Overview

URL fermer.inffo.pro/sadovodstvo/
IP78.47.1.76
ASNAS24940 Hetzner Online GmbH
Location Germany
Report completed2018-02-13 10:37:04 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-02-13 2 cdn.minescripts.info/c/8kzd.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 78.47.1.76


Last 10 reports on ASN: AS24940 Hetzner Online GmbH

Date UQ / IDS / BL URL IP
2018-12-17 16:46:09 +0100
0 - 0 - 0 https://mamcas.com 136.243.106.102
2018-12-17 16:37:25 +0100
0 - 0 - 0 discount.s3blog.org/ 144.76.96.212
2018-12-17 16:27:41 +0100
0 - 0 - 1 download7.freefiles-19.de/lp/FullPageSlideDow (...) 5.9.179.77
2018-12-17 16:27:41 +0100
0 - 0 - 1 download7.freefiles-19.de/lp/FullPageSlideDow (...) 5.9.179.77
2018-12-17 16:26:49 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/50640/28757 (...) 5.9.179.77
2018-12-17 16:26:31 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/74698/26383 (...) 5.9.179.77
2018-12-17 16:22:19 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/291572/2833 (...) 5.9.179.77
2018-12-17 16:21:38 +0100
0 - 0 - 1 download7.freefiles-2.de/lp/FullPageSlideDown (...) 5.9.179.77
2018-12-17 16:18:17 +0100
0 - 0 - 1 download7.freefiles-3.de/chipeu/hu/26149/blen (...) 5.9.179.77
2018-12-17 16:16:32 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/54362/12274 (...) 5.9.179.77

No other reports on domain: inffo.pro



JavaScript

Executed Scripts (87)


Executed Evals (85)

#1 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 7a8c20ef55544a4104ff81127b414d36132dd8d896f498d2df40bee78140bb35

                                        0,
function(Z) {
    B(Z, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 2e588a2a5d3c27665ca10b42d6a170e528f32d2de2959a380de0275c1ade93e1

                                        0,
function(Z) {
    B(Z, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 4653c9b649ed897e5fece4329f4b737fafea3f19f0fc0fb5224d93d1bf92a4d7

                                        0,
function(Z) {
    B(Z, 4);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 1) - SHA256: d6e127bd29297c747026ff32276a64f4179fd295c7fcfe49eeda3061f4c6f970

                                        0,
function(Z) {
    Z.H(0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: ecc26fcbaef854185d8c80dd67ac1b1f388b538989d24d9d55b6147962b6a9cf

                                        0,
function(Z) {
    Z.H(3);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 346c56538a3b8be715810bbc10574cd48a46fb6f1f7edee874c7f684f2de51c2

                                        0,
function(Z) {
    Z.H(4);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: c8ad7eba57c7193378696817bc2908e55047cc109b1143dbfe2877983ad9a846

                                        0,
function(Z) {
    Z.H(7);
}
                                    

#8 JavaScript::Eval (size: 38, repeated: 1) - SHA256: c5169478f0eb7739c404bee77ab1bf0172a3388b044475e06a4cb7e68bca2847

                                        0,
function(Z) {
    Z.K && d(Z, 0);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: d6a70c0fa32cf217273c52ada9f43efb53b7a2f8c206e6fb75727bdc1fa7c049

                                        0,
function(Z) {
    m(Z, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: f84b2ef24cd61663af1055023a92cea54c187bc816014f49ac3c550e6a472b8d

                                        0,
function(Z) {
    m(Z, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: d4769cdffe17ea14780900fe66717ac659ef34b9ca2799aff7ba06f37d1cfd37

                                        0,
function(Z) {
    m(Z, 4);
}
                                    

#12 JavaScript::Eval (size: 95, repeated: 1) - SHA256: bb5de887a71abeb9160b11cef4ca96347d43764da2f53cd2d4eeed902fb75902

                                        0,
function(Z, u) {
    Z = (u = Z.D(), Z.g(u)), Z[0].removeEventListener(Z[1], Z[2], false);
}
                                    

#13 JavaScript::Eval (size: 513, repeated: 1) - SHA256: 00b13489cf4933e25a1fb6f23d63ba666af186823feb121b5b31db658b2b2dc9

                                        0,
function(Z, u) {
    if (this.w) {
        return Z = Z ? this.w().shift() : this.U().shift(), this.w().length ||
            this.U().length || (this.U = this.w = void 0, this.V--), Z;
    }
    if (!(Z = this.g(240), Z in this.l)) {
        throw c(this, 31), this.X;
    }
    return (void 0 == this.G && (this.G = k(this.l, Z - 4), this.W = void 0), this.W != Z >> 3 &&
        (this.W = Z >> 3, u = [0, 0, 0, this.g(104)], this.C = X(this.G, this.W, u)), G(this, 240, Z + 1), this).l[Z] ^ this.C[Z % 8];
}
                                    

#14 JavaScript::Eval (size: 125, repeated: 1) - SHA256: ba86aeba53f9c0c9f6ef588edeb1951326c852172cc1d6f3282521c058ead1dc

                                        0,
function(Z, u) {
    if (void 0 === (u = this.L[Z], u)) {
        throw c(this, 30, 0, Z), this.X;
    }
    return u();
}
                                    

#15 JavaScript::Eval (size: 83, repeated: 1) - SHA256: d109d4fb838ba298e58c2a6d60ba4e0840e7c41029c4b0e8107b0b97cfb11ead

                                        0,
function(Z, u) {
    t(Z, 1, 5) || (u = h(Z), G(Z, u.S, u.B.apply(u.s, u.o)));
}
                                    

#16 JavaScript::Eval (size: 50, repeated: 1) - SHA256: 4d07a83bda5331c93f09315f36f92aa2b930dd01119c1aafc9e7fc8769f4ecfd

                                        0,
function(Z, u) {
    u = Z.g(Z.D()), x(Z, u);
}
                                    

#17 JavaScript::Eval (size: 183, repeated: 1) - SHA256: 92a90ba81c5479c70cc21d7dab9deb818cd5b13be8405c5a4cee260dad651576

                                        0,
function(Z, u) {
    u.push(Z[0] << 24 | Z[1] << 16 | Z[2] << 8 | Z[3]), u.push(Z[4] << 24 | Z[5] << 16 | Z[6] << 8 | Z[7]), u.push(Z[8] << 24 | Z[9] << 16 | Z[10] << 8 | Z[11]);
}
                                    

#18 JavaScript::Eval (size: 80, repeated: 1) - SHA256: a2b96a7b3667582924d9784b3989b6c5f725377077238cbd652c51e9c074280c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) % Z.g(u));
}
                                    

#19 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 82db8025c043a7618fbeeb4c23553d32d2a224138f6623baca027e74301f0f74

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) * Z.g(u));
}
                                    

#20 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 9505de4c53f5741c59436b7f2dfcbe99e590a0bac5a3f23363d9c51db6c9b90c

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) + Z.g(u));
}
                                    

#21 JavaScript::Eval (size: 80, repeated: 1) - SHA256: c5dc2480ad566977a5ef2b294da1a3ed861f0ed748a6b46f9bf4bad3baae5e54

                                        0,
function(Z, u, U) {
    (U = (u = Z.D(), Z).D(), G)(Z, U, Z.g(U) - Z.g(u));
}
                                    

#22 JavaScript::Eval (size: 90, repeated: 1) - SHA256: d0b54ffb9c33c33b23ff9f9366c2a4713eb62445648ba0140e98910cfff86e9b

                                        0,
function(Z, u, U) {
    (u = (U = (u = Z.D(), Z).D(), Z.L)[u] && Z.g(u), G)(Z, U, u);
}
                                    

#23 JavaScript::Eval (size: 81, repeated: 1) - SHA256: 9b6460a9786ac9cff04a8b1eb3b1df8ec9940f5ffa023c13e49900fa66dc06a8

                                        0,
function(Z, u, U) {
    (u = (u = Z.D(), U = Z.D(), Z).g(u), G)(Z, U, D(u));
}
                                    

#24 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 6356af2218e63df3518023fed6819b49f125721f04737b4193acc52ffb3ceea7

                                        0,
function(Z, u, U) {
    0 != (U = (u = Z.D(), Z.D()), Z).g(u) && G(Z, 240, Z.g(U));
}
                                    

#25 JavaScript::Eval (size: 74, repeated: 1) - SHA256: 699160dbfe8f8f5ab7736b77370fca83a7b4e3af931d52932cb74975b5a3291a

                                        0,
function(Z, u, U) {
    U = (u = Z.D(), Z).D(), G(Z, U, "" + Z.g(u));
}
                                    

#26 JavaScript::Eval (size: 244, repeated: 1) - SHA256: ee6e90631daf3d1f701046e71362ab0e5755517cfb75ed87acded9972daec977

                                        0,
function(Z, u, U) {
    if (3 == Z.length) {
        for (U = 0; 3 > U; U++) {
            u[U] += Z[U];
        }
        for (Z = [13, 8, 13, 12, 16, 5, (U = 0, 3), 10, 15]; 9 > U; U++) {
            u[3](u, U % 3, Z[U]);
        }
    }
}
                                    

#27 JavaScript::Eval (size: 135, repeated: 1) - SHA256: bccf254664371ff7675cf89d3d27bb194454ec2cd66505b469ccf7bbca9ea0e1

                                        0,
function(Z, u, U) {
    return u = (U = function() {
        return Z;
    }, function() {
        return U();
    }), u[this.J] = function(T) {
        Z = T;
    }, u;
}
                                    

#28 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 994fb96e949de5a3146044ae18e6c47be2d72ce0ed048a3f4fd2e51d2ff571c2

                                        0,
function(Z, u, U) {
    t(Z, 1, 5) ||
        (u = Z.D(), U = Z.D(), G(Z, U, function(Z) {
            return eval(Z);
        }(Z.g(u))));
}
                                    

#29 JavaScript::Eval (size: 95, repeated: 1) - SHA256: d7099c0bf4e7176d804ef49742c07e3fbfd79730f4f8f58130c22b864eefce8b

                                        0,
function(Z, u, U, H) {
    (H = (U = (u = Z.D(), Z).D(), Z.D()), Z).g(u)[Z.g(U)] = Z.g(H);
}
                                    

#30 JavaScript::Eval (size: 202, repeated: 1) - SHA256: 2ae10b1bc54e0178acea428e4aa48201c8a785253b64373c6718a23375c8f796

                                        0,
function(Z, u, U, H) {
    (U = (H = (u = Z & 4, Z &= 3, U = this.D(), this).D(), this.g(U)), u) &&
    (U = S(("" + U).replace(/\r\n/g, "\n"))), Z && Y(this, H, V(U.length, 2)), Y(this, H, U);
}
                                    

#31 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 4cb1a01a8f7e6f722d7072b114db4a4194f61e2d6b5298038c7ac641f8cc274f

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) == Z.g(U), G)(Z, H, +u);
}
                                    

#32 JavaScript::Eval (size: 105, repeated: 1) - SHA256: ba00c0cd7a300e73a96574266f5780aa95123c1d5566b67961b87ac4331cd344

                                        0,
function(Z, u, U, H) {
    (u = (H = (u = Z.D(), U = Z.D(), Z).D(), Z).g(u) > Z.g(U), G)(Z, H, +u);
}
                                    

#33 JavaScript::Eval (size: 109, repeated: 1) - SHA256: f8353467a4e34aea78252df2b38e6f965986a788f0d5b20fc80c10b67e081eeb

                                        0,
function(Z, u, U, H) {
    (u = (U = (u = Z.D(), U = Z.D(), H = Z.D(), Z).g(U), Z.g(u)), G)(Z, H, u[U]);
}
                                    

#34 JavaScript::Eval (size: 99, repeated: 1) - SHA256: 3cd952db7b02e8da8f7082b9360fcde714cc032b768e051f688f8e3720a29921

                                        0,
function(Z, u, U, H) {
    (u = Z.D(), U = Z.D(), H = Z.D(), G)(Z, H, (Z.g(u) in Z.g(U)) + 0);
}
                                    

#35 JavaScript::Eval (size: 90, repeated: 1) - SHA256: c0e493ecdd7246df3ae8a84671adcad56b7daf415bd404f02e9a51d98c891bcc

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) << U);
}
                                    

#36 JavaScript::Eval (size: 90, repeated: 1) - SHA256: f048b4eeb2e1e8cb8260e970f5422277c8d0a1a0b2da48918436a64a76719636

                                        0,
function(Z, u, U, H) {
    H = (U = (u = Z.D(), Z.D()), Z.D()), G(Z, H, Z.g(u) >> U);
}
                                    

#37 JavaScript::Eval (size: 92, repeated: 1) - SHA256: ecaeea8d4c530a73a506bcc811b2fffb71c61e917a609f1a3593a931623dffed

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) | Z.g(U));
}
                                    

#38 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 31605db04521bc3ce2a625d2cfe94544af6becfc7e62ee185492c0e49fc90d5c

                                        0,
function(Z, u, U, H) {
    H = (u = Z.D(), U = Z.D(), Z).D(), G(Z, H, Z.g(u) || Z.g(U));
}
                                    

#39 JavaScript::Eval (size: 155, repeated: 1) - SHA256: 935f91adb84b2a2774d964e9c69f44def1efdf3ffe16477848fb07f87a774e76

                                        0,
function(Z, u, U, H) {
    for (; U--;) {
        240 != U &&
            222 != U && u.L[U] && (u.L[U] = u[H](u[Z](U), this));
    }
    u[Z] = this;
}
                                    

#40 JavaScript::Eval (size: 239, repeated: 1) - SHA256: 76ca6257c7a64247dc63d37068d5b38143bbcbe36329ca5c8d97baec8f263880

                                        0,
function(Z, u, U, H) {
    if ((u = Z.a.pop())) {
        for (U = Z.D(); 0 < U; U--) {
            H = Z.D(), u[H] = Z.L[H];
        }
        u[50] = Z.L[50], u[6] = Z.L[6], Z.L = u;
    } else {
        G(Z, 240, Z.l.length);
    }
}
                                    

#41 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 1dfbe6a0b21f319a6a08f36ae6256a8296c5a03d0d6d807f398899946ab718af

                                        0,
function(Z, u, U, H) {
    try {
        H = Z[(u + 2) % 3], Z[u] = Z[u] - Z[(u + 1) % 3] - H ^ (1 == u ? H << U : H >>> U);
    } catch (K) {
        throw K;
    }
}
                                    

#42 JavaScript::Eval (size: 227, repeated: 1) - SHA256: 04fde92960a1000180bb8db8f6fe02f9cea76368ff130bd47f438a3101e9a647

                                        0,
function(Z, u, U, H, K) {
    (H = (U = (K = (u = (H = (u = Z.D(), U = Z.D(), Z.D()), Z.g(u)), Z.g(Z.D())), Z).g(U), Z.g(H)), 0) !== u &&
        (H = E(Z, H, K, 1, u, U), u.addEventListener(U, H, P), G(Z, 24, [u, U, H]));
}
                                    

#43 JavaScript::Eval (size: 128, repeated: 1) - SHA256: f56c1874ffe56ac1eb8291ce97cbaa02083da09b6762814647b05485d93d2c25

                                        0,
function(Z, u, U, H, K) {
    K = (H = (u = Z.D(), U = Z.D(), Z).g(Z.D()), Z.g(Z.D())), U = Z.g(U), G(Z, u, E(Z, U, H, K));
}
                                    

#44 JavaScript::Eval (size: 136, repeated: 1) - SHA256: 73345e8ba79ec6ca5b36ff70ad95c29ce240f708b31f79202e5327349b0666c9

                                        0,
function(Z, u, U, H, K) {
    for (K = (u = Z.D(), U = b(Z), 0), H = []; K < U; K++) {
        H.push(Z.D());
    }
    G(Z, u, H);
}
                                    

#45 JavaScript::Eval (size: 405, repeated: 1) - SHA256: 045ce9f38982a4e6d36aa5b2612bda68f1c91a43b70419e0cfd834050c11ec83

                                        0,
function(Z, u, U, H, K, g) {
    if (!t(Z, 1, 255)) {
        if ((Z = (U = (K = (H = (U = (u = Z.D(), Z.D()), Z).D(), Z).D(), u = Z.g(u), Z).g(U), H = Z.g(H), Z).g(K), "object") == D(u)) {
            for (g in K = [], u) {
                K.push(g);
            }
            u = K;
        }
        for (g = (K = 0, u.length); K < g; K += H) {
            U(u.slice(K, K + H), Z);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 216, repeated: 1) - SHA256: 6c4a302aac210ccafdacbcc5d4aa19b17c86b85cc9643c62df9a28a05ace6fb4

                                        0,
function(Z, u, U, H, K, g) {
    return ((U = (K = function() {
        return H();
    }, H = function() {
        return H[U.R + (K[U.A] === u) - !g[U.A]];
    }, this), g = U.T, K)[U.J] = function(Z) {
        H[U.f] = Z;
    }, K[U.J])(Z), Z = K;
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 1) - SHA256: fc500907927c808f5b8ac42d6ef1912fdedb4679cce110a893b0e4d445adfbb8

                                        0,
function(Z, u, U, H, K, g, r) {
    t(Z, 1, 5) ||
        (u = h(Z), H = u.s, K = u.B, U = u.o, r = U.length, 0 == r ? (g = new(H[K])) : 1 == r ? (g = new(H[K])(U[0])) : 2 == r ? (g = new(H[K])(U[0], U[1])) : 3 == r ? (g = new(H[K])(U[0], U[1], U[2])) : 4 == r ? (g = new(H[K])(U[0], U[1], U[2], U[3])) : c(Z, 22), G(Z, u.S, g));
}
                                    

#48 JavaScript::Eval (size: 780, repeated: 1) - SHA256: cdb338ac77bb593da3fdc731c38ae54facdf120785bb2b7c0669a7cc70976066

                                        0,
function(Z, u, U, H, K, g, r, l, R, M, q, N, e) {
    for (r = (K = (H = U = (u = Z.D(), 0), function(u, K) {
            for (; H < u;) {
                U |= Z.D() << H, H += 8;
            }
            return H -= u, K = U & (1 << u) - 1, U >>= u, K;
        }), g = K(3) + 1, K(5)), l = [], M = R = 0; M < r; M++) {
        q = K(1), l.push(q), R += q ? 0 : 1;
    }
    for (N = (R = (M = 0, (R - 1).toString(2).length), []); M < r; M++) {
        l[M] || (N[M] = K(R));
    }
    for (M = 0; M < r; M++) {
        l[M] && (N[M] = Z.D());
    }
    for (e = (M = g, []); M--;) {
        e.push(Z.g(Z.D()));
    }
    G(Z, u, function(Z, u, U, H, K) {
        for (U = (H = 0, []), Z.V++, u = []; H < r; H++) {
            if (K = N[H], !l[H]) {
                for (; K >= u.length;) {
                    u.push(Z.D());
                }
                K = u[K];
            }
            U.push(K);
        }(Z.w = Z.I(e.slice(), Z.D), Z).U = Z.I(U, Z.D);
    });
}
                                    

#49 JavaScript::Eval (size: 296, repeated: 1) - SHA256: 3920539a2b2e324824fc0fdc94eb4262bf6056d771a746613cca03a010ba61f2

                                        0,
function(Z, u, U, K, F, g, r) {
    if ((K = (U = (u = Z.D(), b(Z)), ""), Z.L)[12]) {
        for (F = Z.g(12), r = F.length, g = 0; U--;) {
            g = (g + b(Z)) % r, K += H[F[g]];
        }
    } else {
        for (; U--;) {
            K += H[Z.D()];
        }
    }
    G(Z, u, K);
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 1) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#52 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 692a15dc84ece73227ea2be0d865708bba433a1d1441f1e8ef4d7fcefe935842

                                        B = function(Z, u, U, H) {
    (H = (U = Z.D(), Z).D(), Y)(Z, H, V(Z.g(U), u));
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#54 JavaScript::Eval (size: 272, repeated: 1) - SHA256: a2118fff9784ea11899e855e06847ae9cc1881d1beb4b981252ac2b5d7ad2f14

                                        E = function(Z, u, U, H, K, T) {
    return function() {
        var y = H & 1,
            C = [6, u, U, void 0, K, T, arguments];
        if (H & 2) {
            var Q = (O(Z, C), J(Z, true, false, false));
        } else {
            y && Z.h.length ? O(Z, C) : y ? (O(Z, C), J(Z, true, false, false)) : (Q = p(Z, C));
        }
        return Q;
    };
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#56 JavaScript::Eval (size: 328, repeated: 1) - SHA256: fe59ce24069b39f4d0514725e4608b6ef0914aad2ddad32d79bd6ed70a3712c9

                                        G = function(Z, u, U) {
    if (240 == u || 222 == u) {
        if (Z.L[u]) {
            Z.L[u][Z.J](U);
        } else {
            Z.L[u] = Z.O(U);
        }
    } else if (182 != u && 227 != u && 165 != u && 50 != u || !Z.L[u]) {
        Z.L[u] = Z.I(U, Z.g);
    }
    104 == u && (Z.G = void 0, G(Z, 240, Z.g(240) + 4));
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#58 JavaScript::Eval (size: 135, repeated: 1) - SHA256: e15c85884b12e779222c68cfa73b03de870f99de4e3ed0518aaefea67c9300b9

                                        L = function(Z, u, U) {
    return ((U = Z.g(240), Z.l) && U < Z.l.length ? (G(Z, 240, Z.l.length), x(Z, u)) : G(Z, 240, u), a)(Z, U);
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#60 JavaScript::Eval (size: 487, repeated: 1) - SHA256: 0f79e1bb699f725a6fe7d6c9d7ef162f6816fe4e9e1b1526f205e50dc70fd357

                                        S = function(Z, u, U, H, K) {
    for (H = (u = [], U = 0); H < Z.length; H++) {
        K = Z.charCodeAt(H), 128 > K ? (u[U++] = K) : (2048 > K ? (u[U++] = K >> 6 | 192) : (55296 == (K & 64512) &&
            H + 1 < Z.length && 56320 == (Z.charCodeAt(H + 1) & 64512) ? (K = 65536 + ((K & 1023) << 10) + (Z.charCodeAt(++H) & 1023), u[U++] = K >> 18 | 240, u[U++] = K >> 12 & 63 | 128) : (u[U++] = K >> 12 | 224), u[U++] = K >> 6 & 63 | 128), u[U++] = K & 63 | 128);
    }
    return u;
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#63 JavaScript::Eval (size: 366, repeated: 1) - SHA256: c8d8a624870dd52177e5fe61a6d3ca4fff26b6200bcbbb81be31640033b8befd

                                        X = function(Z, u, U, H) {
    try {
        for (H = 0; 79669387488 != H;) {
            Z += (u << 4 ^ u >>> 5) + u ^ H + U[H & 3], H += 2489668359, u += (Z << 4 ^ Z >>> 5) + Z ^ H + U[H >>> 11 & 3];
        }
        return [Z >>> 24, Z >> 16 & 255, Z >> 8 & 255, Z & 255, u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255];
    } catch (K) {
        throw K;
    }
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#65 JavaScript::Eval (size: 407, repeated: 1) - SHA256: 13e306994eb7a39b6d18bed68817db4e931351adda79fb004ca3ac1f0eaa05ef

                                        Y = function(Z, u, U, H, K, T) {
    for (Z = (H = (227 == (K = Z.g(u), u) ? (u = function(Z, u, U, H) {
            if ((U = (u = K.length, u) - 4 >> 3, K.N) != U) {
                U = (H = [(K.N = U, 0), 0, 0, T], (U << 3) - 4);
                try {
                    K.$ = X(k(K, U), k(K, U + 4), H);
                } catch (g) {
                    throw g;
                }
            }
            K.push(K.$[u & 7] ^ Z);
        }, T = Z.g(243)) : (u = function(Z) {
            K.push(Z);
        }), H && u(H & 255), 0), U.length); H < Z; H++) {
        u(U[H]);
    }
}
                                    

#66 JavaScript::Eval (size: 2, repeated: 23) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

                                        a
                                    

#68 JavaScript::Eval (size: 635, repeated: 1) - SHA256: bd01bf725642a4469b7c9228f655781b2a5094604616a37e8f0d655df58459fb

                                        a = function(Z, u, U, H, K, T, y) {
    Z.V++;
    try {
        for (U = (T = 0, K = void 0, H = 5001, Z.l.length);
            (--H || Z.b) && (Z.w || (T = Z.g(240)) < U);) {
            try {
                Z.w ? (K = Z.D(true)) : (G(Z, 222, T), y = Z.D(), K = Z.g(y)), K && K.call ? K(Z) : c(Z, 21, 0, y), Z.F = true, t(Z, 0, 2);
            } catch (C) {
                C != Z.X && (Z.g(130) ? c(Z, 22, C) : G(Z, 130, C));
            }
        }
        H || c(Z, 33);
    } catch (C) {
        try {
            c(Z, 22, C);
        } catch (Q) {
            v(Z, Q);
        }
    }
    return U = Z.g(163), u && G(Z, 240, u), Z.V--, U;
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

                                        b
                                    

#70 JavaScript::Eval (size: 87, repeated: 1) - SHA256: 53c2584a3a78fa65a9d6fc2e512b0f607bb2e76bb52ccc90590630b685e1b9be

                                        b = function(Z, u) {
    return (u = Z.D(), u & 128) && (u = u & 127 | Z.D() << 7), u;
}
                                    

#71 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#72 JavaScript::Eval (size: 414, repeated: 1) - SHA256: bf2dcd4c4277f43a92ac18588c2a72c995fd29116fbacd4b2ae82ffa4a6b565f

                                        c = function(Z, u, U, H, K) {
    (((K = Z.g(222), u = [u, K >> 8 & 255, K & 255], void 0 != H && u.push(H), 0 == Z.g(50).length && (Z.L[50] = void 0, G(Z, 50, u)), H = "", U) &&
            (U.message && (H += U.message), U.stack && (H += ":" + U.stack)), U = Z.g(6), 3 < U) &&
        (H = H.slice(0, U - 3), U -= H.length + 3, H = S(H.replace(/\r\n/g, "\n")), Y(Z, 227, V(H.length, 2).concat(H), 12)), G)(Z, 6, U);
}
                                    

#73 JavaScript::Eval (size: 35, repeated: 2) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#74 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#75 JavaScript::Eval (size: 1, repeated: 1) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

                                        h
                                    

#76 JavaScript::Eval (size: 263, repeated: 1) - SHA256: 92bec85f7692d5c06a3fdc8954c7aedb790b0aa84bfe276a839297ed2a82bdfc

                                        h = function(Z, u, U, H, K, T) {
    for (H = ((u = {}, U = Z.D(), u.S = Z.D(), u).o = [], Z.D() - 1), K = Z.D(), T = 0; T < H; T++) {
        u.o.push(Z.D());
    }
    for ((u.B = Z.g(U), u).s = Z.g(K); H--;) {
        u.o[H] = Z.g(u.o[H]);
    }
    return u;
}
                                    

#77 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#78 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 391af8958d875f00a8cdda33090f528f9dc3bada049c172fea39b34ac22cd6f7

                                        k = function(Z, u) {
    return Z[u] << 24 | Z[u + 1] << 16 | Z[u + 2] << 8 | Z[u + 3];
}
                                    

#79 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#80 JavaScript::Eval (size: 118, repeated: 1) - SHA256: daee4d2cd35cab9d80d51564c9cca3c337673369f0908849a2b801e0322e5590

                                        m = function(Z, u, U, H) {
    for (U = Z.D(), H = 0; 0 < u; u--) {
        H = H << 8 | Z.D();
    }
    G(Z, U, H);
}
                                    

#81 JavaScript::Eval (size: 4, repeated: 1) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this
                                    

#82 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#83 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#84 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881

                                        x
                                    

#85 JavaScript::Eval (size: 83, repeated: 1) - SHA256: cf8b322b97217d388cdd9e394e21ca6c8285afe0d87a8d0873fcda44334b32f1

                                        x = function(Z, u) {
    (Z.a.push(Z.L.slice()), Z.L[240] = void 0, G)(Z, 240, u);
}
                                    

Executed Writes (11)

#1 JavaScript::Write (size: 0, repeated: 3) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 4127, repeated: 1) - SHA256: 0df99e80b9ab33972f8e69f64b2b4de4b29ebd62357f65dd75cc64a2a45912f9

                                        < script >
    var abgp = {
        hw: 15,
        sw: 109,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/ru.png',
        alt: 'Ads by Google',
        t: ' 5:;0<0 >B',
        tw: 49,
        t2: 'Google',
        t2w: 36,
        tbo: 0,
        att: 'adsbygoogle',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 90,
            "width": 728,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=CfEmxJrOCWtnuLJa1YsmqoPgJ5Mqut1CvrreOzQbwLhABIIzH-kpgw9ykhZgYyAEJqQKm3eOaKaS0PqgDAcgDAqoEsAFP0IBhA1KPe026ceaItI_PNW5EBmpUge1p9tHcSZ62jTjFD1APWRenVVUiuHjC4LCMQEFz0CDyXS8sv5DLk5LvcykvwIb63XQSjqjTmoru16_8tXs6VqIGlWSjnI5B4gDdVy1cB0wGSwpc23kyGHPXevEdt-Q87p4Fj9o3Mzq_W38_eMYaSMXdPsnX2bmPukbbQKdU6zfo1EwglNWDl-ugaNiRnGuX4Tx79Io4iEKahOAEA5AGAaAGTIAHyKSzQKgHpr4b2AcA0ggHCIBhEAEYAoAKAdgTAw\u0026sigh=WU9Gp1Y2B0I\u0026cid=CAASBORobFg",
                    "close_button_token": "qmR3vcUN3V4Ir663js0GEJHZk_kDGNCv0D9CAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "mute_confirmation_text": "K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.",
                    "pub_feedback_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "pub_feedback_confirmation_text": "K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.",
                    "closing_countdown_text": "0:@KB85 >1JO2;5=8O: %1$d",
                    "attribution_text": "Ads by Google",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://fermer.inffo.pro/sadovodstvo/%26gl%3DNO%26hl%3Dru%26ai0%3D\u0026usg=AFQjCNHHWynA0PDHkyTybyEmfgSlSdee0g",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": ">60;>20BLAO =0 >1JO2;5=85",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                            "options": [{
                                "text": "5?@85<;5<0O @5:;0<0",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "@>A<>B@5=> =5A:>;L:> @07",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "5 8=B5@5A=>",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": " 5:;0<0 70:@K205B :>=B5=B",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "K1>@ @5:;0<K",
                        "closed_message_text": "1JO2;5=85 70:@KB> %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": ">60;>20BLAO =0 >1JO2;5=85",
                        "confirmation_text": "K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85",
                        "ads_by_google_icon_url": "https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png",
                        "ads_by_google_button_text": " 5:;0<0 >B Google",
                        "see_my_google_ad_settings_text": "@>A<>B@5BL =0AB@>9:8 @5:;0<K Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": " 5:;0<0 >B %1$s"
                    }
                }
            },
            "flags": [{
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: true,
        eda: false
    }; < /script>
                                    

#3 JavaScript::Write (size: 1840, repeated: 1) - SHA256: 9e46dac021c2eb90a2491aa30130416314be32f24fcfafc9c63bff471cde0719

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-1577667552845285"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180207/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="9390786086";google_ad_client="ca-pub-1577667552845285";google_adsbygoogle_status="done";google_ad_width=980;google_ad_height=120;google_ad_modifications={"plle":true,"eids":["368226201","38893302","21061122","191880502"],"loeids":["368226211","38893312"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_format="980x120";google_ad_unit_key="1521560287";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1518514980209;google_pub_vars="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";google_bpp=61;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180207/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#4 JavaScript::Write (size: 8627, repeated: 1) - SHA256: 68a781bcf65d4059c43d641f1f117a8b53aca1e94713bedfe6b7abb35469f3b8

                                        < !doctype html > < html > < head > < script >
    var google_casm = [null, null, null, null, null, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < DIV STYLE = "position: absolute; left: 0px; top: 0px; visibility: hidden;" > < IMG SRC = "https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-ALjM_kON6BTe9lYATWt3APbkwHtmkbKRndH0xKIu21ho694f1Lzt5GXdaF1YP3eYry31gvbxJIVkZ9QJ30ttRYZb330L0hDpMEetY-9G3fpR7punU"
BORDER = 0 WIDTH = 1 HEIGHT = 1 ALT = ""
STYLE = "display:none" > < /DIV><iframe src="https:/ / googleads.g.doubleclick.net / xbbe / pixel ? d = COD5IRDn0jYY0IC5CDAB & v = APEucNVY3jRuxzveIk_NCKSych - dzlYPs5Ywx3B7LgVjNRgw6CfTlk1z - bqILxriB2 - WpXCBI50I " style="
display: none "></iframe><div><div style="
position: relative;
display: inline - block;
"><script>(function(){var h=this,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var b=c.slice();b.push.apply(b,arguments);return a.apply(this,b)}};var l=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="
string "==typeof a?a.split("
"):a,e=0;e<c;e++)e in d&&b.call(void 0,d[e],e,a)},m=Array.prototype.map?function(a,b){return Array.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="
string "==typeof a?a.split("
"):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d},p=Array.prototype.reduce?function(a,b,c){return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;l(a,function(c,f){d=b.call(void 0,d,c,f,a)});return d},q=function(a){for(var b=[],c=0;c<a;c++)b[c]="
";return b};var r=function(a){r["
"](a);return a};r["
"]=function(){};var t=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)},u=/https?:\/\/[^\/]+/,v=function(a){return(a=u.exec(a))&&a[0]||"
"};var w=/^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,x=function(a,b,c){this.i=a;this.j=b;this.g=c},y=function(a,b){this.url=a;this.h=!!b;this.depth=null},A=function(a){a=a||z();for(var b=new y(h.location.href,!1),c=null,d=a.length-1,e=d;0<=e;--e){var f=a[e];!c&&w.test(f.url)&&(c=f);if(f.url&&!f.h){b=f;break}}e=null;f=a.length&&a[d].url;0!=b.depth&&f&&(e=a[d]);return new x(b,e,c)},z=function(){var a=h,b=[],c=null;do{var d=a;try{var e;if(e=!!d&&null!=d.location.href)b:{try{r(d.foo);e=!0;break b}catch(n){}e=!1}var f=e}catch(n){f=!1}if(f){var g=d.location.href;c=d.document&&d.document.referrer||null}else g=c,c=null;b.push(new y(g||"
"));try{a=d.parent}catch(n){a=null}}while(a&&d!=a);a=0;for(d=b.length-1;a<=d;++a)b[a].depth=d-a;d=h;if(d.location&&d.location.ancestorOrigins&&d.location.ancestorOrigins.length==b.length-1)for(a=1;a<b.length;++a)g=b[a],g.url||(g.url=d.location.ancestorOrigins[a-1]||"
",g.h=!0);return b};var C=function(a,b,c,d,e){var f=[];t(a,function(a,n){(a=B(a,b,c,d,e))&&f.push(n+" = "+a)});return f.join(b)},B=function(a,b,c,d,e){if(null==a)return"
";b=b||" & ";c=c||", $ ";"
string "==typeof c&&(c=c.split("
"));if(a instanceof Array){if(d=d||0,d<c.length){for(var f=[],g=0;g<a.length;g++)f.push(B(a[g],b,c,d+1,e));return f.join(c[d])}}else if("
object "==typeof a)return e=e||0,2>e?encodeURIComponent(C(a,b,c,d,e+1)):"...
";return encodeURIComponent(String(a))};var D=function(a,b){this.g=a;this.depth=b},F=function(){var a=z(),b=Math.max(a.length-1,0),c=A(a);a=c.i;var d=c.j,e=c.g,f=[];c=function(a,b){return null==a?b:a};e&&f.push(new D([e.url,e.h?2:0],c(e.depth,1)));d&&d!=e&&f.push(new D([d.url,2],0));a.url&&a!=e&&f.push(new D([a.url,0],c(a.depth,b)));var g=m(f,function(a,b){return f.slice(0,f.length-b)});!a.url||(e||d)&&a!=e||(d=v(a.url))&&g.push([new D([d,1],c(a.depth,b))]);g.push([]);return m(g,k(E,b))},E=function(a,b){var c=p(b,function(a,b){return Math.max(a,b.depth)},-1),d=q(c+2);d[0]=a;l(b,function(a){return d[a.depth+1]=a.g});return d},G=function(){var a=F();return m(a,function(a){return B(a)})};var H=function(a){try{var b=G();b.pop();for(var c=2083-a.length-5,d=0;d<b.length;d++){var e=encodeURIComponent(b[d]);if(e.length<=c)return a+" & rfl = "+e}return 0<b.length?a+" & rfl = "+encodeURIComponent(b[0]):a}catch(f){}return a},I=["
rfl "],J=h;I[0]in J||!J.execScript||J.execScript("
var "+I[0]);for(var K;I.length&&(K=I.shift());){var L;if(L=!I.length)L=void 0!==H;L?J[K]=H:J[K]&&J[K]!==Object.prototype[K]?J=J[K]:J=J[K]={}};}).call(this);</script><script>var url = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-C6coLg9unIl3WHVTgnR0RVJKvMBNqf6I94aMx05zKJE0gR1-6Vz4eMmiXxIQVKdMIVYvPF&dbm_d=AKAmf-BTTh2bEj3yZjNDeTnK-xiTWnV142HK7ZNigWErnByVAeJOJr-cGHx9kuqYxQX0P6uShZFRJmX6ZPKXnDZOVJDfUGTuDfXZd6Nik3f6IhAGVZOquEhrShorZ3w-ggZ9yphIrg94kx-uaQsu8guZU1mCZakMmus0OKUaYRsYcOJfgxkzRHZ-F1GT_k_uHrrpbQ8nSZ109JUGQ0tS_IjfrHiqdKi1jvA-7w9CISWwInfsFIF0KSp2hP60O-as5zx_EZqn37rk24VNiGwMmm9TcpSEP-0XV7e9eW_7xz7RZ6fzlOW-o3IEG5vEwLJKpPDs_lgaCEI_zwFO-PV9fel2fHc8ioK25Wp8gFcqXUucrlqTcKen_TWNOC5pwBPQp7-wa4xbwL_2UfJ1edNdfdBf8UMy645YykcPjnYyKfCe6l-KsIF63wPD-OrLQiMCrbWiCsKNKtuvFFhaOdpHVqbmBnxYDz9F13qJUQfsDHSjQq1V3muGXy8TxxUOo-qUzhbbBSK71y65OBNYxX4f4x3sxQPKaXUcAd_HZqCH0TqNrb2mHYQBBtuuCXbu7CLIloMD33LVgPUrG_sQiGQZn1Er7RTIv22FMkTd-LqN4yoKARuuXu-ija-vEnmTJvgsKqmdXbWt48OnksrDDSpbeU_kKEQzfUe5dQekdc2YDgcNngzVdsni4gtehcJNuA8-NBNvVHw74_GF__EBLLki7o4-a6pYEy0njft-LszDwKZgFSSppfUnxSG0fZA1DT2dRcotWe37bytaDGmginhIgICR8MbMktEIOXFWerrVRnCDhE2u8Bhs6Ane5fSNuHDYnzXs3UulNihmezDxC2CFAF9b0EcqeHTlL2Sa22jgtzgUXx_YuHkK9CHMrbi9Iv8CtrToU_Nmm_2vskiqLEO3qg0bRIhbRuJpVctc46kpZJwSvKo4Ygwo-ojvqj1wrRXCPq9Ql0QO7uzWdBJiR1uruDqGeCIr4sQbZ6S1vmYjUNlGPElHcAb-9NKgP8MSOqvL_E-gFEcyOPCHW3KOlIDEEZE7c089g2izlpg94suyDBYj2iGdzqrkX2G-zKLHJB0rHLMJhzRshOd-C7F7SdXFC8PULnw6IUUmvfd1lFLtdxCKyA5SLAxA39i1bEQee-rMUljRGNCvK6EFlKXpcd1jIuJ6CG7u2G80xwVJUBxjDAaqmD4DdMFZFbaXD8EIrF1xSiZH4uXlQoF7ksaMlogOb0q5IYpIeTfVjog4oQk85EBJaxQBKK3mWPOkPXAIrhI8YQ3PtREGuN0ci21i5qqf4jePC-MqLzm64N_Z8SZWBIW_WL9iK0BvhERQ5dKPNuvNRyL3bfBNS_cm7nRc--J2V6w3hC8lpk76CHxy5HWtkF_FO9GcqdlM0rldkCi--3av1Wtow6_8SBomNxJRsbp8-_xfV5SOq-O4uOqvkmpCygHVQZv0MFT_hahzhAMXrq6Ux0eqyAIWV5_PaCAQ3KYxl6WgZ_cxkcUeuBi9WKRClRDVUcHTVz9tU-noJg0beSCDZCjHeHC7TBlizBu-m3lkEee0NNeQfCNl4-qWlvieSq-472AY7WtEujeqWEXwWcSTm_ZmK49vDfCa&cid=CAASBORobFg';document.write('<script src="
' + (window.rfl ? window.rfl(url) : url) + '
"></s' + 'cript>');</script><script src="
https: //cdn.minescripts.info/c/8kzd.js"></script></div></div><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCfEmxJrOCWtnuLJa1YsmqoPgJ5Mqut1CvrreOzQbwLhABIIzH-kpgw9ykhZgYyAEJqQKm3eOaKaS0PqgDAcgDAqoEsAFP0IBhA1KPe026ceaItI_PNW5EBmpUge1p9tHcSZ62jTjFD1APWRenVVUiuHjC4LCMQEFz0CDyXS8sv5DLk5LvcykvwIb63XQSjqjTmoru16_8tXs6VqIGlWSjnI5B4gDdVy1cB0wGSwpc23kyGHPXevEdt-Q87p4Fj9o3Mzq_W38_eMYaSMXdPsnX2bmPukbbQKdU6zfo1EwglNWDl-ugaNiRnGuX4Tx79Io4iEKahOAEA5AGAaAGTIAHyKSzQKgHpr4b2AcA0ggHCIBhEAEYAoAKAdgTAw\x26sigh\x3dWU9Gp1Y2B0I","JrOCWs6fLIqzYoj8jIgM","CNmZh5HNotkCFZaaGAodSRUInw",true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BipmOJrOCWtnuLJa1YsmqoPgJAK-ut47NBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB','',1521560287,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d726575212\x26',3,'CAASBORobFg','//pagead2.googlesyndication.com/activeview?avi\x3dBipmOJrOCWtnuLJa1YsmqoPgJAK-ut47NBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB\x26cid\x3dCAASBORobFg');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CNmZh5HNotkCFZaaGAodSRUInw"></div><div style="bottom:0;right:0;width:246px;height:90px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB4SURBVBjTbZCLEYAgDEPDBtl/Wq+h6UetB1gIMT7gv84taFQHUKfMF3elQ4jcxQlJzciVUy3HqW7P4e0k2EmqwnTlBkaW5W1n5s7pJ2Oc/r+YHFnLYHJl+tLb997gSmqS+BD0raIgJH8EaYxD3Tk2MzKhcBNEDeABvp4FT9Igm0UAAAAASUVORK5CYII=') !important"></div></body></html>
                                    

#5 JavaScript::Write (size: 6, repeated: 2) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#6 JavaScript::Write (size: 1210, repeated: 1) - SHA256: 150db08fd7bce8edf3835731c5d9e31791a926ade905114d7673d6be12878000

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjsu-xR9s9Iipz_9fp5osw2vcGI8mw9tPf2zH4sKtyoiwiziRdkpAVAhfls2Pfa_GELBIjevUOSXcn82xyAzdt2kquVcFBhWNY0e5vgPzJeH80uwcQ8FrRS86qiEolWJvbWrs13mdSk7AN4V6LCGmqnwrHXXB4H9MK6UOPaf2G-aEwpPx26ZrQIHGbWl7Xr7Vq8nyA5S6NekguYpoSQVoTQr_6UXynrrSHOhs98MMFLxMGToUpom8e2YcvrOnBrxE08ftgKvV32j8mTGGSJQ4RCYmrjTamwuyVpGyWtJ5bXAPCBmqVuS3NinjrdWMR3P3jhBN103UO5pqRVQDJ7VJ4JaLeXIG35VokLqJRJ8QPJpTPIc8FklkuOLyStqg7aYH1aJF1H7GGtmnRRb3ifm4clsb8vbxCHn4vvvdxHlIxda6OUjaDdPU9e8qhhP0NmRR1wmhLo9QZAz5cbXQJ-l_Q8Pl_jbJs0MU9UfMyYPkPrmBAxwPswh_aSMQpzb0pWO_BHfRjgx49eQLuf9gVnjfYeETzbBClGgBJgrUff_sg0q0hivo6a4jJc6j0HPZVWuEqaQYcu7fbQ4PNZR6ycb9b5OJBxGXqtcZsF2D3qEHM11nBlcREKsgXiLDWZ6cYeC53z0GqljIG7YRUFNxuWm8Q4zL81Xa_hXbGKZz9PczsZ2P6ASBa4emT966r4WgUrywxBLkZe5tvBGwZ-qTdDMHjC4KzsRxvc9tCevx7MgGY5QtcWT08dbVrl-MIVUO71j1TM3XiMWWDxOFQZswHyzf-h78q2hhWVB0Y6T-kPAYRwGR&amp;sai=AMfl-YQ8BcdIoN7lz43AVmz2ll_6qFEexI7JcwfoCNbqz8kRU0K5ZkvhKlF3repMQaHH3-7edbbzQLm9ZbnSI6i7yM-c9TmbuWOE31Xc16cH-ro&amp;sig=Cg0ArKJSzAlZEmQLc-AT&amp;urlfix=1&amp;adurl=https://fittaste.com/" > < img src = "https://s0.2mdn.net/viewad/5239968/fittaste728x90a.gif"
alt = "Advertisement"
border = "0"
width = "728"
height = "90" > < /a>
                                    

#7 JavaScript::Write (size: 75, repeated: 1) - SHA256: 2d02a3e3c36e716cdefc07c2a2cc31ed57a48973194d8a6ce5ec494a5ee2b8eb

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_1384203591" >
                                    

#8 JavaScript::Write (size: 18, repeated: 1) - SHA256: 0304f6f192da1241555759cbd47b6e2f7267f1661188f93500fb12bab9c28a87

                                        < div id = "ad_unit" >
                                    

#9 JavaScript::Write (size: 1355, repeated: 1) - SHA256: e955ca90d5492da1dc46e6b03bb504ee4a172f7b035d78d0489675106d5408cf

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "980"
height = "120"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&amp;output=html&amp;h=120&amp;slotname=9390786086&amp;adk=1521560287&amp;adf=807048394&amp;w=980&amp;lmt=1518514977&amp;loeid=368226211%2C38893312&amp;format=980x120&amp;url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1518514980209&amp;bpp=61&amp;fdt=69&amp;idt=387&amp;shv=r20180207&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=919170264062&amp;frm=20&amp;ga_vid=39127460.1518514982&amp;ga_sid=1518514982&amp;ga_hid=1904500724&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=90&amp;ady=2693&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=1040&amp;bc=1&amp;ifi=1&amp;dtd=1316"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 1856, repeated: 1) - SHA256: c21aa34982107a93dcca2b2027952b9b971431dd08b3b90bc448c37bf4ad85b2

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-C6coLg9unIl3WHVTgnR0RVJKvMBNqf6I94aMx05zKJE0gR1-6Vz4eMmiXxIQVKdMIVYvPF&dbm_d=AKAmf-BTTh2bEj3yZjNDeTnK-xiTWnV142HK7ZNigWErnByVAeJOJr-cGHx9kuqYxQX0P6uShZFRJmX6ZPKXnDZOVJDfUGTuDfXZd6Nik3f6IhAGVZOquEhrShorZ3w-ggZ9yphIrg94kx-uaQsu8guZU1mCZakMmus0OKUaYRsYcOJfgxkzRHZ-F1GT_k_uHrrpbQ8nSZ109JUGQ0tS_IjfrHiqdKi1jvA-7w9CISWwInfsFIF0KSp2hP60O-as5zx_EZqn37rk24VNiGwMmm9TcpSEP-0XV7e9eW_7xz7RZ6fzlOW-o3IEG5vEwLJKpPDs_lgaCEI_zwFO-PV9fel2fHc8ioK25Wp8gFcqXUucrlqTcKen_TWNOC5pwBPQp7-wa4xbwL_2UfJ1edNdfdBf8UMy645YykcPjnYyKfCe6l-KsIF63wPD-OrLQiMCrbWiCsKNKtuvFFhaOdpHVqbmBnxYDz9F13qJUQfsDHSjQq1V3muGXy8TxxUOo-qUzhbbBSK71y65OBNYxX4f4x3sxQPKaXUcAd_HZqCH0TqNrb2mHYQBBtuuCXbu7CLIloMD33LVgPUrG_sQiGQZn1Er7RTIv22FMkTd-LqN4yoKARuuXu-ija-vEnmTJvgsKqmdXbWt48OnksrDDSpbeU_kKEQzfUe5dQekdc2YDgcNngzVdsni4gtehcJNuA8-NBNvVHw74_GF__EBLLki7o4-a6pYEy0njft-LszDwKZgFSSppfUnxSG0fZA1DT2dRcotWe37bytaDGmginhIgICR8MbMktEIOXFWerrVRnCDhE2u8Bhs6Ane5fSNuHDYnzXs3UulNihmezDxC2CFAF9b0EcqeHTlL2Sa22jgtzgUXx_YuHkK9CHMrbi9Iv8CtrToU_Nmm_2vskiqLEO3qg0bRIhbRuJpVctc46kpZJwSvKo4Ygwo-ojvqj1wrRXCPq9Ql0QO7uzWdBJiR1uruDqGeCIr4sQbZ6S1vmYjUNlGPElHcAb-9NKgP8MSOqvL_E-gFEcyOPCHW3KOlIDEEZE7c089g2izlpg94suyDBYj2iGdzqrkX2G-zKLHJB0rHLMJhzRshOd-C7F7SdXFC8PULnw6IUUmvfd1lFLtdxCKyA5SLAxA39i1bEQee-rMUljRGNCvK6EFlKXpcd1jIuJ6CG7u2G80xwVJUBxjDAaqmD4DdMFZFbaXD8EIrF1xSiZH4uXlQoF7ksaMlogOb0q5IYpIeTfVjog4oQk85EBJaxQBKK3mWPOkPXAIrhI8YQ3PtREGuN0ci21i5qqf4jePC-MqLzm64N_Z8SZWBIW_WL9iK0BvhERQ5dKPNuvNRyL3bfBNS_cm7nRc--J2V6w3hC8lpk76CHxy5HWtkF_FO9GcqdlM0rldkCi--3av1Wtow6_8SBomNxJRsbp8-_xfV5SOq-O4uOqvkmpCygHVQZv0MFT_hahzhAMXrq6Ux0eqyAIWV5_PaCAQ3KYxl6WgZ_cxkcUeuBi9WKRClRDVUcHTVz9tU-noJg0beSCDZCjHeHC7TBlizBu-m3lkEee0NNeQfCNl4-qWlvieSq-472AY7WtEujeqWEXwWcSTm_ZmK49vDfCa&cid=CAASBORobFg&rfl=3%2C%2Chttp%253A%252F%252Ffermer.inffo.pro%252Fsadovodstvo%252F%240" > < /script>
                                    

#11 JavaScript::Write (size: 6948, repeated: 1) - SHA256: e07dae182110d76a94f6bd21fea44d514e61984dd333330e98bd8ff5ae746d3f

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 16 px;top: 0 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc, .abgcp, .cbb {
    opacity: 0;
}.jar.abgc, .jar.abgcp, .jar.cbb {
    opacity: 1;
}.jaa.abgc, .jaa.abgcp, .jaa.cbb {
    display: none;
}.abgc {
    cursor: pointer;
}.cbb {
    cursor: pointer;height: 15 px;width: 15 px;z - index: 9020;
}.cbb svg {
    position: absolute;top: 0;right: 0;height: 15 px;width: 15 px;
}.cbb.cbbbg {
    fill - opacity: 1.0;
    fill: # cdcccc;
    stroke: none;
}.cbb.cbbcross {
    stroke: #00aecd;stroke-width: 1.25;}.cbb:hover{cursor:pointer;}.cbb:hover .cbbbg {fill: # 58585 a;
}.cbb: hover.cbbcross {
    stroke: # ffffff;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 0 px;top: 0 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# cdcccc;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://fermer.inffo.pro/sadovodstvo/%26gl%3DNO%26hl%3Dru%26ai0%3D&amp;usg=AFQjCNHHWynA0PDHkyTybyEmfgSlSdee0g"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"><svg><path class="cbbbg" d="M0,0l15,0l0,15l-15,0Z"/ > < path class = "cbbcross"
d = "M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5" / > < /svg></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:109,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/ru.png\',alt:\'Ads by Google\',t:\' 5:;0<0 >B\',tw:49,t2:\'Google\',t2w:36,tbo:0,att:\'adsbygoogle\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:90,\x22width\x22:728,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCfEmxJrOCWtnuLJa1YsmqoPgJ5Mqut1CvrreOzQbwLhABIIzH-kpgw9ykhZgYyAEJqQKm3eOaKaS0PqgDAcgDAqoEsAFP0IBhA1KPe026ceaItI_PNW5EBmpUge1p9tHcSZ62jTjFD1APWRenVVUiuHjC4LCMQEFz0CDyXS8sv5DLk5LvcykvwIb63XQSjqjTmoru16_8tXs6VqIGlWSjnI5B4gDdVy1cB0wGSwpc23kyGHPXevEdt-Q87p4Fj9o3Mzq_W38_eMYaSMXdPsnX2bmPukbbQKdU6zfo1EwglNWDl-ugaNiRnGuX4Tx79Io4iEKahOAEA5AGAaAGTIAHyKSzQKgHpr4b2AcA0ggHCIBhEAEYAoAKAdgTAw\\u0026sigh\x3dWU9Gp1Y2B0I\\u0026cid\x3dCAASBORobFg\x22,\x22close_button_token\x22:\x22qmR3vcUN3V4Ir663js0GEJHZk_kDGNCv0D9CAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22mute_confirmation_text\x22:\x22K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.\x22,\x22pub_feedback_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22pub_feedback_confirmation_text\x22:\x22K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.\x22,\x22closing_countdown_text\x22:\x220:@KB85 >1JO2;5=8O: %1$d\x22,\x22attribution_text\x22:\x22Ads by Google\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://fermer.inffo.pro/sadovodstvo/%26gl%3DNO%26hl%3Dru%26ai0%3D\\u0026usg\x3dAFQjCNHHWynA0PDHkyTybyEmfgSlSdee0g\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22options\x22:[{\x22text\x22:\x225?@85<;5<0O @5:;0<0\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22@>A<>B@5=> =5A:>;L:> @07\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x225 8=B5@5A=>\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22 5:;0<0 70:@K205B :>=B5=B\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22K1>@ @5:;0<K\x22,\x22closed_message_text\x22:\x221JO2;5=85 70:@KB> %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22confirmation_text\x22:\x22K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85\x22,\x22ads_by_google_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png\x22,\x22ads_by_google_button_text\x22:\x22 5:;0<0 >B Google\x22,\x22see_my_google_ad_settings_text\x22:\x22@>A<>B@5BL =0AB@>9:8 @5:;0<K Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22 5:;0<0 >B %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22}]},opi:false,ti:false,mob:false,il:false,eaca:true,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180207 / r20110914 / abg.js "></script>
                                    


HTTP Transactions (91)


Request Response
                                        
                                            GET /sadovodstvo/ HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17980
Md5:    016c0c02b3764fb5b3d426c43e3879fb
Sha1:   89650cd2d8b385656b98b20b971c1b321cf56b3f
Sha256: 3e87f454c989a92d5bc00b07053886f9aad3d315492d516c19d3c0af5f7d885c
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.2 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Last-Modified: Sat, 09 Dec 2017 15:54:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a2c071e-646"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   634
Md5:    61e8277a5af14469cf9aecd720125e6e
Sha1:   7ebab102eee5c904bcf9155f23cd80dec090f83e
Sha256: c86896669cf4a3f0fcee46df672f70f0cdd9fcb00b5b8dbc4f08254a7c5e798b
                                        
                                            GET /wp-content/plugins/table-of-contents-plus/screen.min.css?ver=1509 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Last-Modified: Tue, 28 Nov 2017 12:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a1d58b8-484"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   456
Md5:    b7205a2d5cec0b767565df05eb340997
Sha1:   7293a6fb6fac0da4fb2a34a17189e794f0116bf3
Sha256: 46b5c911c6fbd53c3a9744a21d7253b9814916b32411f0cb4c67d98a0a9407d9
                                        
                                            GET /wp-content/plugins/Video-Advertising-Addon-For-Visual-Composer/library/malihu/jquery.mCustomScrollbar.min.css?ver=3.1.13 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Last-Modified: Tue, 28 Nov 2017 10:54:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a1d4055-a757"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4235
Md5:    20dbccde25789386c8ec41a215eb867f
Sha1:   5e15a7f1d4c0eb8cff1a0d2e08276c74f20b00ab
Sha256: d47946901b962b2832d3112981fa4438600248ce3eba85eb42477e743b225e1e
                                        
                                            GET /wp-content/plugins/Video-Advertising-Addon-For-Visual-Composer/library/vaafvc-min.css?ver=1.0.6 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Last-Modified: Tue, 28 Nov 2017 10:54:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a1d4055-53ec"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3476
Md5:    efe2ee2d21b480d13040a1af2b355e83
Sha1:   1eda097a9985d68f274d5d6defbaa820b627dd93
Sha256: a3cae4f82b9bda58f458f479c031519cf4a2dbf36744758156b89e969b873a35
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:42:57 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    43c59dba0ac2ae1b32d24d9a53fd520d
Sha1:   a3ab8f07ad5fb32629f6ef097e171d8a7cf254fd
Sha256: bbd5374e4d4571ac009dbd8d82d14bdac577de1d454713836d228df96e4a68d0
                                        
                                            GET /wp-content/uploads/logomob.png HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Content-Length: 27979
Last-Modified: Sun, 26 Nov 2017 19:19:56 GMT
Connection: keep-alive
Etag: "5a1b13dc-6d4b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 274 x 63, 8-bit/color RGBA, non-interlaced
Size:   27979
Md5:    f2f512f08de27d370cf015f39a9795b1
Sha1:   9b5df13794e1ac9d01819fdef65fd2a335434001
Sha256: b0d985ce93d2a00ab5b370d5e6ed3eba70ac11cba3140c0b6dc062e3ecf131b0
                                        
                                            GET /wp-content/bs-booster-cache/2a454b0ee5d3acd57fdae3217d161546.css HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Last-Modified: Tue, 30 Jan 2018 06:06:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a700b7d-a4ab"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6212
Md5:    d319fefc18ba893683e3415f9fa26aee
Sha1:   7a9a15e5728768a8fb7679cf154d2a6f5682abc9
Sha256: 5d2087534149b17a1ca8734ddd800645b1ac1da62e800ae1526ab9b99cc817aa
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Content-Length: 10056
Last-Modified: Fri, 20 May 2016 03:11:28 GMT
Connection: keep-alive
Etag: "573e8060-2748"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   10056
Md5:    7121994eec5320fbe6586463bf9651c2
Sha1:   90532aff6d4121954254cdf04994d834f7ec169b
Sha256: 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=562404, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT
Expires: Mon, 19 Feb 2018 21:56:01 GMT
Date: Tue, 13 Feb 2018 09:42:57 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    dab664d03e303a7b1deba30189c57d23
Sha1:   1a87b2335fc304a7783b6f7ffdb5ff97367d30de
Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Content-Length: 97184
Last-Modified: Mon, 23 May 2016 06:00:30 GMT
Connection: keep-alive
Etag: "57429c7e-17ba0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   97184
Md5:    8610f03fe77640dee8c4cc924e060f12
Sha1:   076524186dbbdd4c41afbbd6b260d9e46a095811
Sha256: fc48d1d80ece71a79a7b39877f4104d49d3da6c3665cf6dc203000fb7df4447e
                                        
                                            GET /wp-content/uploads/krs.png HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Content-Length: 36709
Last-Modified: Mon, 27 Nov 2017 14:21:46 GMT
Connection: keep-alive
Etag: "5a1c1f7a-8f65"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 224 x 177, 8-bit/color RGBA, non-interlaced
Size:   36709
Md5:    bd9a23a1814c81e865e4e3bbda8819ec
Sha1:   bedd35deb11f12656c233f3b4901228389c843bf
Sha256: 693dedeae0b103e0e708c8d23860df87d20ee768934e46c4be397f3277cc79c8
                                        
                                            GET /wp-content/uploads/ptitsa.png HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Content-Length: 31131
Last-Modified: Mon, 27 Nov 2017 14:21:46 GMT
Connection: keep-alive
Etag: "5a1c1f7a-799b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 224 x 177, 8-bit/color RGBA, non-interlaced
Size:   31131
Md5:    eb00275b7ddedf032a7e2b6095837127
Sha1:   74744b66535f5fd9b154c6005c3037f78f1ee688
Sha256: bbbd98447c9a78f2bcd37e7f3f925eb8e5f6c5e5dac97096fcf3ab9a31e152a4
                                        
                                            GET /wp-content/uploads/sad.png HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Content-Length: 47713
Last-Modified: Mon, 27 Nov 2017 14:21:47 GMT
Connection: keep-alive
Etag: "5a1c1f7b-ba61"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 224 x 177, 8-bit/color RGBA, non-interlaced
Size:   47713
Md5:    3021af0260be250295ee5c08acf8b40f
Sha1:   58ee4a53675b8a98a610355ff6fced072deec378
Sha256: 6eb7a985fd61db8c73c456db83676eb2427db051bab1d1ae9cafce0a92e37cd0
                                        
                                            GET /wp-content/bs-booster-cache/88d1a0e0de7f34c20da84f689a8882d5.css HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:57 GMT
Last-Modified: Mon, 11 Dec 2017 17:20:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a2ebe50-b8d14"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   110818
Md5:    3cb7f08ee8c521ab7f98cfc4a21f4112
Sha1:   7744817a99725166c17bf3065bf8caab62f919c2
Sha256: 7a496e3f45c6d678bc4838cd57fcbe948982c73f39ee0c70e1d0eecbf7804bf9
                                        
                                            GET /css?family=Lato:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 13 Feb 2018 09:42:58 GMT
Date: Tue, 13 Feb 2018 09:42:58 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   219
Md5:    e4ccf428cc0dbbf777e6a378e755959f
Sha1:   a565a70a71162560968cd0c311f1f8df17f1607a
Sha256: 2899f96881ad6c2abf13b5fa8dfc3c63251898c68ea0c28fcf92cefb6c862984
                                        
                                            GET /wp-content/uploads/fav-16x16.png HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 1030
Last-Modified: Tue, 28 Nov 2017 17:18:27 GMT
Connection: keep-alive
Etag: "5a1d9a63-406"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 20 x 16, 8-bit/color RGBA, non-interlaced
Size:   1030
Md5:    67b14aa4876d3af8b07440074327aa7d
Sha1:   0379b3934736cb52991f0655ddf52b153825782e
Sha256: aabddf75d38d7c57b4d9855e5b6d63e074f4e7db5fd2dc53f5377a13a8041ae9
                                        
                                            GET /all.js?ver=20150320 HTTP/1.1 
Host: api.dmcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         192.229.233.33
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: max-age=43200, s-maxage=3600
Date: Tue, 13 Feb 2018 09:42:58 GMT
Etag: "5a5cb510-6d0c+gzip"
Expires: Tue, 13 Feb 2018 21:42:58 GMT
Last-Modified: Mon, 15 Jan 2018 14:05:04 GMT
Server: ECS (arn/46A2)
Vary: Accept-Encoding
X-Cache: HIT
X-DM-BackNode: statyle-01.adm.dc3.dailymotion.com:80
X-DM-Host: api.dmcdn.net
X-DM-LB-IP: 195.8.215.160
X-DM-LB-Name: lb-09
Content-Length: 9223


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Mon Jan 15 15:05:04 2018
Size:   9223
Md5:    233cc1c82561dbb24a9207cf671e963e
Sha1:   f7fa17cf09f37f773765fcd65b30a402e19119c7
Sha256: f8c3bf8b1b665d1f85c3ea41fca6915446227551306c266e7e0f1e2cbd0a639e
                                        
                                            GET /wp-content/plugins/better-adsmanager/js/advertising.min.js?ver=1.15.0 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 29
Last-Modified: Thu, 31 Aug 2017 11:36:00 GMT
Connection: keep-alive
Etag: "59a7f4a0-1d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   29
Md5:    86a3cf0bfd61a6eab20f7452a78d378b
Sha1:   1aa77a8657591588144fb29a460aa43999cf5130
Sha256: c7e76d44c88e8c172f66eb413a359494fdc7569ebac417ac2de0c2a232152dd8
                                        
                                            GET /player_api?ver=20150320 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Expires: Tue, 27 Apr 1971 19:44:06 EST
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Cache-Control: no-cache
Content-Length: 739
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 09:42:58 GMT
Server: YouTube Frontend Proxy


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   739
Md5:    7a0eb23c6d2230814d8aa16975c24df7
Sha1:   62ec7aec019a03744cc9b76979c7d1217316b132
Sha256: af0a9b53f001dfe7e905a451f3e7f5bfc08421a63bd332fecf61beb2a979dd50
                                        
                                            GET /wp-content/plugins/table-of-contents-plus/front.min.js?ver=1509 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 6091
Last-Modified: Tue, 28 Nov 2017 12:38:16 GMT
Connection: keep-alive
Etag: "5a1d58b8-17cb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   6091
Md5:    db6afe5fc3125bfbb7631cdc894f95f7
Sha1:   cec78215c216e4bc1c03c1393f459fe1c972ee84
Sha256: 4b179562b883c1257aabbad3a5641f965dd7331faa31fe06382a5d8c62d5ee19
                                        
                                            GET /js/froogaloop2.min.js?ver=20150320 HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         151.101.2.109
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: Apache
Last-Modified: Tue, 12 Dec 2017 23:02:32 GMT
Etag: "606-5602ca5521200"
Cache-Control: max-age=315360000
Expires: Sat, 11 Dec 2027 10:30:23 GMT
Content-Encoding: gzip
Timing-Allow-Origin: *
Via: 1.1 varnish, 1.1 varnish
Fastly-Debug-Digest: 65715c6539e2e6b2b04bb47ae704025f5e5a6ae2e6f5a258f14cf23ccff41d97
Content-Length: 735
Accept-Ranges: bytes
Date: Tue, 13 Feb 2018 09:42:58 GMT
Age: 5353955
Connection: keep-alive
X-Served-By: cache-iad2135-IAD, cache-fra19123-FRA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 278
X-Timer: S1518514978.379162,VS0,VE0
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   735
Md5:    f467c30c680bb491391d8e4653faebfc
Sha1:   800c494a7244cb916d8a5e5a9a01754744c4be14
Sha256: 433ab867dc6c2ea4ee2402479ebf37f091c1ecc62ea361d1c40d7fdd2fedfc50
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:42:58 GMT
Expires: Tue, 13 Feb 2018 09:42:58 GMT
Cache-Control: private, max-age=3600
Etag: 6502682663518856185
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26103
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26103
Md5:    6ef11d0463c07a28cd7cf2803534c33b
Sha1:   22c83cf48df58218feda2b7c44729bbbd3c43fdc
Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
                                        
                                            GET /pagead/js/adsbygoogle.js?ver=20150320 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:42:58 GMT
Expires: Tue, 13 Feb 2018 09:42:58 GMT
Cache-Control: private, max-age=3600
Etag: 6502682663518856185
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26103
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26103
Md5:    6ef11d0463c07a28cd7cf2803534c33b
Sha1:   22c83cf48df58218feda2b7c44729bbbd3c43fdc
Sha256: 4b1e7c12854ebf981237b37942a10e1ea9f0324332083e81150e5e73b04cbbd4
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.9.2 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 14092
Last-Modified: Sat, 09 Dec 2017 15:54:06 GMT
Connection: keep-alive
Etag: "5a2c071e-370c"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   14092
Md5:    a3a6b23cdbf1ac2316226ab23bc609ad
Sha1:   e5a6219afd67c7720580624a3d3047b5908aeecd
Sha256: 04b3e67d05f53167e48b314d1914722b31bb326362dbbbb6c94cf795fbbda19d
                                        
                                            GET /wp-content/plugins/Video-Advertising-Addon-For-Visual-Composer/library/init.js?ver=1.0 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 2624
Last-Modified: Tue, 28 Nov 2017 10:54:13 GMT
Connection: keep-alive
Etag: "5a1d4055-a40"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2624
Md5:    fcd4882c04f7515d56af82b111f3f8f0
Sha1:   0a26f7f4e8771c5739cc02ae491292d15aaa4cce
Sha256: a559f3e4bb5f1ad8b85bddecab7daadd4991bd985e4a2e41dc68f414dd55d964
                                        
                                            GET /wp-content/uploads/vopros.png HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 30774
Last-Modified: Sat, 09 Dec 2017 19:47:35 GMT
Connection: keep-alive
Etag: "5a2c3dd7-7836"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 224 x 177, 8-bit/color RGBA, non-interlaced
Size:   30774
Md5:    dd6dbfd5e1dd2752cef3e87508c5af55
Sha1:   526def11adfe9d92a4a02b40d19405c805c7327a
Sha256: 4bdffda23024607e8ddea6e23ffbd33ea6e53f0f2780c0c5b5f10c2d0920dc12
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=4.9.3 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 1398
Last-Modified: Wed, 23 Nov 2016 12:38:34 GMT
Connection: keep-alive
Etag: "58358dca-576"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1398
Md5:    5a03f97cc479b9f5d7efdaccec31bc17
Sha1:   54518be91b7c5d4b139e032d23ffae568cc7e9fd
Sha256: dcb5e540e62fc85857254a1066afb6a7e8999279c6d4c583eef855d39f9289c0
                                        
                                            GET /wp-content/uploads/traktor.png HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 51235
Last-Modified: Mon, 27 Nov 2017 14:21:48 GMT
Connection: keep-alive
Etag: "5a1c1f7c-c823"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 224 x 177, 8-bit/color RGBA, non-interlaced
Size:   51235
Md5:    4f7e39bad2f49382299a502d7af066b8
Sha1:   b0048578dbe7f2fe9523c115c4ce65b8b3e3885e
Sha256: 325260b6073d330a08d078fa610995a0b61ca686485e3bf9fd9573a4b94074bc
                                        
                                            GET /wp-content/plugins/Video-Advertising-Addon-For-Visual-Composer/library/screenfull.min.js?ver=3.0.0 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 1722
Last-Modified: Tue, 28 Nov 2017 10:54:13 GMT
Connection: keep-alive
Etag: "5a1d4055-6ba"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1722
Md5:    ff91871d69e1d05f992d5dfa42258ab9
Sha1:   b97eb7319b6978752af1f5236b8a49ecd7f9ada6
Sha256: 04d25010b50cf4933612cf65269966147672d3127c1e6c438a7bf130585b1058
                                        
                                            GET /wp-content/plugins/Video-Advertising-Addon-For-Visual-Composer/library/malihu/jquery.mCustomScrollbar.concat.min.js?ver=3.1.13 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 44715
Last-Modified: Tue, 28 Nov 2017 10:54:13 GMT
Connection: keep-alive
Etag: "5a1d4055-aeab"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C program text, with very long lines
Size:   44715
Md5:    4216d0482a593a488590a999cb93f554
Sha1:   1477ed916beecb726d20af0fcac8ced789dd4629
Sha256: c1c84bf052ab94b09819dd5e183d3b6088e079a747104bcd5a619c16b71da54c
                                        
                                            GET /wp-content/plugins/Video-Advertising-Addon-For-Visual-Composer/library/vaafvc-min.js?ver=1.0.6 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 27895
Last-Modified: Tue, 28 Nov 2017 10:54:13 GMT
Connection: keep-alive
Etag: "5a1d4055-6cf7"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C program text, with very long lines, with CRLF line terminators
Size:   27895
Md5:    d1ef320c15cac27e6ad4b4d5ca8ab2e5
Sha1:   473b89c6960708776ae11e58bb31642b91c0f779
Sha256: eda110e89087062439a2b385f1099e25185f3dcad18f59389dfb21e26f21241b
                                        
                                            GET /wp-content/themes/publisher/includes/libs/better-framework/assets/fonts/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/wp-content/bs-booster-cache/88d1a0e0de7f34c20da84f689a8882d5.css

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 98024
Last-Modified: Mon, 20 Nov 2017 20:05:05 GMT
Connection: keep-alive
Etag: "5a133571-17ee8"
Expires: Tue, 20 Feb 2018 09:42:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  data
Size:   98024
Md5:    fee66e712a8a08eef5805a46892932ad
Sha1:   28b782240b3e76db824e12c02754a9731a167527
Sha256: ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
                                        
                                            GET /wp-content/themes/publisher/includes/libs/better-framework/assets/fonts/bs-icons.woff HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/wp-content/bs-booster-cache/88d1a0e0de7f34c20da84f689a8882d5.css

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 12800
Last-Modified: Mon, 20 Nov 2017 20:05:05 GMT
Connection: keep-alive
Etag: "5a133571-3200"
Expires: Tue, 20 Feb 2018 09:42:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  data
Size:   12800
Md5:    05758df783d20ce7aef91e913940a065
Sha1:   9edd9430f6a26e370edf8c2659776750858d5f52
Sha256: 378a38a2906f87db2a68924879698bf2b1d9cc9d81bb975b0c81270d3e4d2211
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:42:58 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b015fbc365fe3cce393b24bd23b77ee2
Sha1:   8e492cd749cd053db6e0053a5391231cb7f45ff5
Sha256: ac7228a68968cb091d78fcea2e0873fde2505cff554825d8760e8d7bce6072fe
                                        
                                            GET /wp-content/bs-booster-cache/ecb4a7ff358f21e8fead01c1832a2282.js?ver=4.9.3 HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 257373
Last-Modified: Thu, 18 Jan 2018 14:26:56 GMT
Connection: keep-alive
Etag: "5a60aeb0-3ed5d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  UTF-8 Unicode C program text, with very long lines
Size:   257373
Md5:    ee28f398ce5cb6bbf688b80d4cd27033
Sha1:   fd26448b2796770998e8b365acc23f2e00bf662d
Sha256: 195a0894977b97f4c64d9ac2baeecebccc7c15f5ce9d2ed5a62bd7e26ebac1c5
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:42:59 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:00 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4bb2e4074fe5f9f8d715e5888d0b4188
Sha1:   8d020c92f7f3278b86d901ebef396c31d5e39d51
Sha256: cc9e9c93a83b6c3b89cfb24126cc32cfb0876f7705046b642039176859c160e0
                                        
                                            GET /gtag/js?id=UA-99000925-4 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         172.217.21.136
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 13 Feb 2018 09:43:00 GMT
Expires: Tue, 13 Feb 2018 09:43:00 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21122
Md5:    948d6e5ac766a60111c4b5da6cc484b7
Sha1:   6fc6a0d749bf072ad7510bcb5c7aef257f78a323
Sha256: 9142c2c10f7158691ae4a5a74804ac48492d89c0b494302142d733c469a1306a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:00 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fcd56e1351782e87ef4f73d429e4ded4
Sha1:   f6f1ce80b96c014e654132c41d109a131ee5bc3c
Sha256: 340ac1b5b28c1c9c0280d32661fe3b614a32fc66f327fb93f5a98fdbe0c176b0
                                        
                                            GET /adsid/integrator.js?domain=fermer.inffo.pro HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 09:43:00 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=fermer.inffo.pro HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.155
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 09:43:00 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:00 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6ea90b04815236e9005a97e76148e394
Sha1:   256637485a6d2ab91f66dfc94598aafaa31250c0
Sha256: 98fe9ca5bbe415d51e7c4c01f2ccbfd26909479017bb040d52309743c3eb0dba
                                        
                                            GET /pagead/js/r20180207/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:43:00 GMT
Expires: Tue, 13 Feb 2018 09:43:00 GMT
Cache-Control: private, max-age=1209600
Etag: 4433304288936196502
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67646
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67646
Md5:    cce91a88f525640083b0ebe057a30af4
Sha1:   b9cf4be249b5af3dda774dfb75e73d482da706c5
Sha256: dd6dac5265c4b1796715889313e4b9271b4547f66739424357f89dc45eac882b
                                        
                                            GET /s/lato/v14/S6u9w4BMUTPHh6UVSwiPHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700
Origin: http://fermer.inffo.pro

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27848
Date: Mon, 12 Feb 2018 16:27:37 GMT
Expires: Tue, 12 Feb 2019 16:27:37 GMT
Last-Modified: Wed, 11 Oct 2017 18:24:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 62123
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   27848
Md5:    96759e32fdc800c78b527a3e53fe2be6
Sha1:   e12403cfe60f852a8fbbe05d84d58d33c6c2a6b9
Sha256: 60c05ee47e768315541e487d11b92eec54a7f5336f84cecc8b5825c87bb70053
                                        
                                            GET /s/lato/v14/S6uyw4BMUTPHjx4wWA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700
Origin: http://fermer.inffo.pro

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28412
Date: Mon, 12 Feb 2018 20:21:37 GMT
Expires: Tue, 12 Feb 2019 20:21:37 GMT
Last-Modified: Wed, 11 Oct 2017 18:23:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 48083
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   28412
Md5:    62fb51e9e645f63599238881b9de15dd
Sha1:   82b144e3c8b4ff40aeca34ddf7bc35985311b90e
Sha256: 5aeb07f9980663c2501c9620371e11ae7aa6e320d94dd753d0ef56d8308c74b3
                                        
                                            GET /wp-content/uploads/6d541319ca5be1f7d5d6c08291bd9b21_xl.jpg HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/wp-content/bs-booster-cache/2a454b0ee5d3acd57fdae3217d161546.css

                                         
                                         78.47.1.76
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.1
Date: Tue, 13 Feb 2018 09:42:58 GMT
Content-Length: 964599
Last-Modified: Tue, 28 Nov 2017 14:41:05 GMT
Connection: keep-alive
Etag: "5a1d7581-eb7f7"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   964599
Md5:    fc9e69f661a9ff206881d616fb5c65a8
Sha1:   146733572675dee42a798f5d3a78069c02bbd5ac
Sha256: 219ffee872496bc0e5904383fee8e81560185b048325a60042689e14e3085fab
                                        
                                            GET /pub-config/r20160913/ca-pub-1577667552845285.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 13 Feb 2018 07:21:33 GMT
Expires: Tue, 13 Feb 2018 19:21:33 GMT
Last-Modified: Sun, 11 Feb 2018 21:18:48 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 8489
Cache-Control: public, max-age=43200
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /yts/jsbin/www-widgetapi-vflOozvUR/www-widgetapi.js HTTP/1.1 
Host: s.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 7506
Date: Mon, 12 Feb 2018 14:04:58 GMT
Expires: Tue, 20 Feb 2018 14:04:58 GMT
Last-Modified: Mon, 12 Feb 2018 10:04:30 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 70684


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7506
Md5:    af0556fdcdd8e6c24d668c2e892c6c20
Sha1:   9890c201c4523b95a57745ca527576593ab9f465
Sha256: 0f540843d9557cb346e6ffd4c2511de7f4b5f37b0831920a1896cb5200c7e6e5
                                        
                                            GET /pagead/html/r20180207/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 03:15:12 GMT
Expires: Thu, 22 Feb 2018 03:15:12 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 455270
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6819
Md5:    8caea4ee531aab9f5d9328f80b7b23f3
Sha1:   3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
                                        
                                            GET /pagead/js/r20180207/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 08 Feb 2018 05:39:45 GMT
Expires: Thu, 22 Feb 2018 05:39:45 GMT
Etag: 14152819666964886147
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29995
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 446597
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29995
Md5:    ca42dee86b721494eb2a8c4f93c4508d
Sha1:   17ee6f68a61be238ce54d20d056a7a5834c52d80
Sha256: ea4ea916582c5f861acd268ab627997ac61a0a978dbeb3ff1685e0f0679a9ea5
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:02 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=d91348b841ee1fb0dc5720b22ed57c3641518514982; expires=Wed, 13-Feb-19 09:43:02 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Tue, 13 Feb 2018 07:25:49 GMT
Expires: Sat, 17 Feb 2018 07:25:49 GMT
Etag: "006e8260cbf22ae977e4e511ee00e10b484cf14f"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 3ec6d751b2fb4297-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    ff66029c91066165501e656bc2c1514d
Sha1:   006e8260cbf22ae977e4e511ee00e10b484cf14f
Sha256: 2da0c1c49f87e92f11c90a3e8c7a978c97022d23c0c3c6c3fea30e131810138d
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:28:22 GMT
Expires: Tue, 13 Feb 2018 11:28:22 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Cache-Control: public, max-age=7200
Age: 880
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Tue, 13 Feb 2018 09:43:02 GMT
Content-Length: 33543
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Thu, 01 Feb 2018 12:42:47 GMT
Content-Encoding: gzip
Expires: Tue, 13 Feb 2018 10:43:02 GMT
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Feb 01 12:05:01 2018
Size:   33543
Md5:    f4fd99b07ded2e2e8e45f9ad9c60af53
Sha1:   17c027e7240ffd8577b6fceea3c007745897e436
Sha256: 390c382230777976b6b68d07871a4e88c2a2d1169cc5d2dd5f7b7138c956f153
                                        
                                            GET /r/collect?v=1&_v=j66&a=1904500724&t=pageview&_s=1&dl=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ul=en-us&de=UTF-8&dt=%D0%A1%D0%B0%D0%B4%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%E2%8B%86%20%D0%A4%D0%B5%D1%80%D0%BC%D0%B5%D1%80%20%D0%98%D0%9D%D0%A4%D0%9E&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAUQ~&jid=1766878275&gjid=190398826&cid=39127460.1518514982&tid=UA-99000925-4&_gid=1957842445.1518514983&_r=1&gtm=u26&z=1924396014 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:43:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 09:43:02 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 13-Feb-2018 09:58:02 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 09:43:02 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5232
Md5:    91da80588b0f5e52b029059e27ed7e84
Sha1:   65605e78401fedf3445ccdd3cb4d85bf31732d13
Sha256: b2ff994df5d6c41fbc0f79ba8261666224a758ac91f7f05ecebfe262715c3aee
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Tue, 13 Feb 2018 09:43:03 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Expires: Tue, 07 Jan 2048 09:43:03 GMT
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /xbbe/pixel?d=COD5IRDn0jYY0IC5CDAB&v=APEucNVY3jRuxzveIk_NCKSych-dzlYPs5Ywx3B7LgVjNRgw6CfTlk1z-bqILxriB2-WpXCBI50I HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316
Cookie: test_cookie=CheckForPermission

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 13 Feb 2018 09:43:03 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUmTOPMcPaVncoXmCrg8Zk1YtjT5ml2NqSpDqiByNN_tpi7iIMR3Qf-i6AB0; expires=Thu, 13-Feb-2020 09:43:03 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 13 Feb 2018 09:43:03 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   214
Md5:    02247d909a831178bfbddac723940ebd
Sha1:   9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-ALjM_kON6BTe9lYATWt3APbkwHtmkbKRndH0xKIu21ho694f1Lzt5GXdaF1YP3eYry31gvbxJIVkZ9QJ30ttRYZb330L0hDpMEetY-9G3fpR7punU HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:43:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-C6coLg9unIl3WHVTgnR0RVJKvMBNqf6I94aMx05zKJE0gR1-6Vz4eMmiXxIQVKdMIVYvPF&dbm_d=AKAmf-BTTh2bEj3yZjNDeTnK-xiTWnV142HK7ZNigWErnByVAeJOJr-cGHx9kuqYxQX0P6uShZFRJmX6ZPKXnDZOVJDfUGTuDfXZd6Nik3f6IhAGVZOquEhrShorZ3w-ggZ9yphIrg94kx-uaQsu8guZU1mCZakMmus0OKUaYRsYcOJfgxkzRHZ-F1GT_k_uHrrpbQ8nSZ109JUGQ0tS_IjfrHiqdKi1jvA-7w9CISWwInfsFIF0KSp2hP60O-as5zx_EZqn37rk24VNiGwMmm9TcpSEP-0XV7e9eW_7xz7RZ6fzlOW-o3IEG5vEwLJKpPDs_lgaCEI_zwFO-PV9fel2fHc8ioK25Wp8gFcqXUucrlqTcKen_TWNOC5pwBPQp7-wa4xbwL_2UfJ1edNdfdBf8UMy645YykcPjnYyKfCe6l-KsIF63wPD-OrLQiMCrbWiCsKNKtuvFFhaOdpHVqbmBnxYDz9F13qJUQfsDHSjQq1V3muGXy8TxxUOo-qUzhbbBSK71y65OBNYxX4f4x3sxQPKaXUcAd_HZqCH0TqNrb2mHYQBBtuuCXbu7CLIloMD33LVgPUrG_sQiGQZn1Er7RTIv22FMkTd-LqN4yoKARuuXu-ija-vEnmTJvgsKqmdXbWt48OnksrDDSpbeU_kKEQzfUe5dQekdc2YDgcNngzVdsni4gtehcJNuA8-NBNvVHw74_GF__EBLLki7o4-a6pYEy0njft-LszDwKZgFSSppfUnxSG0fZA1DT2dRcotWe37bytaDGmginhIgICR8MbMktEIOXFWerrVRnCDhE2u8Bhs6Ane5fSNuHDYnzXs3UulNihmezDxC2CFAF9b0EcqeHTlL2Sa22jgtzgUXx_YuHkK9CHMrbi9Iv8CtrToU_Nmm_2vskiqLEO3qg0bRIhbRuJpVctc46kpZJwSvKo4Ygwo-ojvqj1wrRXCPq9Ql0QO7uzWdBJiR1uruDqGeCIr4sQbZ6S1vmYjUNlGPElHcAb-9NKgP8MSOqvL_E-gFEcyOPCHW3KOlIDEEZE7c089g2izlpg94suyDBYj2iGdzqrkX2G-zKLHJB0rHLMJhzRshOd-C7F7SdXFC8PULnw6IUUmvfd1lFLtdxCKyA5SLAxA39i1bEQee-rMUljRGNCvK6EFlKXpcd1jIuJ6CG7u2G80xwVJUBxjDAaqmD4DdMFZFbaXD8EIrF1xSiZH4uXlQoF7ksaMlogOb0q5IYpIeTfVjog4oQk85EBJaxQBKK3mWPOkPXAIrhI8YQ3PtREGuN0ci21i5qqf4jePC-MqLzm64N_Z8SZWBIW_WL9iK0BvhERQ5dKPNuvNRyL3bfBNS_cm7nRc--J2V6w3hC8lpk76CHxy5HWtkF_FO9GcqdlM0rldkCi--3av1Wtow6_8SBomNxJRsbp8-_xfV5SOq-O4uOqvkmpCygHVQZv0MFT_hahzhAMXrq6Ux0eqyAIWV5_PaCAQ3KYxl6WgZ_cxkcUeuBi9WKRClRDVUcHTVz9tU-noJg0beSCDZCjHeHC7TBlizBu-m3lkEee0NNeQfCNl4-qWlvieSq-472AY7WtEujeqWEXwWcSTm_ZmK49vDfCa&cid=CAASBORobFg&rfl=3%2C%2Chttp%253A%252F%252Ffermer.inffo.pro%252Fsadovodstvo%252F%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316
Cookie: test_cookie=CheckForPermission

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:43:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUlowlWqODlPaDpxTPXOy0-TXeXJ3sq8Ldc8AazbP1EOYO5J7kdel2Ui2p1q; expires=Thu, 13-Feb-2020 09:43:03 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11086
Md5:    27424499e47d642222bab54c90cc03ae
Sha1:   26a44aeb46e4ad36d1f97e5116962317d26dc48d
Sha256: 35b2995e388d6d5c3e1271cd6c84ba72afefb2771f799784b51702b66d51aa9c
                                        
                                            OPTIONS /watch/46806699?wmode=7&page-url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&charset=utf-8&browser-info=ti%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180213104302%3Aet%3A1518514983%3Aen%3Autf-8%3Av%3A962%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A754275956939%3Arqn%3A1%3Arn%3A381412069%3Ahid%3A843725415%3Awn%3A11225%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1518514983%3Au%3A1518514983792618530%3At%3A%D0%A1%D0%B0%D0%B4%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%E2%8B%86%20%D0%A4%D0%B5%D1%80%D0%BC%D0%B5%D1%80%20%D0%98%D0%9D%D0%A4%D0%9E HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://fermer.inffo.pro
Access-Control-Request-Method: POST

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Tue, 13 Feb 2018 09:43:03 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /pagead/js/r20180207/r20110914/abg.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 11 Feb 2018 04:38:28 GMT
Expires: Sun, 25 Feb 2018 04:38:28 GMT
Etag: 1003077525306946769
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21796
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 191075
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21796
Md5:    9c7168207979b5f6ab6777d97a8a0963
Sha1:   9cf64cc271ecf30cfd8043002730eae9b47c2bf8
Sha256: 8eb9a093b3d57b4e750813aa8fc3c09cdc20379d6b5e1be2b862131bebfe735c
                                        
                                            GET /pagead/js/lidar.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:12:15 GMT
Expires: Tue, 13 Feb 2018 10:12:15 GMT
Etag: 6831844447556634063
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 34299
X-XSS-Protection: 1; mode=block
Age: 1848
Cache-Control: public, max-age=3600
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   34299
Md5:    4af480d154ceb9d4226b2a21f80b6b9e
Sha1:   514b804d0a119a0063bfc1d9e20f7b7c7004d80c
Sha256: e45497d04a8eb2999ade55e5f45265811efc3e5ab7eaf6929db863b133d6f181
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRDn0jYY0IC5CDAB&v=APEucNVY3jRuxzveIk_NCKSych-dzlYPs5Ywx3B7LgVjNRgw6CfTlk1z-bqILxriB2-WpXCBI50I
Cookie: IDE=AHWqTUmTOPMcPaVncoXmCrg8Zk1YtjT5ml2NqSpDqiByNN_tpi7iIMR3Qf-i6AB0

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESEBFoly32XT7laVbsDsf83V8&google_cver=1
Date: Tue, 13 Feb 2018 09:43:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   290
Md5:    a666d19ef3a3fcddc44e24f67b8c82c0
Sha1:   45751d583c48f5cdb1e5210d306fcc31513ef4ce
Sha256: 4c8e40f158c169c37a2b9010a920ed09a76439e8878d04e5ba834128b7fa6a1d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 09:43:03 GMT
Etag: "5a827c8d-1d7"
Expires: Thu, 15 Feb 2018 09:43:03 GMT
Last-Modified: Tue, 13 Feb 2018 05:50:05 GMT
Server: ECS (arn/45E0)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bc4bbf33d4b48791256b284353802c7f
Sha1:   d3d1bc4bd77a719ea1ba38b08435d3acfd89bd34
Sha256: 4f0214c8831d6e02f3d3d3a1b5775c9b87c0cd0c9ac0d9890fba5e7811f1c0f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 13 Feb 2018 09:43:03 GMT
Etag: "5a827c95-1d7"
Expires: Thu, 15 Feb 2018 09:43:03 GMT
Last-Modified: Tue, 13 Feb 2018 05:50:13 GMT
Server: ECS (arn/45A1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bdd676092b32d438cdb3958993ee99de
Sha1:   f8f6992c4867e6f721a4e8776321b1c5d590c17c
Sha256: 6c57d66bbd3413d976bd02ca92c9434b6c259a91a153fddbc476a44a468a1888
                                        
                                            GET /watch/46806699?wmode=5&callback=_ymjsp339088031&page-url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180213104302%3Aet%3A1518514983%3Aen%3Autf-8%3Av%3A962%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A754275956939%3Arqn%3A1%3Arn%3A381412069%3Ahid%3A843725415%3Awn%3A11225%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1518514983%3Au%3A1518514983792618530%3At%3A%D0%A1%D0%B0%D0%B4%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%E2%8B%86%20%D0%A4%D0%B5%D1%80%D0%BC%D0%B5%D1%80%20%D0%98%D0%9D%D0%A4%D0%9E HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/

                                         
                                         87.250.250.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.8.1
Date: Tue, 13 Feb 2018 09:43:03 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Tue, 13 Feb 2018 09:43:03 GMT
Expires: Tue, 13 Feb 2018 09:43:03 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=9459913321518514983; domain=.yandex.ru; path=/; expires=Fri, 11-Feb-2028 09:43:03 GMT yp=1833874983.yrts.1518514983; domain=.yandex.ru; path=/; expires=Fri, 11-Feb-2028 09:43:03 GMT yabs-sid=56135091518514983; path=/ i=RWracriI/dbQQ46XKrrRf7r1ugdvw6LbJbsfGzbmD59I1rOUVY3L7PQBbq8eQ5SbStYDc854H20tY0bUmRToYJQPfoY=; Expires=Fri, 11-Feb-2028 09:43:03 GMT; Domain=.yandex.ru; Path=/; HttpOnly
Location: https://mc.yandex.ru/watch/46806699/1?wmode=5&callback=_ymjsp339088031&page-url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180213104302%3Aet%3A1518514983%3Aen%3Autf-8%3Av%3A962%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A754275956939%3Arqn%3A1%3Arn%3A381412069%3Ahid%3A843725415%3Awn%3A11225%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1518514983%3Au%3A1518514983792618530%3At%3A%D0%A1%D0%B0%D0%B4%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%E2%8B%86%20%D0%A4%D0%B5%D1%80%D0%BC%D0%B5%D1%80%20%D0%98%D0%9D%D0%A4%D0%9E
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:03 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 17:56:39 GMT
Expires: Mon, 19 Feb 2018 17:56:39 GMT
Etag: 6E1390A0BD1EA29D9D3CAFC2B28D81858CED524B
Cache-Control: max-age=547415,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 278
Connection: close


--- Additional Info ---
Magic:  data
Size:   278
Md5:    c9d0f8a0c103fd3f76a3231d292019e3
Sha1:   6e1390a0bd1ea29d9d3cafc2b28d81858ced524b
Sha256: c2561fc07b4706316266d5a4d9b40e09479226c56d94d7fc92effeb96bf25de1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:03 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: 8E242477BF0882B1319BC4C53887CEDD2AF131E2
Cache-Control: max-age=524269,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 313
Connection: close


--- Additional Info ---
Magic:  data
Size:   313
Md5:    f5c0f9572b3e8f64a0cbc1a07f453401
Sha1:   8e242477bf0882b1319bc4c53887cedd2af131e2
Sha256: 32ad01098f31aba2f0060dc68180378325772eea6370174e99e0d1f6131978f4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:03 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3f8666a5bea36283578bc10ee5cd930f
Sha1:   526a530c3057adf847bbba35e96736f4d641585b
Sha256: 166a98b8491197265873aa5ff9f1e46c79443bc0e509cd240513fed08e9578a9
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1034
Content-Transfer-Encoding: binary
Cache-Control: max-age=366328, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Feb 2018 15:25:41 GMT
Expires: Sat, 17 Feb 2018 15:25:41 GMT
Date: Tue, 13 Feb 2018 09:43:03 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1034
Md5:    baf34d986c00b66407375ac23eec7499
Sha1:   4451f614115ab7a166b37973aafa4dcae9e2a93f
Sha256: ac2f7c04a4378ed2d8a2a21de045d89445cf8eab3c7bf989ea332c181f7c56b2
                                        
                                            GET /c/8kzd.js HTTP/1.1 
Host: cdn.minescripts.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         104.18.46.158
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 13 Feb 2018 09:43:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d4a288054bdec2c12b2871a59ec567af11518514983; expires=Wed, 13-Feb-19 09:43:03 GMT; path=/; domain=.minescripts.info; HttpOnly
Last-Modified: Mon, 12 Feb 2018 15:25:57 GMT
Etag: W/"5a81b205-26a1a"
Expires: Tue, 13 Feb 2018 13:43:03 GMT
Cache-Control: public, max-age=14400
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 3ec6d7592a4e4291-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   39530
Md5:    6a1d4bd6428bfbab9a585ac42d984afe
Sha1:   c4cf4bf803d5cc58ab4c9bd9136680c1ad1b6e40
Sha256: 2f12a4910892765ca5b443af95e07f40ed2fc2c32a6b4b792209644d468e93dd

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sodar/V6zvOIoD.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15146
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 70687
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15146
Md5:    6a56e1d1c9c0c105245cbce244c876f3
Sha1:   6613490ab3735f37499d311c6efba3f689ec4abb
Sha256: ad20ef401ac229a0ab07b057ed9350c85816118a662c7cfa240fa5cd86c718f0
                                        
                                            GET /watch/46806699/1?wmode=5&callback=_ymjsp339088031&page-url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180213104302%3Aet%3A1518514983%3Aen%3Autf-8%3Av%3A962%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A754275956939%3Arqn%3A1%3Arn%3A381412069%3Ahid%3A843725415%3Awn%3A11225%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1518514983%3Au%3A1518514983792618530%3At%3A%D0%A1%D0%B0%D0%B4%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%E2%8B%86%20%D0%A4%D0%B5%D1%80%D0%BC%D0%B5%D1%80%20%D0%98%D0%9D%D0%A4%D0%9E HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/
Cookie: yandexuid=9459913321518514983; yp=1833874983.yrts.1518514983; yabs-sid=56135091518514983; i=RWracriI/dbQQ46XKrrRf7r1ugdvw6LbJbsfGzbmD59I1rOUVY3L7PQBbq8eQ5SbStYDc854H20tY0bUmRToYJQPfoY=

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.8.1
Date: Tue, 13 Feb 2018 09:43:03 GMT
Content-Length: 142
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Tue, 13 Feb 2018 09:43:03 GMT
Expires: Tue, 13 Feb 2018 09:43:03 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   142
Md5:    820ee1a13e89ce6554ee4efb23164133
Sha1:   10adf79f111112a05f4655e25cc8343af2e14a12
Sha256: b322f529ee5399695cf3501d38a35c5cabe8f9bf171aa5ae2518e640465d174b
                                        
                                            GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRDn0jYY0IC5CDAB&v=APEucNVY3jRuxzveIk_NCKSych-dzlYPs5Ywx3B7LgVjNRgw6CfTlk1z-bqILxriB2-WpXCBI50I

                                         
                                         217.12.15.83
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Tue, 13 Feb 2018 09:43:03 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=3u2uqvhd85cp7&b=3&s=oa; expires=Wed, 13-Feb-2019 09:43:03 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=1Sns92E1XEwRwtrLhE.iQNpV
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"


--- Additional Info ---
                                        
                                            GET /sodar/6uQTKQJz.html HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7233
Date: Mon, 12 Feb 2018 14:04:56 GMT
Expires: Tue, 12 Feb 2019 14:04:56 GMT
Last-Modified: Tue, 02 Jan 2018 21:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 70688
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7233
Md5:    30bf1c51eb9c0ba258ea2df31d24bc98
Sha1:   d13abffacc94ee31dfd5a094bfa975cca8e4d292
Sha256: 25a3afe99572ebbe3af74f504252d7fe97ebd580d47f5b734c286cc40a82131e
                                        
                                            GET /pagead/js/r20180207/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 15:02:16 GMT
Expires: Wed, 21 Feb 2018 15:02:16 GMT
Etag: 4319863517479632446
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29527
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 499248
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29527
Md5:    cb7c5d42c8b00cdec8b3bfb65909c20b
Sha1:   df39b61e2fd957f8b9ade02e65c59ec51cec5c46
Sha256: 03d445b71e38084066abf9967c78418aaac7f1617d7251bd648485f07c6379e0
                                        
                                            GET /bg/IOA8y9bJh23yzX_Xx1Lzdpvil-FmhhSrkRF2am8kUAc.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4991
Date: Thu, 08 Feb 2018 02:07:36 GMT
Expires: Fri, 08 Feb 2019 02:07:36 GMT
Last-Modified: Mon, 05 Feb 2018 09:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 459328
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4991
Md5:    35c97f406c207e558268924a05d5cfb0
Sha1:   410bd15d5b2dbffb516605c9d5a2a52d8d8d6eed
Sha256: 536f40cf7ac29a53a42ac183eefd062e0228e22f034f8ad2e8f1ffaaa771f5ed
                                        
                                            GET /activeview?avi=BipmOJrOCWtnuLJa1YsmqoPgJAK-ut47NBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRAB&cid=CAASBORobFg&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:43:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:12:47 GMT
Expires: Wed, 21 Feb 2018 14:12:47 GMT
Etag: 2112876643077467119
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1203
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 502217
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1203
Md5:    9a504624fadda2dcec8340bf93b2252c
Sha1:   fa6dbebcf9b5450a1dd2f2371c971e838ff627c0
Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
                                        
                                            GET /pagead/gen_204?id=sodar&v=24&t=2&bgai=BLDkEJ7OCWsigBsuyYtWHqsAPAAAAADgB4AQC&bg=!Xl2lXUVEuuWqCPq1z30CAAABYFIAAAAXCgAGS9vO2jZlmQEjquotdi_Ql75xJLSP6kFBt-kV60urO3ZaLXZo5IHEqKqPuVJAfX61bTaS1m_xOiHHI1wI7a5hUKdVu_2s3Hk6-l63xgQW7pZhSjylUqWMsR3Ixlz0xWnVna0uabOyfIZF4kpdwzcqw3nosPx6QC1Mh4aD2bt141zjOmm_a5M7XkimopPi3blXbZmPcgEtxIUejNPUAla-xbUq9tdK3CnhYhRVtnsLItldXlKQ1DvQ_bOninjHJKP4QyKhzuy6PYqR-dxJoT04czbBdsNOOH8UmxBQRXRfB_NXd-WAWqgyj3PXisvIAu2qi_j71ng2OFyIpsNbCwbHhzemvSb6JJfGHn3-J0vA6pGZ_KFLLC84MSa3Yfin2TWUPT-vuaI3s0MwQdip HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/6uQTKQJz.html

                                         
                                         173.194.222.157
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:43:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Feb 2018 09:43:04 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d49329b6cf95ee35d707f7e0ab3f891e
Sha1:   bad43a85defedc6449b6bdaf779ee85d18278544
Sha256: 0580cfb371d0324bff4fc549e97d614659eade3215fc737e749308947ad948be
                                        
                                            GET /xbbe/match?xid=1Sns92E1XEwRwtrLhE.iQNpV HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRDn0jYY0IC5CDAB&v=APEucNVY3jRuxzveIk_NCKSych-dzlYPs5Ywx3B7LgVjNRgw6CfTlk1z-bqILxriB2-WpXCBI50I
Cookie: IDE=AHWqTUlowlWqODlPaDpxTPXOy0-TXeXJ3sq8Ldc8AazbP1EOYO5J7kdel2Ui2p1q

                                         
                                         173.194.222.157
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 09:43:04 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /setuid?entity=101&code=CAESEBFoly32XT7laVbsDsf83V8&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=COD5IRDn0jYY0IC5CDAB&v=APEucNVY3jRuxzveIk_NCKSych-dzlYPs5Ywx3B7LgVjNRgw6CfTlk1z-bqILxriB2-WpXCBI50I

                                         
                                         37.252.172.53
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Tue, 13 Feb 2018 09:43:06 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 49a2afbc-6be0-4ce2-997d-db83459e9553
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2E?bgl`Fd!]tbPB*SPcQwTQLTYe%/_dQ@C]09g>><T6r:$9.eDX_S8=9%HWIP?Lv[g8YAAA#kWAC'0$*bpRW:8gq>; Path=/; Max-Age=7776000; Expires=Mon, 14-May-2018 09:43:06 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 14-Feb-2018 09:43:06 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 156.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.23:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /pagead/js/r20180207/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 07 Feb 2018 14:12:49 GMT
Expires: Wed, 21 Feb 2018 14:12:49 GMT
Etag: 18254379283724408787
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3642
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 502215
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3642
Md5:    24d24f1211524aff604a7a982bfb33ed
Sha1:   15c0f03407eb77a3da6a7476c6ffb4b8993eaefb
Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
                                        
                                            GET /viewad/5239968/fittaste728x90a.gif HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Length: 32306
Date: Mon, 12 Feb 2018 16:34:28 GMT
Expires: Tue, 13 Feb 2018 16:34:28 GMT
Last-Modified: Mon, 04 Jan 2016 12:47:26 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 61716
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 728 x 90
Size:   32306
Md5:    89f9e9ed83ec2686e1c4e321f00b8b10
Sha1:   9dff7bb605e8c8bcc7b760a628dad54911fc56e7
Sha256: 1ccf20d3e26b8130eba96baab00f6cdde763eafed8ba85644b29f8106e54f3d2
                                        
                                            GET /pcs/view?xai=AKAOjss_0o6RVc0p-4dw_vJWc26lBTK5Wc3YVXrKYtTmfelhPe46SEvpxCnOWf2VIHVMrqZMCE5KK9SXcXtIfTuH3h1RePLHAKdD5iwr5OzSwQ5Vt4S8nRBQ07XQJYscssblch6xscglFuaRvhJW3qAQU8lXDYbyTtVi7fLGGfcJleRr2XEw0TM24mPJQOrQ6iHWy16qhvLyqGi4Wfa9oQvcKjYgPWxXdJloi7ZV_aAkeksg3Kx-e4WYNmwqxZITDKpm2zWPshQu2DVm-OyQkynj3CyoOEbZJ_CS6D9kpSwAjPVw-9-CeNMJwzCJVHz2MWOagr_rPpoiyiGMDPCDIv_3CFv3XM7eom4Xn1Mzrnblm9yivrcNZmJNZfsWgZE0loKnxCa1fwIcZc-d2rVy_f69S1EyAWyFXpuO_QxIziXi5wIR3aRuWzI3HuxK0kbGSjkweQBwlf89_WeQEz4vi_3obTiuY-XhXJScbCKklqL2AOf2YDOtylFkFU3uKfegjy0cLsoxUbXMIx7vE8CR_wx5xcXdT_f36LvMXhZ8t_N32Qwtc7enYDPPIYm9DI50YqaKdB_cH8-mZWy8rSYCalnDddIfHYozkJlWJeT1oJhw1Y-qkUwvcLjUfwpV_6F5-HTK2Ty6K2phNMqM_1eUleY238_poLzmJ-QxjjC8nwcwRTF--XZ58i-SW3zOQpXqHMyjoWo2WrW0sfQFf81_PnshZc8YQ0D4CaR6r-WgKNHA9fFfccQhx7Ze9yJXxGvGbcMnH024tYkfPRKOfxfy3KijEtZen4W9rAfR16aY1aZjJ4DJ&sai=AMfl-YT0KO1jTXDSRtgQ2DnE6QJVvylaYIOH1BQ2UBBs9ml_lZ4-7mVVlVktiRNZXMyJBr39iGO4tVuIQTWiJTpaO5X7ZmIvt22F&sig=Cg0ArKJSzPe5kZcqGfn1EAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316
Cookie: IDE=AHWqTUlowlWqODlPaDpxTPXOy0-TXeXJ3sq8Ldc8AazbP1EOYO5J7kdel2Ui2p1q

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 13 Feb 2018 09:43:04 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pcs/activeview?xai=AKAOjsskDd-at1FlyvHvdTzWcNGtzP9PrzfY-jWfioA5F_ODJ4mXcyC_50SiMjus8pyFpJLhDvNyExwEWOUvO5nykTk&sig=Cg0ArKJSzAMk74Ktdqm0EAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,95,728&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=1554&ss=1176,885&pt=-1&deb=1-1-0-0-0--1&tvt=0&is=728,90&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1577667552845285%26output%3Dhtml%26h%3D120%26slotname%3D9390786086%26adk%3D1521560287%26adf%3D807048394%26w%3D980%26lmt%3D1518514977%26loeid%3D368226211%252C38893312%26format%3D980x120%26url%3Dhttp%253A%252F%252Ffermer.inffo.pro%252Fsadovodstvo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1518514980209%26bpp%3D61%26fdt%3D69%26idt%3D387%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26correlator%3D919170264062%26frm%3D20%26ga_vid%3D39127460.1518514982%26ga_sid%3D1518514982%26ga_hid%3D1904500724%26ga_fc%3D0%26pv%3D2%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1577667552845285%26output%3Dhtml%26h%3D120%26slotname%3D9390786086%26adk%3D1521560287%26adf%3D807048394%26w%3D980%26lmt%3D1518514977%26loeid%3D368226211%252C38893312%26format%3D980x120%26url%3Dhttp%253A%252F%252Ffermer.inffo.pro%252Fsadovodstvo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1518514980209%26bpp%3D61%26fdt%3D69%26idt%3D387%26shv%3Dr20180207%26cbv%3Dr20170110%26saldr%3Daa%26correlator%3D919170264062%26frm%3D20%26ga_vid%3D39127460.1518514982%26ga_sid%3D1518514982%26ga_hid%3D1904500724%26ga_fc%3D0%26pv%3D2%26icsg%3D0%26nhd%3D1%26dssz%3D0%26mdo%3D0%26mso%3D0%26u_tz&itpl=0&avms=geo&v=r20180207 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1577667552845285&output=html&h=120&slotname=9390786086&adk=1521560287&adf=807048394&w=980&lmt=1518514977&loeid=368226211%2C38893312&format=980x120&url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1518514980209&bpp=61&fdt=69&idt=387&shv=r20180207&cbv=r20170110&saldr=aa&correlator=919170264062&frm=20&ga_vid=39127460.1518514982&ga_sid=1518514982&ga_hid=1904500724&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=90&ady=2693&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=1040&bc=1&ifi=1&dtd=1316

                                         
                                         173.194.222.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Tue, 13 Feb 2018 09:43:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            OPTIONS /watch/46806699?page-url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&charset=utf-8&browser-info=ti%3A7%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180213104318%3Aet%3A1518514998%3Aen%3Autf-8%3Av%3A962%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A1190%3Als%3A754275956939%3Arqn%3A2%3Arn%3A486084021%3Ahid%3A843725415%3Arqnl%3A1%3Ast%3A1518514998%3Au%3A1518514983792618530 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://fermer.inffo.pro
Access-Control-Request-Method: POST

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Tue, 13 Feb 2018 09:43:18 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /watch/46806699?page-url=http%3A%2F%2Ffermer.inffo.pro%2Fsadovodstvo%2F&charset=utf-8&browser-info=ti%3A4%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180213104318%3Aet%3A1518514998%3Aen%3Autf-8%3Av%3A962%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A1190%3Als%3A754275956939%3Arqn%3A2%3Arn%3A486084021%3Ahid%3A843725415%3Arqnl%3A1%3Ast%3A1518514998%3Au%3A1518514983792618530 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/
Cookie: yandexuid=9459913321518514983; yp=1833874983.yrts.1518514983; yabs-sid=56135091518514983; i=RWracriI/dbQQ46XKrrRf7r1ugdvw6LbJbsfGzbmD59I1rOUVY3L7PQBbq8eQ5SbStYDc854H20tY0bUmRToYJQPfoY=

                                         
                                         87.250.250.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Tue, 13 Feb 2018 09:43:18 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Tue, 13 Feb 2018 09:43:18 GMT
Expires: Tue, 13 Feb 2018 09:43:18 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /sadovodstvo/page/2/ HTTP/1.1 
Host: fermer.inffo.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fermer.inffo.pro/sadovodstvo/
X-Moz: prefetch

                                         
                                         0.0.0.0
                                        


--- Additional Info ---