Overview

URL website.informer.com/mail-n13.telecomputing.no
IP52.1.219.11
ASNAS14618 Amazon.com, Inc.
Location United States
Report completed2018-02-23 07:51:29 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 52.1.219.11

Date UQ / IDS / BL URL IP
2017-11-13 09:40:36 +0100
0 - 0 - 0 website.informer.com/visit?domain=isdmail.hcl.com 52.1.219.11
2017-11-03 21:08:56 +0100
0 - 0 - 0 website.informer.com/Meleotrope.html 52.1.219.11
2017-10-26 17:03:08 +0200
0 - 0 - 0 website.informer.com/visit?domain=isdmail.hcl.com 52.1.219.11
2017-10-10 07:42:47 +0200
0 - 0 - 0 website.informer.com/Brendon+Ruddick+Meleotro (...) 52.1.219.11
2017-10-05 14:54:07 +0200
0 - 0 - 0 website.informer.com 52.1.219.11
2017-10-04 23:24:20 +0200
0 - 0 - 0 website.informer.com/artemis.tjx.com 52.1.219.11
2017-09-22 01:02:43 +0200
0 - 0 - 0 website.informer.com/Brendon+Ruddick+Meleotro (...) 52.1.219.11
2017-09-22 01:00:05 +0200
0 - 0 - 0 website.informer.com/ninwinter.com/emails 52.1.219.11
2017-09-22 00:51:46 +0200
0 - 0 - 0 website.informer.com/Meleotrope.htm 52.1.219.11
2017-09-22 00:50:05 +0200
0 - 0 - 0 website.informer.com/buddiesprice.com 52.1.219.11

Last 10 reports on ASN: AS14618 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2018-06-18 01:22:51 +0200
0 - 0 - 3 search.searchvfr.com/?ap=appfocus157 54.225.245.221
2018-06-18 01:05:54 +0200
0 - 0 - 17 karen-cockburn.ca/2014/03 54.87.208.210
2018-06-18 01:04:57 +0200
0 - 0 - 16 www.karen-cockburn.ca/2014/03/ 54.87.208.210
2018-06-18 00:37:11 +0200
0 - 0 - 16 www.karen-cockburn.ca/tag/team-canada/ 54.87.208.210
2018-06-18 00:30:39 +0200
0 - 0 - 0 https://www.sitejabber.com/reviews/togel-sing (...) 52.4.241.179
2018-06-18 00:26:57 +0200
0 - 0 - 0 https://hubpages.com/@chikapenelope 54.210.196.148
2018-06-18 00:26:32 +0200
0 - 0 - 0 hub.me/alY8W 52.20.30.185
2018-06-18 00:21:26 +0200
0 - 0 - 3 search.heasycouponsaccess.com/?ap=appfocus368 107.22.191.31
2018-06-18 00:11:49 +0200
0 - 0 - 0 https://issuu.com/chikapenelope/docs/togelonl (...) 52.72.26.162
2018-06-17 23:18:02 +0200
0 - 0 - 1 my180.com/images/esoft/esoft.htm?5.1.2 52.5.103.164

No other reports on domain: informer.com



JavaScript

Executed Scripts (72)


Executed Evals (85)

#1 JavaScript::Eval (size: 31, repeated: 3) - SHA256: b50f25e6df6bf758a10177d7020c4d9e9772026e04be664fe67f31ce58c9aa3a

                                        0,
function(Y) {
    E(Y, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 3) - SHA256: 0969ee3f92ed3762c1aab729cb1d03a73e6b7d2516975ce1699f3ec42387fe6e

                                        0,
function(Y) {
    E(Y, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 3) - SHA256: e118bf06b267946a180dffdf1c5af05eaab429c5f94a26162a2c128a12686e44

                                        0,
function(Y) {
    E(Y, 4);
}
                                    

#4 JavaScript::Eval (size: 38, repeated: 3) - SHA256: 6ea78065aa91977b100c0f5ad446f9345089f6f5332f57c34a6139251e9c94e1

                                        0,
function(Y) {
    Y.H && H(Y, 0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 3) - SHA256: 8930399a71800f05d0c1b20163121de45ddba773ab77f91c548295339c6287e0

                                        0,
function(Y) {
    Y.O(0);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 3) - SHA256: cdf1f8d485fcb94af0bd350f72ea098ea6678959db1309c296feb07a4af18e76

                                        0,
function(Y) {
    Y.O(3);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 3) - SHA256: 5b0c5e895e99b935c1bf2de44de878d1f2ae8a31d14a6eac8f221ba49a7a3dc2

                                        0,
function(Y) {
    Y.O(4);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 3) - SHA256: b7f02854eaaded7e81aee6e3eec333ebf421a91e342eb09ece40c37de42e2c82

                                        0,
function(Y) {
    Y.O(7);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 3) - SHA256: 5388fe6670fecb1d5c910d75ea5cca9f89ef898ebb12aa93e1d6d16957532bec

                                        0,
function(Y) {
    d(Y, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 3) - SHA256: a17cfd0a3b41ec21d781bca51f7d77d2bd20f6f152f38ba0251edb5190eb3c3e

                                        0,
function(Y) {
    d(Y, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 3) - SHA256: 4c4e83a9bf3b67045ef7ee5a3f0bda81b1ba81354f8df910cfb0030d560db0dc

                                        0,
function(Y) {
    d(Y, 4);
}
                                    

#12 JavaScript::Eval (size: 52, repeated: 3) - SHA256: bfeff206068f83cb009447cd7bb1d0f993b2d5d5ceb9f43d43bbc3ae25cdb369

                                        0,
function(Y, v) {
    (v = Y.g(Y.o()), T)(Y, v);
}
                                    

#13 JavaScript::Eval (size: 185, repeated: 3) - SHA256: b382cbbf3510aea5fa0601bd6c0939cde0bb2bde857e07275d563ef2af40ff28

                                        0,
function(Y, v) {
    (v.push(Y[0] << 24 | Y[1] << 16 | Y[2] << 8 | Y[3]), v.push(Y[4] << 24 | Y[5] << 16 | Y[6] << 8 | Y[7]), v).push(Y[8] << 24 | Y[9] << 16 | Y[10] << 8 | Y[11]);
}
                                    

#14 JavaScript::Eval (size: 95, repeated: 3) - SHA256: 71fd183ae393c06be38f3ae6b71f385d547e9c7b5815d2f4db18b06119fdd683

                                        0,
function(Y, v) {
    Y = (v = Y.o(), Y.g(v)), Y[0].removeEventListener(Y[1], Y[2], false);
}
                                    

#15 JavaScript::Eval (size: 125, repeated: 3) - SHA256: b4e073c57b8c0d2dc6f3b6af91a7d87d625a741acb71f2ceccce302063391c5a

                                        0,
function(Y, v) {
    if ((v = this.G[Y], void 0) === v) {
        throw R(this, 30, 0, Y), this.$;
    }
    return v();
}
                                    

#16 JavaScript::Eval (size: 513, repeated: 3) - SHA256: b194b30b92f440c43324238243649275b08ca9bac87790b3b4a7dbee7d455687

                                        0,
function(Y, v) {
    if (this.a) {
        return Y = Y ? this.a().shift() : this.F().shift(), this.a().length ||
            this.F().length || (this.F = this.a = void 0, this.R--), Y;
    }
    if (!(Y = this.g(210), Y in this.U)) {
        throw R(this, 31), this.$;
    }
    return (void 0 == this.L && (this.L = I(this.U, Y - 4), this.M = void 0), this.M != Y >> 3 &&
        (this.M = Y >> 3, v = [0, 0, 0, this.g(165)], this.X = e(this.L, this.M, v)), f(this, 210, Y + 1), this.U)[Y] ^ this.X[Y % 8];
}
                                    

#17 JavaScript::Eval (size: 83, repeated: 3) - SHA256: 9b58b277095fb3f07a4231462dacb5577c21a0d80cb28d57422a6367a1a4470e

                                        0,
function(Y, v) {
    r(Y, 1, 5) || (v = q(Y), f(Y, v.f, v.Z.apply(v.I, v.J)));
}
                                    

#18 JavaScript::Eval (size: 88, repeated: 3) - SHA256: 5ce77e7792c75e65745e5d595ecd9cea548ade8473e7a87a8339de51e50b705b

                                        0,
function(Y, v, V) {
    (V = (v = Y.o(), Y.o()), 0) != Y.g(v) && f(Y, 210, Y.g(V));
}
                                    

#19 JavaScript::Eval (size: 80, repeated: 3) - SHA256: 7ad9ebae4799c44a29418a538afcbf59e28a124538263bbc0385575902fe672a

                                        0,
function(Y, v, V) {
    (V = (v = Y.o(), Y.o()), f)(Y, V, Y.g(V) % Y.g(v));
}
                                    

#20 JavaScript::Eval (size: 80, repeated: 3) - SHA256: bfa4d0a1451ff044b341854a960170249fde22bd8bf2ecfc69c7ede38e39b6f9

                                        0,
function(Y, v, V) {
    (V = (v = Y.o(), Y.o()), f)(Y, V, Y.g(V) * Y.g(v));
}
                                    

#21 JavaScript::Eval (size: 80, repeated: 3) - SHA256: 64c72e893e1f6de5400e453d68a4f3a56d6040feac3f78ac60875ab02e46a87e

                                        0,
function(Y, v, V) {
    (V = (v = Y.o(), Y.o()), f)(Y, V, Y.g(V) + Y.g(v));
}
                                    

#22 JavaScript::Eval (size: 80, repeated: 3) - SHA256: 8db9c6c2786bf3ef5db52b1783785bc5a38b3498ea3fa9c527694839ffa333ab

                                        0,
function(Y, v, V) {
    (V = (v = Y.o(), Y.o()), f)(Y, V, Y.g(V) - Y.g(v));
}
                                    

#23 JavaScript::Eval (size: 244, repeated: 3) - SHA256: 165501cd89a61d3ac014faec3a0f1fd82abf3261c16682f0d480b5d2657eb85a

                                        0,
function(Y, v, V) {
    if (3 == Y.length) {
        for (V = 0; 3 > V; V++) {
            v[V] += Y[V];
        }
        for (Y = [13, 8, 13, 12, 16, 5, (V = 0, 3), 10, 15]; 9 > V; V++) {
            v[3](v, V % 3, Y[V]);
        }
    }
}
                                    

#24 JavaScript::Eval (size: 123, repeated: 3) - SHA256: 49e31f155ce50104f0f531d464918682d65d9f862156221f14487baef2b0a9e0

                                        0,
function(Y, v, V) {
    r(Y, 1, 5) ||
        (v = Y.o(), V = Y.o(), f(Y, V, function(Y) {
            return eval(Y);
        }(Y.g(v))));
}
                                    

#25 JavaScript::Eval (size: 133, repeated: 3) - SHA256: 0521dfd83dbe3ad4f91b63181a01adf8987c219f9685cb1503ab4d718b9052bf

                                        0,
function(Y, v, V) {
    return V = function() {
        return Y;
    }, v = function() {
        return V();
    }, v[this.m] = function(N) {
        Y = N;
    }, v;
}
                                    

#26 JavaScript::Eval (size: 81, repeated: 3) - SHA256: 412647327cf19be9a1176d9c99bce2a9537044b7c054e92756f2591a08f2ffbd

                                        0,
function(Y, v, V) {
    v = (V = (v = Y.o(), Y.o()), Y).g(v), f(Y, V, A(v));
}
                                    

#27 JavaScript::Eval (size: 86, repeated: 3) - SHA256: d87c64620b394d5ed5a1eaa3ed0e6f8cc38a6ecca14d1c5fa885ab74a183819e

                                        0,
function(Y, v, V) {
    v = (v = Y.o(), V = Y.o(), Y).G[v] && Y.g(v), f(Y, V, v);
}
                                    

#28 JavaScript::Eval (size: 72, repeated: 3) - SHA256: ef79497707e73325419e9227a23fdb5458e0f68d8ba0a7aa35477f6e60bc6c5d

                                        0,
function(Y, v, V) {
    v = Y.o(), V = Y.o(), f(Y, V, "" + Y.g(v));
}
                                    

#29 JavaScript::Eval (size: 206, repeated: 3) - SHA256: 73d02ac75a9cd6284ca37770876069b6f2b4ffad4aedbde25785a8034bd5b917

                                        0,
function(Y, v, V, c) {
    ((V = (c = (Y &= (v = Y & 4, 3), V = this.o(), this.o()), this).g(V), v) &&
        (V = y(("" + V).replace(/\r\n/g, "\n"))), Y && Q(this, c, G(V.length, 2)), Q)(this, c, V);
}
                                    

#30 JavaScript::Eval (size: 92, repeated: 3) - SHA256: f8bbdf7a3c1f160432ca60ba56bffeb92a0174addfaea6fe95e0648341ae716e

                                        0,
function(Y, v, V, c) {
    (c = (V = (v = Y.o(), Y.o()), Y).o(), f)(Y, c, Y.g(v) << V);
}
                                    

#31 JavaScript::Eval (size: 92, repeated: 3) - SHA256: 5d908daa6362068891e333cbc6cbcf52c0a0d166e66eebec0146617fba27c40d

                                        0,
function(Y, v, V, c) {
    (c = (V = (v = Y.o(), Y.o()), Y).o(), f)(Y, c, Y.g(v) >> V);
}
                                    

#32 JavaScript::Eval (size: 109, repeated: 3) - SHA256: c0330ccc8dba4d4e59b1c180f8e0b79817c115ea6d41e35f9e6bc88a9391fe4f

                                        0,
function(Y, v, V, c) {
    V = (c = (V = (v = Y.o(), Y).o(), Y).o(), Y.g(V)), v = Y.g(v), f(Y, c, v[V]);
}
                                    

#33 JavaScript::Eval (size: 102, repeated: 3) - SHA256: b1d8340a2c852df04f8b661a56039e02491f57564a41581850fad3f9eb34a196

                                        0,
function(Y, v, V, c) {
    V = (v = Y.o(), Y).o(), c = Y.o(), v = Y.g(v) == Y.g(V), f(Y, c, +v);
}
                                    

#34 JavaScript::Eval (size: 101, repeated: 3) - SHA256: 0158de551d14ccbbc9502e83850a7866df08f44815cd07f57b3be392a3d06faf

                                        0,
function(Y, v, V, c) {
    V = (v = Y.o(), Y).o(), c = Y.o(), v = Y.g(v) > Y.g(V), f(Y, c, +v);
}
                                    

#35 JavaScript::Eval (size: 92, repeated: 3) - SHA256: 79d9c71855d59e432c1540a11251522b1e0579cd7c5af9d2dedf65f39222e2da

                                        0,
function(Y, v, V, c) {
    c = (v = Y.o(), V = Y.o(), Y).o(), f(Y, c, Y.g(v) | Y.g(V));
}
                                    

#36 JavaScript::Eval (size: 93, repeated: 3) - SHA256: 9b8e2e9d46d1478c8ca986e6067593152bf64c584f22ef7e4fb2793c9635fc8d

                                        0,
function(Y, v, V, c) {
    c = (v = Y.o(), V = Y.o(), Y).o(), f(Y, c, Y.g(v) || Y.g(V));
}
                                    

#37 JavaScript::Eval (size: 155, repeated: 3) - SHA256: b4f352f4dced26b39a6f3e093d3c979c01642dd7c6e0dac506972a900b59a799

                                        0,
function(Y, v, V, c) {
    for (; V--;) {
        210 != V &&
            189 != V && v.G[V] && (v.G[V] = v[c](v[Y](V), this));
    }
    v[Y] = this;
}
                                    

#38 JavaScript::Eval (size: 243, repeated: 3) - SHA256: 870fd4b7843c464d6337085f8091d71da8b7bc95b42a67a0948d6de948e84d59

                                        0,
function(Y, v, V, c) {
    if ((v = Y.C.pop())) {
        for (V = Y.o(); 0 < V; V--) {
            c = Y.o(), v[c] = Y.G[c];
        }
        (v[v[16] = Y.G[16], 34] = Y.G[34], Y).G = v;
    } else {
        f(Y, 210, Y.U.length);
    }
}
                                    

#39 JavaScript::Eval (size: 170, repeated: 3) - SHA256: 708d360f000ae51976eadcd9a1e6af892c613f083f868faa942eb3805e9bba63

                                        0,
function(Y, v, V, c) {
    try {
        c = Y[(v + 2) % 3], Y[v] = Y[v] - Y[(v + 1) % 3] - c ^ (1 == v ? c << V : c >>> V);
    } catch (m) {
        throw m;
    }
}
                                    

#40 JavaScript::Eval (size: 89, repeated: 3) - SHA256: f9226dc49b5f2da635cd72002c125c31c39c02bcb3d5c1c28186323b5ec79072

                                        0,
function(Y, v, V, c) {
    v = Y.o(), V = Y.o(), c = Y.o(), Y.g(v)[Y.g(V)] = Y.g(c);
}
                                    

#41 JavaScript::Eval (size: 97, repeated: 3) - SHA256: 4608d3e600ee1c5f31dcb7df3897e29a83e11cf70757bd85454ecc553b334c51

                                        0,
function(Y, v, V, c) {
    v = Y.o(), V = Y.o(), c = Y.o(), f(Y, c, (Y.g(v) in Y.g(V)) + 0);
}
                                    

#42 JavaScript::Eval (size: 224, repeated: 3) - SHA256: 7a69d52d567410c7f44be6fb6ea9dd9098575110eb8aaf95cbc5852e9771e22b

                                        0,
function(Y, v, V, c, m) {
    0 !== (c = (V = (m = (v = Y.o(), V = Y.o(), c = Y.o(), v = Y.g(v), Y.g(Y.o())), Y).g(V), Y.g(c)), v) &&
        (c = k(Y, c, m, 1, v, V), v.addEventListener(V, c, n), f(Y, 182, [v, V, c]));
}
                                    

#43 JavaScript::Eval (size: 126, repeated: 3) - SHA256: f07c9b19473a51a8f42f8d28b931384104bbc3976195f823f346f8f05b8ef73c

                                        0,
function(Y, v, V, c, m) {
    V = (v = Y.o(), Y.o()), c = Y.g(Y.o()), m = Y.g(Y.o()), V = Y.g(V), f(Y, v, k(Y, V, c, m));
}
                                    

#44 JavaScript::Eval (size: 138, repeated: 3) - SHA256: 91c3c9de27bf6eac49f181a96d759617bd6365426f0dce6fac01b350859f5ceb

                                        0,
function(Y, v, V, c, m) {
    for (m = (V = (v = Y.o(), X(Y)), 0), c = []; m < V; m++) {
        c.push(Y.o());
    }
    f(Y, v, c);
}
                                    

#45 JavaScript::Eval (size: 395, repeated: 3) - SHA256: a539c2c7643a27c4cf96dcff553d2d1d61a91ece01de8a0e0e602e63b3772854

                                        0,
function(Y, v, V, c, m, M) {
    if (!r(Y, 1, 255)) {
        if (c = (m = (v = Y.o(), V = Y.o(), c = Y.o(), Y).o(), v = Y.g(v), V = Y.g(V), Y.g(c)), Y = Y.g(m), "object" == A(v)) {
            for (M in m = [], v) {
                m.push(M);
            }
            v = m;
        }
        for (m = 0, M = v.length; m < M; m += c) {
            V(v.slice(m, m + c), Y);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 218, repeated: 3) - SHA256: b3d88cdeecf4fbdec2d67951c70de7a4a8e66e670d7c47fa4376d88e7f580be2

                                        0,
function(Y, v, V, c, m, M) {
    return Y = (((V = (c = function() {
        return c[V.P + (m[V.l] === v) - !M[V.l]];
    }, m = function() {
        return c();
    }, this), M = V.Y, m)[V.m] = function(Y) {
        c[V.s] = Y;
    }, m)[V.m](Y), m);
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 3) - SHA256: b09819576307fd80aecaa268f3ce146b932d8a64a20b83c8c0353c65bcd8bfef

                                        0,
function(Y, v, V, c, m, M, S) {
    r(Y, 1, 5) ||
        (v = q(Y), m = v.Z, c = v.I, V = v.J, S = V.length, 0 == S ? (M = new(c[m])) : 1 == S ? (M = new(c[m])(V[0])) : 2 == S ? (M = new(c[m])(V[0], V[1])) : 3 == S ? (M = new(c[m])(V[0], V[1], V[2])) : 4 == S ? (M = new(c[m])(V[0], V[1], V[2], V[3])) : R(Y, 22), f(Y, v.f, M));
}
                                    

#48 JavaScript::Eval (size: 774, repeated: 3) - SHA256: 545be752cf65a6f5c1ca7b692d39330ff805dce41dbf13b9e0a6b674890ecc2b

                                        0,
function(Y, v, V, c, m, M, S, P, g, Z, b, t, B) {
    for (P = (S = (M = (c = V = (v = Y.o(), 0), m = function(v, m) {
            for (; c < v;) {
                V |= Y.o() << c, c += 8;
            }
            return V >>= (m = V & (1 << v) - 1, c -= v, v), m;
        }, m(3)) + 1, m(5)), []), Z = g = 0; Z < S; Z++) {
        b = m(1), P.push(b), g += b ? 0 : 1;
    }
    for (g = (g - 1).toString(2).length, Z = 0, t = []; Z < S; Z++) {
        P[Z] || (t[Z] = m(g));
    }
    for (Z = 0; Z < S; Z++) {
        P[Z] && (t[Z] = Y.o());
    }
    for (Z = M, B = []; Z--;) {
        B.push(Y.g(Y.o()));
    }
    f(Y, v, function(Y, v, V, c, m) {
        for (c = 0, V = [], Y.R++, v = []; c < S; c++) {
            if (m = t[c], !P[c]) {
                for (; m >= v.length;) {
                    v.push(Y.o());
                }
                m = v[m];
            }
            V.push(m);
        }
        Y.a = Y.b(B.slice(), Y.o), Y.F = Y.b(V, Y.o);
    });
}
                                    

#49 JavaScript::Eval (size: 294, repeated: 3) - SHA256: c16dbccfb8a88e54de7315c2f7e9e736cbe5ba615efac18bcaab6d8405c3b015

                                        0,
function(Y, v, V, m, x, M, S) {
    if ((m = (V = (v = Y.o(), X(Y)), ""), Y.G)[1]) {
        for (x = Y.g(1), S = x.length, M = 0; V--;) {
            M = (M + X(Y)) % S, m += c[x[M]];
        }
    } else {
        for (; V--;) {
            m += c[Y.o()];
        }
    }
    f(Y, v, m);
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 3) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 3) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#52 JavaScript::Eval (size: 120, repeated: 3) - SHA256: bc2efbc86ff7bf7b72ea1b841d57ae0154fd3f47bad12f107d11228dd3cf7eb6

                                        E = function(Y, v, V, c) {
    for (c = (V = Y.o(), 0); 0 < v; v--) {
        c = c << 8 | Y.o();
    }
    f(Y, V, c);
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 3) - SHA256: a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c

                                        I
                                    

#54 JavaScript::Eval (size: 88, repeated: 3) - SHA256: a0d117110c7e63a9a16d4cb3542e332881a5d274eff0a018359cef6a2dc20324

                                        I = function(Y, v) {
    return Y[v] << 24 | Y[v + 1] << 16 | Y[v + 2] << 8 | Y[v + 3];
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#56 JavaScript::Eval (size: 133, repeated: 3) - SHA256: 4124962afcd26fbe41f970899f81429531eec17109e4d6c1d6ded3b5dd3e948a

                                        K = function(Y, v, V) {
    return (V = Y.g(210), Y).U && V < Y.U.length ? (f(Y, 210, Y.U.length), T(Y, v)) : f(Y, 210, v), O(Y, V);
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 3) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#58 JavaScript::Eval (size: 636, repeated: 3) - SHA256: b4d297328c4fe41bfba7703851d28cdd8b51b2a8b56b93a351993547183f7d5f

                                        O = function(Y, v, V, c, m, N, C) {
    Y.R++;
    try {
        for (N = (m = void 0, 0), c = 5001, V = Y.U.length;
            (--c || Y.c) && (Y.a || (N = Y.g(210)) < V);) {
            try {
                Y.a ? (m = Y.o(true)) : (f(Y, 189, N), C = Y.o(), m = Y.g(C)), m && m.call ? m(Y) : R(Y, 21, 0, C), Y.S = true, r(Y, 0, 2);
            } catch (u) {
                u != Y.$ && (Y.g(134) ? R(Y, 22, u) : f(Y, 134, u));
            }
        }
        c || R(Y, 33);
    } catch (u) {
        try {
            R(Y, 22, u);
        } catch (U) {
            L(Y, U);
        }
    }
    return (V = Y.g(66), v) && f(Y, 210, v), Y.R--, V;
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#60 JavaScript::Eval (size: 396, repeated: 3) - SHA256: 61fe4a25012b0cedbe5675475cc2e591ec921d569769b1a021394c210beb1cad

                                        Q = function(Y, v, V, c, m, N) {
    for (Y = (m = Y.g(v), 24 == v ? (v = function(Y, v, V, c) {
            if (v = m.length, V = v - 4 >> 3, m.V != V) {
                c = [0, 0, (m.V = V, 0), N], V = (V << 3) - 4;
                try {
                    m.A = e(I(m, V), I(m, V + 4), c);
                } catch (M) {
                    throw M;
                }
            }
            m.push(m.A[v & 7] ^ Y);
        }, N = Y.g(101)) : (v = function(Y) {
            m.push(Y);
        }), c && v(c & 255), c = 0, V.length); c < Y; c++) {
        v(V[c]);
    }
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac

                                        R
                                    

#62 JavaScript::Eval (size: 425, repeated: 3) - SHA256: 8e9d56cd51c8ca0b40c4670873a0347aad4363410a995f537d551f46c45997b7

                                        R = function(Y, v, V, c, m) {
    (V = (0 == (v = (m = Y.g(189), [v, m >> 8 & 255, m & 255]), void 0 != c && v.push(c), Y.g(16)).length &&
        (Y.G[16] = void 0, f(Y, 16, v)), c = "", V &&
        (V.message && (c += V.message), V.stack && (c += ":" + V.stack)), Y).g(34), 3) < V &&
        (c = c.slice(0, V - 3), V -= c.length + 3, c = y(c.replace(/\r\n/g, "\n")), Q(Y, 24, G(c.length, 2).concat(c), 12)), f(Y, 34, V);
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 3) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#64 JavaScript::Eval (size: 81, repeated: 3) - SHA256: 534c4e4eef45e1b1f2427da22f5758bc69eaf86b6bde66d545d08e893e6ef540

                                        T = function(Y, v) {
    Y.C.push(Y.G.slice()), Y.G[210] = void 0, f(Y, 210, v);
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#66 JavaScript::Eval (size: 87, repeated: 3) - SHA256: a8989b0c382f9ef15ae77aa056677193517bf4be87a298e1f7b8bf52a58c7024

                                        X = function(Y, v) {
    return (v = Y.o(), v & 128) && (v = v & 127 | Y.o() << 7), v;
}
                                    

#67 JavaScript::Eval (size: 2, repeated: 33) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#68 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4

                                        d
                                    

#69 JavaScript::Eval (size: 78, repeated: 3) - SHA256: 6a77c649a5b98f264723a2129a642d651dd0d3a46798fa5ba0628a3d6518dc75

                                        d = function(Y, v, V, c) {
    (V = Y.o(), c = Y.o(), Q)(Y, c, G(Y.g(V), v));
}
                                    

#70 JavaScript::Eval (size: 35, repeated: 2) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#71 JavaScript::Eval (size: 29, repeated: 2) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#72 JavaScript::Eval (size: 35, repeated: 2) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#73 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#74 JavaScript::Eval (size: 366, repeated: 3) - SHA256: 0f3521cf7da65cc04203be83f959e73898cb6444457da6fb2910310cce81c8a6

                                        e = function(Y, v, V, c) {
    try {
        for (c = 0; 79669387488 != c;) {
            Y += (v << 4 ^ v >>> 5) + v ^ c + V[c & 3], c += 2489668359, v += (Y << 4 ^ Y >>> 5) + Y ^ c + V[c >>> 11 & 3];
        }
        return [Y >>> 24, Y >> 16 & 255, Y >> 8 & 255, Y & 255, v >>> 24, v >> 16 & 255, v >> 8 & 255, v & 255];
    } catch (m) {
        throw m;
    }
}
                                    

#75 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#76 JavaScript::Eval (size: 327, repeated: 3) - SHA256: 3c3383cba47bea24e59756aed5640c6a8bb7b984d7c2ccf7ff9168d1027b5f87

                                        f = function(Y, v, V) {
    if (210 == v || 189 == v) {
        if (Y.G[v]) {
            Y.G[v][Y.m](V);
        } else {
            Y.G[v] = Y.B(V);
        }
    } else if (184 != v && 24 != v && 157 != v && 16 != v || !Y.G[v]) {
        Y.G[v] = Y.b(V, Y.g);
    }
    165 == v && (Y.L = void 0, f(Y, 210, Y.g(210) + 4));
}
                                    

#77 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#78 JavaScript::Eval (size: 272, repeated: 3) - SHA256: 05157a5c1e1a1103402d093fc9ca3eb4b7b5bd235670d91771522598fe18b6d5

                                        k = function(Y, v, V, c, m, N) {
    return function() {
        var C = c & 1,
            u = [6, v, V, void 0, m, N, arguments];
        if (c & 2) {
            var U = (h(Y, u), l(Y, true, false, false));
        } else {
            C && Y.D.length ? h(Y, u) : C ? (h(Y, u), l(Y, true, false, false)) : (U = a(Y, u));
        }
        return U;
    };
}
                                    

#79 JavaScript::Eval (size: 9, repeated: 1) - SHA256: ebf49dcd836f810084c14e0f2dab4dc1768bbdc5980481bf201fcf76771dff7a

                                        navigator
                                    

#80 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#81 JavaScript::Eval (size: 263, repeated: 3) - SHA256: e5ec72986cf528de3c53637440e4bd92a31ffa60db8827289742294ababf4e86

                                        q = function(Y, v, V, c, m, N) {
    for (m = (c = ((v = {}, V = Y.o(), v).f = Y.o(), v.J = [], Y.o() - 1), Y.o()), N = 0; N < c; N++) {
        v.J.push(Y.o());
    }
    for (v.Z = Y.g(V), v.I = Y.g(m); c--;) {
        v.J[c] = Y.g(v.J[c]);
    }
    return v;
}
                                    

#82 JavaScript::Eval (size: 6, repeated: 2) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#83 JavaScript::Eval (size: 1, repeated: 3) - SHA256: a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa

                                        y
                                    

#84 JavaScript::Eval (size: 487, repeated: 3) - SHA256: 4456bf19ab47cc8a25645a85f7f4d93c00ea60fccea75adddf0f6e413b205974

                                        y = function(Y, v, V, c, m) {
    for (c = V = (v = [], 0); c < Y.length; c++) {
        m = Y.charCodeAt(c), 128 > m ? (v[V++] = m) : (2048 > m ? (v[V++] = m >> 6 | 192) : (55296 == (m & 64512) &&
            c + 1 < Y.length && 56320 == (Y.charCodeAt(c + 1) & 64512) ? (m = 65536 + ((m & 1023) << 10) + (Y.charCodeAt(++c) & 1023), v[V++] = m >> 18 | 240, v[V++] = m >> 12 & 63 | 128) : (v[V++] = m >> 12 | 224), v[V++] = m >> 6 & 63 | 128), v[V++] = m & 63 | 128);
    }
    return v;
}
                                    

#85 JavaScript::Eval (size: 1, repeated: 3) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

Executed Writes (8)

#1 JavaScript::Write (size: 0, repeated: 3) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1835, repeated: 1) - SHA256: 3df32fcb8fbc1e7144565e7de3340cfa7b62ee279ddcb28fc1734cf5499c70c2

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-4821006852914359"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180220/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="1066420625";google_ad_client="ca-pub-4821006852914359";google_adsbygoogle_status="done";google_ad_width=970;google_ad_height=90;google_ad_modifications={"plle":true,"eids":["368226201","38893302","21061122","191880502"],"loeids":["368226211","38893312"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_format="970x90";google_ad_unit_key="3443303733";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1519369045214;google_pub_vars="JTdCJTIyZ29vZ2xlX2FkX3Nsb3QlMjIlM0ElMjIxMDY2NDIwNjI1JTIyJTJDJTIyZ29vZ2xlX2FkX2NsaWVudCUyMiUzQSUyMmNhLXB1Yi00ODIxMDA2ODUyOTE0MzU5JTIyJTJDJTIyZ29vZ2xlX2Fkc2J5Z29vZ2xlX3N0YXR1cyUyMiUzQSUyMmRvbmUlMjIlMkMlMjJnb29nbGVfYWRfd2lkdGglMjIlM0E5NzAlMkMlMjJnb29nbGVfYWRfaGVpZ2h0JTIyJTNBOTAlMkMlMjJnb29nbGVfYWRfbW9kaWZpY2F0aW9ucyUyMiUzQSU3QiUyMnBsbGUlMjIlM0F0cnVlJTJDJTIyZWlkcyUyMiUzQSU1QiUyMjM2ODIyNjIwMSUyMiUyQyUyMjM4ODkzMzAyJTIyJTJDJTIyMjEwNjExMjIlMjIlMkMlMjIxOTE4ODA1MDIlMjIlNUQlMkMlMjJsb2VpZHMlMjIlM0ElNUIlMjIzNjgyMjYyMTElMjIlMkMlMjIzODg5MzMxMiUyMiU1RCU3RCUyQyUyMmdvb2dsZV9sb2FkZXJfdXNlZCUyMiUzQSUyMmFhJTIyJTJDJTIyZ29vZ2xlX3JlYWN0aXZlX3RhZ19maXJzdCUyMiUzQWZhbHNlJTJDJTIyZ29vZ2xlX2FkX2Zvcm1hdCUyMiUzQSUyMjk3MHg5MCUyMiUyQyUyMmdvb2dsZV9hZF91bml0X2tleSUyMiUzQSUyMjM0NDMzMDM3MzMlMjIlMkMlMjJnb29nbGVfYWRfZG9tX2ZpbmdlcnByaW50JTIyJTNBJTIyODA3MDQ4Mzk0JTIyJTdE";google_bpp=133;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180220/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 1623, repeated: 1) - SHA256: de5e6a1a41b17b8087c017aaaa84389050b02f0e701af8d20e10c7fc0bfb1ec9

                                        < !doctype html > < html > < body > < script > google_ad_slot = "2054905028";
google_ad_client = "ca-pub-4821006852914359";
google_adsbygoogle_status = "done";
google_ad_width = 728;
google_ad_height = 90;
google_ad_modifications = {
    "plle": true,
    "eids": ["368226201", "38893302", "21061122", "191880502"],
    "loeids": ["368226211", "38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "728x90";
google_ad_unit_key = "6187008";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1519369046606;
google_pub_vars = "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";
google_bpp = 14;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180220 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#4 JavaScript::Write (size: 1630, repeated: 1) - SHA256: 5e66ee4fd9961904985cad52edd9cfabe626e1713b78eac94bef51822a735ca0

                                        < !doctype html > < html > < body > < script > google_ad_slot = "3810839823";
google_ad_client = "ca-pub-4821006852914359";
google_adsbygoogle_status = "done";
google_ad_width = 728;
google_ad_height = 90;
google_ad_modifications = {
    "plle": true,
    "eids": ["368226201", "38893302", "21061122", "191880502"],
    "loeids": ["368226211", "38893312"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "728x90";
google_ad_unit_key = "4092795558";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1519369046433;
google_pub_vars = "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";
google_bpp = 23;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20180220 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#5 JavaScript::Write (size: 54, repeated: 3) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#6 JavaScript::Write (size: 1379, repeated: 1) - SHA256: 1a39beeb0ffeaaf8bb9fd7a18c807381b9edf1a01d655b5182ca40fed3e15d58

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "970"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&amp;output=html&amp;h=90&amp;slotname=1066420625&amp;adk=3443303733&amp;adf=807048394&amp;w=970&amp;lmt=1519369044&amp;loeid=368226211%2C38893312&amp;format=970x90&amp;url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1519369045214&amp;bpp=133&amp;fdt=144&amp;idt=428&amp;shv=r20180220&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=1609264330440&amp;frm=20&amp;ga_vid=1069465121.1519369046&amp;ga_sid=1519369046&amp;ga_hid=1275299441&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=103&amp;ady=274&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;dtd=1124"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#7 JavaScript::Write (size: 1397, repeated: 1) - SHA256: 8f3b8c6eedef6a273037f58f4dd6f1532700b15c34d6b10000166138399f35b1

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&amp;output=html&amp;h=90&amp;slotname=3810839823&amp;adk=4092795558&amp;adf=807048394&amp;w=728&amp;lmt=1519369044&amp;loeid=368226211%2C38893312&amp;format=728x90&amp;url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1519369046433&amp;bpp=23&amp;fdt=29&amp;idt=134&amp;shv=r20180220&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=970x90&amp;correlator=1609264330440&amp;frm=20&amp;ga_vid=1069465121.1519369046&amp;ga_sid=1519369046&amp;ga_hid=1275299441&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=224&amp;ady=528&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;dtd=160"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#8 JavaScript::Write (size: 1405, repeated: 1) - SHA256: d3ff191f7c492b2568e0bdaf100b55ed53acef84aca1c421ea1e024415d7ce8a

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&amp;output=html&amp;h=90&amp;slotname=2054905028&amp;adk=6187008&amp;adf=807048394&amp;w=728&amp;lmt=1519369044&amp;loeid=368226211%2C38893312&amp;format=728x90&amp;url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1519369046606&amp;bpp=14&amp;fdt=67&amp;idt=230&amp;shv=r20180220&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=970x90%2C728x90&amp;correlator=1609264330440&amp;frm=20&amp;ga_vid=1069465121.1519369046&amp;ga_sid=1519369046&amp;ga_hid=1275299441&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=216&amp;ady=774&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=3&amp;dtd=287"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (92)


Request Response
                                        
                                            GET /mail-n13.telecomputing.no HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, User-Agent
Set-Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; path=/ e994=1; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6657
Md5:    b4400a8710d084a6bcfc2b3651064a93
Sha1:   f3dcfe92085a7cea63c56a9aa8fb5f1a23e47c15
Sha256: c165e931a45aa0a8dd533f34ae34e45dfd77d5a43390c5f21ca60335536ee930
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 23 Feb 2018 06:57:24 GMT
Expires: Fri, 23 Feb 2018 06:57:24 GMT
Cache-Control: private, max-age=3600
Etag: 7451993061714636791
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26582
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26582
Md5:    72edc47cf0c69589635bb6e574df6a27
Sha1:   50daf5c31ea8449cd5f8a066b628be531a8d568d
Sha256: 767fc02dd5b4b08a2f173d1ecd091b74104be8dcd8f39a195058e3ed89b70eee
                                        
                                            GET /css/css.css HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"596c9169-6b7d"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5943
Md5:    9f46129b3f80bdb6868d499e1b73f265
Sha1:   e38444bf5aceacf42fac1894c36b5bc5e567f1e6
Sha256: 214e3ee092c75a880ac732c36ddfa2f1d669b5ac219b16099ad3a9ddea2af757
                                        
                                            GET /js/m.js HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"596c9169-25b"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   415
Md5:    8f3a2176bfd01d0866403b748bce058d
Sha1:   03689c7928f0168c408da7d4b466e64e64a2c4cf
Sha256: 3d578d093bb98a46276ecdd7f5fc332ff332f9a8300ddec59343aab7f1c702cc
                                        
                                            GET /favicons/m/mail-n13.telecomputing.no.ico HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Content-Length: 185
Connection: keep-alive
Location: http://website-thumbnails.informer.com/favicons/m/mail-n13.telecomputing.no.ico


--- Additional Info ---
Magic:  HTML document text
Size:   185
Md5:    cb6ffbb4043c88e63023bdbe1273e7f6
Sha1:   51ab256fee07ae97343aea50861f5b9b0214cac2
Sha256: e2085b8ac766c65a76f7e31e2ee5d257f7728465331a46ee58005fd212575348
                                        
                                            GET /js/modules/default/widgetPartner.js HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"596c9169-4ec"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   476
Md5:    836a603f213eb4f68640ee12837cd8a1
Sha1:   629fcc6ca1f4abf5e68a06da4e661b036ce07939
Sha256: 4368ac98b8c0007fd69048d7575a6ee7a0c8dcb12aa1e7b7a90e26016b729989
                                        
                                            GET /img/website_informer_logo.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Content-Length: 1448
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-5a8"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 289 x 23
Size:   1448
Md5:    89c1da554d94dd85dd2c11e26e901a85
Sha1:   83d5d02951c3172285b92398c91343c8ade33767
Sha256: e457ae18022bf6dc48a95d85738c6090cb5395a9983bf826c5eb3c15399d7cea
                                        
                                            GET /js/modules/default/tabs.js HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"596c9169-1388"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1530
Md5:    ca6bea3cec541f4e42df28dfee594c7d
Sha1:   94c9869f863aa640a373747a89b3036b2759dc20
Sha256: 9c2c9ef329f3df2fb42a2ab92a68d379b19a90836b663d79f91a744da52c89f5
                                        
                                            GET /img/sponsored.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Content-Length: 181
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-b5"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 91 x 13
Size:   181
Md5:    a0fb03ad2bcb78477ac808bee2ed329c
Sha1:   071f8d310d07885cc04ed7b6e963636034803184
Sha256: 7dc5f37f06752e53f141f110f2fafcec8dc8c401a0418d48005c2266571d9a16
                                        
                                            GET /js/library/jquery/jquery.js HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"596c9169-119ee"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24751
Md5:    f1633d5007b5549c771daf5db4cf98ab
Sha1:   23cb8690c403a0d8ea53da9b13aa29c5a16f29ef
Sha256: 294395ad02f6bff42874ad3db2cd04c44b97a814988595f796a002e1cdd24477
                                        
                                            GET /thumbnails/280x202/m/mail-n13.telecomputing.no.png HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Content-Length: 185
Connection: keep-alive
Location: http://website-thumbnails.informer.com/thumbnails/280x202/m/mail-n13.telecomputing.no.png


--- Additional Info ---
Magic:  HTML document text
Size:   185
Md5:    cb6ffbb4043c88e63023bdbe1273e7f6
Sha1:   51ab256fee07ae97343aea50861f5b9b0214cac2
Sha256: e2085b8ac766c65a76f7e31e2ee5d257f7728465331a46ee58005fd212575348
                                        
                                            GET /img/ajax-loader.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:24 GMT
Content-Length: 1456
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-5b0"
Expires: Sat, 10 Mar 2018 06:57:24 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   1456
Md5:    9e8343b24eb4fbb476cdc326340e78ec
Sha1:   34110dbf77b65ff201f7c96f88c01fbdbfd0f907
Sha256: e4671f3a6643bfe72cd8042632f12f80b905f896f41029bc922a9e1826799383
                                        
                                            GET /thumbnails/280x202/m/mail-n13.telecomputing.no.png HTTP/1.1 
Host: website-thumbnails.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         52.84.213.189
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 4701
Connection: keep-alive
Server: nginx/1.12.2
Date: Tue, 20 Feb 2018 09:37:06 GMT
Last-Modified: Tue, 13 Feb 2018 10:38:52 GMT
Etag: "b2ab5c922713231c245b31dab6df1aae"
Accept-Ranges: bytes
Expires: Tue, 06 Mar 2018 09:37:06 GMT
Cache-Control: max-age=1209600
Age: 249618
X-Cache: Hit from cloudfront
Via: 1.1 1405f8b432a21800efb933586c181f09.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 9cDawkEIdS0DcSrRVeBO_hRGyPIfeYnRto8dy2bDMry0FnjQiCM4XQ==


--- Additional Info ---
Magic:  PNG image, 280 x 202, 8-bit colormap, non-interlaced
Size:   4701
Md5:    b2ab5c922713231c245b31dab6df1aae
Sha1:   ae3299f55d973516ceef492ed04a4f145cbb651c
Sha256: 7b6b4e3d9e01e0015239542fce6b5e29fa8023a082d633905f7ea47fa3688ee7
                                        
                                            GET /favicons/m/mail-n13.telecomputing.no.ico HTTP/1.1 
Host: website-thumbnails.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         52.84.213.189
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.2
Date: Tue, 20 Feb 2018 09:37:07 GMT
Last-Modified: Thu, 22 Jun 2017 14:08:01 GMT
Etag: W/"759fade9033aa298629e4b000dcd6dde"
x-amz-version-id: E0hPgKsNljw5gQiI4Nryh6h_WHLcam76
Expires: Tue, 06 Mar 2018 09:37:07 GMT
Cache-Control: max-age=1209600
Content-Encoding: gzip
Age: 249617
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f0dabd1523e52f83656a414aec63834b.cloudfront.net (CloudFront)
X-Amz-Cf-Id: TrDUht2EqfJqrxs51zDWI4CV3pImi68RtfKwqimVk1hUS8LKx5rNiQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1499
Md5:    337e855c918ad0704994416ea75ef606
Sha1:   46afdcaf5d05682a6714eb78ae3b791dc8e4ce32
Sha256: 8ae70fe83262d15d24eaf8e8c6373a3bfe1ee499f68ae17934249016e001bb3e
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f0f82158126fb87e4ac616824107e432
Sha1:   ec25ab6a77fff8910de7fe99985a2f2ee073b8ce
Sha256: ede2903e674574a342e4327c6b961eed3591138da2fb255c8fd457626aea4d19
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=313903, public, no-transform, must-revalidate
Last-Modified: Mon, 19 Feb 2018 22:07:43 GMT
Expires: Mon, 26 Feb 2018 22:07:43 GMT
Date: Fri, 23 Feb 2018 06:57:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    d5bead209882681d4f7c9c10b66681ca
Sha1:   c17f4f0007b7156e2dcd90bf09f49c14495f281c
Sha256: 6438dc08c90414da5a3db613e698e3d8dade73477ed1523eb17dfbdaed65109c
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    8760076eab60293a13b4e86601642730
Sha1:   ba8e7658af88a5e0354b29b5eac72d10aff7ea73
Sha256: 0eea19c0fcb06b61b078cccadb92e1c1c2fc0aa3377ae20fc9c803f1c391aee1
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /adsid/integrator.js?domain=website.informer.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 23 Feb 2018 06:57:25 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=website.informer.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 23 Feb 2018 06:57:25 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /img/bg_search_content.png HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 755
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-2f3"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 6000 x 13, 8-bit colormap, non-interlaced
Size:   755
Md5:    74ccad653fd557e4a41bbced1b2fe83b
Sha1:   c1199a8971f0d4b5514e1f1835c91f75b6cde517
Sha256: 6bd52fee73a4e0f155974a5fe6390949317e161f8e13d39c6ca1c5c64b0cc04d
                                        
                                            GET /img/wi_ff_corner_02.png HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 9898
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-26aa"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 180 x 61, 8-bit/color RGBA, non-interlaced
Size:   9898
Md5:    cd35f874b7808544b0f01c55ec7560a7
Sha1:   a808138a4eed780bd9717a8d355511b616113550
Sha256: 584e095caee3d95899c4641ffd09af495504854e270424b75a78326b77b55695
                                        
                                            GET /favicons/m/mail-n13.telecomputing.no.ico HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 185
Connection: keep-alive
Location: http://website-thumbnails.informer.com/favicons/m/mail-n13.telecomputing.no.ico


--- Additional Info ---
Magic:  HTML document text
Size:   185
Md5:    cb6ffbb4043c88e63023bdbe1273e7f6
Sha1:   51ab256fee07ae97343aea50861f5b9b0214cac2
Sha256: e2085b8ac766c65a76f7e31e2ee5d257f7728465331a46ee58005fd212575348
                                        
                                            GET /img/btn_search.png HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 254
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-fe"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 99 x 42, 8-bit colormap, non-interlaced
Size:   254
Md5:    e2a49d2571b2aed9c90391c62513bb82
Sha1:   89cca867a71b7dc77177770185d5d2f9ea84f28a
Sha256: 8879da26f2c5e7a8893b2132a2d4546bde867c520ad22b4686f2331a3bb2026c
                                        
                                            GET /statistic?statistic=YTo3OntzOjc6InR5cGVfaWQiO3M6MToiMSI7czo5OiJvYmplY3RfaWQiO3M6ODoiNjEzNjI5MzEiO3M6MzoidXJpIjtzOjI2OiIvbWFpbC1uMTMudGVsZWNvbXB1dGluZy5ubyI7czo1OiJxdWVyeSI7TjtzOjg6InJlZmVycmVyIjtOO3M6NDoidGltZSI7aToxNTE5MzY5MDQ0O3M6NDoic2lnbiI7czozMjoiZTc2MDI0OWQ0YWMzYWJkNDhjYzQ5ZGQ2ZTg2NWQ0Y2QiO30= HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pagead/js/r20180220/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 23 Feb 2018 06:57:25 GMT
Expires: Fri, 23 Feb 2018 06:57:25 GMT
Cache-Control: private, max-age=1209600
Etag: 9319407639989428575
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67679
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67679
Md5:    ecfbad9f557e3fc6461c6442e6125f2e
Sha1:   556bb3c4f1a58ef9d29ba0527e679b08ff71a5e7
Sha256: 16e54a69ff948f93ab187bf3b38bc9996eea7904eab8193f528f8fc8754d9598
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    01e2c198c580a180dad9d8923045bfb3
Sha1:   73cd7d647ffc70e5b36be2849dc4a2404768ed9d
Sha256: d7c5196d549b02a0afd7647eb6aee9afe446e0b75aaa3ff8900f6e804a8b373e
                                        
                                            GET /img/tab_general.png HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 390
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-186"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 165 x 27, 8-bit colormap, non-interlaced
Size:   390
Md5:    886a7c39f1b3a693f49b218fcd587538
Sha1:   eac32f4b85c7ec37378c7f9f41dfee91aee42dc3
Sha256: 56fa5e3795aa5d9d6b24f287095eef2134ba7d0ee665b2956545d0d25b1a5179
                                        
                                            GET /img/expand_arrow.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 53
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-35"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 5 x 9
Size:   53
Md5:    3912fcff9dc70c4dbb76f01856b14a8e
Sha1:   cdb668dcf0513cf99562900055f1381fff0656dd
Sha256: 482f47bd3c6300d243ff542e77b2c2edbfc2f6a8c8e2696fea9a9758b8fa1d0e
                                        
                                            GET /img/greytab_l.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 138
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-8a"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 160 x 23
Size:   138
Md5:    1a6ca3ba843b0bd87b0a8844625fe164
Sha1:   019937b7ab7fdab2051dd08b6f6df875a6af6bb4
Sha256: b51780f254c92e160f8a62a88551793e75f72124c931bc272257efddca7faa80
                                        
                                            GET /img/tab_active_bg.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 50
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-32"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 4
Size:   50
Md5:    2f8132b05387d2f6295be1afc5771384
Sha1:   456c644c51718d4a2d232e1c8e41068da24233e5
Sha256: 22dd7983e66e41bf48343fb98fc79e836d201ab9a5fbf4600e031e3253bf16a5
                                        
                                            GET /log.php?id=5982&r=2715 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:16 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /img/inf_block_bg.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 126
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-7e"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 143
Size:   126
Md5:    66657e141336c6579e84199372d06221
Sha1:   71458aa07f4ddf479759bcd4e94ce338020c40ec
Sha256: aa4e9c312fed9e4084bb551d4f0c47f5dfb979f4a6debee5798631fc37344f91
                                        
                                            GET /img/greytab_r.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:25 GMT
Content-Length: 76
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-4c"
Expires: Sat, 10 Mar 2018 06:57:25 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 23
Size:   76
Md5:    750f1d7f5451ddb13123f791b2f87a04
Sha1:   e8cd32d0f6aa7e5d2976be73b4685e9c82c4186d
Sha256: 8700b2f64d6beb121eb42c4355f14735234989d85b3ca17860c3de9c034ae16c
                                        
                                            GET /log.php?id=1696&r=56229 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:16 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /log.php?id=3267&r=83980 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:16 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /log.php?id=5893&r=93559 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:16 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /log.php?id=2725&r=23427 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:17 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /log.php?id=368&r=43088 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:17 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /log.php?id=369&r=55876 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:17 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /log.php?id=1463&r=40083 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:17 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /log.php?id=2868&r=97886 HTTP/1.1 
Host: hits.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         67.228.47.230
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 23 Feb 2018 07:01:17 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /pub-config/r20160913/ca-pub-4821006852914359.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Fri, 23 Feb 2018 04:51:21 GMT
Expires: Fri, 23 Feb 2018 16:51:21 GMT
Last-Modified: Fri, 23 Feb 2018 00:42:49 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 7565
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    f80120281945bc2ccdaebc64cbad921d
Sha1:   b5c7ef140888ede182fcac94921a4eb502f07a5c
Sha256: 4cb4b9970ec5cedababe29f9a4ab00d00194bbebd2063cb117dec008b8c6982a
                                        
                                            GET /thumbnails/280x202/m/mail-n13.telecomputing.no.png HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:26 GMT
Content-Length: 185
Connection: keep-alive
Location: http://website-thumbnails.informer.com/thumbnails/280x202/m/mail-n13.telecomputing.no.png


--- Additional Info ---
Magic:  HTML document text
Size:   185
Md5:    cb6ffbb4043c88e63023bdbe1273e7f6
Sha1:   51ab256fee07ae97343aea50861f5b9b0214cac2
Sha256: e2085b8ac766c65a76f7e31e2ee5d257f7728465331a46ee58005fd212575348
                                        
                                            GET /img/s_icons.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:26 GMT
Content-Length: 2064
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-810"
Expires: Sat, 10 Mar 2018 06:57:26 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 160 x 16
Size:   2064
Md5:    7ffd5c544be28e6ae75f4295fe73d57d
Sha1:   b6ab98e3627c33cc3a75401314ad1cbe2c9826a7
Sha256: bc52078b4bf55cceaeb031df869ccad41cf61901c059e0c1bfa5d27890e947eb
                                        
                                            GET /img/bg_rating.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:26 GMT
Content-Length: 359
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-167"
Expires: Sat, 10 Mar 2018 06:57:26 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   359
Md5:    e2eabcc5166844ed60e3c2f9610709a8
Sha1:   7d6de8bad65facf217fb6f6fbcb6eadbcd4c950e
Sha256: 85329bfb1c2d502a0ed87d026d88e96976a057bd3f525d4a1e4d171d09a57013
                                        
                                            GET /img/tab_bg.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:26 GMT
Content-Length: 50
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-32"
Expires: Sat, 10 Mar 2018 06:57:26 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 4
Size:   50
Md5:    5b3177ef6246176cc6bacc68db72dd85
Sha1:   91b2d75b47029b7ba2bb7b48887504c47b31b245
Sha256: 3eb8a126627ca302b7ae2edbb21ee64616187830373af5c99ac0ddab207acd28
                                        
                                            GET /img/tab.png HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:26 GMT
Content-Length: 648
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-288"
Expires: Sat, 10 Mar 2018 06:57:26 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 165 x 27, 8-bit colormap, non-interlaced
Size:   648
Md5:    783a426a93a7e02fc5cdaee952c64076
Sha1:   45a62fe6f325f070b3080172c8345c00b09fae15
Sha256: 72e86991af8aa3237416f0dd261805dd74a36acc98b247e402936192f8ccf511
                                        
                                            GET /img/tab_closed.gif HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/css/css.css
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:26 GMT
Content-Length: 80
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Connection: keep-alive
Etag: "596c9169-50"
Expires: Sat, 10 Mar 2018 06:57:26 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 10
Size:   80
Md5:    25750cf65339b00f3ae72c69ee13c3e7
Sha1:   5593238c288f09872a78fa4dbd4f3a10fa04c25a
Sha256: b200e02628f962d4f492b54a6993582862cf9dac2055b848ea6bcb194ea83a40
                                        
                                            GET /pagead/html/r20180220/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 21 Feb 2018 04:18:39 GMT
Expires: Wed, 07 Mar 2018 04:18:39 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 182327
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6819
Md5:    8caea4ee531aab9f5d9328f80b7b23f3
Sha1:   3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d962aa9639b20077ba59b41cc646f7ea
Sha1:   131246900bec11737ff47f7f89e8a324e23c5491
Sha256: 358c328d6aaec5aa490bb66694fb6aed8ca220628457b0cfe405236cbff9cf88
                                        
                                            GET /pagead/js/r20180220/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 21 Feb 2018 03:43:06 GMT
Expires: Wed, 07 Mar 2018 03:43:06 GMT
Etag: 6105545046351775497
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 27182
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 184461
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27182
Md5:    a130738fd7da3d308ff1108ba8334beb
Sha1:   2d0f75db33d634c0d119479950cc5e05b648567c
Sha256: f8db988b4ffed5a2915056f20cc7588c4dc63a11f7bef227122815c8f8281206
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.74.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:27 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=db62c0fa2679ff43380c036f88c2b5aad1519369047; expires=Sat, 23-Feb-19 06:57:27 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Fri, 23 Feb 2018 04:42:02 GMT
Expires: Tue, 27 Feb 2018 04:42:02 GMT
Etag: "a00b083b8bcb5b158adb7051ae5ce8131b99eb91"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 3f184a810175428b-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    b0e5ea721a6ff47545c5e63cbfeea46c
Sha1:   a00b083b8bcb5b158adb7051ae5ce8131b99eb91
Sha256: 80f7e94b5e34dc9bd1e83393a97fce059690af988b5c3d1155483c4bbef179a6
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 23 Feb 2018 05:28:22 GMT
Expires: Fri, 23 Feb 2018 07:28:22 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Cache-Control: public, max-age=7200
Age: 5345
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /stat?domain=mail-n13.telecomputing.no&fg=0&dv=1&r=58610 HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=1066420625&adk=3443303733&adf=807048394&w=970&lmt=1519369044&loeid=368226211%2C38893312&format=970x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369045214&bpp=133&fdt=144&idt=428&shv=r20180220&cbv=r20170110&saldr=aa&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=103&ady=274&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1124 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 23 Feb 2018 06:57:27 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 23-Feb-2018 07:12:27 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:27 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   19583
Md5:    7a3e073c0f63195b7bde07ec61bb413a
Sha1:   fd2e62821363d58797cf8cf31c33cc78454dba52
Sha256: 09246eba6b5166149a8090c4b41436229f6c6ffb038c162a3be6129b5c1d39cb
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Fri, 23 Feb 2018 06:57:27 GMT
Content-Length: 33578
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Tue, 20 Feb 2018 13:01:58 GMT
Content-Encoding: gzip
Expires: Fri, 23 Feb 2018 07:57:27 GMT
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Tue Feb 20 11:26:34 2018
Size:   33578
Md5:    81f20dcb0ba624d9b694a8b48583088c
Sha1:   e29ef8fe566d9eab0aafa9e6ec8580380136dde3
Sha256: e58fcbfdd7422809e983d7ffa354aa4c453b5f3e963217022cb19dd20e52b761
                                        
                                            GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 23 Feb 2018 06:57:27 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 23-Feb-2018 07:12:27 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:27 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   19605
Md5:    72d05f8dba2c141d6876a84246ad2458
Sha1:   5035f0121e0e0abe45001713a192632219bf9799
Sha256: 82243f570406d3151271c4c15793bbc27f931e4363abcee2ec2227287939e1bf
                                        
                                            GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=2054905028&adk=6187008&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046606&bpp=14&fdt=67&idt=230&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90%2C728x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=774&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=287 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 23 Feb 2018 06:57:27 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 23-Feb-2018 07:12:27 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:27 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17605
Md5:    e6a64d2eae5dcc1f9b93122eea3a5d88
Sha1:   638970803276fd935f7b74662b71f3f62ccebd1c
Sha256: d2893c86f2342700d1cbba3bc2ee4847ca70d97e2c51771f5dda90d7b33d6f5e
                                        
                                            GET /r/collect?v=1&_v=j66&a=1275299441&t=pageview&_s=1&dl=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ul=en-us&de=UTF-8&dt=mail-n13.telecomputing.no%20at%20WI.%20Outlook%20Web%20App&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAEQ~&jid=734992241&gjid=248132158&cid=1069465121.1519369046&tid=UA-25292228-1&_gid=2009590804.1519369047&_r=1&z=2067041932 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 23 Feb 2018 06:57:27 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e5b8d02ce51bdaa2816eabbe31d578ca
Sha1:   6715af567d8d2a4967c800b1518767fb56c7cef2
Sha256: a37175ccd618433e8702ac7431f5d68882f33c297c525c614deeccf113ee5c2b
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Fri, 23 Feb 2018 06:57:27 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Expires: Fri, 17 Jan 2048 06:57:27 GMT
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /pagead/js/r20180220/r20110914/client/ext/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=1066420625&adk=3443303733&adf=807048394&w=970&lmt=1519369044&loeid=368226211%2C38893312&format=970x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369045214&bpp=133&fdt=144&idt=428&shv=r20180220&cbv=r20170110&saldr=aa&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=103&ady=274&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1124

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 20 Feb 2018 20:44:39 GMT
Expires: Tue, 06 Mar 2018 20:44:39 GMT
Etag: 18145407783687431649
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 14871
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 209568
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14871
Md5:    c5699fd7a505649b6a87fe70e42e467f
Sha1:   afc71ef1e097deb38a186377b11f2339d4de471b
Sha256: 7c86d52ecc58bdb7f4a2a88ea928469f29b1b6d78123d56fd6c0bcb2b37ec628
                                        
                                            GET /pagead/js/r20180220/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 21 Feb 2018 04:08:09 GMT
Expires: Wed, 07 Mar 2018 04:08:09 GMT
Etag: 18254379283724408787
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3642
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 182958
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3642
Md5:    24d24f1211524aff604a7a982bfb33ed
Sha1:   15c0f03407eb77a3da6a7476c6ffb4b8993eaefb
Sha256: 78ef839be435484d29b2cd6e0fe1a05331bf1df22f4105141e45f7ab4703f9d7
                                        
                                            GET /pagead/adview?ai=Cg4cpV7uPWpebDZW16wSujL2wDNqCpbxQ1630ptoGv9rr4BMQASDj7oUlYMPcpIWYGKABvbGN_wPIAQKoAwHIA8kEqgS6AU_QAdjj-yO-b3z1MtqyY1OyyxJMM3CeTpyn4fx7yNr4yW1FMZw8LTUWzOBXdWJbN0nfIjMQLDLjsLDDfTNxTEg9qIBVGCzo__W3vxRqCfK-6woThqhoGDyBNq8L3dpg4awHCmJlWVGaN1qGh_bQpu5d4o9FERVcORs9fdWWVxTGwPlLcPOKi5qWYFBLCYqowNQod-HmHaskG6JQpz75CBBcCkMqlJzhiJIuUbjNefCyWEv4mNg3h8t4y8AEjeHlmbsBkgUECAQYAZIFBAgFGASgBgKAB6vOcqgHpr4b2AcB8gcEELDbAtIIBwiAYRABGAKACgHYEwI&sigh=6K7A6Y8rqV8&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=2054905028&adk=6187008&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046606&bpp=14&fdt=67&idt=230&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90%2C728x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=774&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=287
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:27 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnkzwyvhuZkyAteZcRatjlhmSw53qe0fSoD4oxr_KV1YKmE68FIvij3wQ6C; expires=Sun, 23-Feb-2020 06:57:27 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:27 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            OPTIONS /watch/30173604?wmode=7&page-url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&charset=utf-8&site-info=%7B%22urltype%22%3A%22domain%22%2C%22type%22%3A%22desktop%22%2C%22isShowAds%22%3A%22true%22%2C%22design%22%3A%22old%22%7D&browser-info=ti%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180223075727%3Aet%3A1519369047%3Aen%3Autf-8%3Av%3A977%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A17721093750%3Arqn%3A1%3Arn%3A238727595%3Ahid%3A1021972814%3Awn%3A10033%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1519369047%3Au%3A1519369047876912286%3At%3Amail-n13.telecomputing.no%20at%20WI.%20Outlook%20Web%20App HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://website.informer.com
Access-Control-Request-Method: POST

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Fri, 23 Feb 2018 06:57:27 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /pagead/js/r20180220/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 20 Feb 2018 20:44:39 GMT
Expires: Tue, 06 Mar 2018 20:44:39 GMT
Etag: 2112876643077467119
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1203
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 209568
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1203
Md5:    9a504624fadda2dcec8340bf93b2252c
Sha1:   fa6dbebcf9b5450a1dd2f2371c971e838ff627c0
Sha256: 1451d6f091d36a586c2d20cc652337663e11fe4045ec6867de1e21d5d8868c93
                                        
                                            GET /simgad/6133520512094224105 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=2054905028&adk=6187008&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046606&bpp=14&fdt=67&idt=230&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90%2C728x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=774&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=287

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19293
Date: Fri, 23 Feb 2018 01:45:53 GMT
Expires: Sat, 23 Feb 2019 01:45:53 GMT
Last-Modified: Wed, 07 Feb 2018 09:16:40 GMT
X-Content-Type-Options: nosniff
x-dns-prefetch-control: off
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 18694
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 728 x 90, 8-bit/color RGB, non-interlaced
Size:   19293
Md5:    8e5a3f59b5d44a9d1b4f7a98620a2773
Sha1:   bd0213a0b5b3c5f1f897534b76a8228f491738bf
Sha256: d0a4b18f3d2c381cf1a51ede17f71e4ea3b721e94ffca10e23f084070e49efaa
                                        
                                            GET /pagead/adview?ai=ChuDwV7uPWtj8BoGR6gTNk5aoDviVy7lQ3qnZyLUFv9rr4BMQASDj7oUlYMPcpIWYGKABpKjHzwPIAQGpArB-wEk6KIE-qAMByAPLBKoEsgFP0NOZxwJYTUwbktvlDwAU7e5O6FRWNbZew1YYKQ_TN0-cnvraOdef28RyekObfjYuP9zWP2lp-aXseQ0ZCB6n-Pz62r_jW3hstat10t0dG_PvtBEQ8HyThqIK28N7gkH61HFeQJ6-C1o1kUXBgyGdmodLA3nL9fD-SenxqJMTtp7GqxnETjLEra8fM9SfHSmmbc9sVjhjMVGNPZASBfeco8I3DhbguF-rsvLfyqHDbAFIwAT1yYLPmwGSBQQIBBgBkgUECAUYBIAHxNe4MKgHpr4b2AcB8gcEEMHAOtIIBwiAYRABGAKACgHYEwI&sigh=JsVRAwjIBX0&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:27 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUkYj9HHIvd584zuscy7KaqJ_iEL_pc5kmDFgpyBY3xeAzIdqUSy5DqAHHzB; expires=Sun, 23-Feb-2020 06:57:27 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:27 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/images/nessie_icon_tiamat_black.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 22 Feb 2018 09:33:55 GMT
Expires: Fri, 23 Feb 2018 09:33:55 GMT
Etag: 9737793026190189471
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 231
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 77012
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 26 x 42, 8-bit/color RGBA, non-interlaced
Size:   231
Md5:    3e18b7cc8a94a6dc5ae05d989e215d7f
Sha1:   64245169a8278b3446572ba9d09c10996d8fb3fa
Sha256: e3ed9fe6d7937eed1d598d79c1455f1bb8287cb9991778f73e07e5f4b690083b
                                        
                                            GET /pagead/js/r20180220/r20110914/abg.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=2054905028&adk=6187008&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046606&bpp=14&fdt=67&idt=230&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90%2C728x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=774&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=287

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 20 Feb 2018 20:44:39 GMT
Expires: Tue, 06 Mar 2018 20:44:39 GMT
Etag: 12795529466655114277
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 21773
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 209568
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21773
Md5:    7b58d6288c716f17ca29e2cf1018a176
Sha1:   3bad09c1cadece10d4bf5ba51c59bac37abd67f7
Sha256: ef7edfaa6257d7204a61c34907f17ee5e94b07900f26eb57a43ad119052cd480
                                        
                                            GET /pagead/adview?ai=CwqEZV7uPWt7LBoGq6wTdo53AC_iVy7lQ18KSyvcFv9rr4BMQASDj7oUlYMPcpIWYGKABpKjHzwPIAQGpArB-wEk6KIE-qAMByAPLBKoEsAFP0MIq1BF8b7uC7VaU-VfY71x60JHna2qJqotCVwgrRfyiLCSixyA1KHCWM5dh597I9Qf4xfE854aa0cCimNGux_05Gm-HtpG_n4nP2eqHe1yThGJo-3jMH8b26AQ9t9GHXpdYeK07rEis4J4sNIhmMd8obks7b-8ldKaRC4qhOUhA7IQapnj9uEebhm9eRhQOxaTGci_kVUdnzk4LHPep9MIjas9kARK-D6b0Xs-zkcAE9cmCz5sBkgUECAQYAZIFBAgFGASAB8TXuDCoB6a-G9gHAfIHBBD2lCPSCAcIgGEQARgCgAoB2BMC&sigh=rH4Xd78cKp0&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=1066420625&adk=3443303733&adf=807048394&w=970&lmt=1519369044&loeid=368226211%2C38893312&format=970x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369045214&bpp=133&fdt=144&idt=428&shv=r20180220&cbv=r20170110&saldr=aa&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=103&ady=274&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1124
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:27 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnPJFCftQFFuRVyANVDMVPoMdJz_TbDiGgKVOYzJDfkZHlci3-_53vCWF3b; expires=Sun, 23-Feb-2020 06:57:27 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:27 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /watch/30173604?wmode=5&callback=_ymjsp518605733&page-url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&charset=utf-8&site-info=%7B%22urltype%22%3A%22domain%22%2C%22type%22%3A%22desktop%22%2C%22isShowAds%22%3A%22true%22%2C%22design%22%3A%22old%22%7D&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180223075727%3Aet%3A1519369047%3Aen%3Autf-8%3Av%3A977%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A17721093750%3Arqn%3A1%3Arn%3A238727595%3Ahid%3A1021972814%3Awn%3A10033%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1519369047%3Au%3A1519369047876912286%3At%3Amail-n13.telecomputing.no%20at%20WI.%20Outlook%20Web%20App HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         93.158.134.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.8.1
Date: Fri, 23 Feb 2018 06:57:28 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Fri, 23 Feb 2018 06:57:28 GMT
Expires: Fri, 23 Feb 2018 06:57:28 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=9634997001519369048; domain=.yandex.ru; path=/; expires=Mon, 21-Feb-2028 06:57:28 GMT yp=1834729048.yrts.1519369048; domain=.yandex.ru; path=/; expires=Mon, 21-Feb-2028 06:57:28 GMT yabs-sid=1394704931519369048; path=/ i=QVvVmSuzRllcLvIYV8AHuRIRxJV789O/jI3P342j/Y+lcbBdKUjsFbbYy6t+GM0JbZZtmcLtIoCUuETiXIBIoGO2mRI=; Expires=Mon, 21-Feb-2028 06:57:28 GMT; Domain=.yandex.ru; Path=/; HttpOnly
Location: https://mc.yandex.ru/watch/30173604/1?wmode=5&callback=_ymjsp518605733&page-url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&charset=utf-8&site-info=%7B%22urltype%22%3A%22domain%22%2C%22type%22%3A%22desktop%22%2C%22isShowAds%22%3A%22true%22%2C%22design%22%3A%22old%22%7D&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180223075727%3Aet%3A1519369047%3Aen%3Autf-8%3Av%3A977%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A17721093750%3Arqn%3A1%3Arn%3A238727595%3Ahid%3A1021972814%3Awn%3A10033%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1519369047%3Au%3A1519369047876912286%3At%3Amail-n13.telecomputing.no%20at%20WI.%20Outlook%20Web%20App
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /pagead/js/r20180220/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 20 Feb 2018 20:44:39 GMT
Expires: Tue, 06 Mar 2018 20:44:39 GMT
Etag: 12165893609507498772
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26230
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 209569
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26230
Md5:    f33c5258440bbd1085492abf36b160d0
Sha1:   73fce5ed2c6b1e74d0ec01006a14e36f3979764f
Sha256: 60f6cddbc563e8ad1f80f1d6865bb7178296a17022ecb14b5e198ace60334d10
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=2054905028&adk=6187008&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046606&bpp=14&fdt=67&idt=230&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90%2C728x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=774&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=287
Cookie: IDE=AHWqTUnPJFCftQFFuRVyANVDMVPoMdJz_TbDiGgKVOYzJDfkZHlci3-_53vCWF3b

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 23 Feb 2018 06:12:55 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 2673
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            GET /watch/30173604/1?wmode=5&callback=_ymjsp518605733&page-url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&charset=utf-8&site-info=%7B%22urltype%22%3A%22domain%22%2C%22type%22%3A%22desktop%22%2C%22isShowAds%22%3A%22true%22%2C%22design%22%3A%22old%22%7D&browser-info=ti%3A6%3Ati%3A10%3Aj%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A60%3Ai%3A20180223075727%3Aet%3A1519369047%3Aen%3Autf-8%3Av%3A977%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A17721093750%3Arqn%3A1%3Arn%3A238727595%3Ahid%3A1021972814%3Awn%3A10033%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1519369047%3Au%3A1519369047876912286%3At%3Amail-n13.telecomputing.no%20at%20WI.%20Outlook%20Web%20App HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no
Cookie: yandexuid=9634997001519369048; yp=1834729048.yrts.1519369048; yabs-sid=1394704931519369048; i=QVvVmSuzRllcLvIYV8AHuRIRxJV789O/jI3P342j/Y+lcbBdKUjsFbbYy6t+GM0JbZZtmcLtIoCUuETiXIBIoGO2mRI=

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.8.1
Date: Fri, 23 Feb 2018 06:57:28 GMT
Content-Length: 113
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Fri, 23 Feb 2018 06:57:28 GMT
Expires: Fri, 23 Feb 2018 06:57:28 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   113
Md5:    10e78ff16fbec21057991e16d6d59d5a
Sha1:   02f11622eb91f6e7b32c20f55c9620aafc79b86b
Sha256: eb37513b8d3bfb54ffd0332c4b18fcabf3fcf8cb68e6f4e552bfbc6bc05e7e0a
                                        
                                            GET /activeview?avi=B6nJ8V7uPWtj8BoGR6gTNk5aoDgDeqdnItQUAABABOAHIAQHIA8sE0ggFCIBhEAHCEwYYpKjHzwM&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180220 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 23 Feb 2018 06:57:28 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:28 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    62d15b2bf0f0ac0995f391ae5ad31810
Sha1:   e5afc21c1234b2ab40b8b22e3c778212c8438fec
Sha256: 55a9b3a994adf23c1d53f417d4d89e0cce52c52a1333d05158f2e1013f640686
                                        
                                            GET /activeview?avi=BKLY2V7uPWpebDZW16wSujL2wDADXrfSm2gYAABABOAHIAQLIA8kEoAYC0ggFCIBhEAHCEwYYvbGN_wM&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180220 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=2054905028&adk=6187008&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046606&bpp=14&fdt=67&idt=230&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90%2C728x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=774&biw=1159&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=287

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 23 Feb 2018 06:57:28 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /activeview?avi=BHfnUV7uPWt7LBoGq6wTdo53ACwDXwpLK9wUAABABOAHIAQHIA8sE0ggFCIBhEAHCEwYYpKjHzwM&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20180220 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=1066420625&adk=3443303733&adf=807048394&w=970&lmt=1519369044&loeid=368226211%2C38893312&format=970x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369045214&bpp=133&fdt=144&idt=428&shv=r20180220&cbv=r20170110&saldr=aa&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=103&ady=274&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1124

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 23 Feb 2018 06:57:28 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /bg/1nOaBTTfWdQqe0lw0uWleOiiJPrjf4Va-a1llI42VTg.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=3810839823&adk=4092795558&adf=807048394&w=728&lmt=1519369044&loeid=368226211%2C38893312&format=728x90&url=http%3A%2F%2Fwebsite.informer.com%2Fmail-n13.telecomputing.no&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1519369046433&bpp=23&fdt=29&idt=134&shv=r20180220&cbv=r20170110&saldr=aa&prev_fmts=970x90&correlator=1609264330440&frm=20&ga_vid=1069465121.1519369046&ga_sid=1519369046&ga_hid=1275299441&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=224&ady=528&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895412%2C41667001&oid=3&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=160

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4974
Date: Wed, 21 Feb 2018 03:40:06 GMT
Expires: Thu, 21 Feb 2019 03:40:06 GMT
Last-Modified: Mon, 19 Feb 2018 09:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 184642
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4974
Md5:    5b17d7ce8007b7e187e9790a2b6fa6b5
Sha1:   d815eb0218632f238ca89d83d5c64a1350e35a4e
Sha256: 31b9281a1d61f90749def377503fb7e39ea5872b81983b85af7cf7de908ab6f5
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:28 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUnPJFCftQFFuRVyANVDMVPoMdJz_TbDiGgKVOYzJDfkZHlci3-_53vCWF3b

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:29 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 23-Feb-2018 07:57:29 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:29 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:29 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUnPJFCftQFFuRVyANVDMVPoMdJz_TbDiGgKVOYzJDfkZHlci3-_53vCWF3b; DSID=NO_DATA

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:29 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 23-Feb-2018 07:57:29 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:29 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:29 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUnPJFCftQFFuRVyANVDMVPoMdJz_TbDiGgKVOYzJDfkZHlci3-_53vCWF3b; DSID=NO_DATA

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 23 Feb 2018 06:57:29 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 23-Feb-2018 07:57:29 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Fri, 23 Feb 2018 06:57:29 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: website.informer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 54da=YToxOntzOjc6ImNodW5rSWQiO3M6NDoiZTk5NCI7fQ%3D%3D%7C2c6a5079417846716ded24e533d4dd5253d85811; e994=1; _ga=GA1.2.1069465121.1519369046; _gid=GA1.2.2009590804.1519369047; _gat=1; _ym_uid=1519369047876912286; _ym_isad=2; _ym_visorc_30173604=w

                                         
                                         52.21.113.188
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx/1.12.2
Date: Fri, 23 Feb 2018 06:57:29 GMT
Last-Modified: Mon, 17 Jul 2017 10:28:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"596c9169-47e"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   634
Md5:    20ac4177b5ea0be1e5b22bb12ef271b9
Sha1:   d4882504355257d88759d39ac5264c8b20b9ddd8
Sha256: 6f207d916eb01fc1ae251078d694b171731eb6b6fc1a1b68562a8fee89bc8d65
                                        
                                            POST /cloudsslsha2g3 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=db62c0fa2679ff43380c036f88c2b5aad1519369047

                                         
                                         104.31.74.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Feb 2018 06:57:30 GMT
Content-Length: 1539
Connection: keep-alive
Last-Modified: Fri, 23 Feb 2018 05:31:36 GMT
Expires: Tue, 27 Feb 2018 05:31:36 GMT
Etag: "d8b967fca8085da540e2e2f1f746aafdf4f53d86"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 3f184a928552429d-OSL


--- Additional Info ---
Magic:  data
Size:   1539
Md5:    a40140d6a08697a242d5d5ace887c9d0
Sha1:   d8b967fca8085da540e2e2f1f746aafdf4f53d86
Sha256: 8d8aef515748c66d627c8501c3e1b62adc582dbf040926788927d99772a0c22b
                                        
                                            GET /nr-1071.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         151.101.130.110
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: USlgqm5XRf9P/UyJg1tNr+pgP2kYc+hxD0yZ8xMqLF/nZPhWRkuQH2K+XoaX8VGRSEkKyyJ0BuU=
x-amz-request-id: 95C468B54E975E40
Last-Modified: Tue, 14 Nov 2017 18:09:22 GMT
Etag: "a1a545c95f313a230157b47dca555c25"
Server: AmazonS3
Cache-Control: public, max-age=7200, stale-if-error=604800
Content-Encoding: gzip
Content-Length: 9086
Accept-Ranges: bytes
Date: Fri, 23 Feb 2018 06:57:30 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-fra19129-FRA
X-Cache: HIT
X-Cache-Hits: 111070
X-Timer: S1519369050.058488,VS0,VE0
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9086
Md5:    ea7d98da6b8048d3c3905a1c8c7413f1
Sha1:   222c966ad76450aefe8c8e8575678dd7733696bc
Sha256: 1ea4b27f6a8e25490b451cd0f484bb5f7ccf7031175f28f74ee14024461eef6a
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=397097, public, no-transform, must-revalidate
Last-Modified: Tue, 20 Feb 2018 21:12:24 GMT
Expires: Tue, 27 Feb 2018 21:12:24 GMT
Date: Fri, 23 Feb 2018 06:57:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    86d7443266c803387e8018dac3dc9609
Sha1:   1d3b8cb166af87b69b691141eaae22b6bd90fb6f
Sha256: df1ca7836dca39a9c844e7c463011d3516905295aab28547e36ec3e97e23bb3e
                                        
                                            GET /1/aaec216529?a=2159957&v=1071.385e752&to=MVABY0dQWkJVVkZZXggaIEJGRVtcG3ZdXkUUWg9bUENrYl1BVwoLEFwGQA%3D%3D&rst=4856&ref=http://website.informer.com/mail-n13.telecomputing.no&ap=85&fe=4421&dc=1735&at=HRcWFQ9KSR0WVBAKShtI&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.informer.com/mail-n13.telecomputing.no

                                         
                                         162.247.242.21
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=ISO-8859-1
                                        
Set-Cookie: JSESSIONID=25050db404ba2b58;Path=/;Domain=.nr-data.net;Secure
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 57


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   57
Md5:    5c9da71976fb9d00f82e61c7e496ba06
Sha1:   58884fb0e24a399213205ad35db27e6011bd149c
Sha256: f69a13217482dc43f25e74cfcb9391d0f06d22501f10f5cb5e413d2d98a5cd23