b284353802c7f
Sha1:   d3d1bc4bd77a719ea1ba38b08435d3acfd89bd34
Sha256: 4f0214c8831d6e02f3d3d3a1b5775c9b87c0cd0c9ac0d9890fba5e7811f1c0f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 12:52:17 GMT
Etag: "5a827c95-1d7"
Expires: Thu, 15 Feb 2018 12:52:17 GMT
Last-Modified: Tue, 13 Feb 2018 05:50:13 GMT
Server: ECS (arn/45C7)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bdd676092b32d438cdb3958993ee99de
Sha1:   f8f6992c4867e6f721a4e8776321b1c5d590c17c
Sha256: 6c57d66bbd3413d976bd02ca92c9434b6c259a91a153fddbc476a44a468a1888
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:17 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 17:56:39 GMT
Expires: Mon, 19 Feb 2018 17:56:39 GMT
Etag: 6E1390A0BD1EA29D9D3CAFC2B28D81858CED524B
Cache-Control: max-age=536061,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp15
Content-Length: 278
Connection: close


--- Additional Info ---
Magic:  data
Size:   278
Md5:    c9d0f8a0c103fd3f76a3231d292019e3
Sha1:   6e1390a0bd1ea29d9d3cafc2b28d81858ced524b
Sha256: c2561fc07b4706316266d5a4d9b40e09479226c56d94d7fc92effeb96bf25de1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:17 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: 8E242477BF0882B1319BC4C53887CEDD2AF131E2
Cache-Control: max-age=512915,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 313
Connection: close


--- Additional Info ---
Magic:  data
Size:   313
Md5:    f5c0f9572b3e8f64a0cbc1a07f453401
Sha1:   8e242477bf0882b1319bc4c53887cedd2af131e2
Sha256: 32ad01098f31aba2f0060dc68180378325772eea6370174e99e0d1f6131978f4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:17 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3f8666a5bea36283578bc10ee5cd930f
Sha1:   526a530c3057adf847bbba35e96736f4d641585b
Sha256: 166a98b8491197265873aa5ff9f1e46c79443bc0e509cd240513fed08e9578a9
                                        
                                            GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGLHWwi0wAQ&v=APEucNVNbUhxOSbgr-OXgPtcd00JN9rDqSvJi0BqlmDwekEfNO2CwEyde-R04wW9YGi6y2UdlLII

                                         
                                         217.12.15.54
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 12:52:17 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=2n3b6q1d85ns1&b=3&s=6r; expires=Wed, 13-Feb-2019 12:52:17 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=jFDy0jg0R00R6fM4hNxlGNzx
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGLHWwi0wAQ&v=APEucNVNbUhxOSbgr-OXgPtcd00JN9rDqSvJi0BqlmDwekEfNO2CwEyde-R04wW9YGi6y2UdlLII
Cookie: IDE=AHWqTUn3_7PvVCgBdH5HkmrowhX8PenCCZRkGAVWCSGPN_9kQBLjTjIdyPRy8M86

                                         
                                         216.58.209.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESEO0U33kbPvq9HvU173gr8CA&google_cver=1
Date: Tue, 13 Feb 2018 12:52:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   290
Md5:    8e7ee7a3280ad68eee1fd3e716758568
Sha1:   71094bca8bcb4c27893bcfa62738b3d464fed875
Sha256: 6630d9194914d76f03988d83da58bb68398767935eca1c260bf5402004ccc3d8
                                        
                                            GET /sodar/V6zvOIoD.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15146
Date: Mon, 12 Feb 2018 16:52:31 GMT
Expires: Tue, 12 Feb 2019 16:52:31 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 71987
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15146
Md5:    6a56e1d1c9c0c105245cbce244c876f3
Sha1:   6613490ab3735f37499d311c6efba3f689ec4abb
Sha256: ad20ef401ac229a0ab07b057ed9350c85816118a662c7cfa240fa5cd86c718f0
                                        
                                            GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 15:02:16 GMT
Expires: Wed, 21 Feb 2018 15:02:16 GMT
Etag: 4319863517479632446
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29527
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 510602
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29527
Md5:    cb7c5d42c8b00cdec8b3bfb65909c20b
Sha1:   df39b61e2fd957f8b9ade02e65c59ec51cec5c46
Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
                                        
                                            GET /xbbe/match?xid=jFDy0jg0R00R6fM4hNxlGNzx HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGLHWwi0wAQ&v=APEucNVNbUhxOSbgr-OXgPtcd00JN9rDqSvJi0BqlmDwekEfNO2CwEyde-R04wW9YGi6y2UdlLII
Cookie: IDE=AHWqTUkEsfzl1BqSzIKEQFjMN2_qs2-bndFiCMyHm5y9PNNdTr43RSYp7xZNbwV_

                                         
                                         216.58.211.130
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 12:52:18 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /sodar/6uQTKQJz.html HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7233
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 82042
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7233
Md5:    30bf1c51eb9c0ba258ea2df31d24bc98
Sha1:   d13abffacc94ee31dfd5a094bfa975cca8e4d292
Sha256: 25a3afe99572ebbe3af74f504252d7fe97ebd580d47f5b734c286cc40a82131e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 12:52:18 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d49329b6cf95ee35d707f7e0ab3f891e
Sha1:   bad43a85defedc6449b6bdaf779ee85d18278544
Sha256: 0580cfb371d0324bff4fc549e97d614659eade3215fc737e749308947ad948be
                                        
                                            GET /c/NDj2.js HTTP/1.1 
Host: cdn.minescripts.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         104.18.47.158
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 12:52:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d12eecfe8359ca2fcdc993daeec410e4b1518526338; expires=Wed, 13-Feb-19 12:52:18 GMT; path=/; domain=.minescripts.info; HttpOnly
Last-Modified: Tue, 13 Feb 2018 08:47:22 GMT
Etag: W/"5a82a61a-26a1a"
Expires: Tue, 13 Feb 2018 16:52:18 GMT
Cache-Control: public, max-age=14400
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 3ec7ec8d4b5b4285-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   39531
Md5:    1c9c37ee94ec3e1c6d5f4714d1360779
Sha1:   a1570f3c3ee93136527182865f70fd8c9fbca2a4
Sha256: 410d40e0587fd552a61e4870c7cfc56382e5b76b0ce9ef5b9afdb5e157246c11

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:12:47 GMT
Expires: Wed, 21 Feb 2018 14:12:47 GMT
Etag: 2112876643077467119
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1203
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 513571
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1203
Md5:    9a504624fadda2dcec8340bf93b2252c
Sha1:   fa6dbebcf9b5450a1dd2f2371c971e838ff627c0
Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1034
Content-Transfer-Encoding: binary
Cache-Control: max-age=354878, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 15:25:41 GMT
Expires: Sat, 17 Feb 2018 15:25:41 GMT
Date: Tue, 13 Feb 2018 12:52:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1034
Md5:    baf34d986c00b66407375ac23eec7499
Sha1:   4451f614115ab7a166b37973aafa4dcae9e2a93f
Sha256: ac2f7c04a4378ed2d8a2a21de045d89445cf8eab3c7bf989ea332c181f7c56b2
                                        
                                            GET /bg/IOA8y9bJh23yzX_Xx1Lzdpvil-FmhhSrkRF2am8kUAc.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4991
Date: Tue, 06 Feb 2018 03:21:04 GMT
Expires: Wed, 06 Feb 2019 03:21:04 GMT
Last-Modified: Mon, 05 Feb 2018 09:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 639074
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4991
Md5:    35c97f406c207e558268924a05d5cfb0
Sha1:   410bd15d5b2dbffb516605c9d5a2a52d8d8d6eed
Sha256: 536f40cf7ac29a53a42ac183eefd062e0228e22f034f8ad2e8f1ffaaa771f5ed
                                        
                                            GET /activeview?avi=B94QHgd-CWpykC4S66wSbq4_4CwCA7MDZyQYAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAQ&cid=CAASBORooBQ&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:52:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:12:49 GMT
Expires: Wed, 21 Feb 2018 14:12:49 GMT
Etag: 18254379283724408787
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3642
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 513569
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3642
Md5:    24d24f1211524aff604a7a982bfb33ed
Sha1:   15c0f03407eb77a3da6a7476c6ffb4b8993eaefb
Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
                                        
                                            GET /8405476/priceline_728x90.jpg HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 34412
Date: Tue, 13 Feb 2018 10:55:21 GMT
Expires: Wed, 14 Feb 2018 10:55:21 GMT
Last-Modified: Tue, 13 Feb 2018 08:53:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 7017
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data
Size:   34412
Md5:    0ee6e3a786ea9355402571183c2a44f8
Sha1:   688107cbf8810442fd8b0fe3eb2b02c8439a3374
Sha256: 6eced3ffc190c264be0228692ff261fc1efd5f75bdd778220c41e017dfc20a15
                                        
                                            GET /pcs/view?xai=AKAOjsuzjeLmXvB3ZPc-uu_a--85xywBUENA48iHMZhEFkx1WdVklGhllbAmJDu7WZLnw3sPAY2SR7cbRq7rvkRVCYvK81lj8AEr2eUrMnAaTX8pB6N405UpCtkH6kDQb8EUCniArSsRd5h_Js4am7kV11UVR-kgevRFFuGAQfS7nPINKuKCnPVXuBMJy-KD8mbbaQvgKAAKmvpzgoIGF7WSsoWsOmkFZUSxGp3syaiGTaulNxiJ_XlZhSUMZI-yKkE-8AW1IFGWIo6QHCAnlgKF-5qLSWUcH-f-O5U5KeMgKCHjbyjwza4GUlI6yu2fKMZSNTI4IgHGhVsgN3Exm0-f4xuXl3M7tsZu7jRrLcim8jfZK1L081T-3RwjbGsg64a5veu_hE3yNxdcYtsYDYlacBq7lDjckWM6sPDHNQHhJfe9wWzD7fNiaDbCboqk5jyH5564dOo45nxMD-Hj8fS16Puw4Kxc-BcP6JWicfnL9zUUFpgCUjnFgnOZIr7qGqS-1qR24XYknBoFTPbVMTbJOD2s5hZkhb6yh_3CEWlAW2tp2E743ybU-GF9i65Y0rOQJ0ELnNtzmxyFfnvceGHWaHKdU30BPM23SUZVc5W3xypnBLDD1mvf8Z7WIs2DA65R70l0QsYYv42USs2qTI5bD6wHDPFdi6eZWYPn8XLPeYfumDzoJ5E7Hns-7S_IrocgntDAVKW-z5OHahBzGp7p2tU9xNW4TK3Qrw4iAfqSuWDPQI5V6ywzNc6Te3U-jDKv&sai=AMfl-YQGX8_mGMcDCaO-Cyq_RD1Sy_pheqHQRjv62D8oWadZyn0IsZr2V2NyZTQHoSQ4IOKVFE3y1WVh6XrsgTgateYRsfcWmRNx&sig=Cg0ArKJSzAHXrUAhV3gKEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907
Cookie: IDE=AHWqTUkEsfzl1BqSzIKEQFjMN2_qs2-bndFiCMyHm5y9PNNdTr43RSYp7xZNbwV_

                                         
                                         216.58.209.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 12:52:18 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=BbtTTgd-CWr6CF5a_6wSHlIKwBQAAAAA4AeAEAg&bg=!-_il-OBE4AqVyuuuW84CAAAAzVIAAAAUCgAG4faTJbhbmQEjrqsEJXAbJRH3Z2pHPG-SaV40TAaPeAV7U-8COUTMT-hKsJAczDqMIecb5hmCe6SfyjWAFT0lGgwH929GYv5CDMY147tF-xKM33lK2-g_XvfP7tTl3HjwU2rp3wWNvSN4gMsszx-7HgLetBumynCKnPbJR04x0THR_CQHAb3HzqxLxmjistHOcT6W4XfLgx4JxQ3iqG6dVZvTzDMkBTqBGvt0LVsgBP3IDwdoKxSwv2MnOvYxrYkBnWjTiaRMBzWkK0eE-hI7XoF8uwb_wL50Urka3cve7fLNewnFU02QANaDsTZuCMrw6z6zT7D6r_v3b6IaCA8qdnmJPC7RCqp9lnVjrgVtChsw2V29tx-pexUV-qwjF3VpZ40PB5iyu2xHxAdc HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         216.58.211.130
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:52:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /setuid?entity=101&code=CAESEO0U33kbPvq9HvU173gr8CA&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRD7n5MBGLHWwi0wAQ&v=APEucNVNbUhxOSbgr-OXgPtcd00JN9rDqSvJi0BqlmDwekEfNO2CwEyde-R04wW9YGi6y2UdlLII

                                         
                                         185.33.223.206
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Tue, 13 Feb 2018 12:52:20 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 9faffa48-a074-489a-84c8-e707c1ff1575
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HbyHv^T=!@wnf]maBDeKuh7<xR))l!Qa3jddQ!kNpwEX[LQlYJfuElh6!ldZ'j_EYoJm@]Ex]**PRPP(dH]0:FUp; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 12:52:20 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 12:52:20 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 301.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.40:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /pcs/activeview?xai=AKAOjsuAf5q3CE20juOumHSkjQBJFYXqMYN1THn75t1hJVQPKONlfRUdNtMpNBkujmc6jJGrHwh2S-Iy52suwHzc&sig=Cg0ArKJSzHpZP3kE1bE1EAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,95,728&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=1100&ss=1176,885&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=728,90&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1870391614265387%26output%3Dhtml%26h%3D90%26slotname%3D1761106951%26adk%3D1705239155%26adf%3D807048394%26w%3D728%26fwrn%3D4%26lmt%3D1424313314%26loeid%3D332260004%252C38893312%26rafmt%3D1%26format%3D728x90%26url%3Dhttp%253A%252F%252Fmiki976.beepworld.it%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D3%26wgl%3D0%26dt%3D1518526335823%26bpp%3D38%26fdt%3D45%26idt%3D258%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26correlator%3D2881603612786%26frm%3D20%26ga_vid%3D444220722.1518526337%26ga_sid%3D1518526337%26ga_hid%3D973021232%26ga_fc%3D0%26pv%3D2%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1870391614265387%26output%3Dhtml%26h%3D90%26slotname%3D1761106951%26adk%3D1705239155%26adf%3D807048394%26w%3D728%26fwrn%3D4%26lmt%3D1424313314%26loeid%3D332260004%252C38893312%26rafmt%3D1%26format%3D728x90%26url%3Dhttp%253A%252F%252Fmiki976.beepworld.it%252F%26ea%3D0%26flash%3D10.0.45%26fwr%3D0%26resp_fmts%3D3%26wgl%3D0%26dt%3D1518526335823%26bpp%3D38%26fdt%3D45%26idt%3D258%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26correlator%3D2881603612786%26frm%3D20%26ga_vid%3D444220722.1518526337%26ga_sid%3D1518526337%26ga_hid%3D973021232%26ga_fc%3D0%26pv%3D2%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo&referrer=http%3A%2F%2Fmiki976.beepworld.it%2F&itpl=0&avms=geo&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1870391614265387&output=html&h=90&slotname=1761106951&adk=1705239155&adf=807048394&w=728&fwrn=4&lmt=1424313314&loeid=332260004%2C38893312&rafmt=1&format=728x90&url=http%3A%2F%2Fmiki976.beepworld.it%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=3&wgl=0&dt=1518526335823&bpp=38&fdt=45&idt=258&shv=r20180207&cbv=r20170110&saldr=aa&correlator=2881603612786&frm=20&ga_vid=444220722.1518526337&ga_sid=1518526337&ga_hid=973021232&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=185&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=332260000%2C38893302%2C21061122%2C191880502&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=907

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 12:52:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: miki976.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         149.202.25.210
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 12:52:18 GMT
Server: Apache
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  XML document text
Size:   2983
Md5:    2e98f86154db2b407e9c042507fec60f
Sha1:   1b15366ea7a5d5e1bbb30b67bf8c7a8a39f0a6c8
Sha256: 31e28cfdf83ed22e7f6d072b8f8b4839e5462cc836f9413f8026b170c9d131d1
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: miki976.beepworld.it
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         149.202.25.210
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 12:52:19 GMT
Server: Apache
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  XML document text
Size:   2983
Md5:    2e98f86154db2b407e9c042507fec60f
Sha1:   1b15366ea7a5d5e1bbb30b67bf8c7a8a39f0a6c8
Sha256: 31e28cfdf83ed22e7f6d072b8f8b4839e5462cc836f9413f8026b170c9d131d1