Overview

URL otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
IP94.130.91.36
ASNAS57166 D2 International Investment Ukraine LLC
Location Ukraine
Report completed2017-12-30 23:26:31 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 94.130.91.36

Date UQ / IDS / BL URL IP
2018-05-22 22:47:58 +0200
0 - 1 - 1 anekdotprikol.ru/ 94.130.91.36
2018-02-06 19:33:58 +0100
0 - 0 - 0 otdyx-s-komfortom.ru/otdyih-v-gretsii-v-senty (...) 94.130.91.36
2018-01-19 20:58:58 +0100
0 - 0 - 1 1000-downloads.xyz/get.php 94.130.91.36
2018-01-08 17:39:18 +0100
0 - 0 - 0 noutboouk.ru/luchshiy-byudzhetnyiy-noutbuk-20 (...) 94.130.91.36
2018-01-08 16:37:23 +0100
0 - 0 - 0 otzovikavto.ru/videoregistrator-sho-me-combo- (...) 94.130.91.36
2018-01-06 08:38:17 +0100
0 - 0 - 1 soft.intermediary-timing-way.ru/win/dwnld/spr (...) 94.130.91.36
2017-12-30 23:33:05 +0100
0 - 0 - 0 otzovikotdbix.ru/otdyih-v-evpatorii-otzyivyi- (...) 94.130.91.36
2017-12-30 23:31:26 +0100
0 - 0 - 0 otzovikotdbix.ru/stoimost-putevki-v-turtsiyu- (...) 94.130.91.36
2017-12-30 23:29:14 +0100
0 - 0 - 0 autofuct.ru/pravilnaya-posadka-za-rulem-avtom (...) 94.130.91.36
2017-12-29 14:30:46 +0100
0 - 0 - 0 autofuct.ru/pravilnaya-posadka-za-rulem-avtom (...) 94.130.91.36

Last 10 reports on ASN: AS57166 D2 International Investment Ukraine LLC

Date UQ / IDS / BL URL IP
2018-05-24 11:17:53 +0200
0 - 0 - 2 masoudmahfouzi.niloblog.com/ 94.130.53.214
2018-05-24 10:20:51 +0200
0 - 0 - 1 kingheart.altervista.org/0se3aedd3d/ui397/ind (...) 94.130.239.165
2018-05-24 10:20:17 +0200
0 - 1 - 1 www.nuker.com/products/swnxt/bin/swnxt40922u.exe 94.130.38.104
2018-05-24 08:11:34 +0200
0 - 0 - 0 demosio.gr 95.216.37.164
2018-05-24 07:30:34 +0200
0 - 2 - 0 crispyrockets.de/ 94.130.121.228
2018-05-24 07:03:23 +0200
0 - 0 - 1 jabox.ru/jbox_jar.php?id=31.1 95.216.152.169
2018-05-24 07:01:40 +0200
0 - 1 - 1 confirmationyourinfo.ml/ 94.130.187.148
2018-05-24 06:01:57 +0200
0 - 0 - 1 jabox.ru/lbox_jar.php?id=119 95.216.152.169
2018-05-24 04:19:22 +0200
0 - 1 - 1 www.nuker.com/products/swnxt/bin/swnxt40922u.exe 94.130.38.104
2018-05-24 03:30:18 +0200
0 - 2 - 0 crispyrockets.de/ 94.130.121.228

Last 2 reports on domain: otzovikotdbix.ru

Date UQ / IDS / BL URL IP
2017-12-30 23:33:05 +0100
0 - 0 - 0 otzovikotdbix.ru/otdyih-v-evpatorii-otzyivyi- (...) 94.130.91.36
2017-12-30 23:31:26 +0100
0 - 0 - 0 otzovikotdbix.ru/stoimost-putevki-v-turtsiyu- (...) 94.130.91.36


JavaScript

Executed Scripts (69)


Executed Evals (88)

#1 JavaScript::Eval (size: 31, repeated: 2) - SHA256: aab861735251f25bc5eed5c1a0032ef870caa31c336f501ac150a4fbec0964bd

                                        0,
function(f) {
    I(f, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 3f2f02282e7ea7b370fc9bfd31b9afc4986a6465d390bd83ba3fc451ff38eee5

                                        0,
function(f) {
    I(f, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 2) - SHA256: c9cb87a3d4b346c70c78395577140a966305e10adfe6dde16778f0636be0bbbd

                                        0,
function(f) {
    I(f, 4);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 2) - SHA256: bf890578e941a2704504ee57d64acccb9f69fd7b4c33f141c6a5b919e54a0186

                                        0,
function(f) {
    f.G(0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 2) - SHA256: f82e9bccbea71a8c7ade6df1698cb1c92b2f92e4c6bbfc611932cff39657d660

                                        0,
function(f) {
    f.G(3);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 2899a148126852d27f4980a00ebb60444b6fc98281b9f3f8c74145683396f769

                                        0,
function(f) {
    f.G(4);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 6277ae1c341c45022ee12f2f8e88dc264ee21f20e4c99db5c24e3a73e14d7f9b

                                        0,
function(f) {
    f.G(7);
}
                                    

#8 JavaScript::Eval (size: 38, repeated: 2) - SHA256: 9a97c877fa4296b2cb188027e69503b010c07156f44734e8af977fb02e6d8c27

                                        0,
function(f) {
    f.v && U(f, 0);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 10b6c0f0277ea850c30fe7d54234a2e65d22a9c10d4722cf21fc754eda7800e8

                                        0,
function(f) {
    h(f, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 2) - SHA256: d980113def88b6ec4889cd08116e16e4dcfbf6955082b176d69a34e8146a2aca

                                        0,
function(f) {
    h(f, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 2) - SHA256: cc1c12f0fb3a8c3c698b02903460cf91a4616c2ea5081a3723240e5341e6a65c

                                        0,
function(f) {
    h(f, 4);
}
                                    

#12 JavaScript::Eval (size: 51, repeated: 2) - SHA256: 1f52ed49fc315149dd782516065802579acbaa568ef02cb6fe38ddea4dad36a4

                                        0,
function(f, H) {
    (H = f.N(p(f)), a)(f, H);
}
                                    

#13 JavaScript::Eval (size: 185, repeated: 2) - SHA256: e6143c32e783ef671a1b76618f946c762fbc762f7eeb0f84c52f274f09c3b207

                                        0,
function(f, H) {
    (H.push(f[0] << 24 | f[1] << 16 | f[2] << 8 | f[3]), H.push(f[4] << 24 | f[5] << 16 | f[6] << 8 | f[7]), H).push(f[8] << 24 | f[9] << 16 | f[10] << 8 | f[11]);
}
                                    

#14 JavaScript::Eval (size: 83, repeated: 2) - SHA256: 848e688ef65eb9e15613d2db8b8b13e3dd49c9e0de0adc83af954de516956213

                                        0,
function(f, H) {
    J(f, 1, 5) || (H = B(f), A(f, H.l, H.o.apply(H.F, H.D)));
}
                                    

#15 JavaScript::Eval (size: 94, repeated: 2) - SHA256: 8fe9171d85d9fcc74967e20dd0fa4886073e079b60e1b062259b92fc1d8ead82

                                        0,
function(f, H) {
    f = (H = p(f), f).N(H), f[0].removeEventListener(f[1], f[2], false);
}
                                    

#16 JavaScript::Eval (size: 125, repeated: 2) - SHA256: bb5e64433ea05b6f48720d53c7c014a4a93c78b5d1b667f4b571e9507b5c7009

                                        0,
function(f, H) {
    if ((H = this.T[f], void 0) === H) {
        throw Y(this, 30, 0, f), this.U;
    }
    return H();
}
                                    

#17 JavaScript::Eval (size: 72, repeated: 2) - SHA256: 5d0ef01f3303d6157404829a626e7484f67fd5a85aeed4b5ad071e3e6a33c315

                                        0,
function(f, H, d) {
    (H = p(f), d = p(f), A)(f, d, "" + f.N(H));
}
                                    

#18 JavaScript::Eval (size: 79, repeated: 2) - SHA256: 565c465a5f21c45667cb647bd07a5ad084ede23857643f4b4e45b84fba10f81a

                                        0,
function(f, H, d) {
    (d = (H = p(f), p(f)), H = f.N(H), A)(f, d, T(H));
}
                                    

#19 JavaScript::Eval (size: 85, repeated: 2) - SHA256: f2f59c268072d2663d8b9211ab869efd6d9af70ae415f1bbdcf4a50149a5964e

                                        0,
function(f, H, d) {
    (d = (H = p(f), p)(f), 0) != f.N(H) && A(f, 21, f.N(d));
}
                                    

#20 JavaScript::Eval (size: 86, repeated: 2) - SHA256: c8773f5c1d84137c5c0ea7778c0ce816e48b3a081315ab8dbb2a00de7b03dd30

                                        0,
function(f, H, d) {
    H = (d = (H = p(f), p)(f), f).T[H] && f.N(H), A(f, d, H);
}
                                    

#21 JavaScript::Eval (size: 121, repeated: 2) - SHA256: fb0d158c7703aff6d6a1334df75d485a17cf142d095a292d195dccd5b18dbbb1

                                        0,
function(f, H, d) {
    J(f, 1, 5) ||
        (H = p(f), d = p(f), A(f, d, function(f) {
            return eval(f);
        }(f.N(H))));
}
                                    

#22 JavaScript::Eval (size: 76, repeated: 2) - SHA256: f330d9c7d4397b05b9aa195b32d0cf7929570781e1786f6b026e76d70c6149c0

                                        0,
function(f, H, d) {
    d = (H = p(f), p)(f), A(f, d, f.N(d) % f.N(H));
}
                                    

#23 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 3909a5f196fd3de63188d43d573333870ff86e08097f7a31a21d1c2e4d7b9b32

                                        0,
function(f, H, d) {
    d = (H = p(f), p)(f), A(f, d, f.N(d) * f.N(H));
}
                                    

#24 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 4b7917fd2feedd2fa44c6f4d328ee566e83f4c4f2a1cb47667f6fdaeb91b21bc

                                        0,
function(f, H, d) {
    d = (H = p(f), p)(f), A(f, d, f.N(d) + f.N(H));
}
                                    

#25 JavaScript::Eval (size: 76, repeated: 2) - SHA256: f7b034e353b73f58c04958bdddb07c5a02f34c13fc8923699687ce42628b8a87

                                        0,
function(f, H, d) {
    d = (H = p(f), p)(f), A(f, d, f.N(d) - f.N(H));
}
                                    

#26 JavaScript::Eval (size: 244, repeated: 2) - SHA256: 4707115745f48b76970e6b2151cf3e6a7dd0a8a1220c9c47690ffcb40bc46689

                                        0,
function(f, H, d) {
    if (3 == f.length) {
        for (d = 0; 3 > d; d++) {
            H[d] += f[d];
        }
        for (f = [13, 8, 13, 12, 16, 5, 3, 10, (d = 0, 15)]; 9 > d; d++) {
            H[3](H, d % 3, f[d]);
        }
    }
}
                                    

#27 JavaScript::Eval (size: 135, repeated: 2) - SHA256: 2931752396369d75af85cb920cbee497c169cf7f0e1592ef37ac59b461181acc

                                        0,
function(f, H, d) {
    return (d = function() {
        return f;
    }, H = function() {
        return d();
    }, H)[this.C] = function(D) {
        f = D;
    }, H;
}
                                    

#28 JavaScript::Eval (size: 208, repeated: 2) - SHA256: 9b5ba9271fe462435ad034a379e9596bb38313bccd66d7b9f98492dae92502c0

                                        0,
function(f, H, d, P) {
    ((d = (H = f & 4, f &= 3, p(this)), P = p(this), d = this.N(d), H) &&
        (d = y(("" + d).replace(/\r\n/g, "\n"))), f) &&
    r(this, P, N(d.length, 2)), r(this, P, d);
}
                                    

#29 JavaScript::Eval (size: 110, repeated: 2) - SHA256: 34377fd30886fb6d1e4eadb171ab7fe01fdedd104b2502d031b82131493f0bd8

                                        0,
function(f, H, d, P) {
    (H = (d = (P = (d = (H = p(f), p)(f), p)(f), f.N(d)), f).N(H), A)(f, P, H[d]);
}
                                    

#30 JavaScript::Eval (size: 87, repeated: 2) - SHA256: 28885668fefddca8b257c29ef93ae221c1a4becec209af7ac131acac731b06b1

                                        0,
function(f, H, d, P) {
    (P = (H = p(f), d = p(f), p)(f), A)(f, P, f.N(H) << d);
}
                                    

#31 JavaScript::Eval (size: 87, repeated: 2) - SHA256: f433ca55e638d2c4ddbbabe2888c516b46ac723918cfca82679b8a95c30aeb4f

                                        0,
function(f, H, d, P) {
    (P = (H = p(f), d = p(f), p)(f), A)(f, P, f.N(H) >> d);
}
                                    

#32 JavaScript::Eval (size: 103, repeated: 2) - SHA256: b794db94448a1838d2523be587d5f679dd328f58164f80d53cbec12cddce0e52

                                        0,
function(f, H, d, P) {
    (P = (d = (H = p(f), p(f)), p(f)), H = f.N(H) == f.N(d), A)(f, P, +H);
}
                                    

#33 JavaScript::Eval (size: 102, repeated: 2) - SHA256: db4b14961ccb97aa9f18434ba1afdd5b815295f9647e0babf05cbe96d6576d4e

                                        0,
function(f, H, d, P) {
    (P = (d = (H = p(f), p(f)), p(f)), H = f.N(H) > f.N(d), A)(f, P, +H);
}
                                    

#34 JavaScript::Eval (size: 91, repeated: 2) - SHA256: 789aee376d39d396607dbd9a7011cd391849bc4f13e71a4a72e52993f2b24fc4

                                        0,
function(f, H, d, P) {
    P = (d = (H = p(f), p(f)), p(f)), A(f, P, f.N(H) | f.N(d));
}
                                    

#35 JavaScript::Eval (size: 92, repeated: 2) - SHA256: 3c57d0d1e667027ef5b4ed28c953e0f08b04df5dd1e17c350fe3470ab1285dcc

                                        0,
function(f, H, d, P) {
    P = (d = (H = p(f), p(f)), p(f)), A(f, P, f.N(H) || f.N(d));
}
                                    

#36 JavaScript::Eval (size: 90, repeated: 2) - SHA256: a36ced2567ce6955f73e5b1787598e63e9fd8bba748c579feae1483e404f9063

                                        0,
function(f, H, d, P) {
    P = (d = (H = p(f), p)(f), p(f)), f.N(H)[f.N(d)] = f.N(P);
}
                                    

#37 JavaScript::Eval (size: 96, repeated: 2) - SHA256: 9ccaf84db195e24e0b594fa05d1bd09f82248067b45da07b11736c234a26d894

                                        0,
function(f, H, d, P) {
    d = (H = p(f), p)(f), P = p(f), A(f, P, (f.N(H) in f.N(d)) + 0);
}
                                    

#38 JavaScript::Eval (size: 141, repeated: 2) - SHA256: 9c87deabc3e2acaf357e059c45928a052f93d1d53b0a4b4e2e221c5a2b3abb50

                                        0,
function(f, H, d, P) {
    for (; d--;) {
        21 != d && 79 != d && H.T[d] && (H.T[d] = H[P](H[f](d), this));
    }
    H[f] = this;
}
                                    

#39 JavaScript::Eval (size: 240, repeated: 2) - SHA256: 1aac37ace3cea85a19b2a96a4d8ce60505639b7407207afbd61bc365530d8e9b

                                        0,
function(f, H, d, P) {
    if ((H = f.a.pop())) {
        for (d = p(f); 0 < d; d--) {
            P = p(f), H[P] = f.T[P];
        }
        f.T = (H[4] = f.T[4], H[142] = f.T[142], H);
    } else {
        A(f, 21, f.R.length);
    }
}
                                    

#40 JavaScript::Eval (size: 170, repeated: 2) - SHA256: ddfd1e0a0a25f209b48070034660cdb69488328c5955f959428d405506c85f38

                                        0,
function(f, H, d, P) {
    try {
        P = f[(H + 2) % 3], f[H] = f[H] - f[(H + 1) % 3] - P ^ (1 == H ? P << d : P >>> d);
    } catch (u) {
        throw u;
    }
}
                                    

#41 JavaScript::Eval (size: 222, repeated: 2) - SHA256: 5762dc4d78cccd9dd7a85329e55bdc9c511d8a32336550f13ef3ea98705fe710

                                        0,
function(f, H, d, P, u) {
    (P = (u = (H = (d = (H = p(f), p(f)), P = p(f), f.N(H)), f.N(p(f))), d = f.N(d), f).N(P), 0) !== H &&
        (P = k(f, P, u, 1, H, d), H.addEventListener(d, P, L), A(f, 155, [H, d, P]));
}
                                    

#42 JavaScript::Eval (size: 126, repeated: 2) - SHA256: dcecdf2045c1dcde685933fb583dc79cbc1046b58fff11261889489b6731886e

                                        0,
function(f, H, d, P, u) {
    d = (u = (P = (H = p(f), d = p(f), f).N(p(f)), f).N(p(f)), f).N(d), A(f, H, k(f, d, P, u));
}
                                    

#43 JavaScript::Eval (size: 138, repeated: 2) - SHA256: fdf9cf42bf218b10c1cf50a318aa2567662900eab3996031900e5f5b602ebfaa

                                        0,
function(f, H, d, P, u) {
    for (P = (u = (d = (H = p(f), S)(f), 0), []); u < d; u++) {
        P.push(p(f));
    }
    A(f, H, P);
}
                                    

#44 JavaScript::Eval (size: 240, repeated: 2) - SHA256: 6fb5ebe604c72fa5f6ca3236897f9020666b38f3099fb615cc949a5b284c6dfc

                                        0,
function(f, H, d, P, u) {
    for (d = p((H = [], f)), P = 0; P < d; P++) {
        u = p(f), H.push(f.N(u));
    }
    (d = p(f), A)(f, d, function(f, d) {
        f.g++;
        try {
            for (d = 0; d < H.length; d++) {
                (0, H[d])(f);
            }
        } finally {
            f.g--;
        }
    });
}
                                    

#45 JavaScript::Eval (size: 397, repeated: 2) - SHA256: 1070d4525bd15d975f343d3bb7ac24bbd1ed01fce1c499f553f9a0aa374300ac

                                        0,
function(f, H, d, P, u, Q) {
    if (!J(f, 1, 255)) {
        if ("object" == (P = (d = (u = (P = (H = p(f), d = p(f), p)(f), p(f)), H = f.N(H), f.N(d)), f.N(P)), f = f.N(u), T)(H)) {
            for (Q in u = [], H) {
                u.push(Q);
            }
            H = u;
        }
        for (u = 0, Q = H.length; u < Q; u += P) {
            d(H.slice(u, u + P), f);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 216, repeated: 2) - SHA256: 62f153cc305140acab098f58e51b2ca45389406140416b9da72d7863d534f33e

                                        0,
function(f, H, d, P, u, Q) {
    return Q = (d = (P = (u = function() {
        return P();
    }, function() {
        return P[d.V + (u[d.i] === H) - !Q[d.i]];
    }), this), d.B), u[d.C] = function(f) {
        P[d.H] = f;
    }, u[d.C](f), f = u;
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 2) - SHA256: 742b27665036db028539c167f5d219aa9a2abd8f4c8066277850ce369c66ade9

                                        0,
function(f, H, d, P, u, Q, V) {
    J(f, 1, 5) ||
        (H = B(f), P = H.F, u = H.o, d = H.D, V = d.length, 0 == V ? (Q = new(P[u])) : 1 == V ? (Q = new(P[u])(d[0])) : 2 == V ? (Q = new(P[u])(d[0], d[1])) : 3 == V ? (Q = new(P[u])(d[0], d[1], d[2])) : 4 == V ? (Q = new(P[u])(d[0], d[1], d[2], d[3])) : Y(f, 22), A(f, H.l, Q));
}
                                    

#48 JavaScript::Eval (size: 292, repeated: 2) - SHA256: f47386304751174536e137599f3c72b853292114ccd4bf5d64a6f48d5efd1165

                                        0,
function(f, H, d, u, b, Q, V) {
    if ((d = (H = p(f), S(f)), u = "", f).T[66]) {
        for (b = f.N(66), V = b.length, Q = 0; d--;) {
            Q = (Q + S(f)) % V, u += P[b[Q]];
        }
    } else {
        for (; d--;) {
            u += P[p(f)];
        }
    }
    A(f, H, u);
}
                                    

#49 JavaScript::Eval (size: 39, repeated: 2) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#50 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 559aead08264d5795d3909718cdd05abd49572e84fe55590eef31a88a08fdffd

                                        A
                                    

#51 JavaScript::Eval (size: 322, repeated: 2) - SHA256: 7f1e2a8aa9a7933b59e261d10e905fe804a085a59bf1693618aa691c81984f35

                                        A = function(f, H, d) {
    if (21 == H || 79 == H) {
        if (f.T[H]) {
            f.T[H][f.C](d);
        } else {
            f.T[H] = f.A(d);
        }
    } else if (40 != H && 107 != H && 173 != H && 4 != H || !f.T[H]) {
        f.T[H] = f.I(d, f.N);
    }
    196 == H && (f.P = void 0, A(f, 21, f.N(21) + 4));
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 2) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#53 JavaScript::Eval (size: 260, repeated: 2) - SHA256: cdf546a2a706eb1b69512dc88cd4dcced2a3cd6003b46bb5d1cf1a715d3ff499

                                        B = function(f, H, d, P, u, D) {
    for (P = (((H = {}, d = p(f), H).l = p(f), H).D = [], p(f) - 1), u = p(f), D = 0; D < P; D++) {
        H.D.push(p(f));
    }
    for ((H.o = f.N(d), H).F = f.N(u); P--;) {
        H.D[P] = f.N(H.D[P]);
    }
    return H;
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 2) - SHA256: f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9

                                        F
                                    

#55 JavaScript::Eval (size: 366, repeated: 2) - SHA256: 899cd8cf0bfd87414315abab861a327e5a5b2d690cd4ac867dcdab5412c4760f

                                        F = function(f, H, d, P) {
    try {
        for (P = 0; 79669387488 != P;) {
            f += (H << 4 ^ H >>> 5) + H ^ P + d[P & 3], P += 2489668359, H += (f << 4 ^ f >>> 5) + f ^ P + d[P >>> 11 & 3];
        }
        return [f >>> 24, f >> 16 & 255, f >> 8 & 255, f & 255, H >>> 24, H >> 16 & 255, H >> 8 & 255, H & 255];
    } catch (u) {
        throw u;
    }
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#57 JavaScript::Eval (size: 595, repeated: 2) - SHA256: cc4ee3668888ea36663c429d3f68197678175a8eb5a9d9ee078a177c02287676

                                        G = function(f, H, d, P, u, D, R) {
    f.g++;
    try {
        for (d = (u = (D = 0, P = 5001, void 0), f.R).length;
            (--P || f.M) && (D = f.N(21)) < d;) {
            try {
                A(f, 79, D), R = p(f), (u = f.N(R)) && u.call ? u(f) : Y(f, 21, 0, R), f.m = true, J(f, 0, 2);
            } catch (l) {
                l != f.U && (f.N(57) ? Y(f, 22, l) : A(f, 57, l));
            }
        }
        P || Y(f, 33);
    } catch (l) {
        try {
            Y(f, 22, l);
        } catch (X) {
            v(f, X);
        }
    }
    return d = f.N(253), H && A(f, 21, H), f.g--, d;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 2) - SHA256: a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c

                                        I
                                    

#59 JavaScript::Eval (size: 74, repeated: 2) - SHA256: 0826202a9dbe1d96c3e6a790a997de556fc7c13d348c920279896df51375d509

                                        I = function(f, H, d, P) {
    d = p(f), P = p(f), r(f, P, N(f.N(d), H));
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#61 JavaScript::Eval (size: 130, repeated: 2) - SHA256: 09b2fb719e1439ab236e1e70ca64b6128f4967f96147da701177d74d2ac577b0

                                        K = function(f, H, d) {
    return (d = f.N(21), f).R && d < f.R.length ? (A(f, 21, f.R.length), a(f, H)) : A(f, 21, H), G(f, d);
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b

                                        N
                                    

#63 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#64 JavaScript::Eval (size: 83, repeated: 2) - SHA256: f58a8bda4a49b46db03fd97e6ae6e246867a9b4c5ee506bffcdfa8eafee0d30e

                                        S = function(f, H) {
    return H = p(f), H & 128 && (H = H & 127 | p(f) << 7), H;
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#66 JavaScript::Eval (size: 424, repeated: 2) - SHA256: ab769b79b3313e357524246a37d0e1a7cbd7118b17c655dab6b08c7b63546a49

                                        Y = function(f, H, d, P, u) {
    d = ((0 == (H = (u = f.N(79), [H, u >> 8 & 255, u & 255]), void 0 != P && H.push(P), f.N(4).length) &&
                (f.T[4] = void 0, A(f, 4, H)), P = "", d) &&
            (d.message && (P += d.message), d.stack && (P += ":" + d.stack)), f).N(142), 3 < d &&
        (P = P.slice(0, d - 3), d -= P.length + 3, P = y(P.replace(/\r\n/g, "\n")), r(f, 107, N(P.length, 2).concat(P), 12)), A(f, 142, d);
}
                                    

#67 JavaScript::Eval (size: 2, repeated: 46) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#68 JavaScript::Eval (size: 1, repeated: 2) - SHA256: ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

                                        a
                                    

#69 JavaScript::Eval (size: 83, repeated: 2) - SHA256: 83a689776bc30a45226c02cb913baa41d4d0156edecc080aa10558e63a77cdb2

                                        a = function(f, H) {
    ((f.a.push(f.T.slice()), f.T)[21] = void 0, A)(f, 21, H);
}
                                    

#70 JavaScript::Eval (size: 35, repeated: 2) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#71 JavaScript::Eval (size: 29, repeated: 3) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#72 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#73 JavaScript::Eval (size: 1, repeated: 2) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

                                        h
                                    

#74 JavaScript::Eval (size: 116, repeated: 2) - SHA256: 0f971c787a5c361a76d468c2c66b6f91fc68da1d09532f4c26e322222ed3f335

                                        h = function(f, H, d, P) {
    for (d = p(f), P = 0; 0 < H; H--) {
        P = P << 8 | p(f);
    }
    A(f, d, P);
}
                                    

#75 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#76 JavaScript::Eval (size: 272, repeated: 2) - SHA256: 9f15b14f32ac60756f6cf493d5cf23af4a7d267dcc1030a75ab99f71f495c758

                                        k = function(f, H, d, P, u, D) {
    return function() {
        var R = P & 1,
            l = [6, H, d, void 0, u, D, arguments];
        if (P & 2) {
            var X = (W(f, l), n)(f, true, false, false);
        } else {
            R && f.X.length ? W(f, l) : R ? (W(f, l), n(f, true, false, false)) : (X = M(f, l));
        }
        return X;
    };
}
                                    

#77 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#78 JavaScript::Eval (size: 88, repeated: 2) - SHA256: 54ac80775d336965dc7aa4a6d41c14e298760f5f7df28529fd8621476041ffff

                                        m = function(f, H) {
    return f[H] << 24 | f[H + 1] << 16 | f[H + 2] << 8 | f[H + 3];
}
                                    

#79 JavaScript::Eval (size: 9, repeated: 1) - SHA256: ebf49dcd836f810084c14e0f2dab4dc1768bbdc5980481bf201fcf76771dff7a

                                        navigator
                                    

#80 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#81 JavaScript::Eval (size: 290, repeated: 2) - SHA256: ea2ae020ef4e20b593169964fa94392eab4b3bb542a25609675c80353e10e18b

                                        p = function(f, H, d) {
    if (!(H = f.N(21), H in f.R)) {
        throw Y(f, 31), f.U;
    }
    return ((void 0 == f.P && (f.P = m(f.R, H - 4), f.L = void 0), f.L) != H >> 3 &&
        (f.L = H >> 3, d = [0, 0, 0, f.N(196)], f.w = F(f.P, f.L, d)), A(f, 21, H + 1), f.R[H]) ^ f.w[H % 8];
}
                                    

#82 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#83 JavaScript::Eval (size: 1, repeated: 4) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#84 JavaScript::Eval (size: 402, repeated: 2) - SHA256: 500c7d23707430fa57ea681f578ea2690db018a46c731b513ef92333c08a660c

                                        r = function(f, H, d, P, u, D) {
    for ((u = f.N(H), 107) == H ? (H = function(f, H, d, P) {
            if (u.s != (d = (H = u.length, H) - 4 >> 3, d)) {
                d = (d << (P = [(u.s = d, 0), 0, 0, D], 3)) - 4;
                try {
                    u.$ = F(m(u, d), m(u, d + 4), P);
                } catch (Q) {
                    throw Q;
                }
            }
            u.push(u.$[H & 7] ^ f);
        }, D = f.N(58)) : (H = function(f) {
            u.push(f);
        }), P && H(P & 255), P = 0, f = d.length; P < f; P++) {
        H(d[P]);
    }
}
                                    

#85 JavaScript::Eval (size: 4, repeated: 4) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this
                                    

#86 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#87 JavaScript::Eval (size: 1, repeated: 2) - SHA256: a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa

                                        y
                                    

#88 JavaScript::Eval (size: 485, repeated: 2) - SHA256: 9c1d20109db2d13356b1ff1cc142050a8f65c146b01d773abc32ea67d1025d6a

                                        y = function(f, H, d, P, u) {
    for (H = [], P = d = 0; P < f.length; P++) {
        u = f.charCodeAt(P), 128 > u ? (H[d++] = u) : (2048 > u ? (H[d++] = u >> 6 | 192) : (55296 == (u & 64512) &&
            P + 1 < f.length && 56320 == (f.charCodeAt(P + 1) & 64512) ? (u = 65536 + ((u & 1023) << 10) + (f.charCodeAt(++P) & 1023), H[d++] = u >> 18 | 240, H[d++] = u >> 12 & 63 | 128) : (H[d++] = u >> 12 | 224), H[d++] = u >> 6 & 63 | 128), H[d++] = u & 63 | 128);
    }
    return H;
}
                                    

Executed Writes (28)

#1 JavaScript::Write (size: 0, repeated: 6) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 4463, repeated: 1) - SHA256: 913f56a08604633632e2fe08f41d27a717383c818addd9a1856faa887914b75e

                                        < script >
    var abgp = {
        hw: 15,
        sw: 109,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/ru.png',
        alt: 'Ads by Google',
        t: ' 5:;0<0 >B',
        tw: 49,
        t2: 'Google',
        t2w: 36,
        tbo: 0,
        att: 'adsbygoogle',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 250,
            "width": 300,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=COqUR_hNIWoHuMZe47gS2-IPAAqD8h85P8IWE1ekGl_GJ3BQQASCdyeMjYMPcpIWYGKABpemSmgPIAQmpAt8Y57S2I7Q-qAMByAMCqgTYAU_QL7UmerwpJtZg1kW-q509vNa2qIMVBtychRSS-OyLwsn-emw5Zd9ZVTfoTHxpMcw-Yl5X_e0sFxdB9sWZX9Yi4lmQ8hJ0m01_kchPE-pjbGCcJvsSM4FLK5IhguyWesapqn_DGJCk-ByiaQuUvVSmVO6j--HiuedS9aqtvAPor16PFijx6G-DnlYF_EzvtkDDe5Y5-FO7-Bca8UULh3VxvNvCqt0Le54tGvrGe9mURS9TIUy1jNGQcNKzhOcplBnj9jZoYzOMyKAOBypiToqZGyTjVnw1reAEA5AGAaAGTIAHw5btZagHpr4b2AcA0ggHCIBhEAEYAoAKAcgTsvylAtATANgTCg\u0026sigh=uO42TsGHbcE\u0026cid=CAASEuRoA1fhFuauhjb1zooBT0Y-tA",
                    "close_button_token": "_PFY1BOnY2YI8IWE1ekGEO7VkdMDGIXVi2ZCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "mute_confirmation_text": "K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.",
                    "pub_feedback_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "pub_feedback_confirmation_text": "K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.",
                    "undo_text": "B<5=0",
                    "closing_countdown_text": "0:@KB85 >1JO2;5=8O: %1$d",
                    "attribution_text": "Ads by Google",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/%26gl%3DNO%26hl%3Dru%26ai0%3D\u0026usg=AFQjCNHUgTxH7TMhCp2XPNxRIiTzR2bhEg",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": ">60;>20BLAO =0 >1JO2;5=85",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                            "options": [{
                                "text": " 5:;0<0 70:@K205B :>=B5=B",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "5 8=B5@5A=>",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "@>A<>B@5=> =5A:>;L:> @07",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "5?@85<;5<0O @5:;0<0",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "K1>@ @5:;0<K",
                        "closed_message_text": "1JO2;5=85 70:@KB> %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": ">60;>20BLAO =0 >1JO2;5=85",
                        "confirmation_text": "K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85",
                        "ads_by_google_icon_url": "https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png",
                        "ads_by_google_button_text": " 5:;0<0 >B Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": " 5:;0<0 >B %1$s"
                    }
                }
            },
            "flags": [{
                "name": "enable_settings_click_collapse",
                "value": "true"
            }, {
                "name": "jake_enable_native_scroll_and_small_grid",
                "value": "true"
            }, {
                "name": "defer_jake_mta_render_to_expand",
                "value": "true"
            }, {
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }, {
                "name": "jake_transition_timeout",
                "value": "-1"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        ejar: false,
        eda: false
    }; < /script>
                                    

#3 JavaScript::Write (size: 4463, repeated: 1) - SHA256: 929b7cec2582569082ee347ed5031145cdb290f927b3234c69ac75f763cf3cfd

                                        < script >
    var abgp = {
        hw: 15,
        sw: 109,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/ru.png',
        alt: 'Ads by Google',
        t: ' 5:;0<0 >B',
        tw: 49,
        t2: 'Google',
        t2w: 36,
        tbo: 0,
        att: 'adsbygoogle',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 600,
            "width": 160,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=C7P80_xNIWuzPHJCX6gSEnYKoAqD8h85PstOO-tYFl_GJ3BQQASCdyeMjYMPcpIWYGKABpemSmgPIAQmpAt8Y57S2I7Q-qAMByAMCqgTYAU_QM89bxZhVtU-0L0G9zSulOnbSkF3KefxhVpaPgaNsXROezy99ODnj4qK3vfp_lBC5ZnBHfJhoYulEe3lzfzSswvTYF2BMhbrVzETEYFkwLVI7l0KC7oNBY9-HvrkIYVtywk9RwpoJghHkil6wrbAhrBJ8PvZjweVmUy7EaS0P-A2SM0Tl7WeigYJhNQzWFmRn9c0d7YD40sEl2OPwOk79tWFcF4mV_mXdzVZdG4PuX9mGmmxvQ2oz9lqDVbdDpA3nkMRURGFo4apWg1AmC1BYiBMkDSJG1-AEA5AGAaAGTIAHw5btZagHpr4b2AcA0ggHCIBhEAEYAoAKAcgTsvylAtATANgTCg\u0026sigh=9PfDIoWjaCA\u0026cid=CAASEuRo4Q2jeRY5da9eFMtkyOfxoQ",
                    "close_button_token": "81BTLq8JWsAIstOO-tYFEO7VkdMDGIXVi2ZCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "mute_confirmation_text": "K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.",
                    "pub_feedback_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "pub_feedback_confirmation_text": "K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.",
                    "undo_text": "B<5=0",
                    "closing_countdown_text": "0:@KB85 >1JO2;5=8O: %1$d",
                    "attribution_text": "Ads by Google",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/%26gl%3DNO%26hl%3Dru%26ai0%3D\u0026usg=AFQjCNHUgTxH7TMhCp2XPNxRIiTzR2bhEg",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": ">60;>20BLAO =0 >1JO2;5=85",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                            "options": [{
                                "text": " 5:;0<0 70:@K205B :>=B5=B",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "5 8=B5@5A=>",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "@>A<>B@5=> =5A:>;L:> @07",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "5?@85<;5<0O @5:;0<0",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "K1>@ @5:;0<K",
                        "closed_message_text": "1JO2;5=85 70:@KB> %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": ">60;>20BLAO =0 >1JO2;5=85",
                        "confirmation_text": "K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85",
                        "ads_by_google_icon_url": "https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png",
                        "ads_by_google_button_text": " 5:;0<0 >B Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": " 5:;0<0 >B %1$s"
                    }
                }
            },
            "flags": [{
                "name": "enable_settings_click_collapse",
                "value": "true"
            }, {
                "name": "jake_enable_native_scroll_and_small_grid",
                "value": "true"
            }, {
                "name": "defer_jake_mta_render_to_expand",
                "value": "true"
            }, {
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }, {
                "name": "jake_transition_timeout",
                "value": "-1"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        ejar: false,
        eda: false
    }; < /script>
                                    

#4 JavaScript::Write (size: 1707, repeated: 1) - SHA256: 7ab8fe02be86ddbb088056fd891fabb0418ff776dd6312f85423dc5b65240c14

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-4563949589232616"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171206/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="5183145486";google_ad_client="ca-pub-4563949589232616";google_adsbygoogle_status="done";google_ad_width=336;google_ad_height=280;google_ad_modifications={"plle":true,"eids":["21061122","191880502"],"loeids":[]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_format="336x280";google_ad_unit_key="3272314207";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1514673149350;google_pub_vars="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";google_bpp=44;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20171206/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#5 JavaScript::Write (size: 1498, repeated: 1) - SHA256: 97897774bd59e7b7e4fa3c84f5a372a395e27ff0a5ca020a2b31eb5865a4249e

                                        < !doctype html > < html > < body > < script > google_ad_slot = "2090078288";
google_ad_client = "ca-pub-4563949589232616";
google_adsbygoogle_status = "done";
google_ad_width = 250;
google_ad_height = 600;
google_ad_modifications = {
    "plle": true,
    "eids": ["21061122", "191880502"],
    "loeids": []
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "250x600";
google_ad_unit_key = "888891628";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1514673150934;
google_pub_vars = "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";
google_bpp = 16;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171206 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#6 JavaScript::Write (size: 1503, repeated: 1) - SHA256: a55a1772d76d0c9075f41211ada2ccd57f51a1cce5170d84c48ba51602e231a8

                                        < !doctype html > < html > < body > < script > google_ad_slot = "2090078288";
google_ad_client = "ca-pub-4563949589232616";
google_adsbygoogle_status = "done";
google_ad_width = 336;
google_ad_height = 280;
google_ad_modifications = {
    "plle": true,
    "eids": ["21061122", "191880502"],
    "loeids": []
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "336x280";
google_ad_unit_key = "3229444603";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1514673150669;
google_pub_vars = "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";
google_bpp = 22;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171206 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#7 JavaScript::Write (size: 9617, repeated: 1) - SHA256: 3b91f7b822434c52ff1f9da9a537dd99098f40054039a1cb9ca6f412158eef96

                                        < !doctype html > < html > < head > < script >
    var google_casm = ["", 0, null, 0, 1, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < DIV STYLE = "position: absolute; left: 0px; top: 0px; visibility: hidden;" > < IMG SRC = "https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-ATtOcD58pFxQf7y89wuIprNWUqtQRC2A6XzIZ40Gl_0KTgMXEQ6Y-fAGwdd_dOh1gn8JaJ_AfflkkZ69s_zuaWapIdQ9xsMv3iWCfXN6PPNNPJnJQ"
BORDER = 0 WIDTH = 1 HEIGHT = 1 ALT = ""
STYLE = "display:none" > < /DIV><div><div style="position:relative; display:inline-block;"><script>(function(){var h=this,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var b=c.slice();b.push.apply(b,arguments);return a.apply(this,b)}};var l=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="string"==typeof a?a.split(""):a,e=0;e<c;e++)e in d&&b.call(void 0,d[e],e,a)},m=Array.prototype.map?function(a,b){return Array.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"==typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d},p=Array.prototype.reduce?function(a,b,c){return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;l(a,function(c,f){d=b.call(void 0,d,c,f,a)});return d},q=function(a){for(var b=[],c=0;c<a;c++)b[c]="";return b};var r=function(a){r[" "](a);return a};r[" "]=function(){};var t=function(a,b){for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)},u=/https ? : \/\/[^\/]+/, v = function(a) {
    return (a = u.exec(a)) && a[0] || ""
};
var w = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
    x = function(a, b, c) {
        this.i = a;
        this.j = b;
        this.g = c
    },
    y = function(a, b) {
        this.url = a;
        this.h = !!b;
        this.depth = null
    },
    A = function(a) {
        a = a || z();
        for (var b = new y(h.location.href, !1), c = null, d = a.length - 1, e = d; 0 <= e; --e) {
            var f = a[e];
            !c && w.test(f.url) && (c = f);
            if (f.url && !f.h) {
                b = f;
                break
            }
        }
        e = null;
        f = a.length && a[d].url;
        0 != b.depth && f && (e = a[d]);
        return new x(b, e, c)
    },
    z = function() {
        var a = h,
            b = [],
            c = null;
        do {
            var d = a;
            try {
                var e;
                if (e = !!d && null != d.location.href) b: {
                    try {
                        r(d.foo);
                        e = !0;
                        break b
                    } catch (n) {}
                    e = !1
                }
                var f = e
            } catch (n) {
                f = !1
            }
            if (f) {
                var g = d.location.href;
                c = d.document && d.document.referrer || null
            } else g = c, c = null;
            b.push(new y(g || ""));
            try {
                a = d.parent
            } catch (n) {
                a = null
            }
        } while (a && d != a);
        a = 0;
        for (d = b.length - 1; a <= d; ++a) b[a].depth = d - a;
        d = h;
        if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (a = 1; a < b.length; ++a) g = b[a], g.url || (g.url = d.location.ancestorOrigins[a - 1] || "", g.h = !0);
        return b
    };
var C = function(a, b, c, d, e) {
        var f = [];
        t(a, function(a, n) {
            (a = B(a, b, c, d, e)) && f.push(n + "=" + a)
        });
        return f.join(b)
    },
    B = function(a, b, c, d, e) {
        if (null == a) return "";
        b = b || "&";
        c = c || ",$";
        "string" == typeof c && (c = c.split(""));
        if (a instanceof Array) {
            if (d = d || 0, d < c.length) {
                for (var f = [], g = 0; g < a.length; g++) f.push(B(a[g], b, c, d + 1, e));
                return f.join(c[d])
            }
        } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(C(a, b, c, d, e + 1)) : "...";
        return encodeURIComponent(String(a))
    };
var D = function(a, b) {
        this.g = a;
        this.depth = b
    },
    F = function() {
        var a = z(),
            b = Math.max(a.length - 1, 0),
            c = A(a);
        a = c.i;
        var d = c.j,
            e = c.g,
            f = [];
        c = function(a, b) {
            return null == a ? b : a
        };
        e && f.push(new D([e.url, e.h ? 2 : 0], c(e.depth, 1)));
        d && d != e && f.push(new D([d.url, 2], 0));
        a.url && a != e && f.push(new D([a.url, 0], c(a.depth, b)));
        var g = m(f, function(a, b) {
            return f.slice(0, f.length - b)
        });
        !a.url || (e || d) && a != e || (d = v(a.url)) && g.push([new D([d, 1], c(a.depth, b))]);
        g.push([]);
        return m(g, k(E, b))
    },
    E = function(a, b) {
        var c = p(b, function(a, b) {
                return Math.max(a, b.depth)
            }, -1),
            d = q(c + 2);
        d[0] = a;
        l(b, function(a) {
            return d[a.depth + 1] = a.g
        });
        return d
    },
    G = function() {
        var a = F();
        return m(a, function(a) {
            return B(a)
        })
    };
var H = function(a) {
        try {
            var b = G();
            b.pop();
            for (var c = 2083 - a.length - 5, d = 0; d < b.length; d++) {
                var e = encodeURIComponent(b[d]);
                if (e.length <= c) return a + "&rfl=" + e
            }
            return 0 < b.length ? a + "&rfl=" + encodeURIComponent(b[0]) : a
        } catch (f) {}
        return a
    },
    I = ["rfl"],
    J = h;
I[0] in J || !J.execScript || J.execScript("var " + I[0]);
for (var K; I.length && (K = I.shift());) {
    var L;
    if (L = !I.length) L = void 0 !== H;
    L ? J[K] = H : J[K] && J[K] !== Object.prototype[K] ? J = J[K] : J = J[K] = {}
};
}).call(this); < /script><script>var url = 'https:/ / googleads.g.doubleclick.net / dbm / ad ? dbm_c = AKAmf - Ajd3KrydjJi96xaP3oGZGOhHxsPowSSMYKyPOweMA68y7nS5Ea3TEtU8zEvknoJoLTJG1h & dbm_d = AKAmf - A33GwGMSBWNr6FYbPyCfe - 8 wOwI3AX5SrvGXjw6k - z3oTM7OpYH3T - hAtFqixDwqj - OsoLXm11P3JvPP1k8Si2gHuWoz4_kKELAsKHJNoRwCugMWLxcPRyJDc - W - rKznLtJgKRY_iefdjEqZQDRCOV6SPnySLuE2yZ4qXh1WkRiNOyA0mmwlMK558MM0RkjRXI9QKkp2NfZ1j8GnjwLxrFdGZiFwVUPDYiT_tSqjq6vD4vacDLD9_0dJ8EwJO4hjUJnvXfRBjGGUciawf6wdoU3YK30Q3uzwP9UWQa7GY1sfultHSJRdtG3oBnM5Il - 5 _XOWGDpSmH0ZNE4iODFE0wqQrmhceGvww2CNESFuF1A5QgszOz6hiEmjy8jox7jwkLwiDPuGmp9gn4_nKU4Le2mpQcdWfhMzUQAUua9VdaI4lgG2b1zIJY1WxSMeQ7VmGIzv8k_TKk7zMTt_FwJ3fP8OQeBVG9tKKwHJ8KZlTI7fm8l9DBhfngU8kxHbUobx78XVnTregYCbLvX_3CnwAJDfCI8ILgQBLhzrtKbFwSLriPj - Mq2pBO1c3bwT4GngzjVOAh - Z3oZaSCUxHJej5SY5I0BrPF9NwjL53DWT1SMn_nDVxrZdzQAPEWDCwkwFb7KthatWffqNBZOVXMq89JG6ktTZpmuOHZAyt3eErgzs_RNGl7wEe2TfBh64G5EfZRf37Av1LaoOPeDHHPl2QPZNBId6Zwb1C2laq2XzgjyXTH6CvBWufEO7nhLOaUZKphPHo4_ZAsNc0E2ofMqKBdV6fN33qm9Mn - hp__zMeOflMH0gngsmq_9StKRsUysjCwiEM1emRv90dr3my3Vz0jvykwOoWkHkco3dkIiNRPg3dyNscd2Yc2LDip3qgYMZF6HV5IEPyM4XQjUHax - wT1cMkJlLZTVnOzO53DKaY0yQefQcjYlVFdMYpcY0qUyuFrJsoQbfRMEvGd2qcAbdDwRdSV772antTFY_9nVoKeuqT4zhJHQA2YDv__byFudbQ0EsxWZu4a3vdynPYGb_ - msejvDaUXG0TBuHUax94EyV4rqWzccHQFtgJnlExQP - VFn_Id5im1vsq716BkXO - 8 Stw6K7xEL7VXQagZi7AxHUT6G1wX7vdMZS7fRXBWWWQ - qClN1rj5J8kwabgPHYD - hEQB4 - qks2Ihp9r8whFk - ItlzmVbd6o2saiAlaWn_cvu9n5NQmuhUElcqZtxjvJMEzJN_hNhW0yLwl3qRACaoz6ug_Z8dbZUsCVz1PuRtKKWKJ4_9VKk85TJLG2eyFEmFzyBkbCj0XWi45thpHvsdTuSR7Dboc8tLOmG7JXFhxLwciAHBWmmw_uj_VmIsXN0WYUSlOr1d - Pam6y7X5KWWcnupEHXRr - ezgaljBNwJsLwxK8IEyxkcM - zruFDMTph4EzAKutfP9xhUgu8rhg1pz6qvcgIxleLOsRt3OFr5XcWGrT_z54c2y8MLW - LoykY60wzoapWAVppUcYKZkbmcOZb6WSxW6MzNWkD4NGDdy - hi6zVa5eAlQLROky0AhEhH90LuTtcmqWjJRQWYne4m6YVJlyhlpJNrZSGL - IpGvKoe4vgkzGNBPl38LZ5sxNKuiJmrBVrhLtFQvpCj1U18oq2QaxMSTYvXeKCGuljYuzGgQVySCUx5L2FBDn0XcPjd - 6 jHVJUDjt6lZ3RJUfEJ1xzUTloSkLkf9chrC4XNMvO - bcnoCuQwWA5Okdr_Ba9vF4rnkUYAVEjiKocJ7nBnXfeTvNcVKokQR_zuvjJjlA514PH4s3ReuZJCV0sZgDtHQpILQ4mbBygpd_25z98V8QWWXaQ2BiIhEg8ICVJ0XBgOBfXTde80wD8U1DP - twT40LY4Nuq3kCFqSFF2Ua5untBYoY & cid = CAASEuRo4Q2jeRY5da9eFMtkyOfxoQ ';document.write(' < script src = "' + (window.rfl ? window.rfl(url) : url) + '" > < /s' + 'cript>');</script > < IFRAME src = "https://googleads.g.doubleclick.net/xbbe/pixel?d=CJCWSxCjgF4Y-8-MJzAB&v=APEucNWYkl3P37FVGegssLtzH_QxlSNGckOYoUKTESehGT1DMSCqp5cLEJ7iv3eksciDMxLOYwB-"
style = "display:none" > < /IFRAME></div > < /div><script src="https:/ / tpc.googlesyndication.com / pagead / js / r20171206 / r20110914 / client / ext / m_window_focus_non_hydra.js " async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("
https: //googleads.g.doubleclick.net/pagead/conversion/?ai\x3dC7P80_xNIWuzPHJCX6gSEnYKoAqD8h85PstOO-tYFl_GJ3BQQASCdyeMjYMPcpIWYGKABpemSmgPIAQmpAt8Y57S2I7Q-qAMByAMCqgTYAU_QM89bxZhVtU-0L0G9zSulOnbSkF3KefxhVpaPgaNsXROezy99ODnj4qK3vfp_lBC5ZnBHfJhoYulEe3lzfzSswvTYF2BMhbrVzETEYFkwLVI7l0KC7oNBY9-HvrkIYVtywk9RwpoJghHkil6wrbAhrBJ8PvZjweVmUy7EaS0P-A2SM0Tl7WeigYJhNQzWFmRn9c0d7YD40sEl2OPwOk79tWFcF4mV_mXdzVZdG4PuX9mGmmxvQ2oz9lqDVbdDpA3nkMRURGFo4apWg1AmC1BYiBMkDSJG1-AEA5AGAaAGTIAHw5btZagHpr4b2AcA0ggHCIBhEAEYAoAKAcgTsvylAtATANgTCg\x26sigh\x3d9PfDIoWjaCA","_xNIWuL7G4eKZvPcg8gP","CKzLk5nlstgCFZCLmgodhI4AJQ",true,true,true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><iframe scrolling="no" frameborder=0 height=0 width=0 src="https://pagead2.googlesyndication.com/pagead/s/cookie_push.html#aHR0cHM6Ly9zc3VtLXNlYy5jYXNhbGVtZWRpYS5jb20vdXNlcm1hdGNocmVkaXI_cz0xODQwMjMmY2I9aHR0cHMlM0ElMkYlMkZjbS5nLmRvdWJsZWNsaWNrLm5ldCUyRnBpeGVsJTNGZ29vZ2xlX25pZCUzRGluZGV4JTI2Z29vZ2xlX2htJTNEJmdvb2dsZV9naWQ9Q0FFU0VFWTlQYkN2WnRrMU1zaVAwVmtfR3BRJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QUhORjEzSUIwM3g1QXV6ZVROOTM1WW84VzdmUVZCZU11QVM0VUJaNk1Vd1c=,aHR0cHM6Ly9jbS5nLmRvdWJsZWNsaWNrLm5ldC9waXhlbC9hdHRyP2Q9QUhORjEzSlZIVkM5ZWluWGU1cEd2dmJkYVQ3N0JPdDJYb3hX" style="position:absolute"></iframe><script src="https://tpc.googlesyndication.com/pagead/js/r20171206/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','B_5Xd_xNIWuzPHJCX6gSEnYKoAgCy04761gUAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAcITBhil6ZKaAw','',888891628,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d61762905\x26',3,'CAASEuRo4Q2jeRY5da9eFMtkyOfxoQ','//pagead2.googlesyndication.com/activeview?avi\x3dB_5Xd_xNIWuzPHJCX6gSEnYKoAgCy04761gUAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAcITBhil6ZKaAw\x26cid\x3dCAASEuRo4Q2jeRY5da9eFMtkyOfxoQ');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171206/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,0,1,0,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CKzLk5nlstgCFZCLmgodhI4AJQ"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB/SURBVBjTbZEBDoAwCAO7H/T/r1VpCyyRmCmhwK0C/3EUOKjTGcCq0qpkVn1tX2+yt0KyVO+rs6mvDfdsrtlDgk2SyIZwo0k0FZrNQjDT0B9dNfqeLZWolTC8fqTfnhEtX9xo6tuzvia3g5thO+jTG8ZvBOP6Ow1cfeOgYerrAbaeBVO1XWOLAAAAAElFTkSuQmCC') !important"></div></body></html>
                                    

#8 JavaScript::Write (size: 9623, repeated: 1) - SHA256: ae59f7c6f5f38a2849b204f7807fca2aa5153a0e0ec538f79a761ed82da0fd22

                                        < !doctype html > < html > < head > < script >
    var google_casm = ["", 0, null, 0, 1, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < DIV STYLE = "position: absolute; left: 0px; top: 0px; visibility: hidden;" > < IMG SRC = "https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-AW-gZcIgFNcsDp4GswLvWPyAuJNKc-aIwt48EBNa-JElI4yzIiCGFpJJfgKKIHGcauUjDSOh2T4003_ueKg3h6o8oSDy5NIkxqn-AikDF0LweEa5I"
BORDER = 0 WIDTH = 1 HEIGHT = 1 ALT = ""
STYLE = "display:none" > < /DIV><div><div style="position:relative; display:inline-block;"><script>(function(){var h=this,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var b=c.slice();b.push.apply(b,arguments);return a.apply(this,b)}};var l=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="string"==typeof a?a.split(""):a,e=0;e<c;e++)e in d&&b.call(void 0,d[e],e,a)},m=Array.prototype.map?function(a,b){return Array.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"==typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d},p=Array.prototype.reduce?function(a,b,c){return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;l(a,function(c,f){d=b.call(void 0,d,c,f,a)});return d},q=function(a){for(var b=[],c=0;c<a;c++)b[c]="";return b};var r=function(a){r[" "](a);return a};r[" "]=function(){};var t=function(a,b){for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)},u=/https ? : \/\/[^\/]+/, v = function(a) {
    return (a = u.exec(a)) && a[0] || ""
};
var w = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
    x = function(a, b, c) {
        this.i = a;
        this.j = b;
        this.g = c
    },
    y = function(a, b) {
        this.url = a;
        this.h = !!b;
        this.depth = null
    },
    A = function(a) {
        a = a || z();
        for (var b = new y(h.location.href, !1), c = null, d = a.length - 1, e = d; 0 <= e; --e) {
            var f = a[e];
            !c && w.test(f.url) && (c = f);
            if (f.url && !f.h) {
                b = f;
                break
            }
        }
        e = null;
        f = a.length && a[d].url;
        0 != b.depth && f && (e = a[d]);
        return new x(b, e, c)
    },
    z = function() {
        var a = h,
            b = [],
            c = null;
        do {
            var d = a;
            try {
                var e;
                if (e = !!d && null != d.location.href) b: {
                    try {
                        r(d.foo);
                        e = !0;
                        break b
                    } catch (n) {}
                    e = !1
                }
                var f = e
            } catch (n) {
                f = !1
            }
            if (f) {
                var g = d.location.href;
                c = d.document && d.document.referrer || null
            } else g = c, c = null;
            b.push(new y(g || ""));
            try {
                a = d.parent
            } catch (n) {
                a = null
            }
        } while (a && d != a);
        a = 0;
        for (d = b.length - 1; a <= d; ++a) b[a].depth = d - a;
        d = h;
        if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (a = 1; a < b.length; ++a) g = b[a], g.url || (g.url = d.location.ancestorOrigins[a - 1] || "", g.h = !0);
        return b
    };
var C = function(a, b, c, d, e) {
        var f = [];
        t(a, function(a, n) {
            (a = B(a, b, c, d, e)) && f.push(n + "=" + a)
        });
        return f.join(b)
    },
    B = function(a, b, c, d, e) {
        if (null == a) return "";
        b = b || "&";
        c = c || ",$";
        "string" == typeof c && (c = c.split(""));
        if (a instanceof Array) {
            if (d = d || 0, d < c.length) {
                for (var f = [], g = 0; g < a.length; g++) f.push(B(a[g], b, c, d + 1, e));
                return f.join(c[d])
            }
        } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(C(a, b, c, d, e + 1)) : "...";
        return encodeURIComponent(String(a))
    };
var D = function(a, b) {
        this.g = a;
        this.depth = b
    },
    F = function() {
        var a = z(),
            b = Math.max(a.length - 1, 0),
            c = A(a);
        a = c.i;
        var d = c.j,
            e = c.g,
            f = [];
        c = function(a, b) {
            return null == a ? b : a
        };
        e && f.push(new D([e.url, e.h ? 2 : 0], c(e.depth, 1)));
        d && d != e && f.push(new D([d.url, 2], 0));
        a.url && a != e && f.push(new D([a.url, 0], c(a.depth, b)));
        var g = m(f, function(a, b) {
            return f.slice(0, f.length - b)
        });
        !a.url || (e || d) && a != e || (d = v(a.url)) && g.push([new D([d, 1], c(a.depth, b))]);
        g.push([]);
        return m(g, k(E, b))
    },
    E = function(a, b) {
        var c = p(b, function(a, b) {
                return Math.max(a, b.depth)
            }, -1),
            d = q(c + 2);
        d[0] = a;
        l(b, function(a) {
            return d[a.depth + 1] = a.g
        });
        return d
    },
    G = function() {
        var a = F();
        return m(a, function(a) {
            return B(a)
        })
    };
var H = function(a) {
        try {
            var b = G();
            b.pop();
            for (var c = 2083 - a.length - 5, d = 0; d < b.length; d++) {
                var e = encodeURIComponent(b[d]);
                if (e.length <= c) return a + "&rfl=" + e
            }
            return 0 < b.length ? a + "&rfl=" + encodeURIComponent(b[0]) : a
        } catch (f) {}
        return a
    },
    I = ["rfl"],
    J = h;
I[0] in J || !J.execScript || J.execScript("var " + I[0]);
for (var K; I.length && (K = I.shift());) {
    var L;
    if (L = !I.length) L = void 0 !== H;
    L ? J[K] = H : J[K] && J[K] !== Object.prototype[K] ? J = J[K] : J = J[K] = {}
};
}).call(this); < /script><script>var url = 'https:/ / googleads.g.doubleclick.net / dbm / ad ? dbm_c = AKAmf - CZR_M8pxe1Wxo3ZEkQTdCFERnBMAMPU - I7Jn3N4MDFN - cpFYK207eAj82WaX1FGD01D7RH & dbm_d = AKAmf - Beupwx3O9Inme95m7EnFjG6ZOcByTbZJXEDu1W9Yi377ozl_DzcjBDVtCk5CPzh2LW2yRTNC2MJLSNSde_BPiVs - 0 t_ELpkiidRZD6_fk3f0OzG8EdLUhOfGmrjx7 - wBpwWW9QRQcqy8nDk17yQzILgE55uSPiqSUZksvQmT58Q75Lqk90kLHt1lAUArSQD07KRgyu0GBx2gnzzNuUzG2bF_XQPzhb1evnIxvJTVzWzlzqjTJNRfVjcZAEE2j1t5vSkFYr5ZIaSqA7STV4McoJTQVq15CNCDjUI - y8cPsK0lw4CaJNOGSwFok5QHtIv_0Fh7jp1vfU22SWHlAPLOcRKWGrcx0tCM9dAxIhlwI0W1eFbGFJwf4xLNro2lRjpQJi8qa9cNAfXqQoOwkupXKZmFvWnfh38HmsEPfgqN - KoVhpFdLnFbAVdRjK1hjxESqVBPlpekSYbTM8DGC7yaNGuVuOgNqGwQF_GOXjgxS - viUOtyvhSIU3YS5i782FY0c0oF2W3ITT5xfr9uJ3wIZr - OMRI0ChtyWQTyZ16ixmfdhyE6R9UP6YkJX8 - MGhqC02Gu2v0cgpG84mje2xleMG0OdajCRHrRcsVc6vijlE5zuNHsdU_hhs9F9voxTZepmP6K88qmHP - zWa0rFFhRvSwehyf2qqzAkP6hW2nsxiu4c0x9LVb - NKbWC584j5RlQE7qArVKml7FW7msyrgRLRRF - dtC - Aa8PpGMPH8TaHGw421cg1JA3ZxURutbKM11f7vndDhyKBYxvtcwauZpBQ51oQYdHD5kY - 263 bzCuG4cE4A0 - WG57LD2LOShe0LalXNDiXeolRN_iwMGeZ44TSHRv6wyC6hlUEm_3T6oTj - C6LRTvX9xnPFOGEIFKf5OkG9mvkKVt1h_nsD6Ev8c6QOhXdbuUi_o2ZeKPyJAog30QIMBQLuXIcVW2W8ZL8TekTVQxVtq8 - pUFNxhttrYMLAiP0_z - gkgG26mVWVYvBAhslniDX5lpybE7TSyiKZ23QPx3TGgqRSsDPIea257qBXz7rZbbYgrYXUjYdjmTCzjV0q1J84rJbXRc0gs4PbLlnXXZJYH2UrryOziKKbzsleWi - eb2PA - pvH6FjcRRd7Uxf2PdzPLNAUhaxTx50_rxv8xJGCg37XIMlwYZltOMh3M_ij5Cgl - o - ZK67XN_kDmt - EYN - bmG1tCXQwOKPtqJO6b7TVxCDaJnK5 - BWKwD7BM_eFAmOtgm1Lw0dDX_TbfnnZcXgI5Bq4A6sswx4OYz11JNsh5z9nymB0VkQOUh5RltbidjFl7nSbJ - ygkR2WepldlAj - uKTkoJiNDQGGK1tf9syyKJDP8nynjclDRACnWIww3dbGknGk1AM7aKagMNJbNHPMXto1kaGEFMasc8Fbk3hysWQXzIz9VkU2znMh9RzZ44CsRphWV3KGoScD12eNZetmt45qUfZy5BUdU9PnWOMrF3g3c33QpoCJYSlMbAROaJSXLX2IS6SfOG3GhKq_lr - _oR2WifGNG0cPyz1OJnHmmDoi_muAiSZxChrv2LoOrz3jhufaKXYbbXg2aAlAybJlR - _YdtanYNfrOKKwWGx6AwOx9zXraNUpRVi - BgFlGzjuYugtU13EHXv1i - Zkjfx3oiWKAzI1QI4GkgrWOm7YRtyOTqB3Qak7G3A0o1JFtY0IMyCpAIr64lYwwwGEyBUwfI4QmC21GAxdSuBUY26smVA_BXlGE2rXQy6eJ9WLAayFRy6ESCSRlqRs1Ca6g8PzSb9vKilohWuIA35 - UvktjLbe8VPE - uJsLW - YISYv1wBBNibejalF79gTGikblcIBB2sa2iTi0injyU9j7hn - _vB_ZpoOsOUgprJyu7gV5_P9bmzEkUhY4zu0ulHVbs & cid = CAASEuRoA1fhFuauhjb1zooBT0Y - tA ';document.write(' < script src = "' + (window.rfl ? window.rfl(url) : url) + '" > < /s' + 'cript>');</script > < IFRAME src = "https://googleads.g.doubleclick.net/xbbe/pixel?d=CJCWSxCjgF4Y1dGMJzAB&v=APEucNV3H2BPm7CwiXEGbd97vx9xIMZ-Q-aLpqhxy-ZtYUHWih96i8i2RXI8BHkAPJBp-gRauUF5"
style = "display:none" > < /IFRAME></div > < /div><script src="https:/ / tpc.googlesyndication.com / pagead / js / r20171206 / r20110914 / client / ext / m_window_focus_non_hydra.js " async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("
https: //googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCOqUR_hNIWoHuMZe47gS2-IPAAqD8h85P8IWE1ekGl_GJ3BQQASCdyeMjYMPcpIWYGKABpemSmgPIAQmpAt8Y57S2I7Q-qAMByAMCqgTYAU_QL7UmerwpJtZg1kW-q509vNa2qIMVBtychRSS-OyLwsn-emw5Zd9ZVTfoTHxpMcw-Yl5X_e0sFxdB9sWZX9Yi4lmQ8hJ0m01_kchPE-pjbGCcJvsSM4FLK5IhguyWesapqn_DGJCk-ByiaQuUvVSmVO6j--HiuedS9aqtvAPor16PFijx6G-DnlYF_EzvtkDDe5Y5-FO7-Bca8UULh3VxvNvCqt0Le54tGvrGe9mURS9TIUy1jNGQcNKzhOcplBnj9jZoYzOMyKAOBypiToqZGyTjVnw1reAEA5AGAaAGTIAHw5btZagHpr4b2AcA0ggHCIBhEAEYAoAKAcgTsvylAtATANgTCg\x26sigh\x3duO42TsGHbcE","_hNIWv6aMdKBZurCtsgE","CIHl65jlstgCFRecmwodNvwAKA",true,true,true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><iframe scrolling="no" frameborder=0 height=0 width=0 src="https://pagead2.googlesyndication.com/pagead/s/cookie_push.html#aHR0cHM6Ly9waXhlbC5ldmVyZXN0dGVjaC5uZXQvMS9tP3VybD1odHRwcyUzQSUyRiUyRmNtLmcuZG91YmxlY2xpY2submV0JTJGcGl4ZWwlM0Znb29nbGVfbmlkJTNEZXZlcmVzdCUyNmdvb2dsZV9obSUzRF9fRUZHU1VSRkVSX1VTQjY0X18lMjZnb29nbGVfcHVzaCUzREFITkYxM0lpNm44MkRrRTBRZHJ3NEh5UlFRbjFkWldXLXhjaWNNeGw5bFYtJmdvb2dsZV9naWQ9Q0FFU0VHS0dhWVp0TDNWT1I2Zy1ZY0hraWxZJmdvb2dsZV9jdmVyPTE=,aHR0cHM6Ly9jbS5nLmRvdWJsZWNsaWNrLm5ldC9waXhlbC9hdHRyP2Q9QUhORjEzSWY3ZmVsV3ZpTU9URHRQNnYzaXhhSGt5aHo3bjNh" style="position:absolute"></iframe><script src="https://tpc.googlesyndication.com/pagead/js/r20171206/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','B7C-q_hNIWoHuMZe47gS2-IPAAgDwhYTV6QYAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAcITBhil6ZKaAw','',3229444603,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d556488982\x26',3,'CAASEuRoA1fhFuauhjb1zooBT0Y-tA','//pagead2.googlesyndication.com/activeview?avi\x3dB7C-q_hNIWoHuMZe47gS2-IPAAgDwhYTV6QYAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAcITBhil6ZKaAw\x26cid\x3dCAASEuRoA1fhFuauhjb1zooBT0Y-tA');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171206/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,0,1,0,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CIHl65jlstgCFRecmwodNvwAKA"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB9SURBVBjTbZABDsAwCALxB/7/tdtEoE3mUhdTqifAfxQD35cK6LntOe2qQC32xVafoql6f65yzxM1nFOdJHWQKDRB3LhIsFPM0CFvb6fG8JbCNviUK6Ce6SLJ03ATKdpjy4adkQtVtzvybDNGfPgNTtj26j3qljt2kMtt9wf+jAWk+ovbdQAAAABJRU5ErkJggg==') !important"></div></body></html>
                                    

#9 JavaScript::Write (size: 6, repeated: 4) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#10 JavaScript::Write (size: 74, repeated: 1) - SHA256: cbe302a7777fd533958cf9536cd532951297a0cea5def4fcab96848f729de1b0

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_571194855" >
                                    

#11 JavaScript::Write (size: 74, repeated: 1) - SHA256: e7869b87b15338c45f588752d582427a1df41c3671f69a8afe64749f5b3bd8ec

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_631229919" >
                                    

#12 JavaScript::Write (size: 18, repeated: 2) - SHA256: 0304f6f192da1241555759cbd47b6e2f7267f1661188f93500fb12bab9c28a87

                                        < div id = "ad_unit" >
                                    

#13 JavaScript::Write (size: 51, repeated: 1) - SHA256: 8a0b16a0d2a35ec5d76e49c33cf47a617decb73b8835a94419f2ed7614285229

                                        < div id = "dclk-studio-creative_1514673152306" > < /div>
                                    

#14 JavaScript::Write (size: 51, repeated: 1) - SHA256: b6ad3f8d322a98ee52fe5cdb7367c3598dea967c807a0b32a66ddeacf6501f90

                                        < div id = "dclk-studio-creative_1514673152382" > < /div>
                                    

#15 JavaScript::Write (size: 1344, repeated: 1) - SHA256: bcb7796c7b881f6afbbb8cb43d9eaae0898cce14fe8da268a933c1079e0323e0

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "336"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&amp;output=html&amp;h=280&amp;slotname=5183145486&amp;adk=3272314207&amp;adf=807048394&amp;w=336&amp;lmt=1514673147&amp;format=336x280&amp;url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1514673149350&amp;bpp=44&amp;fdt=53&amp;idt=263&amp;shv=r20171206&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=3261022184337&amp;frm=20&amp;ga_vid=1702437279.1514673150&amp;ga_sid=1514673150&amp;ga_hid=850920343&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=242&amp;ady=1990&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=21061122%2C191880502%2C41667000&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;dtd=853"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#16 JavaScript::Write (size: 1366, repeated: 1) - SHA256: a40149ff89f01c08114d31b2c5d8418ac94e82f5c45679cd389bcb58e7d61761

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "336"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&amp;output=html&amp;h=280&amp;slotname=2090078288&amp;adk=3229444603&amp;adf=807048394&amp;w=336&amp;lmt=1514673147&amp;format=336x280&amp;url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1514673150669&amp;bpp=22&amp;fdt=26&amp;idt=109&amp;shv=r20171206&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=336x280&amp;correlator=3261022184337&amp;frm=20&amp;ga_vid=1702437279.1514673150&amp;ga_sid=1514673150&amp;ga_hid=850920343&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=242&amp;ady=4531&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=21061122%2C191880502%2C41667000&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;dtd=128"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#17 JavaScript::Write (size: 1376, repeated: 1) - SHA256: d66674240a4e09cb8e133629e79d6a6ec685d719c43773918b4c3cc5f17de23d

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "250"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&amp;output=html&amp;h=600&amp;slotname=2090078288&amp;adk=888891628&amp;adf=807048394&amp;w=250&amp;lmt=1514673147&amp;format=250x600&amp;url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1514673150934&amp;bpp=16&amp;fdt=101&amp;idt=369&amp;shv=r20171206&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=336x280%2C336x280&amp;correlator=3261022184337&amp;frm=20&amp;ga_vid=1702437279.1514673150&amp;ga_sid=1514673150&amp;ga_hid=850920343&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=780&amp;ady=2801&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=21061122%2C191880502%2C41667000&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=3&amp;dtd=395"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#18 JavaScript::Write (size: 1506, repeated: 1) - SHA256: cf554736291457313ef3e4fd5d312edfb6248cf960f0c6173ab1e58158274fcc

                                        < ins class = 'dcmads'
style = 'display:inline-block;width:160px;height:600px'
data - dcm - placement = 'N4022.2526902DATMEAN_HMES_4022/B20043658.208520404'
data - dcm - click - tracker = 'https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjss5DEvgPrgxt3AB3fBE-yzM-M2KDVERnaU59lqMqAQHf3r2aKS4iW1M3hd0AyghddtJRbJ48tN3ztiMI7Xbkh0wjhuwN0PWd_N6RzPM5f0rXd4Kh4HuvNOGrtGV1WPlDPmy58Fk1hbW-sm6z5de4UzO78yZ3L85aU2weJ0-iFp0SsqEmzB1rlMZmjFG0MAJyTZyhvyZ2ARTcBHFqItzNPkk7XjVRRLX39CtFcdaDnnFHzQ8ADsuvx9jHrQYYq5Da-2sJqql0E-bI1NE8hYKVfz74C7BcKwK1TQDh7CEy3-OotieA_al9_IYBkLT3NGOHvfX2cO-Owq3uXuH592P0QCI2NdDWpwIYfJocqh0MIqwxA2p9MyGhKrDvvmohMJf6ehne0EEHA22Tx3gLGYEfb0ioxZrbEj9afX3gqMwY_FhA3jOwnbeGhlj11RfV8KL3bGbU72tnebGCCMJsbaOMVwFhmLHuE7MbVn4AttST7gHQ_pXWnSBxk8_apdysY2EhlRC40WBgr2mhXHrVp0fEWV0sa6SVk6VZsKnBOWeljb3LKLA-EkLTCDJnZaKpRFVggnMQx86qeOqSZwmfbMndtBO7IdOi2CVGHgBMqSXt0WyQvo77KHSNwp1ixL4KxKfUJPgH3SLPgPsP9FWeOeaQgqbFo37ROvpLfbS15Vkf3g0IzmLey2s71qaSN0TbgSh9tSkrLoGsf62jotun8V8yLa21WmlNRGrqhKF_WjVV4ELv0ethZkJDyPhk-I27DOUXLQAbhFnd1hUGs7S1pFfJFJVtQiAHeu1ypVSTMxyztVnUUddP3sUWH06ycSMpUpmKtymPZftl-LVx-Srud2711WMAuftY-Y0FXV43gBn3n6-EFmqYvG0yno9u5M0eXYVyTzm6CEoLhnsz20_s9QQzaU&sai=AMfl-YTk2HCcigD4kfRJjLz4--cDrjtf4JOjjy7XyrSJr243bTAcQvUULRxDuShpdtj4exH2ivnEyzH3Af6ydw53qOHwetQt7SM25rbx&sig=Cg0ArKJSzFBczlZL3YGaEAE&urlfix=1&adurl='
data - dcm - rendering - mode = 'script'
data - dcm - https - only
data - dcm - resettable - device - id = ''
data - dcm - app - id = '' >
    < script src = 'https://www.googletagservices.com/dcm/dcmads.js' > < /script> < /ins>
                                    

#19 JavaScript::Write (size: 1506, repeated: 1) - SHA256: 427b62d014377dc29f6cd1c9d5c2f116b7adcc1f085fb360a22e2d838b36a90c

                                        < ins class = 'dcmads'
style = 'display:inline-block;width:300px;height:250px'
data - dcm - placement = 'N4022.2526902DATMEAN_HMES_4022/B20043658.208520401'
data - dcm - click - tracker = 'https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjst1chLPpDW8J4G0bgo-KMKAhe58JRdOzEWYXBLLD9bE55iRu42gISo6iy4J7Hvv2pKB6q9PeIYtsbct0urXPcwhbdxCDwBGZivNGJAH6hvqfx1AdsOau-2H12diNoDTYWFDHAhFEkpjMsFlMzc7dh7hyQZPY8kNlYqnhSCGP0WqHaRIchM4YsnzQYaW11hEcxdMclAOr7nAMfp4IpKxoL-4WBswErhwkDC5cb5G-iw1KYN_vDVN4bkaWfYGByi-6Lrsmz2wXqkA0wiGMpMQEqRG26LNXRK2_R7kADxDjrY4IaQ-W5uLkLvfRQZEfR8wlY9x_OKuVEtnUzmuIbVGdG-6PyKV1jy4Y7UmSyN92GHh4iRawJ40x4ARyR8be-INEPbgUuvhLDOx9VSou4AnwZWtDADrWbARJnEfg4MGzgbPY9QhI1m_rA8GQtKrPWMHUdbqxFqk49My974mg0m7AjGKNCn_Dw3ZtljS-rrqhUWvWVCedxiMP-Ua81x0pHo_LTV_IKkaKjLIzgrmzOZGpvK6vFXVzXa00JhpcmQEsMxAxjRWLdWAbLKrOHF9Q3pgZyW0bT8YID_3vpKsPjZ57FQndKpFME7A79yplinuxW0GdHVpbZi8e4l2UEGEnsrzPioECXMv-FKueNQZ_QXDLswQLPY93_E3LWrSgvfIn24fosY6JAUN6wtqjh_waMNBIxZ92e8VVDPFvWYmE1B5_rAMv9lhi7uBYHESM3zf04jRItY4ozMBfuQQK1dXjFepzlB8YZBtthTsk7dm2fnIjCsjcA0pgtrRt4WiPiHnDpg-jpM4SJs92kySmCs9DbNWgKbaRWab9uyn8a9gxlxJ63ib9LMtMzheBzng1vgwt0-jLy1YnmcqkBDlz98DpjTCEiqXWFQ0cE87-p5utta1UJ8&sai=AMfl-YR96pmoJykvSDhVADKm6uxcFkqc9aWzSF3bRvfOIit11UCXREPPDDBJjEBGxax9GFam3SmfCGPU2CkfYF-wXciX92cbLAk9fvmq&sig=Cg0ArKJSzKgARQhqTWukEAE&urlfix=1&adurl='
data - dcm - rendering - mode = 'script'
data - dcm - https - only
data - dcm - resettable - device - id = ''
data - dcm - app - id = '' >
    < script src = 'https://www.googletagservices.com/dcm/dcmads.js' > < /script> < /ins>
                                    

#20 JavaScript::Write (size: 1482, repeated: 1) - SHA256: c05adc626981c5985fc0da64c627e074910f3d449b9f98279ef6507f75dc81aa

                                        < script src = "https://ad.doubleclick.net/ddm/adj/N4022.2526902DATMEAN_HMES_4022/B20043658.208520401;dc_ver=41.108;dc_eid=40004001;sz=300x250;dc_adk=1091091190;ord=4k4twi;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Fpcs%2Fclick%3Fxai%3DAKAOjst1chLPpDW8J4G0bgo-KMKAhe58JRdOzEWYXBLLD9bE55iRu42gISo6iy4J7Hvv2pKB6q9PeIYtsbct0urXPcwhbdxCDwBGZivNGJAH6hvqfx1AdsOau-2H12diNoDTYWFDHAhFEkpjMsFlMzc7dh7hyQZPY8kNlYqnhSCGP0WqHaRIchM4YsnzQYaW11hEcxdMclAOr7nAMfp4IpKxoL-4WBswErhwkDC5cb5G-iw1KYN_vDVN4bkaWfYGByi-6Lrsmz2wXqkA0wiGMpMQEqRG26LNXRK2_R7kADxDjrY4IaQ-W5uLkLvfRQZEfR8wlY9x_OKuVEtnUzmuIbVGdG-6PyKV1jy4Y7UmSyN92GHh4iRawJ40x4ARyR8be-INEPbgUuvhLDOx9VSou4AnwZWtDADrWbARJnEfg4MGzgbPY9QhI1m_rA8GQtKrPWMHUdbqxFqk49My974mg0m7AjGKNCn_Dw3ZtljS-rrqhUWvWVCedxiMP-Ua81x0pHo_LTV_IKkaKjLIzgrmzOZGpvK6vFXVzXa00JhpcmQEsMxAxjRWLdWAbLKrOHF9Q3pgZyW0bT8YID_3vpKsPjZ57FQndKpFME7A79yplinuxW0GdHVpbZi8e4l2UEGEnsrzPioECXMv-FKueNQZ_QXDLswQLPY93_E3LWrSgvfIn24fosY6JAUN6wtqjh_waMNBIxZ92e8VVDPFvWYmE1B5_rAMv9lhi7uBYHESM3zf04jRItY4ozMBfuQQK1dXjFepzlB8YZBtthTsk7dm2fnIjCsjcA0pgtrRt4WiPiHnDpg-jpM4SJs92kySmCs9DbNWgKbaRWab9uyn8a9gxlxJ63ib9LMtMzheBzng1vgwt0-jLy1YnmcqkBDlz98DpjTCEiqXWFQ0cE87-p5utta1UJ8%26sai%3DAMfl-YR96pmoJykvSDhVADKm6uxcFkqc9aWzSF3bRvfOIit11UCXREPPDDBJjEBGxax9GFam3SmfCGPU2CkfYF-wXciX92cbLAk9fvmq%26sig%3DCg0ArKJSzKgARQhqTWukEAE%26urlfix%3D1%26adurl%3D;dc_rfl=3,,http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F$0;xdt=1;crlt=6rTIdBZuZD;sttr=66;prcl=s?" > < /script>
                                    

#21 JavaScript::Write (size: 1467, repeated: 1) - SHA256: de45a19021a5d06a19be0b87ced5238eb476b2ba9e44002e654a0d5a8132c9da

                                        < script src = "https://ad.doubleclick.net/ddm/adj/N4022.2526902DATMEAN_HMES_4022/B20043658.208520404;dc_ver=41.108;sz=160x600;dc_adk=1564304531;ord=iwkw8q;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Fpcs%2Fclick%3Fxai%3DAKAOjss5DEvgPrgxt3AB3fBE-yzM-M2KDVERnaU59lqMqAQHf3r2aKS4iW1M3hd0AyghddtJRbJ48tN3ztiMI7Xbkh0wjhuwN0PWd_N6RzPM5f0rXd4Kh4HuvNOGrtGV1WPlDPmy58Fk1hbW-sm6z5de4UzO78yZ3L85aU2weJ0-iFp0SsqEmzB1rlMZmjFG0MAJyTZyhvyZ2ARTcBHFqItzNPkk7XjVRRLX39CtFcdaDnnFHzQ8ADsuvx9jHrQYYq5Da-2sJqql0E-bI1NE8hYKVfz74C7BcKwK1TQDh7CEy3-OotieA_al9_IYBkLT3NGOHvfX2cO-Owq3uXuH592P0QCI2NdDWpwIYfJocqh0MIqwxA2p9MyGhKrDvvmohMJf6ehne0EEHA22Tx3gLGYEfb0ioxZrbEj9afX3gqMwY_FhA3jOwnbeGhlj11RfV8KL3bGbU72tnebGCCMJsbaOMVwFhmLHuE7MbVn4AttST7gHQ_pXWnSBxk8_apdysY2EhlRC40WBgr2mhXHrVp0fEWV0sa6SVk6VZsKnBOWeljb3LKLA-EkLTCDJnZaKpRFVggnMQx86qeOqSZwmfbMndtBO7IdOi2CVGHgBMqSXt0WyQvo77KHSNwp1ixL4KxKfUJPgH3SLPgPsP9FWeOeaQgqbFo37ROvpLfbS15Vkf3g0IzmLey2s71qaSN0TbgSh9tSkrLoGsf62jotun8V8yLa21WmlNRGrqhKF_WjVV4ELv0ethZkJDyPhk-I27DOUXLQAbhFnd1hUGs7S1pFfJFJVtQiAHeu1ypVSTMxyztVnUUddP3sUWH06ycSMpUpmKtymPZftl-LVx-Srud2711WMAuftY-Y0FXV43gBn3n6-EFmqYvG0yno9u5M0eXYVyTzm6CEoLhnsz20_s9QQzaU%26sai%3DAMfl-YTk2HCcigD4kfRJjLz4--cDrjtf4JOjjy7XyrSJr243bTAcQvUULRxDuShpdtj4exH2ivnEyzH3Af6ydw53qOHwetQt7SM25rbx%26sig%3DCg0ArKJSzFBczlZL3YGaEAE%26urlfix%3D1%26adurl%3D;dc_rfl=3,,http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F$0;xdt=1;crlt=6rTIdBZuZD;sttr=212;prcl=s?" > < /script>
                                    

#22 JavaScript::Write (size: 2219, repeated: 1) - SHA256: 89fc5d82def43c28338b98c830516c5da837fd637275e320c6e7c21319139a8b

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-Ajd3KrydjJi96xaP3oGZGOhHxsPowSSMYKyPOweMA68y7nS5Ea3TEtU8zEvknoJoLTJG1h&dbm_d=AKAmf-A33GwGMSBWNr6FYbPyCfe-8wOwI3AX5SrvGXjw6k-z3oTM7OpYH3T-hAtFqixDwqj-OsoLXm11P3JvPP1k8Si2gHuWoz4_kKELAsKHJNoRwCugMWLxcPRyJDc-W-rKznLtJgKRY_iefdjEqZQDRCOV6SPnySLuE2yZ4qXh1WkRiNOyA0mmwlMK558MM0RkjRXI9QKkp2NfZ1j8GnjwLxrFdGZiFwVUPDYiT_tSqjq6vD4vacDLD9_0dJ8EwJO4hjUJnvXfRBjGGUciawf6wdoU3YK30Q3uzwP9UWQa7GY1sfultHSJRdtG3oBnM5Il-5_XOWGDpSmH0ZNE4iODFE0wqQrmhceGvww2CNESFuF1A5QgszOz6hiEmjy8jox7jwkLwiDPuGmp9gn4_nKU4Le2mpQcdWfhMzUQAUua9VdaI4lgG2b1zIJY1WxSMeQ7VmGIzv8k_TKk7zMTt_FwJ3fP8OQeBVG9tKKwHJ8KZlTI7fm8l9DBhfngU8kxHbUobx78XVnTregYCbLvX_3CnwAJDfCI8ILgQBLhzrtKbFwSLriPj-Mq2pBO1c3bwT4GngzjVOAh-Z3oZaSCUxHJej5SY5I0BrPF9NwjL53DWT1SMn_nDVxrZdzQAPEWDCwkwFb7KthatWffqNBZOVXMq89JG6ktTZpmuOHZAyt3eErgzs_RNGl7wEe2TfBh64G5EfZRf37Av1LaoOPeDHHPl2QPZNBId6Zwb1C2laq2XzgjyXTH6CvBWufEO7nhLOaUZKphPHo4_ZAsNc0E2ofMqKBdV6fN33qm9Mn-hp__zMeOflMH0gngsmq_9StKRsUysjCwiEM1emRv90dr3my3Vz0jvykwOoWkHkco3dkIiNRPg3dyNscd2Yc2LDip3qgYMZF6HV5IEPyM4XQjUHax-wT1cMkJlLZTVnOzO53DKaY0yQefQcjYlVFdMYpcY0qUyuFrJsoQbfRMEvGd2qcAbdDwRdSV772antTFY_9nVoKeuqT4zhJHQA2YDv__byFudbQ0EsxWZu4a3vdynPYGb_-msejvDaUXG0TBuHUax94EyV4rqWzccHQFtgJnlExQP-VFn_Id5im1vsq716BkXO-8Stw6K7xEL7VXQagZi7AxHUT6G1wX7vdMZS7fRXBWWWQ-qClN1rj5J8kwabgPHYD-hEQB4-qks2Ihp9r8whFk-ItlzmVbd6o2saiAlaWn_cvu9n5NQmuhUElcqZtxjvJMEzJN_hNhW0yLwl3qRACaoz6ug_Z8dbZUsCVz1PuRtKKWKJ4_9VKk85TJLG2eyFEmFzyBkbCj0XWi45thpHvsdTuSR7Dboc8tLOmG7JXFhxLwciAHBWmmw_uj_VmIsXN0WYUSlOr1d-Pam6y7X5KWWcnupEHXRr-ezgaljBNwJsLwxK8IEyxkcM-zruFDMTph4EzAKutfP9xhUgu8rhg1pz6qvcgIxleLOsRt3OFr5XcWGrT_z54c2y8MLW-LoykY60wzoapWAVppUcYKZkbmcOZb6WSxW6MzNWkD4NGDdy-hi6zVa5eAlQLROky0AhEhH90LuTtcmqWjJRQWYne4m6YVJlyhlpJNrZSGL-IpGvKoe4vgkzGNBPl38LZ5sxNKuiJmrBVrhLtFQvpCj1U18oq2QaxMSTYvXeKCGuljYuzGgQVySCUx5L2FBDn0XcPjd-6jHVJUDjt6lZ3RJUfEJ1xzUTloSkLkf9chrC4XNMvO-bcnoCuQwWA5Okdr_Ba9vF4rnkUYAVEjiKocJ7nBnXfeTvNcVKokQR_zuvjJjlA514PH4s3ReuZJCV0sZgDtHQpILQ4mbBygpd_25z98V8QWWXaQ2BiIhEg8ICVJ0XBgOBfXTde80wD8U1DP-twT40LY4Nuq3kCFqSFF2Ua5untBYoY&cid=CAASEuRo4Q2jeRY5da9eFMtkyOfxoQ&rfl=3%2C%2Chttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%240" > < /script>
                                    

#23 JavaScript::Write (size: 2219, repeated: 1) - SHA256: e6f2eaddd61ee31533d4497a3b59d83548f6691dad151cb441b0542f93900c16

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-CZR_M8pxe1Wxo3ZEkQTdCFERnBMAMPU-I7Jn3N4MDFN-cpFYK207eAj82WaX1FGD01D7RH&dbm_d=AKAmf-Beupwx3O9Inme95m7EnFjG6ZOcByTbZJXEDu1W9Yi377ozl_DzcjBDVtCk5CPzh2LW2yRTNC2MJLSNSde_BPiVs-0t_ELpkiidRZD6_fk3f0OzG8EdLUhOfGmrjx7-wBpwWW9QRQcqy8nDk17yQzILgE55uSPiqSUZksvQmT58Q75Lqk90kLHt1lAUArSQD07KRgyu0GBx2gnzzNuUzG2bF_XQPzhb1evnIxvJTVzWzlzqjTJNRfVjcZAEE2j1t5vSkFYr5ZIaSqA7STV4McoJTQVq15CNCDjUI-y8cPsK0lw4CaJNOGSwFok5QHtIv_0Fh7jp1vfU22SWHlAPLOcRKWGrcx0tCM9dAxIhlwI0W1eFbGFJwf4xLNro2lRjpQJi8qa9cNAfXqQoOwkupXKZmFvWnfh38HmsEPfgqN-KoVhpFdLnFbAVdRjK1hjxESqVBPlpekSYbTM8DGC7yaNGuVuOgNqGwQF_GOXjgxS-viUOtyvhSIU3YS5i782FY0c0oF2W3ITT5xfr9uJ3wIZr-OMRI0ChtyWQTyZ16ixmfdhyE6R9UP6YkJX8-MGhqC02Gu2v0cgpG84mje2xleMG0OdajCRHrRcsVc6vijlE5zuNHsdU_hhs9F9voxTZepmP6K88qmHP-zWa0rFFhRvSwehyf2qqzAkP6hW2nsxiu4c0x9LVb-NKbWC584j5RlQE7qArVKml7FW7msyrgRLRRF-dtC-Aa8PpGMPH8TaHGw421cg1JA3ZxURutbKM11f7vndDhyKBYxvtcwauZpBQ51oQYdHD5kY-263bzCuG4cE4A0-WG57LD2LOShe0LalXNDiXeolRN_iwMGeZ44TSHRv6wyC6hlUEm_3T6oTj-C6LRTvX9xnPFOGEIFKf5OkG9mvkKVt1h_nsD6Ev8c6QOhXdbuUi_o2ZeKPyJAog30QIMBQLuXIcVW2W8ZL8TekTVQxVtq8-pUFNxhttrYMLAiP0_z-gkgG26mVWVYvBAhslniDX5lpybE7TSyiKZ23QPx3TGgqRSsDPIea257qBXz7rZbbYgrYXUjYdjmTCzjV0q1J84rJbXRc0gs4PbLlnXXZJYH2UrryOziKKbzsleWi-eb2PA-pvH6FjcRRd7Uxf2PdzPLNAUhaxTx50_rxv8xJGCg37XIMlwYZltOMh3M_ij5Cgl-o-ZK67XN_kDmt-EYN-bmG1tCXQwOKPtqJO6b7TVxCDaJnK5-BWKwD7BM_eFAmOtgm1Lw0dDX_TbfnnZcXgI5Bq4A6sswx4OYz11JNsh5z9nymB0VkQOUh5RltbidjFl7nSbJ-ygkR2WepldlAj-uKTkoJiNDQGGK1tf9syyKJDP8nynjclDRACnWIww3dbGknGk1AM7aKagMNJbNHPMXto1kaGEFMasc8Fbk3hysWQXzIz9VkU2znMh9RzZ44CsRphWV3KGoScD12eNZetmt45qUfZy5BUdU9PnWOMrF3g3c33QpoCJYSlMbAROaJSXLX2IS6SfOG3GhKq_lr-_oR2WifGNG0cPyz1OJnHmmDoi_muAiSZxChrv2LoOrz3jhufaKXYbbXg2aAlAybJlR-_YdtanYNfrOKKwWGx6AwOx9zXraNUpRVi-BgFlGzjuYugtU13EHXv1i-Zkjfx3oiWKAzI1QI4GkgrWOm7YRtyOTqB3Qak7G3A0o1JFtY0IMyCpAIr64lYwwwGEyBUwfI4QmC21GAxdSuBUY26smVA_BXlGE2rXQy6eJ9WLAayFRy6ESCSRlqRs1Ca6g8PzSb9vKilohWuIA35-UvktjLbe8VPE-uJsLW-YISYv1wBBNibejalF79gTGikblcIBB2sa2iTi0injyU9j7hn-_vB_ZpoOsOUgprJyu7gV5_P9bmzEkUhY4zu0ulHVbs&cid=CAASEuRoA1fhFuauhjb1zooBT0Y-tA&rfl=3%2C%2Chttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%240" > < /script>
                                    

#24 JavaScript::Write (size: 73, repeated: 2) - SHA256: c0e0f84664f600fb051c67d220552b60b5008f5fb5d11926d61b2a0250902fcd

                                        < script src = "https://www.googletagservices.com/dcm/impl_v41.js" > < /script>
                                    

#25 JavaScript::Write (size: 21771, repeated: 1) - SHA256: 777cc9f243754b11b4f224aa1a68f462c50e64760edfd02e770540e9f8802eed

                                        < script > (function() {
    (function() {
        var h = this,
            k = function(a) {
                var b = typeof a;
                if ("object" == b)
                    if (a) {
                        if (a instanceof Array) return "array";
                        if (a instanceof Object) return b;
                        var c = Object.prototype.toString.call(a);
                        if ("[object Window]" == c) return "object";
                        if ("[object Array]" == c || "number" == typeof a.length && "undefined" != typeof a.splice && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("splice")) return "array";
                        if ("[object Function]" == c || "undefined" != typeof a.call && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("call")) return "function"
                    } else return "null";
                else if ("function" == b && "undefined" == typeof a.call) return "object";
                return b
            },
            l = function(a, b) {
                var c = Array.prototype.slice.call(arguments, 1);
                return function() {
                    var b = c.slice();
                    b.push.apply(b, arguments);
                    return a.apply(this, b)
                }
            };
        var m = function(a, b) {
            for (var c in a) b.call(void 0, a[c], c, a)
        };
        var n = function(a) {
            a = a ? a.toLowerCase() : "";
            switch (a) {
                case "normal":
                    return "normal";
                case "lightbox":
                    return "lightbox";
                case "push_down":
                    return "push_down"
            }
            return null
        };
        var p = {
                i: "ad_container_id",
                A: "hideObjects",
                X: "mtfTop",
                W: "mtfLeft",
                ca: "zindex",
                m: "mtfDuration",
                aa: "wmode",
                Z: "preferFlash",
                s: "as_kw",
                u: "as_lat",
                v: "as_lng",
                B: "mtfIFPath",
                o: "expansionMode",
                U: "top_container",
                T: "mtfTopFloat",
                S: "mtfTopDuration",
                V: "mtfTopWmode",
                P: "right_container",
                O: "mtfRightFloat",
                N: "mtfRightDuration",
                R: "mtfRightWmode",
                H: "bottom_container",
                G: "mtfBottomFloat",
                F: "mtfBottomDuration",
                I: "mtfBottomWmode",
                L: "left_container",
                K: "mtfLeftFloat",
                J: "mtfLeftDuration",
                M: "mtfLeftWmode",
                $: "mtfRenderFloatInplace",
                ba: "tryToWriteHtmlInline",
                j: "debugjs",
                C: "dcapp",
                g: "breakoutiframe",
                D: "inMobileAdSdk"
            },
            r = function(a) {
                m(a, function(b, c) {
                    if (c.toLowerCase() in q) {
                        var e = q[c.toLowerCase()];
                        c in a && delete a[c];
                        a[e] = b
                    }
                })
            },
            q = function() {
                var a = {};
                m(p, function(b) {
                    a[b.toLowerCase()] = b
                });
                return a
            }();
        var u = function(a) {
                this.a = a;
                a: {
                    for (c in a.displayConfigParameters) {
                        b: if (a = t, "string" == typeof a) a = "string" == typeof c && 1 == c.length ? a.indexOf(c, 0) : -1;
                            else {
                                for (var b = 0; b < a.length; b++)
                                    if (b in a && a[b] === c) {
                                        a = b;
                                        break b
                                    }
                                a = -1
                            }if (!(0 <= a)) {
                            var c = !0;
                            break a
                        }
                    }
                    c = !1
                }
                this.f = c
            },
            t = ["ad_container_id"],
            v = function(a) {
                return a.f ? a.a.displayConfigParameters : a.a.creativeParameters
            },
            w = function(a, b) {
                for (var c = 0; c < a.a.primaryFiles.length; ++c)
                    if (a.a.primaryFiles[c].type == b) return !0;
                return !1
            };
        var x = {
                pattern: /rendering_lib_((?:[0-9_]+)|(?:latest))\.js$/,
                c: "rendering_lib_db_$1.js"
            },
            y = {
                pattern: /\/[a-z_0-9]+_rendering_lib/,
                c: "/iframe_buster"
            },
            z = {
                pattern: /(.*\/)(.*_)rendering_lib_((?:[0-9_]+)|(?:latest))\.js$/,
                c: "$1inapp_html_inpage_rendering_lib_$3.js"
            },
            A = {
                pattern: /\/[0-9]+\/[a-z_0-9]+rendering_lib.+$/,
                c: "/ads/studio/cached_libs/modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-classes.js"
            },
            B = function() {
                var a = [];
                a.push("e=101");
                a.push("renderingType=2");
                a.push("leftOffset=0");
                a.push("topOffset=0");
                a.push("t=1");
                return "?" + a.join("&")
            },
            F = function(a) {
                var b = v(a),
                    c = a.a,
                    e = c.renderingLibraryData,
                    f = e.renderingLibrary,
                    d = e.version;
                if (!/express|image_gallery|dfa7banner|inapp/.test(f) && ("latest" == d || 0 <= C(d, "200_74"))) {
                    if (d = !w(a, "FLASH")) {
                        a: {
                            for (d = 0; d < a.a.primaryFiles.length; ++d) {
                                var g = a.a.primaryFiles[d].expandingDisplayProperties;
                                if (g && "lightbox" == n(g.expansionMode)) {
                                    d = !0;
                                    break a
                                }
                            }
                            d = !1
                        }
                        d = !d
                    }
                    d = d && null != window.mraid
                } else d = !1;
                d && (f = f.replace(z.pattern, z.c));
                "true" == b.debugjs && (f = f.replace(x.pattern, x.c));
                (b = h.self == h.top) || (b = window.Y && window.Y.SandBox && window.Y.SandBox.vendor, d = window.$sf && window.$sf.ext, g = window.$WLXRmAd, b = !!(window.IN_ADSENSE_IFRAME || b || d || g));
                if (!b) {
                    a: if (b = v(a).breakoutiframe) b = !!b && "true" == b.toLowerCase();
                        else {
                            b = a.a.primaryFiles;
                            for (d = 0; d < b.length; d++) {
                                g = b[d].renderAs;
                                var N = 0 == (parseInt(b[d].width, 10) || 0) && 0 == (parseInt(b[d].height, 10) || 0);
                                if ("EXPANDABLE" == g || "FLOATING" == g && !N) {
                                    b = !0;
                                    break a
                                }
                            }
                            b = !1
                        }b = !b
                }
                if (b || a.a.previewMode) {
                    a: {
                        a = f;
                        b = D();
                        for (d = 0; d < b.renderingLibraries.length; d++)
                            if (g = b.renderingLibraries[d], g.url == a && g.bootstrapFunction) {
                                a = g;
                                break a
                            }
                        a = null
                    }
                    a ? a.bootstrapFunction() : (a = D(), E(f, !!c.a, void 0, void 0, void 0, !0), a.renderingLibraries.push({
                        version: e.version,
                        url: f,
                        loading: !0,
                        bootstrapFunction: null
                    }))
                } else c = f.replace(y.pattern, y.c), E(c, !0)
            },
            C = function(a, b) {
                a = G(a);
                b = G(b);
                for (var c = Math.min(a.length, b.length), e = 0; e < c; e++)
                    if (a[e] != b[e]) return a[e] - b[e];
                return a.length - b.length
            },
            G = function(a) {
                a = a.split("_");
                for (var b = [], c = 0; c < a.length; c++) b.push(parseInt(a[c], 10));
                return b
            },
            E = function(a, b, c, e, f, d) {
                var g = document.createElement("script");
                g.src = a;
                g.type = c ? c : "text/javascript";
                g.async = !!b;
                d && (g.crossOrigin = "anonymous");
                e && (g.onload = e);
                f && (g.onerror = f);
                a = document.getElementsByTagName("head");
                (a && 0 != a.length ? a[0] : document.documentElement).appendChild(g)
            },
            D = function() {
                return window.dclkStudioV3 = window.dclkStudioV3 || {
                    creatives: [],
                    renderingLibraries: [],
                    creativeCount: 1
                }
            },
            H = function(a) {
                try {
                    if (null != (a["cps-top-iframe-beacon"] ? a["cps-top-iframe-beacon"] : null)) return !0
                } catch (b) {}
                return a == a.parent ? !1 : H(a.parent)
            },
            I = function(a) {
                if (null != a) {
                    r(a.creativeParameters);
                    if (null != a.html5Features)
                        for (var b = 0; b < a.html5Features.length; ++b) "CSS_ANIMATIONS" == a.html5Features[b] && (a.html5Features[b] = "Modernizr.cssanimations");
                    !a.previewMode && H(h) && (a.previewMode = !0);
                    a = new u(a);
                    b = D();
                    b.creatives.push(a.a);
                    var c = a.a.creativeParameters;
                    c.creative_unique_id = c.cid + "_" + b.creativeCount++;
                    b = v(a).ad_container_id;
                    a: if ((c = v(a).mtfRenderFloatInplace) && "true" == c.toLowerCase()) c = !0;
                        else {
                            c = a.a.primaryFiles;
                            for (var e = 0; e < c.length; e++) {
                                var f = c[e].renderAs;
                                if ("EXPANDABLE" == f || "BANNER" == f) {
                                    c = !0;
                                    break a
                                }
                            }
                            c = !1
                        }
                    if (c && (!b || "" == b)) {
                        b = "dclk-studio-creative_" + (new Date).getTime();
                        c = a.a;
                        if (c.a) {
                            var d = a.a.primaryFiles[0].url;
                            e = document.createElement("div");
                            e.setAttribute("id", b);
                            f = document.createElement("div");
                            f.setAttribute("id", "st-rl-html-component");
                            var g = document.createElement("iframe");
                            g.setAttribute("src", d + B());
                            g.setAttribute("frameborder", 0);
                            g.setAttribute("scrolling", "no");
                            g.setAttribute("allowfullscreen", !0);
                            f.appendChild(g);
                            a: {
                                for (d = 0; d < a.a.primaryFiles.length; ++d)
                                    if ("EXPANDABLE" == a.a.primaryFiles[d].renderAs) {
                                        d = !0;
                                        break a
                                    }
                                d = !1
                            }
                            d ? (d = document.createElement("div"), d.setAttribute("id", "st-rl-expanding-component"), d.appendChild(f), e.appendChild(d)) : e.appendChild(f);
                            document.body.appendChild(e)
                        } else document.write(['<div id="', b, '"></div>'].join(""));
                        c.creativeParameters.ad_container_id = b;
                        c.creativeParameters.generate_ad_slot = "true";
                        null == c.displayConfigParameters && (c.displayConfigParameters = {});
                        c.displayConfigParameters.ad_container_id = b
                    }
                    c = a.a;
                    b = c.renderingLibraryData;
                    e = b.version;
                    if (w(a, "HTML5") && !("latest" == e || 0 <= C(e, "200_108")) && (c = c.html5Features, !("Modernizr" in h) && "array" == k(c) && 0 < c.length)) {
                        e = !1;
                        for (f = 0; f < c.length; f++)
                            if ("svgFilters" != c[f] && "svgFeImage" != c[f]) {
                                e = !0;
                                break
                            }
                        e && E(b.renderingLibrary.replace(A.pattern, A.c), !1)
                    }
                    b = v(a);
                    c = b.inMobileAdSdk;
                    "1" == b.dcapp || "1" == c || /Android ([2-3]|4\.[0-3])/.test(navigator.userAgent) ? (b = l(F, a), window.mraid ? (E("mraid.js", !1, "text/x-do-not-download", null, null), F(a)) : E("mraid.js", !1, "text/javascript", b, b)) : F(a)
                }
            },
            J = ["studio", "rendering", "BowResponse", "processCreativeData"],
            K = h;
        J[0] in K || !K.execScript || K.execScript("var " + J[0]);
        for (var L; J.length && (L = J.shift());) {
            var M;
            if (M = !J.length) M = void 0 !== I;
            M ? K[L] = I : K[L] && K[L] !== Object.prototype[L] ? K = K[L] : K = K[L] = {}
        };
    }).call(this);
    var creativeData = {
        width: '160',
        height: '600',
        slotWidth: '160',
        slotHeight: '600',
        renderingLibraryData: {
            version: '200_212',
            renderingLibrary: 'https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_212.js'
        },
        impressionUrl: 'https://googleads4.g.doubleclick.net/pcs/view?xai\x3dAKAOjstK3i18lFWP82ZXq7f0p6q30bq6cyM3cIWq8zRKdhxw5Ng6pVxMqpDIyKplPWgPvAdrOMnZMFKuugL8PlxutGvHCYA1rAsPIE9iCCwl0zFAdVQlG-jr_Ahmz2avFFPTvmy44OE\x26sig\x3dCg0ArKJSzOJw5n7ADuNMEAE\x26urlfix\x3d1\x26adurl\x3d',
        eventTrackingBaseUrl: 'https://ad.doubleclick.net/activity;src\x3d4160851;pid\x3d208520404;aid\x3d408283777;ko\x3d0;cid\x3d94797707;rid\x3d94753622;rv\x3d1;',
        customEventTrackingBaseUrl: 'https://ad.doubleclick.net/activity;src\x3d4160851;pid\x3d208520404;aid\x3d408283777;ko\x3d0;cid\x3d94797707;rid\x3d94753622;rv\x3d1;',
        clickUrl: 'https://adclick.g.doubleclick.net/pcs/click?xai\x3dAKAOjstK3i18lFWP82ZXq7f0p6q30bq6cyM3cIWq8zRKdhxw5Ng6pVxMqpDIyKplPWgPvAdrOMnZMFKuugL8PlxutGvHCYA1rAsPIE9iCCwl0zFAdVQlG-jr_Ahmz2avFFPTvmy44OE\x26sig\x3dCg0ArKJSzMO6X8UsMzDaEAE\x26urlfix\x3d1\x26rm_eid\x3d[rm_exit_id]\x26adurl\x3dhttps://adclick.g.doubleclick.net/pcs/click%3Fxai%3DAKAOjss5DEvgPrgxt3AB3fBE-yzM-M2KDVERnaU59lqMqAQHf3r2aKS4iW1M3hd0AyghddtJRbJ48tN3ztiMI7Xbkh0wjhuwN0PWd_N6RzPM5f0rXd4Kh4HuvNOGrtGV1WPlDPmy58Fk1hbW-sm6z5de4UzO78yZ3L85aU2weJ0-iFp0SsqEmzB1rlMZmjFG0MAJyTZyhvyZ2ARTcBHFqItzNPkk7XjVRRLX39CtFcdaDnnFHzQ8ADsuvx9jHrQYYq5Da-2sJqql0E-bI1NE8hYKVfz74C7BcKwK1TQDh7CEy3-OotieA_al9_IYBkLT3NGOHvfX2cO-Owq3uXuH592P0QCI2NdDWpwIYfJocqh0MIqwxA2p9MyGhKrDvvmohMJf6ehne0EEHA22Tx3gLGYEfb0ioxZrbEj9afX3gqMwY_FhA3jOwnbeGhlj11RfV8KL3bGbU72tnebGCCMJsbaOMVwFhmLHuE7MbVn4AttST7gHQ_pXWnSBxk8_apdysY2EhlRC40WBgr2mhXHrVp0fEWV0sa6SVk6VZsKnBOWeljb3LKLA-EkLTCDJnZaKpRFVggnMQx86qeOqSZwmfbMndtBO7IdOi2CVGHgBMqSXt0WyQvo77KHSNwp1ixL4KxKfUJPgH3SLPgPsP9FWeOeaQgqbFo37ROvpLfbS15Vkf3g0IzmLey2s71qaSN0TbgSh9tSkrLoGsf62jotun8V8yLa21WmlNRGrqhKF_WjVV4ELv0ethZkJDyPhk-I27DOUXLQAbhFnd1hUGs7S1pFfJFJVtQiAHeu1ypVSTMxyztVnUUddP3sUWH06ycSMpUpmKtymPZftl-LVx-Srud2711WMAuftY-Y0FXV43gBn3n6-EFmqYvG0yno9u5M0eXYVyTzm6CEoLhnsz20_s9QQzaU%26sai%3DAMfl-YTk2HCcigD4kfRJjLz4--cDrjtf4JOjjy7XyrSJr243bTAcQvUULRxDuShpdtj4exH2ivnEyzH3Af6ydw53qOHwetQt7SM25rbx%26sig%3DCg0ArKJSzFBczlZL3YGaEAE%26urlfix%3D1%26adurl%3D',
        thirdPartyUrls: [],
        clickString: 'BD4CpABRIWvXVEpKJ6gSpsYjAAQAAAAAQATgB4AQCiAWKr8cJoAZH',
        activeViewUrlPrefix: 'https://pagead2.googlesyndication.com/pcs/activeview?xai\x3dAKAOjssX2l3XIfIoJK_0MHFrQVsEWu9P_355FlcPI8LmXkmMGBFXfzB3kJNxB8kZGbI6LUkkY6ebfqXtJRai5hlpGp0\x26sig\x3dCg0ArKJSzKCd4gV8B16UEAE',
        activeViewMetadata: 'la\x3d0\x26',
        dynamicData: '',
        creativeParameters: {
            'CREATIVE_PARAMETER_ASSETS_DATA': '{\\\x221509707912279/160x600/160x600-paradores-larga.html\\\x22:\\\x224160851/1509707912279/160x600/160x600-paradores-larga.html\\\x22,\\\x22160x600_L_Estancia_UK.gif\\\x22:\\\x224160851/160x600_L_Estancia_UK.gif\\\x22}',
            'CREATIVE_PARAMETER_VIDEO_ASSETS_DATA': '[]',
            'CREATIVE_PARAMETER_VIDEO_DATA': '[]',
            'CREATIVE_PARAMETER_LAYOUT_CONFIG': '',
            'sn': 'N4022.2526902DATMEAN_HMES_4022',
            'sid': '3376744',
            'aid': '408283777',
            'buy': '20043658',
            'cid': '94797707',
            'pid': '208520404',
            'rv': '1',
            'adv': '4160851',
            'exit_suffix': '',
            'geo': 'ct\x3dNO\x26st\x3d\x26city\x3d0\x26dma\x3d0\x26zp\x3d0182\x26bw\x3d4',
            'clickN': '1',
            'sttr': '212',
            'prcl': 's',
            'dc_ver': '41.108',
            'crlt': '6rTIdBZuZD',
            'xdt': '1',
            'av_ad_key': '1564304531',
            'displayHTML5': 'true',
            'CREATIVE_PARAMETER_EXPERIMENTS': '{ \\\x22disable_h5_mraid_imp_ping\\\x22 : true }'
        },
        previewMode: false,
        flashVersion: '0',
        html5Features: [],
        translated_layout: false,
        enableAsyncLoading: false,
        primaryFiles: [{
            type: 'HTML5',
            renderAs: 'BANNER',
            width: '160',
            height: '600',
            url: 'https://s0.2mdn.net/4160851/1509707912279/160x600/160x600-paradores-larga.html',
            hideFlashObjects: false,
            zIndex: '',
            customCss: ''
        }, {
            type: 'IMAGE',
            renderAs: 'BACKUP_IMAGE',
            width: '160',
            height: '600',
            url: 'https://s0.2mdn.net/4160851/160x600_L_Estancia_UK.gif',
            hideFlashObjects: false,
            zIndex: '',
            customCss: ''
        }],
        standardEvents: [{
            name: 'DISPLAY_TIMER',
            reportingId: '2'
        }, {
            name: 'INTERACTION_TIMER',
            reportingId: '3'
        }, {
            name: 'INTERACTIVE_IMPRESSION',
            reportingId: '4'
        }, {
            name: 'FULL_SCREEN_VIDEO_PLAYS',
            reportingId: '5'
        }, {
            name: 'FULL_SCREEN_VIDEO_COMPLETES',
            reportingId: '6'
        }, {
            name: 'FULL_SCREEN_AVERAGE_VIEW_TIME',
            reportingId: '7'
        }, {
            name: 'MANUAL_CLOSE',
            reportingId: '8'
        }, {
            name: 'BACKUP_IMAGE_IMPRESSION',
            reportingId: '9'
        }, {
            name: 'EXPAND_TIMER',
            reportingId: '10'
        }, {
            name: 'VIDEO_PLAY',
            reportingId: '11'
        }, {
            name: 'VIDEO_VIEW_TIMER',
            reportingId: '12'
        }, {
            name: 'VIDEO_COMPLETE',
            reportingId: '13'
        }, {
            name: 'VIDEO_INTERACTION',
            reportingId: '14'
        }, {
            name: 'VIDEO_PAUSE',
            reportingId: '15'
        }, {
            name: 'VIDEO_MUTE',
            reportingId: '16'
        }, {
            name: 'VIDEO_REPLAY',
            reportingId: '17'
        }, {
            name: 'VIDEO_MIDPOINT',
            reportingId: '18'
        }, {
            name: 'FULL_SCREEN_VIDEO',
            reportingId: '19'
        }, {
            name: 'VIDEO_STOP',
            reportingId: '20'
        }, {
            name: 'VIDEO_ABANDON',
            reportingId: '22'
        }, {
            name: 'VIDEO_UNMUTE',
            reportingId: '149645'
        }, {
            name: 'FULL_SCREEN',
            reportingId: '286263'
        }, {
            name: 'DYNAMIC_CREATIVE_IMPRESSION',
            reportingId: '536393'
        }, {
            name: 'HTML5_CREATIVE_IMPRESSION',
            reportingId: '871060'
        }, {
            name: 'VIDEO_FIRST_QUARTILE',
            reportingId: '960584'
        }, {
            name: 'VIDEO_THIRD_QUARTILE',
            reportingId: '960585'
        }],
        exitEvents: [{
            name: 'clickTag',
            reportingId: '2597766',
            destinationUrl: 'http://www.parador.es/en/offers/normal/long-stay-rate-winter-2018-paradores?utm_source\x3dDATMEAN\x26utm_medium\x3dDIS\x26utm_content\x3dDWSK-160x600\x26utm_campaign\x3dRTB',
            targetWindow: '_blank',
            windowProperties: '',
            backUpExit: false
        }, {
            name: 'backup image click through url',
            reportingId: '2593191',
            destinationUrl: 'http://www.parador.es/en/offers/normal/long-stay-rate-winter-2018-paradores?utm_source\x3dDATMEAN\x26utm_medium\x3dDIS\x26utm_content\x3dDWSK-160x600\x26utm_campaign\x3dRTB',
            targetWindow: '_blank',
            windowProperties: '',
            backUpExit: true
        }],
        timerEvents: [],
        counterEvents: []
    };
    try {
        studio.rendering.BowResponse.processCreativeData(creativeData);
    } catch (e) { /* ignore errors but don't kill js execution. */ }
})(); < /script><noscript><a target="_blank" href="https:/ / adclick.g.doubleclick.net / pcs / click ? xai = AKAOjstK3i18lFWP82ZXq7f0p6q30bq6cyM3cIWq8zRKdhxw5Ng6pVxMqpDIyKplPWgPvAdrOMnZMFKuugL8PlxutGvHCYA1rAsPIE9iCCwl0zFAdVQlG - jr_Ahmz2avFFPTvmy44OE & amp;
sig = Cg0ArKJSzMO6X8UsMzDaEAE & amp;
urlfix = 1 & amp;
rm_eid = 2593191 & amp;
adurl = https: //adclick.g.doubleclick.net/pcs/click%3Fxai%3DAKAOjss5DEvgPrgxt3AB3fBE-yzM-M2KDVERnaU59lqMqAQHf3r2aKS4iW1M3hd0AyghddtJRbJ48tN3ztiMI7Xbkh0wjhuwN0PWd_N6RzPM5f0rXd4Kh4HuvNOGrtGV1WPlDPmy58Fk1hbW-sm6z5de4UzO78yZ3L85aU2weJ0-iFp0SsqEmzB1rlMZmjFG0MAJyTZyhvyZ2ARTcBHFqItzNPkk7XjVRRLX39CtFcdaDnnFHzQ8ADsuvx9jHrQYYq5Da-2sJqql0E-bI1NE8hYKVfz74C7BcKwK1TQDh7CEy3-OotieA_al9_IYBkLT3NGOHvfX2cO-Owq3uXuH592P0QCI2NdDWpwIYfJocqh0MIqwxA2p9MyGhKrDvvmohMJf6ehne0EEHA22Tx3gLGYEfb0ioxZrbEj9afX3gqMwY_FhA3jOwnbeGhlj11RfV8KL3bGbU72tnebGCCMJsbaOMVwFhmLHuE7MbVn4AttST7gHQ_pXWnSBxk8_apdysY2EhlRC40WBgr2mhXHrVp0fEWV0sa6SVk6VZsKnBOWeljb3LKLA-EkLTCDJnZaKpRFVggnMQx86qeOqSZwmfbMndtBO7IdOi2CVGHgBMqSXt0WyQvo77KHSNwp1ixL4KxKfUJPgH3SLPgPsP9FWeOeaQgqbFo37ROvpLfbS15Vkf3g0IzmLey2s71qaSN0TbgSh9tSkrLoGsf62jotun8V8yLa21WmlNRGrqhKF_WjVV4ELv0ethZkJDyPhk-I27DOUXLQAbhFnd1hUGs7S1pFfJFJVtQiAHeu1ypVSTMxyztVnUUddP3sUWH06ycSMpUpmKtymPZftl-LVx-Srud2711WMAuftY-Y0FXV43gBn3n6-EFmqYvG0yno9u5M0eXYVyTzm6CEoLhnsz20_s9QQzaU%26sai%3DAMfl-YTk2HCcigD4kfRJjLz4--cDrjtf4JOjjy7XyrSJr243bTAcQvUULRxDuShpdtj4exH2ivnEyzH3Af6ydw53qOHwetQt7SM25rbx%26sig%3DCg0ArKJSzFBczlZL3YGaEAE%26urlfix%3D1%26adurl%3Dhttp://www.parador.es/en/offers/normal/long-stay-rate-winter-2018-paradores?utm_source=DATMEAN&amp;utm_medium=DIS&amp;utm_content=DWSK-160x600&amp;utm_campaign=RTB"><img src="https://s0.2mdn.net/4160851/160x600_L_Estancia_UK.gif" width="160" height="600" border="0" /></a><img width="0px" height="0px" style="visibility:hidden" border="0" src="" /></noscript><script type="text/javascript">(function() {if (!window.GoogleTyFxhY || typeof window.GoogleTyFxhY.push !== 'function') {window.GoogleTyFxhY = [];}window.GoogleTyFxhY.push({'_scs_': 'BNdObABRIWvXVEpKJ6gSpsYjAAQAAAAA4AeAEAg','_bgu_': 'https://pagead2.googlesyndication.com/bg/ypVt680DYtu67dhCPhIqXCvm54RECnks9IjMRCS897E.js','_bgp_': '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\x3d\x3d','_ifr_': 'false'});var gsodar = document.createElement('script');gsodar.type = 'text/javascript';gsodar.async = true;gsodar.src = '//tpc.googlesyndication.com/sodar/Yww8ZxGu.js';var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(gsodar, s);})();</script>
                                    

#26 JavaScript::Write (size: 21689, repeated: 1) - SHA256: 7587c3d02af704fc31ef5c891649d685c0d1d545f92d38789489c905b427fc57

                                        < script > (function() {
    (function() {
        var h = this,
            k = function(a) {
                var b = typeof a;
                if ("object" == b)
                    if (a) {
                        if (a instanceof Array) return "array";
                        if (a instanceof Object) return b;
                        var c = Object.prototype.toString.call(a);
                        if ("[object Window]" == c) return "object";
                        if ("[object Array]" == c || "number" == typeof a.length && "undefined" != typeof a.splice && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("splice")) return "array";
                        if ("[object Function]" == c || "undefined" != typeof a.call && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("call")) return "function"
                    } else return "null";
                else if ("function" == b && "undefined" == typeof a.call) return "object";
                return b
            },
            l = function(a, b) {
                var c = Array.prototype.slice.call(arguments, 1);
                return function() {
                    var b = c.slice();
                    b.push.apply(b, arguments);
                    return a.apply(this, b)
                }
            };
        var m = function(a, b) {
            for (var c in a) b.call(void 0, a[c], c, a)
        };
        var n = function(a) {
            a = a ? a.toLowerCase() : "";
            switch (a) {
                case "normal":
                    return "normal";
                case "lightbox":
                    return "lightbox";
                case "push_down":
                    return "push_down"
            }
            return null
        };
        var p = {
                i: "ad_container_id",
                A: "hideObjects",
                X: "mtfTop",
                W: "mtfLeft",
                ca: "zindex",
                m: "mtfDuration",
                aa: "wmode",
                Z: "preferFlash",
                s: "as_kw",
                u: "as_lat",
                v: "as_lng",
                B: "mtfIFPath",
                o: "expansionMode",
                U: "top_container",
                T: "mtfTopFloat",
                S: "mtfTopDuration",
                V: "mtfTopWmode",
                P: "right_container",
                O: "mtfRightFloat",
                N: "mtfRightDuration",
                R: "mtfRightWmode",
                H: "bottom_container",
                G: "mtfBottomFloat",
                F: "mtfBottomDuration",
                I: "mtfBottomWmode",
                L: "left_container",
                K: "mtfLeftFloat",
                J: "mtfLeftDuration",
                M: "mtfLeftWmode",
                $: "mtfRenderFloatInplace",
                ba: "tryToWriteHtmlInline",
                j: "debugjs",
                C: "dcapp",
                g: "breakoutiframe",
                D: "inMobileAdSdk"
            },
            r = function(a) {
                m(a, function(b, c) {
                    if (c.toLowerCase() in q) {
                        var e = q[c.toLowerCase()];
                        c in a && delete a[c];
                        a[e] = b
                    }
                })
            },
            q = function() {
                var a = {};
                m(p, function(b) {
                    a[b.toLowerCase()] = b
                });
                return a
            }();
        var u = function(a) {
                this.a = a;
                a: {
                    for (c in a.displayConfigParameters) {
                        b: if (a = t, "string" == typeof a) a = "string" == typeof c && 1 == c.length ? a.indexOf(c, 0) : -1;
                            else {
                                for (var b = 0; b < a.length; b++)
                                    if (b in a && a[b] === c) {
                                        a = b;
                                        break b
                                    }
                                a = -1
                            }if (!(0 <= a)) {
                            var c = !0;
                            break a
                        }
                    }
                    c = !1
                }
                this.f = c
            },
            t = ["ad_container_id"],
            v = function(a) {
                return a.f ? a.a.displayConfigParameters : a.a.creativeParameters
            },
            w = function(a, b) {
                for (var c = 0; c < a.a.primaryFiles.length; ++c)
                    if (a.a.primaryFiles[c].type == b) return !0;
                return !1
            };
        var x = {
                pattern: /rendering_lib_((?:[0-9_]+)|(?:latest))\.js$/,
                c: "rendering_lib_db_$1.js"
            },
            y = {
                pattern: /\/[a-z_0-9]+_rendering_lib/,
                c: "/iframe_buster"
            },
            z = {
                pattern: /(.*\/)(.*_)rendering_lib_((?:[0-9_]+)|(?:latest))\.js$/,
                c: "$1inapp_html_inpage_rendering_lib_$3.js"
            },
            A = {
                pattern: /\/[0-9]+\/[a-z_0-9]+rendering_lib.+$/,
                c: "/ads/studio/cached_libs/modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-classes.js"
            },
            B = function() {
                var a = [];
                a.push("e=101");
                a.push("renderingType=2");
                a.push("leftOffset=0");
                a.push("topOffset=0");
                a.push("t=1");
                return "?" + a.join("&")
            },
            F = function(a) {
                var b = v(a),
                    c = a.a,
                    e = c.renderingLibraryData,
                    f = e.renderingLibrary,
                    d = e.version;
                if (!/express|image_gallery|dfa7banner|inapp/.test(f) && ("latest" == d || 0 <= C(d, "200_74"))) {
                    if (d = !w(a, "FLASH")) {
                        a: {
                            for (d = 0; d < a.a.primaryFiles.length; ++d) {
                                var g = a.a.primaryFiles[d].expandingDisplayProperties;
                                if (g && "lightbox" == n(g.expansionMode)) {
                                    d = !0;
                                    break a
                                }
                            }
                            d = !1
                        }
                        d = !d
                    }
                    d = d && null != window.mraid
                } else d = !1;
                d && (f = f.replace(z.pattern, z.c));
                "true" == b.debugjs && (f = f.replace(x.pattern, x.c));
                (b = h.self == h.top) || (b = window.Y && window.Y.SandBox && window.Y.SandBox.vendor, d = window.$sf && window.$sf.ext, g = window.$WLXRmAd, b = !!(window.IN_ADSENSE_IFRAME || b || d || g));
                if (!b) {
                    a: if (b = v(a).breakoutiframe) b = !!b && "true" == b.toLowerCase();
                        else {
                            b = a.a.primaryFiles;
                            for (d = 0; d < b.length; d++) {
                                g = b[d].renderAs;
                                var N = 0 == (parseInt(b[d].width, 10) || 0) && 0 == (parseInt(b[d].height, 10) || 0);
                                if ("EXPANDABLE" == g || "FLOATING" == g && !N) {
                                    b = !0;
                                    break a
                                }
                            }
                            b = !1
                        }b = !b
                }
                if (b || a.a.previewMode) {
                    a: {
                        a = f;
                        b = D();
                        for (d = 0; d < b.renderingLibraries.length; d++)
                            if (g = b.renderingLibraries[d], g.url == a && g.bootstrapFunction) {
                                a = g;
                                break a
                            }
                        a = null
                    }
                    a ? a.bootstrapFunction() : (a = D(), E(f, !!c.a, void 0, void 0, void 0, !0), a.renderingLibraries.push({
                        version: e.version,
                        url: f,
                        loading: !0,
                        bootstrapFunction: null
                    }))
                } else c = f.replace(y.pattern, y.c), E(c, !0)
            },
            C = function(a, b) {
                a = G(a);
                b = G(b);
                for (var c = Math.min(a.length, b.length), e = 0; e < c; e++)
                    if (a[e] != b[e]) return a[e] - b[e];
                return a.length - b.length
            },
            G = function(a) {
                a = a.split("_");
                for (var b = [], c = 0; c < a.length; c++) b.push(parseInt(a[c], 10));
                return b
            },
            E = function(a, b, c, e, f, d) {
                var g = document.createElement("script");
                g.src = a;
                g.type = c ? c : "text/javascript";
                g.async = !!b;
                d && (g.crossOrigin = "anonymous");
                e && (g.onload = e);
                f && (g.onerror = f);
                a = document.getElementsByTagName("head");
                (a && 0 != a.length ? a[0] : document.documentElement).appendChild(g)
            },
            D = function() {
                return window.dclkStudioV3 = window.dclkStudioV3 || {
                    creatives: [],
                    renderingLibraries: [],
                    creativeCount: 1
                }
            },
            H = function(a) {
                try {
                    if (null != (a["cps-top-iframe-beacon"] ? a["cps-top-iframe-beacon"] : null)) return !0
                } catch (b) {}
                return a == a.parent ? !1 : H(a.parent)
            },
            I = function(a) {
                if (null != a) {
                    r(a.creativeParameters);
                    if (null != a.html5Features)
                        for (var b = 0; b < a.html5Features.length; ++b) "CSS_ANIMATIONS" == a.html5Features[b] && (a.html5Features[b] = "Modernizr.cssanimations");
                    !a.previewMode && H(h) && (a.previewMode = !0);
                    a = new u(a);
                    b = D();
                    b.creatives.push(a.a);
                    var c = a.a.creativeParameters;
                    c.creative_unique_id = c.cid + "_" + b.creativeCount++;
                    b = v(a).ad_container_id;
                    a: if ((c = v(a).mtfRenderFloatInplace) && "true" == c.toLowerCase()) c = !0;
                        else {
                            c = a.a.primaryFiles;
                            for (var e = 0; e < c.length; e++) {
                                var f = c[e].renderAs;
                                if ("EXPANDABLE" == f || "BANNER" == f) {
                                    c = !0;
                                    break a
                                }
                            }
                            c = !1
                        }
                    if (c && (!b || "" == b)) {
                        b = "dclk-studio-creative_" + (new Date).getTime();
                        c = a.a;
                        if (c.a) {
                            var d = a.a.primaryFiles[0].url;
                            e = document.createElement("div");
                            e.setAttribute("id", b);
                            f = document.createElement("div");
                            f.setAttribute("id", "st-rl-html-component");
                            var g = document.createElement("iframe");
                            g.setAttribute("src", d + B());
                            g.setAttribute("frameborder", 0);
                            g.setAttribute("scrolling", "no");
                            g.setAttribute("allowfullscreen", !0);
                            f.appendChild(g);
                            a: {
                                for (d = 0; d < a.a.primaryFiles.length; ++d)
                                    if ("EXPANDABLE" == a.a.primaryFiles[d].renderAs) {
                                        d = !0;
                                        break a
                                    }
                                d = !1
                            }
                            d ? (d = document.createElement("div"), d.setAttribute("id", "st-rl-expanding-component"), d.appendChild(f), e.appendChild(d)) : e.appendChild(f);
                            document.body.appendChild(e)
                        } else document.write(['<div id="', b, '"></div>'].join(""));
                        c.creativeParameters.ad_container_id = b;
                        c.creativeParameters.generate_ad_slot = "true";
                        null == c.displayConfigParameters && (c.displayConfigParameters = {});
                        c.displayConfigParameters.ad_container_id = b
                    }
                    c = a.a;
                    b = c.renderingLibraryData;
                    e = b.version;
                    if (w(a, "HTML5") && !("latest" == e || 0 <= C(e, "200_108")) && (c = c.html5Features, !("Modernizr" in h) && "array" == k(c) && 0 < c.length)) {
                        e = !1;
                        for (f = 0; f < c.length; f++)
                            if ("svgFilters" != c[f] && "svgFeImage" != c[f]) {
                                e = !0;
                                break
                            }
                        e && E(b.renderingLibrary.replace(A.pattern, A.c), !1)
                    }
                    b = v(a);
                    c = b.inMobileAdSdk;
                    "1" == b.dcapp || "1" == c || /Android ([2-3]|4\.[0-3])/.test(navigator.userAgent) ? (b = l(F, a), window.mraid ? (E("mraid.js", !1, "text/x-do-not-download", null, null), F(a)) : E("mraid.js", !1, "text/javascript", b, b)) : F(a)
                }
            },
            J = ["studio", "rendering", "BowResponse", "processCreativeData"],
            K = h;
        J[0] in K || !K.execScript || K.execScript("var " + J[0]);
        for (var L; J.length && (L = J.shift());) {
            var M;
            if (M = !J.length) M = void 0 !== I;
            M ? K[L] = I : K[L] && K[L] !== Object.prototype[L] ? K = K[L] : K = K[L] = {}
        };
    }).call(this);
    var creativeData = {
        width: '300',
        height: '250',
        slotWidth: '300',
        slotHeight: '250',
        renderingLibraryData: {
            version: '200_212',
            renderingLibrary: 'https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_212.js'
        },
        impressionUrl: 'https://googleads4.g.doubleclick.net/pcs/view?xai\x3dAKAOjsuAdfsYOo5OBlQS11CjNnK5TyLsrWrLDRLCGhezfJoWaxYmd3NsT7C5ZkZaIRxznoSQQUbq4dOzW8mziuZkXBy-y6PWlt50mi3WPxuIEdLUI9ciwlB71K0B9ltmpy-Gs3H_HGw\x26sig\x3dCg0ArKJSzI_3C-yaBgeKEAE\x26urlfix\x3d1\x26adurl\x3d',
        eventTrackingBaseUrl: 'https://ad.doubleclick.net/activity;src\x3d4160851;pid\x3d208520401;aid\x3d408272372;ko\x3d0;cid\x3d94797719;rid\x3d94753634;rv\x3d1;',
        customEventTrackingBaseUrl: 'https://ad.doubleclick.net/activity;src\x3d4160851;pid\x3d208520401;aid\x3d408272372;ko\x3d0;cid\x3d94797719;rid\x3d94753634;rv\x3d1;',
        clickUrl: 'https://adclick.g.doubleclick.net/pcs/click?xai\x3dAKAOjsuAdfsYOo5OBlQS11CjNnK5TyLsrWrLDRLCGhezfJoWaxYmd3NsT7C5ZkZaIRxznoSQQUbq4dOzW8mziuZkXBy-y6PWlt50mi3WPxuIEdLUI9ciwlB71K0B9ltmpy-Gs3H_HGw\x26sig\x3dCg0ArKJSzP4oALafR5qcEAE\x26urlfix\x3d1\x26rm_eid\x3d[rm_exit_id]\x26adurl\x3dhttps://adclick.g.doubleclick.net/pcs/click%3Fxai%3DAKAOjst1chLPpDW8J4G0bgo-KMKAhe58JRdOzEWYXBLLD9bE55iRu42gISo6iy4J7Hvv2pKB6q9PeIYtsbct0urXPcwhbdxCDwBGZivNGJAH6hvqfx1AdsOau-2H12diNoDTYWFDHAhFEkpjMsFlMzc7dh7hyQZPY8kNlYqnhSCGP0WqHaRIchM4YsnzQYaW11hEcxdMclAOr7nAMfp4IpKxoL-4WBswErhwkDC5cb5G-iw1KYN_vDVN4bkaWfYGByi-6Lrsmz2wXqkA0wiGMpMQEqRG26LNXRK2_R7kADxDjrY4IaQ-W5uLkLvfRQZEfR8wlY9x_OKuVEtnUzmuIbVGdG-6PyKV1jy4Y7UmSyN92GHh4iRawJ40x4ARyR8be-INEPbgUuvhLDOx9VSou4AnwZWtDADrWbARJnEfg4MGzgbPY9QhI1m_rA8GQtKrPWMHUdbqxFqk49My974mg0m7AjGKNCn_Dw3ZtljS-rrqhUWvWVCedxiMP-Ua81x0pHo_LTV_IKkaKjLIzgrmzOZGpvK6vFXVzXa00JhpcmQEsMxAxjRWLdWAbLKrOHF9Q3pgZyW0bT8YID_3vpKsPjZ57FQndKpFME7A79yplinuxW0GdHVpbZi8e4l2UEGEnsrzPioECXMv-FKueNQZ_QXDLswQLPY93_E3LWrSgvfIn24fosY6JAUN6wtqjh_waMNBIxZ92e8VVDPFvWYmE1B5_rAMv9lhi7uBYHESM3zf04jRItY4ozMBfuQQK1dXjFepzlB8YZBtthTsk7dm2fnIjCsjcA0pgtrRt4WiPiHnDpg-jpM4SJs92kySmCs9DbNWgKbaRWab9uyn8a9gxlxJ63ib9LMtMzheBzng1vgwt0-jLy1YnmcqkBDlz98DpjTCEiqXWFQ0cE87-p5utta1UJ8%26sai%3DAMfl-YR96pmoJykvSDhVADKm6uxcFkqc9aWzSF3bRvfOIit11UCXREPPDDBJjEBGxax9GFam3SmfCGPU2CkfYF-wXciX92cbLAk9fvmq%26sig%3DCg0ArKJSzKgARQhqTWukEAE%26urlfix%3D1%26adurl%3D',
        thirdPartyUrls: [],
        clickString: 'BS_z1ABRIWviCEIa76wSr24O4DwAAAAAQATgB4AQCiAWKr8cJoAZH',
        activeViewUrlPrefix: 'https://pagead2.googlesyndication.com/pcs/activeview?xai\x3dAKAOjsu_5hsdz2Y5B8j1W8bJY7_rmQTtasEMKlIbyJnWgnX3pqyBywh18JkYQ7wI8BIqJfrkk_lufNOfzoKJ8c4PAUg\x26sig\x3dCg0ArKJSzPXBcTfMVzMUEAE',
        activeViewMetadata: 'la\x3d0\x26',
        dynamicData: '',
        creativeParameters: {
            'CREATIVE_PARAMETER_ASSETS_DATA': '{\\\x221509707921618/300x250/300x250-paradores-larga.html\\\x22:\\\x224160851/1509707921618/300x250/300x250-paradores-larga.html\\\x22,\\\x22300x250_L_Estancia_UK.gif\\\x22:\\\x224160851/300x250_L_Estancia_UK.gif\\\x22}',
            'CREATIVE_PARAMETER_VIDEO_ASSETS_DATA': '[]',
            'CREATIVE_PARAMETER_VIDEO_DATA': '[]',
            'CREATIVE_PARAMETER_LAYOUT_CONFIG': '',
            'sn': 'N4022.2526902DATMEAN_HMES_4022',
            'sid': '3376744',
            'aid': '408272372',
            'buy': '20043658',
            'cid': '94797719',
            'pid': '208520401',
            'rv': '1',
            'adv': '4160851',
            'exit_suffix': '',
            'geo': 'ct\x3dNO\x26st\x3d\x26city\x3d0\x26dma\x3d0\x26zp\x3d0182\x26bw\x3d4',
            'clickN': '1',
            'sttr': '66',
            'prcl': 's',
            'dc_ver': '41.108',
            'crlt': '6rTIdBZuZD',
            'xdt': '1',
            'av_ad_key': '1091091190',
            'displayHTML5': 'true',
            'CREATIVE_PARAMETER_EXPERIMENTS': '{ \\\x22disable_h5_mraid_imp_ping\\\x22 : false }'
        },
        previewMode: false,
        flashVersion: '0',
        html5Features: [],
        translated_layout: false,
        enableAsyncLoading: false,
        primaryFiles: [{
            type: 'HTML5',
            renderAs: 'BANNER',
            width: '300',
            height: '250',
            url: 'https://s0.2mdn.net/4160851/1509707921618/300x250/300x250-paradores-larga.html',
            hideFlashObjects: false,
            zIndex: '',
            customCss: ''
        }, {
            type: 'IMAGE',
            renderAs: 'BACKUP_IMAGE',
            width: '300',
            height: '250',
            url: 'https://s0.2mdn.net/4160851/300x250_L_Estancia_UK.gif',
            hideFlashObjects: false,
            zIndex: '',
            customCss: ''
        }],
        standardEvents: [{
            name: 'DISPLAY_TIMER',
            reportingId: '2'
        }, {
            name: 'INTERACTION_TIMER',
            reportingId: '3'
        }, {
            name: 'INTERACTIVE_IMPRESSION',
            reportingId: '4'
        }, {
            name: 'FULL_SCREEN_VIDEO_PLAYS',
            reportingId: '5'
        }, {
            name: 'FULL_SCREEN_VIDEO_COMPLETES',
            reportingId: '6'
        }, {
            name: 'FULL_SCREEN_AVERAGE_VIEW_TIME',
            reportingId: '7'
        }, {
            name: 'MANUAL_CLOSE',
            reportingId: '8'
        }, {
            name: 'BACKUP_IMAGE_IMPRESSION',
            reportingId: '9'
        }, {
            name: 'EXPAND_TIMER',
            reportingId: '10'
        }, {
            name: 'VIDEO_PLAY',
            reportingId: '11'
        }, {
            name: 'VIDEO_VIEW_TIMER',
            reportingId: '12'
        }, {
            name: 'VIDEO_COMPLETE',
            reportingId: '13'
        }, {
            name: 'VIDEO_INTERACTION',
            reportingId: '14'
        }, {
            name: 'VIDEO_PAUSE',
            reportingId: '15'
        }, {
            name: 'VIDEO_MUTE',
            reportingId: '16'
        }, {
            name: 'VIDEO_REPLAY',
            reportingId: '17'
        }, {
            name: 'VIDEO_MIDPOINT',
            reportingId: '18'
        }, {
            name: 'FULL_SCREEN_VIDEO',
            reportingId: '19'
        }, {
            name: 'VIDEO_STOP',
            reportingId: '20'
        }, {
            name: 'VIDEO_ABANDON',
            reportingId: '22'
        }, {
            name: 'VIDEO_UNMUTE',
            reportingId: '149645'
        }, {
            name: 'FULL_SCREEN',
            reportingId: '286263'
        }, {
            name: 'DYNAMIC_CREATIVE_IMPRESSION',
            reportingId: '536393'
        }, {
            name: 'HTML5_CREATIVE_IMPRESSION',
            reportingId: '871060'
        }, {
            name: 'VIDEO_FIRST_QUARTILE',
            reportingId: '960584'
        }, {
            name: 'VIDEO_THIRD_QUARTILE',
            reportingId: '960585'
        }],
        exitEvents: [{
            name: 'backup image click through url',
            reportingId: '2593191',
            destinationUrl: 'http://www.parador.es/en/offers/normal/long-stay-rate-winter-2018-paradores?utm_source\x3dDATMEAN\x26utm_medium\x3dDIS\x26utm_content\x3dDMDR-300x250\x26utm_campaign\x3dRTB',
            targetWindow: '_blank',
            windowProperties: '',
            backUpExit: true
        }, {
            name: 'clickTag',
            reportingId: '2597766',
            destinationUrl: 'http://www.parador.es/en/offers/normal/long-stay-rate-winter-2018-paradores?utm_source\x3dDATMEAN\x26utm_medium\x3dDIS\x26utm_content\x3dDMDR-300x250\x26utm_campaign\x3dRTB',
            targetWindow: '_blank',
            windowProperties: '',
            backUpExit: false
        }],
        timerEvents: [],
        counterEvents: []
    };
    try {
        studio.rendering.BowResponse.processCreativeData(creativeData);
    } catch (e) { /* ignore errors but don't kill js execution. */ }
})(); < /script><noscript><a target="_blank" href="https:/ / adclick.g.doubleclick.net / pcs / click ? xai = AKAOjsuAdfsYOo5OBlQS11CjNnK5TyLsrWrLDRLCGhezfJoWaxYmd3NsT7C5ZkZaIRxznoSQQUbq4dOzW8mziuZkXBy - y6PWlt50mi3WPxuIEdLUI9ciwlB71K0B9ltmpy - Gs3H_HGw & amp;
sig = Cg0ArKJSzP4oALafR5qcEAE & amp;
urlfix = 1 & amp;
rm_eid = 2593191 & amp;
adurl = https: //adclick.g.doubleclick.net/pcs/click%3Fxai%3DAKAOjst1chLPpDW8J4G0bgo-KMKAhe58JRdOzEWYXBLLD9bE55iRu42gISo6iy4J7Hvv2pKB6q9PeIYtsbct0urXPcwhbdxCDwBGZivNGJAH6hvqfx1AdsOau-2H12diNoDTYWFDHAhFEkpjMsFlMzc7dh7hyQZPY8kNlYqnhSCGP0WqHaRIchM4YsnzQYaW11hEcxdMclAOr7nAMfp4IpKxoL-4WBswErhwkDC5cb5G-iw1KYN_vDVN4bkaWfYGByi-6Lrsmz2wXqkA0wiGMpMQEqRG26LNXRK2_R7kADxDjrY4IaQ-W5uLkLvfRQZEfR8wlY9x_OKuVEtnUzmuIbVGdG-6PyKV1jy4Y7UmSyN92GHh4iRawJ40x4ARyR8be-INEPbgUuvhLDOx9VSou4AnwZWtDADrWbARJnEfg4MGzgbPY9QhI1m_rA8GQtKrPWMHUdbqxFqk49My974mg0m7AjGKNCn_Dw3ZtljS-rrqhUWvWVCedxiMP-Ua81x0pHo_LTV_IKkaKjLIzgrmzOZGpvK6vFXVzXa00JhpcmQEsMxAxjRWLdWAbLKrOHF9Q3pgZyW0bT8YID_3vpKsPjZ57FQndKpFME7A79yplinuxW0GdHVpbZi8e4l2UEGEnsrzPioECXMv-FKueNQZ_QXDLswQLPY93_E3LWrSgvfIn24fosY6JAUN6wtqjh_waMNBIxZ92e8VVDPFvWYmE1B5_rAMv9lhi7uBYHESM3zf04jRItY4ozMBfuQQK1dXjFepzlB8YZBtthTsk7dm2fnIjCsjcA0pgtrRt4WiPiHnDpg-jpM4SJs92kySmCs9DbNWgKbaRWab9uyn8a9gxlxJ63ib9LMtMzheBzng1vgwt0-jLy1YnmcqkBDlz98DpjTCEiqXWFQ0cE87-p5utta1UJ8%26sai%3DAMfl-YR96pmoJykvSDhVADKm6uxcFkqc9aWzSF3bRvfOIit11UCXREPPDDBJjEBGxax9GFam3SmfCGPU2CkfYF-wXciX92cbLAk9fvmq%26sig%3DCg0ArKJSzKgARQhqTWukEAE%26urlfix%3D1%26adurl%3Dhttp://www.parador.es/en/offers/normal/long-stay-rate-winter-2018-paradores?utm_source=DATMEAN&amp;utm_medium=DIS&amp;utm_content=DMDR-300x250&amp;utm_campaign=RTB"><img src="https://s0.2mdn.net/4160851/300x250_L_Estancia_UK.gif" width="300" height="250" border="0" /></a><img width="0px" height="0px" style="visibility:hidden" border="0" src="" /></noscript><script type="text/javascript">(function() {if (!window.GoogleTyFxhY || typeof window.GoogleTyFxhY.push !== 'function') {window.GoogleTyFxhY = [];}window.GoogleTyFxhY.push({'_scs_': 'B7a2hABRIWviCEIa76wSr24O4DwAAAAA4AeAEAg','_bgu_': 'https://pagead2.googlesyndication.com/bg/ypVt680DYtu67dhCPhIqXCvm54RECnks9IjMRCS897E.js','_bgp_': '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','_ifr_': 'false'});var gsodar = document.createElement('script');gsodar.type = 'text/javascript';gsodar.async = true;gsodar.src = '//tpc.googlesyndication.com/sodar/Yww8ZxGu.js';var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(gsodar, s);})();</script>
                                    

#27 JavaScript::Write (size: 7173, repeated: 1) - SHA256: 93d29a3007e82c439dd7312b52beff7c30c2a529f6fec696207445a7f960a1a7

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 17 px;top: 1 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc {
    cursor: pointer;
}.cbb {
    background - image: url('https://pagead2.googlesyndication.com/pagead/images/x_button_blue2.png');
    background - repeat: no - repeat;
    background - position: top right;
    cursor: pointer;
    height: 15 px;
    width: 15 px;
    z - index: 9020;
}.cbb: hover {
    background - image: url('https://pagead2.googlesyndication.com/pagead/images/x_button_dark.png');
    cursor: pointer;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 1 px;top: 1 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# ffffff;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/%26gl%3DNO%26hl%3Dru%26ai0%3D&amp;usg=AFQjCNHUgTxH7TMhCp2XPNxRIiTzR2bhEg"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:109,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/ru.png\',alt:\'Ads by Google\',t:\' 5:;0<0 >B\',tw:49,t2:\'Google\',t2w:36,tbo:0,att:\'adsbygoogle\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:250,\x22width\x22:300,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCOqUR_hNIWoHuMZe47gS2-IPAAqD8h85P8IWE1ekGl_GJ3BQQASCdyeMjYMPcpIWYGKABpemSmgPIAQmpAt8Y57S2I7Q-qAMByAMCqgTYAU_QL7UmerwpJtZg1kW-q509vNa2qIMVBtychRSS-OyLwsn-emw5Zd9ZVTfoTHxpMcw-Yl5X_e0sFxdB9sWZX9Yi4lmQ8hJ0m01_kchPE-pjbGCcJvsSM4FLK5IhguyWesapqn_DGJCk-ByiaQuUvVSmVO6j--HiuedS9aqtvAPor16PFijx6G-DnlYF_EzvtkDDe5Y5-FO7-Bca8UULh3VxvNvCqt0Le54tGvrGe9mURS9TIUy1jNGQcNKzhOcplBnj9jZoYzOMyKAOBypiToqZGyTjVnw1reAEA5AGAaAGTIAHw5btZagHpr4b2AcA0ggHCIBhEAEYAoAKAcgTsvylAtATANgTCg\\u0026sigh\x3duO42TsGHbcE\\u0026cid\x3dCAASEuRoA1fhFuauhjb1zooBT0Y-tA\x22,\x22close_button_token\x22:\x22_PFY1BOnY2YI8IWE1ekGEO7VkdMDGIXVi2ZCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22mute_confirmation_text\x22:\x22K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.\x22,\x22pub_feedback_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22pub_feedback_confirmation_text\x22:\x22K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.\x22,\x22undo_text\x22:\x22B<5=0\x22,\x22closing_countdown_text\x22:\x220:@KB85 >1JO2;5=8O: %1$d\x22,\x22attribution_text\x22:\x22Ads by Google\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/%26gl%3DNO%26hl%3Dru%26ai0%3D\\u0026usg\x3dAFQjCNHUgTxH7TMhCp2XPNxRIiTzR2bhEg\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22options\x22:[{\x22text\x22:\x22 5:;0<0 70:@K205B :>=B5=B\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x225 8=B5@5A=>\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22@>A<>B@5=> =5A:>;L:> @07\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x225?@85<;5<0O @5:;0<0\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22K1>@ @5:;0<K\x22,\x22closed_message_text\x22:\x221JO2;5=85 70:@KB> %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22confirmation_text\x22:\x22K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85\x22,\x22ads_by_google_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png\x22,\x22ads_by_google_button_text\x22:\x22 5:;0<0 >B Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22 5:;0<0 >B %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22enable_settings_click_collapse\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22jake_enable_native_scroll_and_small_grid\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22defer_jake_mta_render_to_expand\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22},{\x22name\x22:\x22jake_transition_timeout\x22,\x22value\x22:\x22-1\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,ejar:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171206 / r20110914 / abg.js "></script>
                                    

#28 JavaScript::Write (size: 7173, repeated: 1) - SHA256: db30d058154c19fd47b4d1095b27bd5cf0405025daae23e22d4e47b05a9c3afe

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 17 px;top: 1 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc {
    cursor: pointer;
}.cbb {
    background - image: url('https://pagead2.googlesyndication.com/pagead/images/x_button_blue2.png');
    background - repeat: no - repeat;
    background - position: top right;
    cursor: pointer;
    height: 15 px;
    width: 15 px;
    z - index: 9020;
}.cbb: hover {
    background - image: url('https://pagead2.googlesyndication.com/pagead/images/x_button_dark.png');
    cursor: pointer;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 1 px;top: 1 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# ffffff;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/%26gl%3DNO%26hl%3Dru%26ai0%3D&amp;usg=AFQjCNHUgTxH7TMhCp2XPNxRIiTzR2bhEg"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:109,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/ru.png\',alt:\'Ads by Google\',t:\' 5:;0<0 >B\',tw:49,t2:\'Google\',t2w:36,tbo:0,att:\'adsbygoogle\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:600,\x22width\x22:160,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dC7P80_xNIWuzPHJCX6gSEnYKoAqD8h85PstOO-tYFl_GJ3BQQASCdyeMjYMPcpIWYGKABpemSmgPIAQmpAt8Y57S2I7Q-qAMByAMCqgTYAU_QM89bxZhVtU-0L0G9zSulOnbSkF3KefxhVpaPgaNsXROezy99ODnj4qK3vfp_lBC5ZnBHfJhoYulEe3lzfzSswvTYF2BMhbrVzETEYFkwLVI7l0KC7oNBY9-HvrkIYVtywk9RwpoJghHkil6wrbAhrBJ8PvZjweVmUy7EaS0P-A2SM0Tl7WeigYJhNQzWFmRn9c0d7YD40sEl2OPwOk79tWFcF4mV_mXdzVZdG4PuX9mGmmxvQ2oz9lqDVbdDpA3nkMRURGFo4apWg1AmC1BYiBMkDSJG1-AEA5AGAaAGTIAHw5btZagHpr4b2AcA0ggHCIBhEAEYAoAKAcgTsvylAtATANgTCg\\u0026sigh\x3d9PfDIoWjaCA\\u0026cid\x3dCAASEuRo4Q2jeRY5da9eFMtkyOfxoQ\x22,\x22close_button_token\x22:\x2281BTLq8JWsAIstOO-tYFEO7VkdMDGIXVi2ZCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22mute_confirmation_text\x22:\x22K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.\x22,\x22pub_feedback_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22pub_feedback_confirmation_text\x22:\x22K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.\x22,\x22undo_text\x22:\x22B<5=0\x22,\x22closing_countdown_text\x22:\x220:@KB85 >1JO2;5=8O: %1$d\x22,\x22attribution_text\x22:\x22Ads by Google\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/%26gl%3DNO%26hl%3Dru%26ai0%3D\\u0026usg\x3dAFQjCNHUgTxH7TMhCp2XPNxRIiTzR2bhEg\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22options\x22:[{\x22text\x22:\x22 5:;0<0 70:@K205B :>=B5=B\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x225 8=B5@5A=>\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22@>A<>B@5=> =5A:>;L:> @07\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x225?@85<;5<0O @5:;0<0\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22K1>@ @5:;0<K\x22,\x22closed_message_text\x22:\x221JO2;5=85 70:@KB> %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22confirmation_text\x22:\x22K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85\x22,\x22ads_by_google_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png\x22,\x22ads_by_google_button_text\x22:\x22 5:;0<0 >B Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22 5:;0<0 >B %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22enable_settings_click_collapse\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22jake_enable_native_scroll_and_small_grid\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22defer_jake_mta_render_to_expand\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22},{\x22name\x22:\x22jake_transition_timeout\x22,\x22value\x22:\x22-1\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,ejar:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171206 / r20110914 / abg.js "></script>
                                    


HTTP Transactions (114)


Request Response
                                        
                                            GET /otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/ HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Content-Length: 10708
Connection: keep-alive
X-Pingback: http://otzovikotdbix.ru/xmlrpc.php
Link: <http://otzovikotdbix.ru/?p=1927>; rel=shortlink
Set-Cookie: antibot-hostia=true; path=/; domain=otzovikotdbix.ru; expires=Sun, 31-Dec-2017 22:32:27 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10708
Md5:    972a5ca670c7b19239666cf90086f694
Sha1:   340e7f2d75053d4c021c69c07ee421d6c65f4d84
Sha256: 0bd556ee0a48c3fa286cb94278c07823cd3dfb3889308b0a7e9a6d3232decd39
                                        
                                            GET /wp-content/themes/marafon/style.css HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Last-Modified: Wed, 04 Oct 2017 15:35:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=604800
Expires: Sat, 06 Jan 2018 22:32:27 GMT
Etag: W/"59d4ffaf-fde7"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16499
Md5:    8459568f02a06224ddf5c21f648df839
Sha1:   6b433d4980a8b9c844c7335f7d3310cedcd1a83f
Sha256: 909cc6f576d30cce0abed77a8733fd258e256f0c474c9cec6bbb008428ab441a
                                        
                                            GET /ajax/libs/jquery/1/jquery.min.js?ver=4.9.1 HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33434
Date: Sun, 10 Dec 2017 18:51:12 GMT
Expires: Mon, 10 Dec 2018 18:51:12 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1741275


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33434
Md5:    e4bb941e9945e6b8fc2c91584e0545e2
Sha1:   8ac8f5fbba79ab93ff34041cf41ed30b0487354d
Sha256: d5aef23e26c649450ee31e6d65fe05937d337e1e91efdc884893e9f2b1e89971
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Last-Modified: Tue, 21 Jun 2016 17:59:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=604800
Expires: Sat, 06 Jan 2018 22:32:27 GMT
Etag: W/"57698091-2748"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4014
Md5:    a6c81e2f02bd04160d2de88c4e8f3559
Sha1:   e3f3c91427d785820ca97dabe738f01faf041f36
Sha256: b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe
                                        
                                            GET /wp-content/themes/marafon/js/jquery.bxslider.min.js HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Last-Modified: Wed, 04 Oct 2017 15:35:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=604800
Expires: Sat, 06 Jan 2018 22:32:27 GMT
Etag: W/"59d4ffaf-4ab3"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5123
Md5:    9d01df8e7465c9aba8bc5ae63f6785e5
Sha1:   ebba5048f2c60a57a7d3cab1e20011b7efeaaccb
Sha256: 920662cedc74fb31cc983dc4beaf959426aeb5ed6d84248db678d88b276eb989
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:27 GMT
Expires: Sat, 30 Dec 2017 22:32:27 GMT
Cache-Control: private, max-age=3600
Etag: 5537346962911245268
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25389
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25389
Md5:    a4a3286ba747a603b18ec3438bb16505
Sha1:   d8c9717af18aaa19d35b4fa001e220a1b8144f0c
Sha256: 61f88e9b8f9947b8ed066692fb41ac5c8afc436f8679108771344532167c757a
                                        
                                            GET /wp-includes/js/comment-reply.min.js?ver=4.9.1 HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Last-Modified: Thu, 11 Feb 2016 09:07:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=604800
Expires: Sat, 06 Jan 2018 22:32:27 GMT
Etag: W/"56bc4f59-436"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   589
Md5:    758a8d85f5e231ed27925940ff07a66e
Sha1:   d2474fc7829e253cc08a43bec5a60f07bd925d12
Sha256: f2233a526acca18657a60b6071f85fcdd69273253fb32632baed2bad08212436
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b25f0bcbc2568addb2e1756d43e7c1bb
Sha1:   83c689278e422fd7da6f9aaebce567442899b2d1
Sha256: 1e6f5569347ffdacd67aae7ac2fd786dae1758550fc6fbe5d6ede7f48652e3c5
                                        
                                            GET /wp-content/plugins/wp-spamshield/js/jscripts-ftr-min.js HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Last-Modified: Sat, 28 Oct 2017 04:05:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=15552000, must-revalidate
Expires: Sat, 06 Jan 2018 22:32:27 GMT
Etag: W/"59f40220-4c0"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   677
Md5:    20e6278957cb13af49d8c988798b8782
Sha1:   d1f7818ae4c2c111e8f50cfcb910e11102c90354
Sha256: 44a0b60130b372985cf79604db2086fe7b6cbaf92c750d847b6119b785730ba6
                                        
                                            GET /share2/share.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         178.154.131.216
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:27 GMT
Last-Modified: Wed, 25 Oct 2017 19:51:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"59f0eb27-158d4"
Expires: Tue, 02 Jan 2018 22:32:27 GMT
Cache-Control: max-age=259200, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28475
Md5:    d27aeb553f785454963a73d9d683ce82
Sha1:   1d8060e12ebf4dbef0858d63d6532e5ca12bf5f0
Sha256: 23558f768c0444d204090ca9fef5969a02b4a5fdab4f9f0ef7105dd7bcba921d
                                        
                                            GET /wp-content/themes/marafon/js/scripts.js HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Last-Modified: Wed, 04 Oct 2017 15:35:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=604800
Expires: Sat, 06 Jan 2018 22:32:27 GMT
Etag: W/"59d4ffaf-1b27"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1924
Md5:    036a0ba2efeb41f4ca414714e59cb7fd
Sha1:   8b77331aaf14ca6224ef954bee7343d7a3b58bf9
Sha256: 775fcb8cf51a7efd4f9193f33e4d0b3d7f8240b23b3bf1d0d0b1799759f052da
                                        
                                            GET /wp-content/plugins/wp-spamshield/js/jscripts.php HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Content-Length: 510
Connection: keep-alive
Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0, no-transform
Surrogate-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Vary: *,Accept-Encoding,User-Agent
X-Robots-Tag: none
Set-Cookie: PHPSESSID=f0697b22d209494ac56d760cd54fff2c; path=/ c7b0317e39e13ad647eed50e1777d880=83d57cae671c824ff1e7da3eaf1d3fef; expires=Sun, 31-Dec-2017 02:32:27 GMT; Max-Age=14400; path=/; domain=otzovikotdbix.ru; HttpOnly ckon1712=sject1712_f581fbf3184a5; expires=Sat, 30-Dec-2017 22:37:27 GMT; Max-Age=300; path=/; domain=otzovikotdbix.ru; HttpOnly
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   510
Md5:    cf3e7c5f48e511277810c200b27ff2a9
Sha1:   b6b0a1368a2daed9c1d4d0c5b3387e9620002c8a
Sha256: d23f6d52e8b429f3e76b0fd2b323fee8da82cbaa21c8b71b2415900346f3dceb
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=477822, public, no-transform, must-revalidate
Last-Modified: Fri, 29 Dec 2017 11:11:35 GMT
Expires: Fri, 5 Jan 2018 11:11:35 GMT
Date: Sat, 30 Dec 2017 22:32:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    6228ab44e3528f1b6ad5abdeb201edea
Sha1:   0e5b17be2611aa4ff54f7001fb7761c53d06a9ab
Sha256: 81acf731f7cb8124f0d0f432931949d780d67d0c0ee83d13ad3dc0ad333276ed
                                        
                                            GET /wp-content/uploads/2017/09/111-48.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 37844
Last-Modified: Thu, 28 Sep 2017 14:13:24 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "59cd0384-93d4"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   37844
Md5:    21d78116c454211f72b643099e6d35fe
Sha1:   b14512ba9d45ed21a46b06cb9b10e678db8eca46
Sha256: e4ccf666f8f9ea862d6a2de166e9f7520b9f4c2dc2f0fec6c626ba2b232581b5
                                        
                                            GET /wp-content/uploads/2017/10/111-5.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:27 GMT
Content-Length: 159899
Last-Modified: Wed, 04 Oct 2017 15:39:39 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:27 GMT
Etag: "59d500bb-2709b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   159899
Md5:    7cd7442ba50742ef01d9d06118b2844b
Sha1:   1875d675c9811b23da99b55ad8d01ea6219bb15a
Sha256: 301e04c08e0c9db0be9b522217740083fc634ee84063024e6d606417621a8cc5
                                        
                                            GET /wp-content/cache/thumb/9b59ced27_300x180.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 17401
Last-Modified: Wed, 04 Oct 2017 16:48:12 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "59d510cc-43f9"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   17401
Md5:    1831642d7f44466801e808f223b534ca
Sha1:   0d7b9d54e5d10e130b52364d710cfef3787447ae
Sha256: 9d992ae3355c8551a62ed330273660560a872d7e6dc7045eb801edd8311974d1
                                        
                                            GET /wp-content/uploads/2017/09/111-44.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 107736
Last-Modified: Thu, 28 Sep 2017 14:10:41 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "59cd02e1-1a4d8"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   107736
Md5:    5252f8cc6ba349b886c8d6d901c0458e
Sha1:   6298ef6519b8eccad638c312632e8b5a161bcf96
Sha256: 080a93d72148a9351977907f587d15651c6a9c29956be2e1e610027865c347e3
                                        
                                            GET /wp-content/cache/thumb/0affb6b6b_300x180.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 9329
Last-Modified: Wed, 04 Oct 2017 16:44:19 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "59d50fe3-2471"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   9329
Md5:    50c0553807cb762a8d054b1ee15a12b8
Sha1:   f639bf8bf79640087dbee13ea505fabbf25d34e4
Sha256: 69292be65e9a59f925a26875409dae6318223b6edb65eefcba787dbee932257b
                                        
                                            GET /wp-content/cache/thumb/993c9f562_300x180.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 10970
Last-Modified: Sat, 23 Dec 2017 01:14:02 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "5a3dadda-2ada"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   10970
Md5:    13f97e82489d394822fd7fa6aaff2d08
Sha1:   8f8d8c1f35035329d01571bcf1f55b748266388f
Sha256: cdcc6e7c5c1a72e7e42e924be67e4ac624b5a31bdfed150a1e88bf15c82677b5
                                        
                                            GET /wp-content/uploads/2017/09/111-46.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 124337
Last-Modified: Thu, 28 Sep 2017 14:12:08 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "59cd0338-1e5b1"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   124337
Md5:    e7a065d7b20343c4d9469726ef3b8ccb
Sha1:   8ad88ad5b61b9dd28730f5174746806ee6cf303d
Sha256: 033019b5053d05773f5a16b2dd76146a1e2b6c8b89f545f1a8218c4913ba5be7
                                        
                                            GET /wp-content/uploads/2017/09/111-47-1024x598.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 200653
Last-Modified: Thu, 28 Sep 2017 14:12:55 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "59cd0367-30fcd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   200653
Md5:    c6b31a97e7267e529112f91b99baafd8
Sha1:   489dbde12a5646c4a7bb458a3fca190c21560f91
Sha256: ec55f3827b7a8cff05b43a4803ed81df49cb64cc5a93e7a9b02367decdacd869
                                        
                                            GET /css?family=Roboto:400,400i,500,700,700i&subset=cyrillic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sat, 30 Dec 2017 22:32:28 GMT
Date: Sat, 30 Dec 2017 22:32:28 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   392
Md5:    fd6d7797ee6f886faa3fb9f4f20d574d
Sha1:   14348984edba3da8ee0c1597cf19fb93dc1b043d
Sha256: b9dfac59f560c6aa45720f3bc1c7c5a244cf6a822ab2891ca7ce90493a1189a6
                                        
                                            GET /wp-content/uploads/2017/09/111-45.jpg HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Content-Length: 130783
Last-Modified: Thu, 28 Sep 2017 14:11:31 GMT
Connection: keep-alive
Cache-Control: max-age=1814400
Expires: Sat, 20 Jan 2018 22:32:28 GMT
Etag: "59cd0313-1fedf"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   130783
Md5:    632a1085cbbadf1b01517c5c6ad15d51
Sha1:   47e36cb271a9018e69372330621ba46e7dfd0c42
Sha256: c245fcd506ee556d2bf920fc61731271ea4a1f69f262d2ac6bd113b767c7e5cc
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.1 HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: antibot-hostia=true; PHPSESSID=f0697b22d209494ac56d760cd54fff2c; c7b0317e39e13ad647eed50e1777d880=83d57cae671c824ff1e7da3eaf1d3fef; ckon1712=sject1712_f581fbf3184a5

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:28 GMT
Last-Modified: Wed, 20 Sep 2017 04:03:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=604800
Expires: Sat, 06 Jan 2018 22:32:28 GMT
Etag: W/"59c1e88c-2e8b"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4323
Md5:    d6527c3d0b14313cf8aa786fe5c9bec1
Sha1:   7bc55116ab3e3acff1d85b0c03d69f2f5ca0d1c1
Sha256: ebb3cd48a02aafdfef89afd89e9a9119a89feec1e73182e5f34a6b4f28c12dff
                                        
                                            GET /wp-content/themes/marafon/images/favicon.ico HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: antibot-hostia=true; PHPSESSID=f0697b22d209494ac56d760cd54fff2c; c7b0317e39e13ad647eed50e1777d880=83d57cae671c824ff1e7da3eaf1d3fef; ckon1712=sject1712_f581fbf3184a5; SJECT1712=CKON1712

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:29 GMT
Content-Length: 1150
Last-Modified: Wed, 04 Oct 2017 15:35:11 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: Mon, 29 Jan 2018 22:32:29 GMT
Etag: "59d4ffaf-47e"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    36aa714311c31f555444602dd6a3bac5
Sha1:   3599f0a68e54406a5e15de094de90108c6328db6
Sha256: a8f502cf04119e81e840bbe7cee721513e9d7d49452b15854f7ff454d2b9f4c7
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    289a5f143b22ca57b320a77bdd4671a9
Sha1:   5c607d2df152146cce8509dd456326dcd4fb5561
Sha256: 5f72dff7b7eaa89352aece29f8ef98f5d73e197e9806fd438e9847771156d1e7
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6f3cbc58d22ea96cfb81a4eba0b44ea2
Sha1:   e772271b24240b51c4f5dbacab77679699b3b8e5
Sha256: b190cae5d58e8b086eab149ea32a8a0b4f3429a0a32113d09d2d63f200aab985
                                        
                                            GET /adsid/integrator.js?domain=otzovikotdbix.ru HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Sat, 30 Dec 2017 22:32:29 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=otzovikotdbix.ru HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Sat, 30 Dec 2017 22:32:29 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /pagead/js/r20171206/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:29 GMT
Expires: Sat, 30 Dec 2017 22:32:29 GMT
Cache-Control: private, max-age=1209600
Etag: 13154727750285966187
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67288
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67288
Md5:    ad23c06817d1a82fd8e7a711271c5dbd
Sha1:   01b8f556e2eb77c2763dcf86d639175957369ca9
Sha256: f85ba03984957b40289d7fe55ae595be0b0880c9d5c6845c29fdd4303b93754a
                                        
                                            GET /s/roboto/v18/m1uAalIytmLBFXF3PwhxpPesZW2xOQ-xsNqO47m55DA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Roboto:400,400i,500,700,700i&subset=cyrillic
Origin: http://otzovikotdbix.ru

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30232
Date: Sun, 10 Dec 2017 18:43:41 GMT
Expires: Mon, 10 Dec 2018 18:43:41 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1741728
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   30232
Md5:    787d5f454c5b1387e1041b95d82a9693
Sha1:   6ec0deeaf634f8484c944975d39da1e73f377c71
Sha256: e789a5efec2b27bf5b853a670c4044098d58860e252ae4f6562a2e7731f90571
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:30 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    5a0de2921850fd61b176d542ca5d9e92
Sha1:   182dafe7bedfda0b80f2a12f8e3f39477d6829af
Sha256: eeceb524a26c6f72bdb115f7fac52bd10bbb2d0a518d18413b59ddb796b7c433
                                        
                                            GET /s/roboto/v18/Y5yuUJGDLtmYv2_3fMB4fA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Roboto:400,400i,500,700,700i&subset=cyrillic
Origin: http://otzovikotdbix.ru

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28188
Date: Sun, 10 Dec 2017 18:50:17 GMT
Expires: Mon, 10 Dec 2018 18:50:17 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1741333
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   28188
Md5:    2b9dfec7807cb4a69fbb276eb62c3d80
Sha1:   360d9d06adac2dd54239cd4311356c5629db2c36
Sha256: 383fb2b73b97af1fc0cbc4c60dde144f06a96a48b46b9c66c692db079e9ed464
                                        
                                            GET /pagead/html/r20171206/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 27 Dec 2017 19:55:38 GMT
Expires: Wed, 10 Jan 2018 19:55:38 GMT
Etag: 1066700142077588172
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6802
X-XSS-Protection: 1; mode=block
Age: 268612
Cache-Control: public, max-age=1209600
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6802
Md5:    a18133091e51e0a15369ef4156c68c27
Sha1:   094d52fe5089ac8181bf7646756d3a1821799d65
Sha256: b6449475adaa84f9710a7abe26baf0f1a3c4deae508ecb6180daf8f150a39be0
                                        
                                            GET /s/roboto/v18/oHi30kwQWvpCWqAhzHcCSD8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Roboto:400,400i,500,700,700i&subset=cyrillic
Origin: http://otzovikotdbix.ru

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28676
Date: Sun, 10 Dec 2017 19:17:17 GMT
Expires: Mon, 10 Dec 2018 19:17:17 GMT
Last-Modified: Mon, 16 Oct 2017 17:33:02 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1739713
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   28676
Md5:    4babd1bb2a7bdfbac976e55b714f0a24
Sha1:   b131e21ab8732c038ff88538b6cea9e95b9c33f4
Sha256: 48e1dfbeac24e666432925066d558f59cf4a3fe7cd665b561205e677e350bf4b
                                        
                                            GET /pagead/js/r20171206/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 27 Dec 2017 19:55:43 GMT
Expires: Wed, 10 Jan 2018 19:55:43 GMT
Etag: 12870631286830742883
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29579
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 268607
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29579
Md5:    eb76c436ffc7258137bbd3aaa6175f57
Sha1:   9f6cf08b996e73874bf50f1065b1de8a6af847aa
Sha256: b86e0daf03b774300a4125fdf830fe1f6097ff10f78161adc63a3acde777ae01
                                        
                                            GET /pub-config/r20160913/ca-pub-4563949589232616.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Sat, 30 Dec 2017 18:01:10 GMT
Expires: Sun, 31 Dec 2017 06:01:10 GMT
Last-Modified: Fri, 29 Dec 2017 23:34:10 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 16280
Cache-Control: public, max-age=43200
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=5183145486&adk=3272314207&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673149350&bpp=44&fdt=53&idt=263&shv=r20171206&cbv=r20170110&saldr=aa&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=1990&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=853 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 30 Dec 2017 22:32:30 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 30-Dec-2017 22:47:30 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Sat, 30 Dec 2017 22:32:30 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   365
Md5:    be786b16ab8890048d37f26ef98c8aca
Sha1:   8eddd22c92fcfd9b0e270bdde2c53cb932b9d605
Sha256: 322d7dbc2bcc64c8cd5dc8599af0d3bf7053e6cfbbca4a693a2bd4a8a49bc414
                                        
                                            GET /wp-content/themes/marafon/images/comment-icon.png HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/wp-content/themes/marafon/style.css
Cookie: antibot-hostia=true; PHPSESSID=f0697b22d209494ac56d760cd54fff2c; c7b0317e39e13ad647eed50e1777d880=83d57cae671c824ff1e7da3eaf1d3fef; ckon1712=sject1712_f581fbf3184a5; SJECT1712=CKON1712

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:30 GMT
Content-Length: 322
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Wed, 04 Oct 2017 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Mon, 29 Jan 2018 22:32:30 GMT


--- Additional Info ---
Magic:  PNG image, 36 x 32, 8-bit colormap, non-interlaced
Size:   322
Md5:    ae65e43b1803e42115b33f346d36cc7c
Sha1:   0b1e6cfbb73b1b9a5bcbc12901fd64a036823fb8
Sha256: f9583ed3cfab6ffaa224aca03783197cdeb3985db55aff09832bba69bc214496
                                        
                                            GET /pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 30 Dec 2017 22:32:30 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y; expires=Mon, 30-Dec-2019 22:32:30 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Sat, 30 Dec 2017 22:32:30 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5958
Md5:    d4e8380c1dd0ddba4c709a09eca1e201
Sha1:   7fccb72e6596f449aaf3f4c6fefcefb9b595cf5f
Sha256: 586f073bab3431e9f632626dde546808d4a1341784bc9d8062e616843a18ecd5
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:31 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=de634251d78233a92e59e5ed8f58f89841514673151; expires=Sun, 30-Dec-18 22:32:31 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Sat, 30 Dec 2017 18:22:51 GMT
Expires: Wed, 03 Jan 2018 18:22:51 GMT
Etag: "2d24463fd46193b40e5da4eccd167074b5dc9adf"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3d58749c72f8428b-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    2d5486c61d0265e913fcbb72629c4c9c
Sha1:   2d24463fd46193b40e5da4eccd167074b5dc9adf
Sha256: a6ecdb2d64d4ed9d0fb3b3fe6434e5e2dff7a2f7db4c93502653aea35abb01d0
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-AW-gZcIgFNcsDp4GswLvWPyAuJNKc-aIwt48EBNa-JElI4yzIiCGFpJJfgKKIHGcauUjDSOh2T4003_ueKg3h6o8oSDy5NIkxqn-AikDF0LweEa5I HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:31 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-CZR_M8pxe1Wxo3ZEkQTdCFERnBMAMPU-I7Jn3N4MDFN-cpFYK207eAj82WaX1FGD01D7RH&dbm_d=AKAmf-Beupwx3O9Inme95m7EnFjG6ZOcByTbZJXEDu1W9Yi377ozl_DzcjBDVtCk5CPzh2LW2yRTNC2MJLSNSde_BPiVs-0t_ELpkiidRZD6_fk3f0OzG8EdLUhOfGmrjx7-wBpwWW9QRQcqy8nDk17yQzILgE55uSPiqSUZksvQmT58Q75Lqk90kLHt1lAUArSQD07KRgyu0GBx2gnzzNuUzG2bF_XQPzhb1evnIxvJTVzWzlzqjTJNRfVjcZAEE2j1t5vSkFYr5ZIaSqA7STV4McoJTQVq15CNCDjUI-y8cPsK0lw4CaJNOGSwFok5QHtIv_0Fh7jp1vfU22SWHlAPLOcRKWGrcx0tCM9dAxIhlwI0W1eFbGFJwf4xLNro2lRjpQJi8qa9cNAfXqQoOwkupXKZmFvWnfh38HmsEPfgqN-KoVhpFdLnFbAVdRjK1hjxESqVBPlpekSYbTM8DGC7yaNGuVuOgNqGwQF_GOXjgxS-viUOtyvhSIU3YS5i782FY0c0oF2W3ITT5xfr9uJ3wIZr-OMRI0ChtyWQTyZ16ixmfdhyE6R9UP6YkJX8-MGhqC02Gu2v0cgpG84mje2xleMG0OdajCRHrRcsVc6vijlE5zuNHsdU_hhs9F9voxTZepmP6K88qmHP-zWa0rFFhRvSwehyf2qqzAkP6hW2nsxiu4c0x9LVb-NKbWC584j5RlQE7qArVKml7FW7msyrgRLRRF-dtC-Aa8PpGMPH8TaHGw421cg1JA3ZxURutbKM11f7vndDhyKBYxvtcwauZpBQ51oQYdHD5kY-263bzCuG4cE4A0-WG57LD2LOShe0LalXNDiXeolRN_iwMGeZ44TSHRv6wyC6hlUEm_3T6oTj-C6LRTvX9xnPFOGEIFKf5OkG9mvkKVt1h_nsD6Ev8c6QOhXdbuUi_o2ZeKPyJAog30QIMBQLuXIcVW2W8ZL8TekTVQxVtq8-pUFNxhttrYMLAiP0_z-gkgG26mVWVYvBAhslniDX5lpybE7TSyiKZ23QPx3TGgqRSsDPIea257qBXz7rZbbYgrYXUjYdjmTCzjV0q1J84rJbXRc0gs4PbLlnXXZJYH2UrryOziKKbzsleWi-eb2PA-pvH6FjcRRd7Uxf2PdzPLNAUhaxTx50_rxv8xJGCg37XIMlwYZltOMh3M_ij5Cgl-o-ZK67XN_kDmt-EYN-bmG1tCXQwOKPtqJO6b7TVxCDaJnK5-BWKwD7BM_eFAmOtgm1Lw0dDX_TbfnnZcXgI5Bq4A6sswx4OYz11JNsh5z9nymB0VkQOUh5RltbidjFl7nSbJ-ygkR2WepldlAj-uKTkoJiNDQGGK1tf9syyKJDP8nynjclDRACnWIww3dbGknGk1AM7aKagMNJbNHPMXto1kaGEFMasc8Fbk3hysWQXzIz9VkU2znMh9RzZ44CsRphWV3KGoScD12eNZetmt45qUfZy5BUdU9PnWOMrF3g3c33QpoCJYSlMbAROaJSXLX2IS6SfOG3GhKq_lr-_oR2WifGNG0cPyz1OJnHmmDoi_muAiSZxChrv2LoOrz3jhufaKXYbbXg2aAlAybJlR-_YdtanYNfrOKKwWGx6AwOx9zXraNUpRVi-BgFlGzjuYugtU13EHXv1i-Zkjfx3oiWKAzI1QI4GkgrWOm7YRtyOTqB3Qak7G3A0o1JFtY0IMyCpAIr64lYwwwGEyBUwfI4QmC21GAxdSuBUY26smVA_BXlGE2rXQy6eJ9WLAayFRy6ESCSRlqRs1Ca6g8PzSb9vKilohWuIA35-UvktjLbe8VPE-uJsLW-YISYv1wBBNibejalF79gTGikblcIBB2sa2iTi0injyU9j7hn-_vB_ZpoOsOUgprJyu7gV5_P9bmzEkUhY4zu0ulHVbs&cid=CAASEuRoA1fhFuauhjb1zooBT0Y-tA&rfl=3%2C%2Chttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:31 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6992
Md5:    3ca3077b8cbe8f8fb67bf5f3c74271f7
Sha1:   5a4976e2b2452ae6577051c125a89a7e5164df88
Sha256: b6f09eb6429d0773c1a893ff24a21e8cbd35ce49ccb7ce2a75f2d150e1a5e1bc
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         213.180.193.119
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:31 GMT
Content-Length: 31527
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Wed, 27 Dec 2017 15:25:39 GMT
Content-Encoding: gzip
Expires: Sat, 30 Dec 2017 23:32:31 GMT
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Wed Dec 27 12:53:46 2017
Size:   31527
Md5:    6dc172cd26df8e6aeea49f32b1004a1f
Sha1:   5da7c3d60c9a445d3e4e7594ebe41f00948fe88a
Sha256: 6aefae8cba77a9bea4fe86eff74711466edb7156a32e9cd9cd00862878ef9c93
                                        
                                            GET /pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 30 Dec 2017 22:32:31 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5937
Md5:    19da66ec3af985ef5792e5988f8bbdb1
Sha1:   07cd767861fbbbfc0a217f81f7ece579b2be21c7
Sha256: 6842bec44cc34372bdecbdef2652a9b4259ca009c122dace18a90ed8bc6e0b5d
                                        
                                            GET /pagead/js/lidar.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:05:54 GMT
Expires: Sat, 30 Dec 2017 23:05:54 GMT
Etag: 5898043544836253182
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 33631
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1597
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33631
Md5:    f69a5d30f6ae0329e1e896472d83ff4d
Sha1:   b2da2dfec9bd43bf5890b44cfada7ac3419db77c
Sha256: 406463b1f14ef9e287bab1d07929488df098750609a0acd9ce3f4fc39c2f7c7f
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         213.180.193.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:31 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Expires: Sat, 23 Nov 2047 22:32:31 GMT
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /dcm/dcmads.js HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1391
Date: Sat, 30 Dec 2017 22:07:37 GMT
Expires: Sat, 30 Dec 2017 23:07:37 GMT
Last-Modified: Fri, 06 Oct 2017 16:32:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1494
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1391
Md5:    2cec847621d20ac6ebaa8b4f1d4af929
Sha1:   dc295b4bcf09900bf21fb7134fda5d3d8cfbc85a
Sha256: d8e7f1c63e39a8b3bf433743e693b65c391dba95122fdcd378d93a66c5c23530
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-ATtOcD58pFxQf7y89wuIprNWUqtQRC2A6XzIZ40Gl_0KTgMXEQ6Y-fAGwdd_dOh1gn8JaJ_AfflkkZ69s_zuaWapIdQ9xsMv3iWCfXN6PPNNPJnJQ HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:31 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /dcm/impl_v41.js HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9137
Date: Wed, 13 Dec 2017 19:55:40 GMT
Expires: Thu, 13 Dec 2018 19:55:40 GMT
Last-Modified: Tue, 03 Oct 2017 18:46:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1478211
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9137
Md5:    89ee08c5e2745ea7a075d413155a4ec9
Sha1:   3e1eb7d15bbfeb920d37418707378c8029bc727c
Sha256: 94ae9e135806f8076e0e0d6822e688f11398358de657ef0f6a9c0bbb074a1260
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-Ajd3KrydjJi96xaP3oGZGOhHxsPowSSMYKyPOweMA68y7nS5Ea3TEtU8zEvknoJoLTJG1h&dbm_d=AKAmf-A33GwGMSBWNr6FYbPyCfe-8wOwI3AX5SrvGXjw6k-z3oTM7OpYH3T-hAtFqixDwqj-OsoLXm11P3JvPP1k8Si2gHuWoz4_kKELAsKHJNoRwCugMWLxcPRyJDc-W-rKznLtJgKRY_iefdjEqZQDRCOV6SPnySLuE2yZ4qXh1WkRiNOyA0mmwlMK558MM0RkjRXI9QKkp2NfZ1j8GnjwLxrFdGZiFwVUPDYiT_tSqjq6vD4vacDLD9_0dJ8EwJO4hjUJnvXfRBjGGUciawf6wdoU3YK30Q3uzwP9UWQa7GY1sfultHSJRdtG3oBnM5Il-5_XOWGDpSmH0ZNE4iODFE0wqQrmhceGvww2CNESFuF1A5QgszOz6hiEmjy8jox7jwkLwiDPuGmp9gn4_nKU4Le2mpQcdWfhMzUQAUua9VdaI4lgG2b1zIJY1WxSMeQ7VmGIzv8k_TKk7zMTt_FwJ3fP8OQeBVG9tKKwHJ8KZlTI7fm8l9DBhfngU8kxHbUobx78XVnTregYCbLvX_3CnwAJDfCI8ILgQBLhzrtKbFwSLriPj-Mq2pBO1c3bwT4GngzjVOAh-Z3oZaSCUxHJej5SY5I0BrPF9NwjL53DWT1SMn_nDVxrZdzQAPEWDCwkwFb7KthatWffqNBZOVXMq89JG6ktTZpmuOHZAyt3eErgzs_RNGl7wEe2TfBh64G5EfZRf37Av1LaoOPeDHHPl2QPZNBId6Zwb1C2laq2XzgjyXTH6CvBWufEO7nhLOaUZKphPHo4_ZAsNc0E2ofMqKBdV6fN33qm9Mn-hp__zMeOflMH0gngsmq_9StKRsUysjCwiEM1emRv90dr3my3Vz0jvykwOoWkHkco3dkIiNRPg3dyNscd2Yc2LDip3qgYMZF6HV5IEPyM4XQjUHax-wT1cMkJlLZTVnOzO53DKaY0yQefQcjYlVFdMYpcY0qUyuFrJsoQbfRMEvGd2qcAbdDwRdSV772antTFY_9nVoKeuqT4zhJHQA2YDv__byFudbQ0EsxWZu4a3vdynPYGb_-msejvDaUXG0TBuHUax94EyV4rqWzccHQFtgJnlExQP-VFn_Id5im1vsq716BkXO-8Stw6K7xEL7VXQagZi7AxHUT6G1wX7vdMZS7fRXBWWWQ-qClN1rj5J8kwabgPHYD-hEQB4-qks2Ihp9r8whFk-ItlzmVbd6o2saiAlaWn_cvu9n5NQmuhUElcqZtxjvJMEzJN_hNhW0yLwl3qRACaoz6ug_Z8dbZUsCVz1PuRtKKWKJ4_9VKk85TJLG2eyFEmFzyBkbCj0XWi45thpHvsdTuSR7Dboc8tLOmG7JXFhxLwciAHBWmmw_uj_VmIsXN0WYUSlOr1d-Pam6y7X5KWWcnupEHXRr-ezgaljBNwJsLwxK8IEyxkcM-zruFDMTph4EzAKutfP9xhUgu8rhg1pz6qvcgIxleLOsRt3OFr5XcWGrT_z54c2y8MLW-LoykY60wzoapWAVppUcYKZkbmcOZb6WSxW6MzNWkD4NGDdy-hi6zVa5eAlQLROky0AhEhH90LuTtcmqWjJRQWYne4m6YVJlyhlpJNrZSGL-IpGvKoe4vgkzGNBPl38LZ5sxNKuiJmrBVrhLtFQvpCj1U18oq2QaxMSTYvXeKCGuljYuzGgQVySCUx5L2FBDn0XcPjd-6jHVJUDjt6lZ3RJUfEJ1xzUTloSkLkf9chrC4XNMvO-bcnoCuQwWA5Okdr_Ba9vF4rnkUYAVEjiKocJ7nBnXfeTvNcVKokQR_zuvjJjlA514PH4s3ReuZJCV0sZgDtHQpILQ4mbBygpd_25z98V8QWWXaQ2BiIhEg8ICVJ0XBgOBfXTde80wD8U1DP-twT40LY4Nuq3kCFqSFF2Ua5untBYoY&cid=CAASEuRo4Q2jeRY5da9eFMtkyOfxoQ&rfl=3%2C%2Chttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:31 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6994
Md5:    faf7c1ffc3da47f4a0628358c6086c69
Sha1:   e5b9bff829f6f54492e97facbb63b6580b3fc4c4
Sha256: d5d1c327301a391ac0d65960ab5c1463150b8711ce82cb5fae142f8ce871cfb6
                                        
                                            OPTIONS /watch/31752956?wmode=7&page-url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&charset=utf-8&browser-info=ti%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20171230233231%3Aet%3A1514673152%3Aen%3Autf-8%3Av%3A932%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A169939860268%3Arqn%3A1%3Arn%3A240746915%3Ahid%3A658957245%3Awn%3A47357%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1514673152%3Au%3A1514673152242187887%3At%3A%D0%9E%D1%82%D0%B4%D1%8B%D1%85%20%D0%B2%20%D0%BD%D0%BE%D1%8F%D0%B1%D1%80%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%D0%B7%D0%B0%20%D0%B3%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B5%D0%B9%20%D0%B3%D0%B4%D0%B5%20%D1%82%D0%B5%D0%BF%D0%BB%D0%BE%20%D0%BD%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%20-%20%D0%9E%D1%82%D0%B7%D1%8B%D0%B2%D1%8B%20%D0%BE%D0%B1%20%D0%BE%D1%82%D0%B4%D1%8B%D1%85%D0%B5 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://otzovikotdbix.ru
Access-Control-Request-Method: POST

                                         
                                         213.180.193.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:31 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:32 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a0f1cb37cb0f3ac5fbd77ac897802970
Sha1:   dc3b71aabec08f64b9df474bc90c5a8eefabcd1f
Sha256: c5e3efc74e469dbf863ee3147faf874eef42f04edcb83153a009566d1582a984
                                        
                                            GET /wp-content/uploads/2016/08/cropped-summer3-300x300.png HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: antibot-hostia=true; PHPSESSID=f0697b22d209494ac56d760cd54fff2c; c7b0317e39e13ad647eed50e1777d880=83d57cae671c824ff1e7da3eaf1d3fef; ckon1712=sject1712_f581fbf3184a5; SJECT1712=CKON1712; JCS_INENREF=; JCS_INENTIM=1514673151050; _wpss_h_=1; _wpss_p_=N%3A10%20%7C%20WzFdW01vemlsbGEgRGVmYXVsdCBQbHVnLWluXSBbMl1bU2hvY2t3YXZlIEZsYXNoXSBbM11bSmF2YSBEZXBsb3ltZW50IFRvb2xraXQgNy4wLjUwLjVdIFs0XVtKYXZhKFRNKSBQbGF0Zm9ybSBTRSA3IFU1XSBbNV1bV2luZG93cyBQcmVzZW50YXRpb24gRm91bmRhdGlvbl0gWzZdW0phdmEoVE0pIFBsYXRmb3JtIFNFIDcgVTVdIFs3XVtBZG9iZSBBY3JvYmF0XSBbOF1bTWljcm9zb2Z0riBEUk1dIFs5XVtXaW5kb3dzIE1lZGlhIFBsYXllciBQbHVnLWluIER5bmFtaWMgTGluayBMaWJyYXJ5XSBbMTBdW01pY3Jvc29mdK4gRFJNXSA%3D; _ym_uid=1514673152242187887; _ym_isad=2

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:32 GMT
Content-Length: 97172
Last-Modified: Sat, 13 Aug 2016 09:36:02 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: Mon, 29 Jan 2018 22:32:32 GMT
Etag: "57aeea02-17b94"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 300 x 300, 8-bit/color RGBA, non-interlaced
Size:   97172
Md5:    8ff0a32ba8222e1da34b3d427c17106b
Sha1:   1b6d1035471fe2dcd0f6056a686acf25906bcad6
Sha256: 4c16e42c58c65e9093eeea2dc3377f6cfd266681cf9221fb8ece7c2b7c8e9e3f
                                        
                                            GET /watch/31752956?wmode=5&callback=_ymjsp918704753&page-url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20171230233231%3Aet%3A1514673152%3Aen%3Autf-8%3Av%3A932%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A169939860268%3Arqn%3A1%3Arn%3A240746915%3Ahid%3A658957245%3Awn%3A47357%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1514673152%3Au%3A1514673152242187887%3At%3A%D0%9E%D1%82%D0%B4%D1%8B%D1%85%20%D0%B2%20%D0%BD%D0%BE%D1%8F%D0%B1%D1%80%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%D0%B7%D0%B0%20%D0%B3%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B5%D0%B9%20%D0%B3%D0%B4%D0%B5%20%D1%82%D0%B5%D0%BF%D0%BB%D0%BE%20%D0%BD%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%20-%20%D0%9E%D1%82%D0%B7%D1%8B%D0%B2%D1%8B%20%D0%BE%D0%B1%20%D0%BE%D1%82%D0%B4%D1%8B%D1%85%D0%B5 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/

                                         
                                         213.180.193.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:32 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 30 Dec 2017 22:32:32 GMT
Expires: Sat, 30 Dec 2017 22:32:32 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=7774738731514673152; domain=.yandex.ru; path=/; expires=Tue, 28-Dec-2027 22:32:32 GMT yp=1830033152.yrts.1514673152; domain=.yandex.ru; path=/; expires=Tue, 28-Dec-2027 22:32:32 GMT yabs-sid=1295830281514673152; path=/ i=+X7FKzTXPbce37D+dnFQHi+6DKPposKMxWkwMjQF/loiyKOgRFtQvpZaLWKlut1arHlL8bi7EoxrIzGy0rzU1MgCTus=; Expires=Tue, 28-Dec-2027 22:32:32 GMT; Domain=.yandex.ru; Path=/; HttpOnly
Location: https://mc.yandex.ru/watch/31752956/1?wmode=5&callback=_ymjsp918704753&page-url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20171230233231%3Aet%3A1514673152%3Aen%3Autf-8%3Av%3A932%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A169939860268%3Arqn%3A1%3Arn%3A240746915%3Ahid%3A658957245%3Awn%3A47357%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1514673152%3Au%3A1514673152242187887%3At%3A%D0%9E%D1%82%D0%B4%D1%8B%D1%85%20%D0%B2%20%D0%BD%D0%BE%D1%8F%D0%B1%D1%80%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%D0%B7%D0%B0%20%D0%B3%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B5%D0%B9%20%D0%B3%D0%B4%D0%B5%20%D1%82%D0%B5%D0%BF%D0%BB%D0%BE%20%D0%BD%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%20-%20%D0%9E%D1%82%D0%B7%D1%8B%D0%B2%D1%8B%20%D0%BE%D0%B1%20%D0%BE%D1%82%D0%B4%D1%8B%D1%85%D0%B5
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /ddm/adj/N4022.2526902DATMEAN_HMES_4022/B20043658.208520401;dc_ver=41.108;dc_eid=40004001;sz=300x250;dc_adk=1091091190;ord=4k4twi;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Fpcs%2Fclick%3Fxai%3DAKAOjst1chLPpDW8J4G0bgo-KMKAhe58JRdOzEWYXBLLD9bE55iRu42gISo6iy4J7Hvv2pKB6q9PeIYtsbct0urXPcwhbdxCDwBGZivNGJAH6hvqfx1AdsOau-2H12diNoDTYWFDHAhFEkpjMsFlMzc7dh7hyQZPY8kNlYqnhSCGP0WqHaRIchM4YsnzQYaW11hEcxdMclAOr7nAMfp4IpKxoL-4WBswErhwkDC5cb5G-iw1KYN_vDVN4bkaWfYGByi-6Lrsmz2wXqkA0wiGMpMQEqRG26LNXRK2_R7kADxDjrY4IaQ-W5uLkLvfRQZEfR8wlY9x_OKuVEtnUzmuIbVGdG-6PyKV1jy4Y7UmSyN92GHh4iRawJ40x4ARyR8be-INEPbgUuvhLDOx9VSou4AnwZWtDADrWbARJnEfg4MGzgbPY9QhI1m_rA8GQtKrPWMHUdbqxFqk49My974mg0m7AjGKNCn_Dw3ZtljS-rrqhUWvWVCedxiMP-Ua81x0pHo_LTV_IKkaKjLIzgrmzOZGpvK6vFXVzXa00JhpcmQEsMxAxjRWLdWAbLKrOHF9Q3pgZyW0bT8YID_3vpKsPjZ57FQndKpFME7A79yplinuxW0GdHVpbZi8e4l2UEGEnsrzPioECXMv-FKueNQZ_QXDLswQLPY93_E3LWrSgvfIn24fosY6JAUN6wtqjh_waMNBIxZ92e8VVDPFvWYmE1B5_rAMv9lhi7uBYHESM3zf04jRItY4ozMBfuQQK1dXjFepzlB8YZBtthTsk7dm2fnIjCsjcA0pgtrRt4WiPiHnDpg-jpM4SJs92kySmCs9DbNWgKbaRWab9uyn8a9gxlxJ63ib9LMtMzheBzng1vgwt0-jLy1YnmcqkBDlz98DpjTCEiqXWFQ0cE87-p5utta1UJ8%26sai%3DAMfl-YR96pmoJykvSDhVADKm6uxcFkqc9aWzSF3bRvfOIit11UCXREPPDDBJjEBGxax9GFam3SmfCGPU2CkfYF-wXciX92cbLAk9fvmq%26sig%3DCg0ArKJSzKgARQhqTWukEAE%26urlfix%3D1%26adurl%3D;dc_rfl=3,,http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F$0;xdt=1;crlt=6rTIdBZuZD;sttr=66;prcl=s? HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:32 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11485
Md5:    80557eb02be445f17f54582a13c8b218
Sha1:   be4fd76b76eb1d65713f7395ea3d04c262ea1615
Sha256: 77f181a649c86b15011332537f9183917afbf434fb1323a586ddcf2357ee17bd
                                        
                                            GET /wp-content/uploads/2016/08/cropped-summer3-150x150.png HTTP/1.1 
Host: otzovikotdbix.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: antibot-hostia=true; PHPSESSID=f0697b22d209494ac56d760cd54fff2c; c7b0317e39e13ad647eed50e1777d880=83d57cae671c824ff1e7da3eaf1d3fef; ckon1712=sject1712_f581fbf3184a5; SJECT1712=CKON1712; JCS_INENREF=; JCS_INENTIM=1514673151050; _wpss_h_=1; _wpss_p_=N%3A10%20%7C%20WzFdW01vemlsbGEgRGVmYXVsdCBQbHVnLWluXSBbMl1bU2hvY2t3YXZlIEZsYXNoXSBbM11bSmF2YSBEZXBsb3ltZW50IFRvb2xraXQgNy4wLjUwLjVdIFs0XVtKYXZhKFRNKSBQbGF0Zm9ybSBTRSA3IFU1XSBbNV1bV2luZG93cyBQcmVzZW50YXRpb24gRm91bmRhdGlvbl0gWzZdW0phdmEoVE0pIFBsYXRmb3JtIFNFIDcgVTVdIFs3XVtBZG9iZSBBY3JvYmF0XSBbOF1bTWljcm9zb2Z0riBEUk1dIFs5XVtXaW5kb3dzIE1lZGlhIFBsYXllciBQbHVnLWluIER5bmFtaWMgTGluayBMaWJyYXJ5XSBbMTBdW01pY3Jvc29mdK4gRFJNXSA%3D; _ym_uid=1514673152242187887; _ym_isad=2

                                         
                                         94.130.91.36
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 30 Dec 2017 22:32:32 GMT
Content-Length: 30341
Last-Modified: Sat, 13 Aug 2016 09:36:02 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: Mon, 29 Jan 2018 22:32:32 GMT
Etag: "57aeea02-7685"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 150 x 150, 8-bit/color RGBA, non-interlaced
Size:   30341
Md5:    d52f216252cc16fa1c24e36ca7155721
Sha1:   a4b581cd36377a9d873d04c8b6e83241b01954a3
Sha256: 31c6aacf6562e7733cfeb0b70b57418af110b8d56816ac45af2871c99db36b29
                                        
                                            GET /watch/31752956/1?wmode=5&callback=_ymjsp918704753&page-url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20171230233231%3Aet%3A1514673152%3Aen%3Autf-8%3Av%3A932%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A169939860268%3Arqn%3A1%3Arn%3A240746915%3Ahid%3A658957245%3Awn%3A47357%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1514673152%3Au%3A1514673152242187887%3At%3A%D0%9E%D1%82%D0%B4%D1%8B%D1%85%20%D0%B2%20%D0%BD%D0%BE%D1%8F%D0%B1%D1%80%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%D0%B7%D0%B0%20%D0%B3%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B5%D0%B9%20%D0%B3%D0%B4%D0%B5%20%D1%82%D0%B5%D0%BF%D0%BB%D0%BE%20%D0%BD%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%20-%20%D0%9E%D1%82%D0%B7%D1%8B%D0%B2%D1%8B%20%D0%BE%D0%B1%20%D0%BE%D1%82%D0%B4%D1%8B%D1%85%D0%B5 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: yandexuid=7774738731514673152; yp=1830033152.yrts.1514673152; yabs-sid=1295830281514673152; i=+X7FKzTXPbce37D+dnFQHi+6DKPposKMxWkwMjQF/loiyKOgRFtQvpZaLWKlut1arHlL8bi7EoxrIzGy0rzU1MgCTus=

                                         
                                         213.180.193.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:32 GMT
Content-Length: 113
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 30 Dec 2017 22:32:32 GMT
Expires: Sat, 30 Dec 2017 22:32:32 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   113
Md5:    867e4bbbdca2c54a87408ee7fbf35aa2
Sha1:   c38a888239c2aa95c499a9a8034db492b460cf25
Sha256: 0f1b29966951ae670b388abdd5298111c968f680db7649bcf89c29879aad1def
                                        
                                            GET /ddm/adj/N4022.2526902DATMEAN_HMES_4022/B20043658.208520404;dc_ver=41.108;sz=160x600;dc_adk=1564304531;ord=iwkw8q;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Fpcs%2Fclick%3Fxai%3DAKAOjss5DEvgPrgxt3AB3fBE-yzM-M2KDVERnaU59lqMqAQHf3r2aKS4iW1M3hd0AyghddtJRbJ48tN3ztiMI7Xbkh0wjhuwN0PWd_N6RzPM5f0rXd4Kh4HuvNOGrtGV1WPlDPmy58Fk1hbW-sm6z5de4UzO78yZ3L85aU2weJ0-iFp0SsqEmzB1rlMZmjFG0MAJyTZyhvyZ2ARTcBHFqItzNPkk7XjVRRLX39CtFcdaDnnFHzQ8ADsuvx9jHrQYYq5Da-2sJqql0E-bI1NE8hYKVfz74C7BcKwK1TQDh7CEy3-OotieA_al9_IYBkLT3NGOHvfX2cO-Owq3uXuH592P0QCI2NdDWpwIYfJocqh0MIqwxA2p9MyGhKrDvvmohMJf6ehne0EEHA22Tx3gLGYEfb0ioxZrbEj9afX3gqMwY_FhA3jOwnbeGhlj11RfV8KL3bGbU72tnebGCCMJsbaOMVwFhmLHuE7MbVn4AttST7gHQ_pXWnSBxk8_apdysY2EhlRC40WBgr2mhXHrVp0fEWV0sa6SVk6VZsKnBOWeljb3LKLA-EkLTCDJnZaKpRFVggnMQx86qeOqSZwmfbMndtBO7IdOi2CVGHgBMqSXt0WyQvo77KHSNwp1ixL4KxKfUJPgH3SLPgPsP9FWeOeaQgqbFo37ROvpLfbS15Vkf3g0IzmLey2s71qaSN0TbgSh9tSkrLoGsf62jotun8V8yLa21WmlNRGrqhKF_WjVV4ELv0ethZkJDyPhk-I27DOUXLQAbhFnd1hUGs7S1pFfJFJVtQiAHeu1ypVSTMxyztVnUUddP3sUWH06ycSMpUpmKtymPZftl-LVx-Srud2711WMAuftY-Y0FXV43gBn3n6-EFmqYvG0yno9u5M0eXYVyTzm6CEoLhnsz20_s9QQzaU%26sai%3DAMfl-YTk2HCcigD4kfRJjLz4--cDrjtf4JOjjy7XyrSJr243bTAcQvUULRxDuShpdtj4exH2ivnEyzH3Af6ydw53qOHwetQt7SM25rbx%26sig%3DCg0ArKJSzFBczlZL3YGaEAE%26urlfix%3D1%26adurl%3D;dc_rfl=3,,http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F$0;xdt=1;crlt=6rTIdBZuZD;sttr=212;prcl=s? HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:32 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11548
Md5:    bdbda07134a2d3df116aaf8a95254e78
Sha1:   56adbb7d384e1a8ff1b605f8d5057108850a0980
Sha256: d7bb8ff1161661e111b143177a17bbe29e1e7d15dfc871d1e19a74e7963a7c87
                                        
                                            GET /pcs/view?xai=AKAOjst88MMzwwu9XbdYGi13b7S5yUAeZassPu6HQQHTzgnkTt9GaImvgl5yDJQ6_T9uydGXy7VDRd10fU11GxYwhThsSo0NJw6SVZXzqVMDRsTOh4CBEdB56MKvrhxzmb0-8C8KqCCiE6qPvEcOKEq1y84KxLCEexBAVIBfl0BoIAKp9p4eAtlybv6rF4qGgL_brgWAHVWKF9cW1lENN1cKX4eWpTEYVt31fhauamNNz9cyxb87tS8U4XZBF3E-bjFFajwsvISZcd51WJPlinH3yuCrKeisryg5XK1NtNsTgMkodK5H503lenI5WYQz1l2Yj44jP-cGt4rXXYiLNgUh6IdjMO08ce8DccO_Mpwq6MJs9pTuOXqxBjtITuxPTSpl-tyGSWNAjx6L-V9azo1N53nsVQ8JSvMQilxcRFfyRxXNrBK83I9e3QKUxd9E5Ps3FHtAvP85WkfY-R2ROjcKywfI0ce4YMm4GrgeluqRowdDUCQ3QbyDMCTC9i7UApnYsN6eqisH3oFcABOX5YtgjPSZw8MCaxX-JBRuUJnX7LG4rvGjwtmNa6v1sLVfCAX-TfCj_bvtvg-zg7iaJjF4AKAj9N3MqSw1LnHQ0nrLjg8toZt1z4u2aZLqkKR80vZtIbfh_lj9DJHV9FA6taxs-V8qzfyZYZnnlHo19sWKIG5wJnFez7ufL6KRDXn2kl_J9dsl8LL_uW-GF8O7G3Wqekltp9xKJO8glIQWHHpHnwlC39xgOeWCORZzr3kJGtaZKo5VfHVtDaqzfNd7PScDi5zidLrnoAzNE8N9PPT9IXvnnQ4MQwyPQMFmZgSEc742AhlO3QvQnexIbqP8k6ZO5dLEOfgyZwBM_YvA2ziILz7CiH-0T22E1XgNpXQEsVWm6qXsLv9FuyfCQWThMfBQhPwRs1KaNQ&sai=AMfl-YRt0HUQvVbRSeq4e5vkZ1IZ_8nExbQWsfTyrQfQ4dqFYQbSjT-cj9Ilerj85giUTh1vc6X2aanpIrswok51aLDlkA&sig=Cg0ArKJSzBWHwWlXDiZnEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Sat, 30 Dec 2017 22:32:32 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /879366/express_html_inpage_rendering_lib_200_212.js HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 41010
Date: Sat, 30 Dec 2017 15:26:37 GMT
Expires: Sun, 31 Dec 2017 15:26:37 GMT
Last-Modified: Wed, 13 Dec 2017 23:47:20 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 25555
Cache-Control: public, max-age=86400
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   41010
Md5:    af43ff42015db33d7fd6d31fd3167505
Sha1:   d749b448d612cf004ee90da362cb5d65c84260c0
Sha256: 6a3d0d4aac56651f7fe8fc5e3d0e5f454d5ff4f7efcd302a64055de6e60c0680
                                        
                                            GET /pcs/view?xai=AKAOjssdUx2ciILmSLYU4i9A8ArJGQIRSHJ8wopX5CQ7ZhD2cl1LkZG7rZXbTdyWiyZTQytR_-bPEvNcO7McEvu1nE8KXfSP6Qb14UivrJCnjGofy4Wq9ZyzxQvSo3L1RifHtpADl3Uc9KkHmv30gPhkdmQj-0vJZc4GE1_fuq5zrZBqBsDYKeM-S-7u7EaNdCHy3L4n6ndQzFqbhx-CITDRMXLVXd8S_uWAHT4YY8a0CI_PYiHrFHrWIovhp7X_nwKlP6hV01MupOG_hLMzwjPhj8_DoVPN8aX61km0ATWTjQRBEFOKpIBhzhP3ohRYsxUDxQCKJWBS4XRS7C1433K5a5nzHNhaso32y3WQWKyJSluhbd8zHEfrlQdUTB5vimmoU_GP94NRzGwJg4qvdmLUL-1XlOixkXj8ySKo0n08GJeq6eZGuMhLU3PoO4DjOtmHUkA9g0mUcbYCNIv7hkDZSAhvlQPB6-bpHxPOx3qHwINNuN3z7VmZJ7bM6jjtc5InIw7tDAOhPugffh1c9QGgU9EmU7x5DLdbmE1vsMA3BciVueuuK23nLEi_N3_sy_-II6euCDwItsw_2gvtKLY0UZWwQNM3Qb29wYJU_khwncBuiyDA3FBz3cp0EKGC-MIYEsLPc7VqOj5Ii_CcBA8Rcr0bMUeU7HTc7gdOewet-R9CB5-Ca01Kml-cAPvVjXEgp6xOkoQdnbP0gMlF81bBK70NWN8YU2JSy1JjqNjBrD2il8hR52x21ox20ocCODswfRl6c_t1Ul7oxqLozneLUL-Lv-Y0ce2haktKyRcY9rMQgxArh1GhI7tS5JcprjATQs0rKr2Jdt5ZA_wbSL6icXLOLNEsGq0wqFdaBozpOWDFmK7ws0dp8d-LDrSiH1_KHVmBUN9BVgYI8pFb8-sKQ_UGDgXPjg&sai=AMfl-YRdvw3N27DUAfSKZV2B2S_5w3nBcJWOF5OJ7IpP1VjfYpZqNd1BbcFzK_IyMW-7EvHYZ2DMFrDKEkAAVjBhWtsEdQ&sig=Cg0ArKJSzDCbzplvHE-AEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Sat, 30 Dec 2017 22:32:32 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/js/r20171206/r20110914/abg.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 27 Dec 2017 19:55:40 GMT
Expires: Wed, 10 Jan 2018 19:55:40 GMT
Etag: 11098048013607334118
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25289
X-XSS-Protection: 1; mode=block
Age: 268612
Cache-Control: public, max-age=1209600
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25289
Md5:    784e130cde30bd578d64baccaeaae667
Sha1:   e3fbdd693b623acbdcfb4ab32a0108d07e846b2a
Sha256: 484b4456974d595371ab07d0ae0552a11f9392989ce7c28d7a333d132ef1b37f
                                        
                                            GET /pagead/images/x_button_blue2.png HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 16:15:35 GMT
Expires: Sun, 31 Dec 2017 16:15:35 GMT
Etag: 291775052866240956
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 22617
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 16 x 15, 8-bit/color RGB, non-interlaced
Size:   145
Md5:    60b7612b7cde75ce329db6a6b0415b23
Sha1:   66c106bf496bb1ca11ecd7dda5816b36e7165a0e
Sha256: bc8347bb6ce7622050ab41f67dda0513db000d96158eceab4cfc01963d27fa58
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 30 Dec 2017 22:32:32 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f11ad2da84a51e217b054f9635384d1b
Sha1:   cb55a70d19ceae65d1b75444137325fa0432c1d9
Sha256: 3cb5cf2812a1b4fe967b65f5253032d59c68db2b5b53328e06eedf31a547b058
                                        
                                            GET /pagead/s/cookie_push.html HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 17:04:55 GMT
Expires: Sun, 31 Dec 2017 17:04:55 GMT
Etag: 13472698117776506427
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 742
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 19657
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   742
Md5:    e550a33cfee69dfae0dcf3dc9a16b617
Sha1:   db917798fdba57df233396ef0fd93e97745783bb
Sha256: 648c26f5eb64f36e58cb24e08293274a5be34c4aaba8a1578588dad911e7c8a8
                                        
                                            GET /sodar/Yww8ZxGu.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6292
Date: Fri, 15 Dec 2017 01:24:29 GMT
Expires: Sat, 15 Dec 2018 01:24:29 GMT
Last-Modified: Fri, 25 Aug 2017 16:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1372083
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6292
Md5:    0cf867e9f5371d33cbc1d55df50daa38
Sha1:   b8f3ebe89fb9494b833f4d0370ab4d6c43d93e9a
Sha256: 41780ceef8889210e860e9661e1c7c0c5f71b92d09bd436cddf9737bbe0ed029
                                        
                                            GET /xbbe/pixel?d=CJCWSxCjgF4Y1dGMJzAB&v=APEucNV3H2BPm7CwiXEGbd97vx9xIMZ-Q-aLpqhxy-ZtYUHWih96i8i2RXI8BHkAPJBp-gRauUF5 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 30 Dec 2017 22:32:32 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   214
Md5:    02247d909a831178bfbddac723940ebd
Sha1:   9d29a593fe8e22024b5091691df54e3a02a3ba82
Sha256: 48647fe897d3f952a9ad4422e05ed61869c9bf0d2108a78bd2eba0f5eed26446
                                        
                                            GET /pagead/js/r20171206/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 29 Dec 2017 01:24:22 GMT
Expires: Fri, 12 Jan 2018 01:24:22 GMT
Etag: 11176212102450413199
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1218
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 162491
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1218
Md5:    3e1fe1160846d42504041240ac99abe1
Sha1:   02ec6880848b4f1926bf63676be67f24c15be952
Sha256: 14d566db627806fc4353b915bab1ac3c5b2737cede5cd0b4a3a9a673a92ea183
                                        
                                            GET /sodar/Ix4UrfoN.html HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4500
Date: Fri, 15 Dec 2017 01:24:31 GMT
Expires: Sat, 15 Dec 2018 01:24:31 GMT
Last-Modified: Fri, 25 Aug 2017 16:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1372082
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4500
Md5:    2cdc30d87929f487800e9877a02859d8
Sha1:   55181900b86da467d93b245c61f1b1f2b2259125
Sha256: 4ab062757cc72521459a3d786ffce97208118bcf73399916436d5a5ed8609e9f
                                        
                                            GET /pagead/js/r20171206/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 29 Dec 2017 01:24:22 GMT
Expires: Fri, 12 Jan 2018 01:24:22 GMT
Etag: 9566754754863973915
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3648
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 162491
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3648
Md5:    ae83c6831051fa005b0183ed93561065
Sha1:   a456bc8023b55f1972d00f9b8515d7a6ec157109
Sha256: f23a56e02c8a4ba7f9a735326ed5a2cfb12c41524c4d5b3ba9713530d6cb0302
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=405238, public, no-transform, must-revalidate
Last-Modified: Thu, 28 Dec 2017 15:01:59 GMT
Expires: Thu, 4 Jan 2018 15:01:59 GMT
Date: Sat, 30 Dec 2017 22:32:33 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    a4cd0c4932a3e17033b76f3aaa7c952b
Sha1:   de481fba92d834e46e47e3f7856836af417ca246
Sha256: af49f0e09d8e5cda3e507c31ce9115909e3090fb18cdaf213d5dadedadd166bc
                                        
                                            GET /pixel/attr?d=AHNF13If7felWviMOTDtP6v3ixaHkyhz7n3a HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 204 No Content
Content-Type: text/html
                                        
Date: Sat, 30 Dec 2017 22:32:33 GMT
Server: HTTP server (unknown)
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=445138, public, no-transform, must-revalidate
Last-Modified: Fri, 29 Dec 2017 02:06:53 GMT
Expires: Fri, 5 Jan 2018 02:06:53 GMT
Date: Sat, 30 Dec 2017 22:32:33 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    897de37e6cb7d6d11b5f0c8acbf5f3ba
Sha1:   381daa5d04b41661769df170651874a4ad9f1161
Sha256: 4ee960df59807f2c28bc39946e01247cac7ad612b513637c9b5f10e707686858
                                        
                                            GET /pixel/attr?d=AHNF13JVHVC9einXe5pGvvbdaT77BOt2XoxW HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 204 No Content
Content-Type: text/html
                                        
Date: Sat, 30 Dec 2017 22:32:33 GMT
Server: HTTP server (unknown)
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&google_dbm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJCWSxCjgF4Y1dGMJzAB&v=APEucNV3H2BPm7CwiXEGbd97vx9xIMZ-Q-aLpqhxy-ZtYUHWih96i8i2RXI8BHkAPJBp-gRauUF5
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&code=CAESEHDFhbixBBjHutaAkNiil4A&google_cver=1
Date: Sat, 30 Dec 2017 22:32:33 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 290
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   290
Md5:    250a28375e0ad745ef919b51fe96515b
Sha1:   ae7a60f5f4402ddfb8715eacf9b9bf5b881cccd7
Sha256: d0431333d8322259e70c0d6cfafcc16604ffca786daaa94c4bf76fe5415cf484
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sat, 30 Dec 2017 22:32:33 GMT
Etag: "5a47a6a5-1d7"
Expires: Mon, 01 Jan 2018 22:32:33 GMT
Last-Modified: Sat, 30 Dec 2017 14:45:57 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    97bac40ee81ece561b6fa5ff40d4ae64
Sha1:   39bf683971429292421da1a8f3499edf14663f13
Sha256: 91f1c67efd9200886d06c01b591bead59ab1cef05b8d8d0136da7191f947e7a8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sat, 30 Dec 2017 22:32:33 GMT
Etag: "5a47a59b-1d7"
Expires: Mon, 01 Jan 2018 22:32:33 GMT
Last-Modified: Sat, 30 Dec 2017 14:41:31 GMT
Server: ECS (arn/469D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    920dee91e1e731d9f2ad9cb550fe7537
Sha1:   3d5b990c505220b75ca2af19be7b539901622ae8
Sha256: e346d4a4138141090b3e8dbb4d3b3432a29bbca9522fdba88dec782866965fad
                                        
                                            GET /bg/ypVt680DYtu67dhCPhIqXCvm54RECnks9IjMRCS897E.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/Ix4UrfoN.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4729
Date: Wed, 13 Dec 2017 19:55:42 GMT
Expires: Thu, 13 Dec 2018 19:55:42 GMT
Last-Modified: Tue, 05 Dec 2017 15:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1478211
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4729
Md5:    b8705db582af2eaee5c84817dc9fc38b
Sha1:   c60242857bf9c0e623b3a6ff359ada6ffe3c553c
Sha256: 0bfb58c9595be7491819a2f3333585a837c76639eb06086f9fffbd2c89e8e46f
                                        
                                            GET /usermatchredir?s=184023&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dindex%26google_hm%3D&google_gid=CAESEEY9PbCvZtk1MsiP0Vk_GpQ&google_cver=1&google_push=AHNF13IB03x5AuzeTN935Yo8W7fQVBeMuAS4UBZ6MUwW HTTP/1.1 
Host: ssum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html

                                         
                                         104.123.132.211
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Location: https://ssum-sec.casalemedia.com/usermatchredir?s=184023&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dindex%26google_hm%3D&google_gid=CAESEEY9PbCvZtk1MsiP0Vk_GpQ&google_cver=1&google_push=AHNF13IB03x5AuzeTN935Yo8W7fQVBeMuAS4UBZ6MUwW&C=1
Content-Length: 456
Expires: Sat, 30 Dec 2017 22:32:33 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 30 Dec 2017 22:32:33 GMT
Connection: keep-alive
Set-Cookie: CMID=WkgUAblQJuQAAC1BwYEAAAA6;domain=casalemedia.com;path=/;expires=Sun, 30 Dec 2018 22:32:33 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Fri, 30 Mar 2018 22:32:33 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   456
Md5:    29ecc3165f09950c4823a6689b036ec1
Sha1:   8ec6acfb26baf664a6b2f33db4bf428f5f4cb48b
Sha256: a5a8603b27e249b0fa8c4bdf229f902f7f12977433450905704e95fd98971247
                                        
                                            GET /xbbe/pixel?d=CJCWSxCjgF4Y-8-MJzAB&v=APEucNWYkl3P37FVGegssLtzH_QxlSNGckOYoUKTESehGT1DMSCqp5cLEJ7iv3eksciDMxLOYwB- HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 30 Dec 2017 22:32:33 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/js/r20171206/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 29 Dec 2017 01:24:24 GMT
Expires: Fri, 12 Jan 2018 01:24:24 GMT
Etag: 5434642185967859762
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 13023
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 162489
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13023
Md5:    1db0acae7ce2cc9da7a1d4685a6a5eda
Sha1:   baad0a6903ac4c4b500dc9f4bf1ae0acbf4183ad
Sha256: 66066d6f5b06a474c40fb59e9d1a1c394852ccab64def724ecabe19358569b4b
                                        
                                            GET /cms/v1?esig=1~b04e41039133c73fafd60e0ed8cb49a70ecfb061&nwid=10000483131&sigv=1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJCWSxCjgF4Y1dGMJzAB&v=APEucNV3H2BPm7CwiXEGbd97vx9xIMZ-Q-aLpqhxy-ZtYUHWih96i8i2RXI8BHkAPJBp-gRauUF5

                                         
                                         217.12.15.54
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Sat, 30 Dec 2017 22:32:33 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=blrnmbhd4g501&b=3&s=jf; expires=Sun, 30-Dec-2018 22:32:33 GMT; path=/; domain=.yahoo.com
Location: https://googleads.g.doubleclick.net/xbbe/match?xid=LgHgxbJkRQwIVh7mRFTHFOyM
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1035
Content-Transfer-Encoding: binary
Cache-Control: max-age=578175, public, no-transform, must-revalidate
Last-Modified: Sat, 30 Dec 2017 15:07:55 GMT
Expires: Sat, 6 Jan 2018 15:07:55 GMT
Date: Sat, 30 Dec 2017 22:32:34 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1035
Md5:    3ee28914ffbe626c74c0a65c190828b2
Sha1:   dfa362dee512eb5b94e9e40ad7a55a02da115572
Sha256: 15280a5cafc07036a4588cb6e92bb6c5233fd437c16f6df7ddf02b94d6ef3e4e
                                        
                                            GET /1/m?url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Deverest%26google_hm%3D__EFGSURFER_USB64__%26google_push%3DAHNF13Ii6n82DkE0Qdrw4HyRQQn1dZWW-xcicMxl9lV-&google_gid=CAESEGKGaYZtL3VOR6g-YcHkilY&google_cver=1 HTTP/1.1 
Host: pixel.everesttech.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html

                                         
                                         66.117.28.68
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 30 Dec 2017 22:32:34 GMT
Server: Apache
Set-Cookie: gglck=CAESEGKGaYZtL3VOR6g-YcHkilY; path=/; domain=.everesttech.net; expires=Mon, 29-Jan-2018 22:32:34 GMT everest_session_v2=WkgUAgAAABk2qupg; path=/; domain=.everesttech.net everest_g_v2=g_surferid~WkgUAgAAABk2qupg; path=/; domain=.everesttech.net; expires=Mon, 25-Nov-2019 09:12:34 GMT
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_hm=V2tnVUFnQUFBQmsycXVwZw&google_push=AHNF13Ii6n82DkE0Qdrw4HyRQQn1dZWW-xcicMxl9lV-
Content-Length: 335
Keep-Alive: timeout=15, max=990276
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   335
Md5:    325c435fce38a990554a1a55253bb464
Sha1:   6e8ce6b2fc82f05af21dcc392bea31d4f20f9959
Sha256: 92480fb9f67ff00c049bc8fa51464341c7797c3c8b0ff9f2f1289b933257ca2d
                                        
                                            GET /pagead/images/transparent.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 01:24:22 GMT
Expires: Sun, 31 Dec 2017 01:24:22 GMT
Etag: 2462972746714251406
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 76093
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   67
Md5:    3f318b569cc43578a73d1c38270b6857
Sha1:   244717a495885a727dc67313ebb1ef7b447dfe7d
Sha256: bdf72009ad226c17f1954ba602292902a780b80af07dbcbab1322bdf5c32be66
                                        
                                            GET /pagead/gen_204?id=sodar&v=23&t=2&bgai=B7a2hABRIWviCEIa76wSr24O4DwAAAAA4AeAEAg&bg=!_f6l_uZE3mxt2VX23WYCAAAA9VIAAAASCgAGoP14xA3DmQEjEIB_EwYvvPB6bWt05pxqeDOHS3ikRUEjxMMt8081E2oK_S874OUFrZNCIGFgZcBEi2NLqGNNPx_8LOH9ML6X5Cl3F66RbiYmgDhm38tQc5tfUqPmRuHlv8kLYKF73ztGuHTsdpZ9Bq-oWuQc1UVbkwZx1VbTtrF2iDaJJBiemTjm9id7ElGAoPZT7gjwA89fp5HpRcf0vHz79VkfRBXpqKL16fILi2toHJR7-7383rla36T_vCmTRA7gQX0BVqY3TnmpYPMJ0fr5ry9HAn6WG0hpO-H0vBxtOQHAgZf1GJBl2_XbZzBHZNB-ayP81gOGD7EmBsgQjF4B0EcR9mjeGfHXSGKOIXZmQWemGXKJnrdUxTgR1sqJMmka9kOZoAGPvYOu HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/Ix4UrfoN.html

                                         
                                         216.58.209.98
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /activeview?avi=B7C-q_hNIWoHuMZe47gS2-IPAAgDwhYTV6QYAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAcITBhil6ZKaAw&cid=CAASEuRoA1fhFuauhjb1zooBT0Y-tA&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20171206 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /4160851/1509707921618/300x250/300x250-paradores-larga.html HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 971
Date: Sat, 30 Dec 2017 13:02:59 GMT
Expires: Sun, 31 Dec 2017 13:02:59 GMT
Last-Modified: Fri, 03 Nov 2017 11:18:41 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 34176
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   971
Md5:    b02d285f2e80bc492b16a7dac27e4982
Sha1:   c49a055a74030aba36b190c40440d6654e995d1e
Sha256: 736b8df84c88acb8e4a525acb1290c524430e7b787a30458ebdcb3dc0f5cf2de
                                        
                                            GET /pixel?google_nid=everest&google_hm=V2tnVUFnQUFBQmsycXVwZw&google_push=AHNF13Ii6n82DkE0Qdrw4HyRQQn1dZWW-xcicMxl9lV- HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 170
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   170
Md5:    e7673c60af825466f83d46da72ca1635
Sha1:   fc0fcbee0835709ba2d28798a612bfd687903fb5
Sha256: 0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
                                        
                                            GET /4160851/1509707912279/160x600/160x600-paradores-larga.html HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 972
Date: Sat, 30 Dec 2017 13:08:37 GMT
Expires: Sun, 31 Dec 2017 13:08:37 GMT
Last-Modified: Fri, 03 Nov 2017 11:18:32 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 33838
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   972
Md5:    fb351753666ab0c2a49fdd1d30532b50
Sha1:   6a9307f0c1cc5b07c419369e836a021bdbacd3ea
Sha256: 79bff883187dc6e7dcdbda003184b048b9b281d5df131923902f2bcf051ce064
                                        
                                            GET /activeview?avi=B_5Xd_xNIWuzPHJCX6gSEnYKoAgCy04761gUAABABOAHIAQnIAwLgBAOgBkzSCAUIgGEQAcITBhil6ZKaAw&cid=CAASEuRo4Q2jeRY5da9eFMtkyOfxoQ&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20171206 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /xbbe/match?xid=LgHgxbJkRQwIVh7mRFTHFOyM HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJCWSxCjgF4Y1dGMJzAB&v=APEucNV3H2BPm7CwiXEGbd97vx9xIMZ-Q-aLpqhxy-ZtYUHWih96i8i2RXI8BHkAPJBp-gRauUF5
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Sat, 30 Dec 2017 22:32:35 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/gen_204?id=sodar&v=23&t=2&bgai=BNdObABRIWvXVEpKJ6gSpsYjAAQAAAAA4AeAEAg&bg=!zs2lzdVEBK53w2joyfYCAAAA31IAAAAXCgAGDKGxOc6emQEj9WhSrwOCmbVTsXMkKuXIPBK8r1Amr5DNnP2unR25Wk6yEPZw3i45pltKl_tu8B4Di95b-qfGbqt-hrcvphB7nDPlZePp2MOUMovHxVrYL-lWPe4ewJBZ7spGry_0OReT0KZafTKp3Rz4SobCX2nGN212VGM-Y2az3KzwNVqgccHiSK53yvUBMlzrrRCD8liuNSNrRxxVjAIrEDKoZIF1Cl5LjRAzRXigtJXO5iGT_16xgjYzh5ZQ9EPhfKfy6QZDlcWJE9aOXTrIBriJY-VS3q2R_J8CXkl-1Kr5vUn5PoQ4UYVJKLIYIgLLuKosSLe-z6fFVI0Nk2OIsKot85WCg9tNgkDz8glR0v6NlBF8ca1MNiyj540qvR5qtr4n7av72_QD HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/Ix4UrfoN.html

                                         
                                         216.58.209.98
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /setuid?entity=101&code=CAESEHDFhbixBBjHutaAkNiil4A&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJCWSxCjgF4Y1dGMJzAB&v=APEucNV3H2BPm7CwiXEGbd97vx9xIMZ-Q-aLpqhxy-ZtYUHWih96i8i2RXI8BHkAPJBp-gRauUF5

                                         
                                         185.33.223.218
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Sat, 30 Dec 2017 22:32:37 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 636fdc43-9bdc-46e6-8204-94c70fba6900
Set-Cookie: anj=dTM7k!M41.DunaTF']wIg2HaQnT9*H!@wnf]maBDeKuh7<xR))l!Qa3jakC]/>Xy=f]TI1_rA%VlJpCAf5GnNJnEw-]>gv>23$)#%nug>7=qXF; Path=/; Max-Age=7776000; Expires=Fri, 30-Mar-2018 22:32:37 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Sun, 31-Dec-2017 22:32:37 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 313.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.85:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /usermatchredir?s=184023&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dindex%26google_hm%3D&google_gid=CAESEEY9PbCvZtk1MsiP0Vk_GpQ&google_cver=1&google_push=AHNF13IB03x5AuzeTN935Yo8W7fQVBeMuAS4UBZ6MUwW&C=1 HTTP/1.1 
Host: ssum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: CMID=WkgUAblQJuQAAC1BwYEAAAA6; CMPS=3259

                                         
                                         104.123.132.211
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Location: https://cm.g.doubleclick.net/pixel?google_nid=index&google_hm=WkgUAblQJuQAAC1BwYEAAAA6BFkAAAAB&google_cver=1&google_gid=CAESEEY9PbCvZtk1MsiP0Vk_GpQ&google_push=AHNF13IB03x5AuzeTN935Yo8W7fQVBeMuAS4UBZ6MUwW
Content-Length: 404
Expires: Sat, 30 Dec 2017 22:32:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 30 Dec 2017 22:32:35 GMT
Connection: keep-alive
Set-Cookie: CMID=WkgUAblQJuQAAC1BwYEAAAA6;domain=casalemedia.com;path=/;expires=Sun, 30 Dec 2018 22:32:35 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Fri, 30 Mar 2018 22:32:35 GMT CMPRO=1113;domain=casalemedia.com;path=/;expires=Fri, 30 Mar 2018 22:32:35 GMT CMST=WkgUA1pIFAMA;domain=casalemedia.com;path=/;expires=Sun, 31 Dec 2017 22:32:35 GMT CMSC=WkgUAw**;domain=casalemedia.com;path=/; CMDD=;domain=casalemedia.com;path=/;expires=Sun, 31 Dec 2017 22:32:35 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   404
Md5:    59d01a6dac91eb7994e5b5d2214b83df
Sha1:   0d1224314bc87203acb47cbc276907085c2a40b4
Sha256: a74c72a6b558fe6a2bdc3e4f3e5dd8765410d3ad51167f85492549623dff1cff
                                        
                                            GET /pcs/view?xai=AKAOjstK3i18lFWP82ZXq7f0p6q30bq6cyM3cIWq8zRKdhxw5Ng6pVxMqpDIyKplPWgPvAdrOMnZMFKuugL8PlxutGvHCYA1rAsPIE9iCCwl0zFAdVQlG-jr_Ahmz2avFFPTvmy44OE&sig=Cg0ArKJSzOJw5n7ADuNMEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Sat, 30 Dec 2017 22:32:35 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pcs/view?xai=AKAOjsuAdfsYOo5OBlQS11CjNnK5TyLsrWrLDRLCGhezfJoWaxYmd3NsT7C5ZkZaIRxznoSQQUbq4dOzW8mziuZkXBy-y6PWlt50mi3WPxuIEdLUI9ciwlB71K0B9ltmpy-Gs3H_HGw&sig=Cg0ArKJSzI_3C-yaBgeKEAE&urlfix=1&adurl= HTTP/1.1 
Host: googleads4.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Sat, 30 Dec 2017 22:32:35 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=index&google_hm=WkgUAblQJuQAAC1BwYEAAAA6BFkAAAAB&google_cver=1&google_gid=CAESEEY9PbCvZtk1MsiP0Vk_GpQ&google_push=AHNF13IB03x5AuzeTN935Yo8W7fQVBeMuAS4UBZ6MUwW HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 170
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   170
Md5:    e7673c60af825466f83d46da72ca1635
Sha1:   fc0fcbee0835709ba2d28798a612bfd687903fb5
Sha256: 0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=487610, public, no-transform, must-revalidate
Last-Modified: Fri, 29 Dec 2017 13:57:22 GMT
Expires: Fri, 5 Jan 2018 13:57:22 GMT
Date: Sat, 30 Dec 2017 22:32:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    1dcb6dd540b725aa8ab7c29025b7ea96
Sha1:   77e947cec9d598e89e3c020b90359c9a286be873
Sha256: 3656283c65e69dcce1fd311e5b8ee06ce79fd41e64bd115e6ac40b6a7be32138
                                        
                                            GET /runtime/6.0.0/edge.6.0.0.min.js HTTP/1.1 
Host: animate.adobe.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://s0.2mdn.net/4160851/1509707921618/300x250/300x250-paradores-larga.html

                                         
                                         104.123.114.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache
Last-Modified: Tue, 05 May 2015 12:17:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Sat, 30 Dec 2017 22:47:35 GMT
Date: Sat, 30 Dec 2017 22:32:35 GMT
Content-Length: 33737
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   33737
Md5:    7abd3002a743d28c0c1bd98a64eda18c
Sha1:   cca936df62e2dcfbf790b0ab14ab279ac8e2c353
Sha256: 2d616c4a760ea77e76af1c7fe272a225abeed861b85db2f7f23efe8b7514e559
                                        
                                            GET /4160851/1509707921618/300x250/300x250-paradores-larga_edge.js HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://s0.2mdn.net/4160851/1509707921618/300x250/300x250-paradores-larga.html

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 1488
Date: Sat, 30 Dec 2017 13:04:26 GMT
Expires: Sun, 31 Dec 2017 13:04:26 GMT
Last-Modified: Fri, 03 Nov 2017 11:18:41 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 34089
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1488
Md5:    311540a2522cc780a7ed44bbc54021b2
Sha1:   9257b3bfc91e8be952acdea8b80ef0acf56ac854
Sha256: a67a2cb315b1c300c8aac1c614cf9350c7b7cce61121478e7eab5cf1daa6c723
                                        
                                            GET /4160851/1509707912279/160x600/160x600-paradores-larga_edge.js HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://s0.2mdn.net/4160851/1509707912279/160x600/160x600-paradores-larga.html

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 1532
Date: Sat, 30 Dec 2017 13:10:08 GMT
Expires: Sun, 31 Dec 2017 13:10:08 GMT
Last-Modified: Fri, 03 Nov 2017 11:18:32 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 33747
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1532
Md5:    c49b3e3bddcb9f0bc2d411da506b179e
Sha1:   4c6eeb71012503dea1b4f21690f32169387890d1
Sha256: 1ee5d2f6d135b498bba9cdc1341bb359211e970b17a4f411789ea0342c1b52df
                                        
                                            GET /pcs/activeview?xai=AKAOjss5-c93DLnozVLfrncZ3XskvgNzfVoI3Lek7NffFtHL8ZzL6UwEEujHS_pxgA-ORMMGHga4OuIi0eV1x31qV70&sig=Cg0ArKJSzGddwpOuZBVcEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,255,300&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=3524&ss=1176,885&pt=-1&deb=1-2-0-0-0--1&tvt=0&is=300,250&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D280%26slotname%3D2090078288%26adk%3D3229444603%26adf%3D807048394%26w%3D336%26lmt%3D1514673147%26format%3D336x280%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150669%26bpp%3D22%26fdt%3D26%26idt%3D109%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26ga_fc%3D0%26pv%3D&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D280%26slotname%3D2090078288%26adk%3D3229444603%26adf%3D807048394%26w%3D336%26lmt%3D1514673147%26format%3D336x280%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150669%26bpp%3D22%26fdt%3D26%26idt%3D109%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26ga_fc%3D0%26pv%3D&avms=geo&v=r20171206 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pcs/activeview?xai=AKAOjsu_5hsdz2Y5B8j1W8bJY7_rmQTtasEMKlIbyJnWgnX3pqyBywh18JkYQ7wI8BIqJfrkk_lufNOfzoKJ8c4PAUg&sig=Cg0ArKJSzPXBcTfMVzMUEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,250,300&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=6&bs=1184,715&bos=1184,863&ps=-12245933,-12245933&ss=1176,885&pt=3526&xde=1&deb=1-2-2-0-1-3&tvt=2&is=300,250&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D280%26slotname%3D2090078288%26adk%3D3229444603%26adf%3D807048394%26w%3D336%26lmt%3D1514673147%26format%3D336x280%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150669%26bpp%3D22%26fdt%3D26%26idt%3D109%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26ga_fc%3D0%26pv%3D&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D280%26slotname%3D2090078288%26adk%3D3229444603%26adf%3D807048394%26w%3D336%26lmt%3D1514673147%26format%3D336x280%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150669%26bpp%3D22%26fdt%3D26%26idt%3D109%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26ga_fc%3D0%26pv%3D&referrer=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&avms=xde&v=r20171206 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pcs/activeview?xai=AKAOjsul-hrIGKA7tGW3RWeP6hGkb6nmaQo4DdVYznt-SSVIcCl4gXWH8VfwGnVwwjglD42h6jXXNDNdfGb1nJrNa8U&sig=Cg0ArKJSzGOmRE4JzUjBEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,605,160&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=3309&ss=1176,885&pt=-1&deb=1-2-0-0-0--1&tvt=0&is=160,600&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D600%26slotname%3D2090078288%26adk%3D888891628%26adf%3D807048394%26w%3D250%26lmt%3D1514673147%26format%3D250x600%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150934%26bpp%3D16%26fdt%3D101%26idt%3D369%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%252C336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26g&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D600%26slotname%3D2090078288%26adk%3D888891628%26adf%3D807048394%26w%3D250%26lmt%3D1514673147%26format%3D250x600%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150934%26bpp%3D16%26fdt%3D101%26idt%3D369%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%252C336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26g&avms=geo&v=r20171206 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pcs/activeview?xai=AKAOjssX2l3XIfIoJK_0MHFrQVsEWu9P_355FlcPI8LmXkmMGBFXfzB3kJNxB8kZGbI6LUkkY6ebfqXtJRai5hlpGp0&sig=Cg0ArKJSzKCd4gV8B16UEAE&id=lidar2&adk=1&mtos=0,0,0,0,0&tos=0,0,0,0,0&p=0,0,600,160&inapp=0&mcvt=0&rs=5&mc=-1&lte=-2&bas=-1&bac=-1&if=1&r=pv&tt=5&bs=1184,715&bos=1184,863&ps=-12245933,-12245933&ss=1176,885&pt=3311&xde=1&deb=1-2-2-0-1-3&tvt=2&is=160,600&iframe_loc=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D600%26slotname%3D2090078288%26adk%3D888891628%26adf%3D807048394%26w%3D250%26lmt%3D1514673147%26format%3D250x600%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150934%26bpp%3D16%26fdt%3D101%26idt%3D369%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%252C336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26g&url=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4563949589232616%26output%3Dhtml%26h%3D600%26slotname%3D2090078288%26adk%3D888891628%26adf%3D807048394%26w%3D250%26lmt%3D1514673147%26format%3D250x600%26url%3Dhttp%253A%252F%252Fotzovikotdbix.ru%252Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%252F%26ea%3D0%26flash%3D10.0.45%26wgl%3D0%26adsid%3DNT%26dt%3D1514673150934%26bpp%3D16%26fdt%3D101%26idt%3D369%26shv%3Dr20171206%26cbv%3Dr20170110%26saldr%3Daa%26prev_fmts%3D336x280%252C336x280%26correlator%3D3261022184337%26frm%3D20%26ga_vid%3D1702437279.1514673150%26ga_sid%3D1514673150%26ga_hid%3D850920343%26g&referrer=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&avms=xde&v=r20171206 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /activity;src=4160851;pid=208520401;aid=408272372;ko=0;cid=94797719;rid=94753634;rv=1;met=1;&timestamp=1514673164331;eid1=2;ecn1=1;etm1=9;eid2=871060;ecn2=1;etm2=0; HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /activity;src=4160851;pid=208520404;aid=408283777;ko=0;cid=94797707;rid=94753622;rv=1;met=1;&timestamp=1514673164659;eid1=2;ecn1=1;etm1=9;eid2=871060;ecn2=1;etm2=0; HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            OPTIONS /watch/31752956?page-url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&charset=utf-8&browser-info=ti%3A7%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20171230233246%3Aet%3A1514673167%3Aen%3Autf-8%3Av%3A932%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A762%3Als%3A169939860268%3Arqn%3A2%3Arn%3A905703551%3Ahid%3A658957245%3Arqnl%3A1%3Ast%3A1514673167%3Au%3A1514673152242187887 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://otzovikotdbix.ru
Access-Control-Request-Method: POST

                                         
                                         213.180.193.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:46 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /watch/31752956?page-url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&charset=utf-8&browser-info=ti%3A4%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20171230233246%3Aet%3A1514673167%3Aen%3Autf-8%3Av%3A932%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A762%3Als%3A169939860268%3Arqn%3A2%3Arn%3A905703551%3Ahid%3A658957245%3Arqnl%3A1%3Ast%3A1514673167%3Au%3A1514673152242187887 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://otzovikotdbix.ru/otdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo/
Cookie: yandexuid=7774738731514673152; yp=1830033152.yrts.1514673152; yabs-sid=1295830281514673152; i=+X7FKzTXPbce37D+dnFQHi+6DKPposKMxWkwMjQF/loiyKOgRFtQvpZaLWKlut1arHlL8bi7EoxrIzGy0rzU1MgCTus=

                                         
                                         213.180.193.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Sat, 30 Dec 2017 22:32:46 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 30 Dec 2017 22:32:46 GMT
Expires: Sat, 30 Dec 2017 22:32:46 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /activity;src=4160851;pid=208520401;aid=408272372;ko=0;cid=94797719;rid=94753634;rv=1;met=1;&timestamp=1514673174332;eid1=2;ecn1=0;etm1=10; HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=280&slotname=2090078288&adk=3229444603&adf=807048394&w=336&lmt=1514673147&format=336x280&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150669&bpp=22&fdt=26&idt=109&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=242&ady=4531&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=128
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /activity;src=4160851;pid=208520404;aid=408283777;ko=0;cid=94797707;rid=94753622;rv=1;met=1;&timestamp=1514673174659;eid1=2;ecn1=0;etm1=10; HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4563949589232616&output=html&h=600&slotname=2090078288&adk=888891628&adf=807048394&w=250&lmt=1514673147&format=250x600&url=http%3A%2F%2Fotzovikotdbix.ru%2Fotdyih-v-noyabre-na-more-za-granitsey-gde-teplo-nedorogo%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1514673150934&bpp=16&fdt=101&idt=369&shv=r20171206&cbv=r20170110&saldr=aa&prev_fmts=336x280%2C336x280&correlator=3261022184337&frm=20&ga_vid=1702437279.1514673150&ga_sid=1514673150&ga_hid=850920343&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=780&ady=2801&biw=1159&bih=754&abxe=1&eid=21061122%2C191880502%2C41667000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=395
Cookie: IDE=AHWqTUnxn7hzS4pzqO7s17_fIy6EuUemtGtSpSYBy1BJB4bnkvVM2Wy7mGtkBa9Y

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sat, 30 Dec 2017 22:32:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629