Overview

URL https://windows7canaimaeducativo.blogspot.com/
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 12:39:58 CEST
StatusLoading report..
urlquery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2017-10-13 12:46:10 CEST 1  94.130.90.167 Client IP ET POLICY Request for Coinhive Browser Monero Miner M2


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-13 2 coin-hive.com/lib/coinhive.min.js Malware
2017-10-13 2 coinhive.com/lib/coinhive.min.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-11-24 01:08:19 +0100
0 - 2 - 0 next-time-i-kill-you.blogspot.com/2012/07/ 172.217.22.161
2017-11-24 01:05:11 +0100
0 - 0 - 1 5cbodyboard.blogspot.com/ 172.217.22.161
2017-11-24 01:03:25 +0100
0 - 0 - 1 heymacrina.blogspot.com/2007/11/algunas-palab (...) 172.217.22.161
2017-11-24 01:01:28 +0100
0 - 0 - 1 quimica-dos-alimentos.blogspot.com/2015/03/tr (...) 172.217.22.161
2017-11-24 01:00:07 +0100
0 - 0 - 3 torrentfilmesbr.blogspot.com/p/como-baixar-em (...) 172.217.22.161
2017-11-24 00:58:07 +0100
0 - 0 - 3 wdastro.blogspot.co.id/2013/07/sejarah-berdir (...) 172.217.22.161
2017-11-24 00:57:20 +0100
0 - 0 - 2 tamilsongslyrics-sudha.blogspot.ru/search/lab (...) 172.217.22.161
2017-11-24 00:56:36 +0100
0 - 0 - 3 juzposting.blogspot.com/2012/01/reaction-pape (...) 172.217.22.161
2017-11-24 00:55:21 +0100
0 - 0 - 3 newblackboard.blogspot.com/ 172.217.22.161
2017-11-24 00:54:33 +0100
0 - 1 - 0 buyreplicawatches-krosstu.blogspot.com/2012/0 (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-11-25 01:04:19 +0100
0 - 0 - 1 dicasecursosparablogueiros.blogspot.com/2016/ (...) 216.58.211.129
2017-11-25 01:02:24 +0100
0 - 0 - 3 reestruturaeja-canoas.blogspot.com/2010/05/o- (...) 216.58.211.129
2017-11-25 01:01:12 +0100
0 - 1 - 0 nachalniki94.blogspot.com/p/blog-page.html 216.58.211.129
2017-11-25 00:56:47 +0100
0 - 0 - 3 giyanestu1907.blogspot.com/2011/10/sejarah-pe (...) 216.58.211.129
2017-11-25 00:55:53 +0100
0 - 0 - 2 adornosdetorta-eva.blogspot.com/2015/02/pista (...) 216.58.211.129
2017-11-25 00:52:57 +0100
2 - 0 - 0 zetinha-importanciasdemim.blogspot.com/search (...) 216.58.211.129
2017-11-25 00:51:54 +0100
0 - 0 - 2 absci4.blogspot.com/2008/02/pic-rate-xxx.html 216.58.211.129
2017-11-25 00:51:50 +0100
0 - 0 - 2 1960-mercury-montclair1025.blogspot.com/2011/ (...) 216.58.211.129
2017-11-25 00:51:13 +0100
0 - 1 - 0 vervajra.blogspot.com/2008/09/como-usar-el-ma (...) 216.58.211.129
2017-11-25 00:50:00 +0100
0 - 1 - 0 filmeojardineirofiel.blogspot.com.br/ 216.58.211.129

No other reports on domain: windows7canaimaeducativo.blogspot.com



JavaScript

Executed Scripts (83)


Executed Evals (84)

#1 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 85a33a184e9eadf9dc6dabfe104856da45a4c55c2536b0ea153a3a32a5d683c2

                                        0,
function(u) {
    U(u, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 066e8bc11e97037094ce99305a026ee54800bca1a7ba5a25c8d1ce4ca4e5bcd0

                                        0,
function(u) {
    U(u, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 418606b3f8d6bf9b0696b0f107270386bff9a89f022ee3939336b54094839823

                                        0,
function(u) {
    U(u, 4);
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 46c99dc79e0b33ba13e4c4c20cea0b72f23c8d417b1ce28be13a765eb9d9800a

                                        0,
function(u) {
    c(u, 1);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 2) - SHA256: b1c8d30aa2fda70122c184afdc67b5b9aa8cab4d4f52f43ae6dba3f1e1684289

                                        0,
function(u) {
    c(u, 2);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 4047c41177a9cd4fc9b00b6521946f94abb7f651f6154d85e0f4860751f7b9d9

                                        0,
function(u) {
    c(u, 4);
}
                                    

#7 JavaScript::Eval (size: 38, repeated: 2) - SHA256: 69286bb3a5633fad6dec0607d9a20cb703dad8eab587de3420cba6a6127bdd9f

                                        0,
function(u) {
    u.H && y(u, 0);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 2) - SHA256: de8b0b1f13c31627cd21c9dfd18151c81ae00f3336db5b0d405bc09e992df3bf

                                        0,
function(u) {
    u.c(0);
}
                                    

#9 JavaScript::Eval (size: 30, repeated: 2) - SHA256: b7c754279983a8fa20e4673fac93ca0124f1247336358ac75338fdd7ceb2e536

                                        0,
function(u) {
    u.c(3);
}
                                    

#10 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 92a6be4f36cb79b9577135646d65fc38b9422bf5f546e6176d01a681ac523f64

                                        0,
function(u) {
    u.c(4);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 9873c872eb8c2d5c5161c686c528a68a5375ac68580304743242dc552cd67e4a

                                        0,
function(u) {
    u.c(7);
}
                                    

#12 JavaScript::Eval (size: 187, repeated: 2) - SHA256: a13b777874155e618984a25d41e8f425c407d5ef78b4359dc89f85093227de86

                                        0,
function(u, G) {
    ((G.push(u[0] << 24 | u[1] << 16 | u[2] << 8 | u[3]), G).push(u[4] << 24 | u[5] << 16 | u[6] << 8 | u[7]), G).push(u[8] << 24 | u[9] << 16 | u[10] << 8 | u[11]);
}
                                    

#13 JavaScript::Eval (size: 51, repeated: 2) - SHA256: 875272be718dfe8884a1d2dba656c25128552139a8d551487d0928fe3e91dcf1

                                        0,
function(u, G) {
    (G = u.F(S(u)), B)(u, G);
}
                                    

#14 JavaScript::Eval (size: 92, repeated: 2) - SHA256: 768840437120e7a5224c6f0a8ac45ab37ecbeb95e983d7b971d8caadb5143383

                                        0,
function(u, G) {
    G = S(u), u = u.F(G), u[0].removeEventListener(u[1], u[2], false);
}
                                    

#15 JavaScript::Eval (size: 125, repeated: 2) - SHA256: 0e0d14e720862dc56f0b70ed40cf094bdb367958c5a89b316385096e5c5dae55

                                        0,
function(u, G) {
    if ((G = this.B[u], void 0) === G) {
        throw X(this, 30, 0, u), this.G;
    }
    return G();
}
                                    

#16 JavaScript::Eval (size: 83, repeated: 2) - SHA256: 16bfcfacaa23e01998efa3dcd402587f8c278af694f8f1c2d582c660072da30b

                                        0,
function(u, G) {
    w(u, 1, 5) || (G = z(u), T(u, G.i, G.g.apply(G.w, G.J)));
}
                                    

#17 JavaScript::Eval (size: 88, repeated: 2) - SHA256: 8bc9cabdfd273e01f211a301afdd47cd3ff98dc308bb71a0a05fdbf53d400a52

                                        0,
function(u, G, J) {
    (G = (J = (G = S(u), S(u)), u.B[G] && u.F(G)), T)(u, J, G);
}
                                    

#18 JavaScript::Eval (size: 72, repeated: 2) - SHA256: a6bb5b416a88274e59e1cc17a30d49e03fd86cc86f9dff9140b434eec0e92b0a

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, "" + u.F(G));
}
                                    

#19 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 582ab47a4dac00ebd6bacb0531ef835ea1ef675e18138a4277ac233ea459fee5

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) % u.F(G));
}
                                    

#20 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 9a3c18b543b4804357d74543b461d9b416bd2863de66874f25a81ce28f34158c

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) * u.F(G));
}
                                    

#21 JavaScript::Eval (size: 76, repeated: 2) - SHA256: f0846b5dfee624cd73bed63a00d3fb1ddc2a0a01a587ff1bdd35b2f4a61bb158

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) + u.F(G));
}
                                    

#22 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 8fda1f1a86ee6b7847ae9a78dc0864ebcf202358c68ed4053729efd029ea3193

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) - u.F(G));
}
                                    

#23 JavaScript::Eval (size: 85, repeated: 2) - SHA256: 58ae779512bd9887a47b835af1095d5c44854dfb3680304277a8a7d26b7ad07b

                                        0,
function(u, G, J) {
    (J = (G = S(u), S(u)), 0 != u.F(G)) && T(u, 37, u.F(J));
}
                                    

#24 JavaScript::Eval (size: 77, repeated: 2) - SHA256: 18092f5e0b497f20e7e1cb3a4691653a5b45bb58047cbb2245cc64b4693567b6

                                        0,
function(u, G, J) {
    G = (G = S(u), J = S(u), u).F(G), T(u, J, v(G));
}
                                    

#25 JavaScript::Eval (size: 242, repeated: 2) - SHA256: 32cd68a701aa114bf8081a0361130f374f27ff7e3ba154e101db8e3adca48fbc

                                        0,
function(u, G, J) {
    if (3 == u.length) {
        for (J = 0; 3 > J; J++) {
            G[J] += u[J];
        }
        for (J = 0, u = [13, 8, 13, 12, 16, 5, 3, 10, 15]; 9 > J; J++) {
            G[3](G, J % 3, u[J]);
        }
    }
}
                                    

#26 JavaScript::Eval (size: 137, repeated: 2) - SHA256: f5a474e19eba4537ec6f72e6f4f4c503e633889e6aac2f13cbdf8aec73460f83

                                        0,
function(u, G, J) {
    return (G = (J = function() {
        return u;
    }, function() {
        return J();
    }), G)[this.M] = function(A) {
        u = A;
    }, G;
}
                                    

#27 JavaScript::Eval (size: 121, repeated: 2) - SHA256: e2c149e95c0a082249d9aa24d1a9416d1e2acf38d19a75e0b0aeaa4b5b30658a

                                        0,
function(u, G, J) {
    w(u, 1, 5) ||
        (G = S(u), J = S(u), T(u, J, function(u) {
            return eval(u);
        }(u.F(G))));
}
                                    

#28 JavaScript::Eval (size: 210, repeated: 2) - SHA256: befbe26ffc7ea2908ef8ac224c20245858418545f6c3518b53117abce5a78230

                                        0,
function(u, G, J, I) {
    ((J = (J = (G = u & 4, u &= 3, S)(this), I = S(this), this).F(J), G) &&
        (J = Q(("" + J).replace(/\r\n/g, "\n"))), u) &&
    p(this, I, W(J.length, 2)), p(this, I, J);
}
                                    

#29 JavaScript::Eval (size: 108, repeated: 2) - SHA256: 6252ffc84013074faa543125e6adeaec247460e9a1a2a8156712f2a9bec01789

                                        0,
function(u, G, J, I) {
    (G = (I = (J = (G = S(u), S(u)), S)(u), J = u.F(J), u).F(G), T)(u, I, G[J]);
}
                                    

#30 JavaScript::Eval (size: 96, repeated: 2) - SHA256: 7608adcb00518348576498a4b0dcf22f17cd2a793fb348e44889fd2d658498b9

                                        0,
function(u, G, J, I) {
    (G = S(u), J = S(u), I = S(u), T)(u, I, (u.F(G) in u.F(J)) + 0);
}
                                    

#31 JavaScript::Eval (size: 87, repeated: 2) - SHA256: d0237fe2bb1845883b3e64a70edcb215efe26ca6fea7d4bfb4f8847009514645

                                        0,
function(u, G, J, I) {
    (I = (G = S(u), J = S(u), S)(u), T)(u, I, u.F(G) << J);
}
                                    

#32 JavaScript::Eval (size: 87, repeated: 2) - SHA256: 0183e66469bd3c246dcffce151337c170a9b099bf8c32b37c0a036437f324666

                                        0,
function(u, G, J, I) {
    (I = (G = S(u), J = S(u), S)(u), T)(u, I, u.F(G) >> J);
}
                                    

#33 JavaScript::Eval (size: 93, repeated: 2) - SHA256: 933b410872c88053657d82cf66215e58f46a95ce5f6b288fb1dcda0b1b368538

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), T)(u, I, u.F(G) | u.F(J));
}
                                    

#34 JavaScript::Eval (size: 94, repeated: 2) - SHA256: 8219844f752d37eefa46c5bdc44c900bb57bf932d0149156b5c3092f842b3064

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), T)(u, I, u.F(G) || u.F(J));
}
                                    

#35 JavaScript::Eval (size: 92, repeated: 2) - SHA256: ae2f2fdfd83863e0c289773d0079e033c948bd982d84af1294dc00ea5032dfdb

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), u.F(G))[u.F(J)] = u.F(I);
}
                                    

#36 JavaScript::Eval (size: 101, repeated: 2) - SHA256: 57243f670b035a3b4124202dcbabd02e5ae99a48192e7e4678a1522e14515454

                                        0,
function(u, G, J, I) {
    G = (I = (G = S(u), J = S(u), S(u)), u.F(G)) == u.F(J), T(u, I, +G);
}
                                    

#37 JavaScript::Eval (size: 100, repeated: 2) - SHA256: ebeaddd0b39b909d4031e6a70239d689d587478c68664a4d5b5361c342096db2

                                        0,
function(u, G, J, I) {
    G = (I = (G = S(u), J = S(u), S(u)), u.F(G)) > u.F(J), T(u, I, +G);
}
                                    

#38 JavaScript::Eval (size: 142, repeated: 2) - SHA256: 73d819813d811fada60919ffaba436aaaecf43cd95cebcdb964c58130e7861ae

                                        0,
function(u, G, J, I) {
    for (; J--;) {
        37 != J && 174 != J && G.B[J] && (G.B[J] = G[I](G[u](J), this));
    }
    G[u] = this;
}
                                    

#39 JavaScript::Eval (size: 244, repeated: 2) - SHA256: a3c9fa700bf8add046eb313c53b742a6cee9bbdf7f3713a9906c1475d15ed1d0

                                        0,
function(u, G, J, I) {
    if ((G = u.$.pop())) {
        for (J = S(u); 0 < J; J--) {
            I = S(u), G[I] = u.B[I];
        }
        (G[192] = u.B[192], G[110] = u.B[110], u).B = G;
    } else {
        T(u, 37, u.R.length);
    }
}
                                    

#40 JavaScript::Eval (size: 170, repeated: 2) - SHA256: 313dedf37511f024d6d7d4ecb22be15dd595cd149d385982eb8272adb07864e6

                                        0,
function(u, G, J, I) {
    try {
        I = u[(G + 2) % 3], u[G] = u[G] - u[(G + 1) % 3] - I ^ (1 == G ? I << J : I >>> J);
    } catch (f) {
        throw f;
    }
}
                                    

#41 JavaScript::Eval (size: 130, repeated: 2) - SHA256: 8ecc5a7f35ee62f619c232d8cc88f1d4f96787464128e1e6b7c9ef98697027f7

                                        0,
function(u, G, J, I, f) {
    (J = (f = (I = (J = (G = S(u), S(u)), u.F(S(u))), u).F(S(u)), u.F(J)), T)(u, G, Y(u, J, I, f));
}
                                    

#42 JavaScript::Eval (size: 226, repeated: 2) - SHA256: 2a4543188cfbf4efaa47ee00eb8ee4c3733f87694a054c4b56309548647da1dd

                                        0,
function(u, G, J, I, f) {
    0 !== (I = (J = (f = (G = (I = (J = (G = S(u), S(u)), S)(u), u).F(G), u.F(S(u))), u).F(J), u).F(I), G) &&
        (I = Y(u, I, f, 1, G, J), G.addEventListener(J, I, M), T(u, 195, [G, J, I]));
}
                                    

#43 JavaScript::Eval (size: 240, repeated: 2) - SHA256: 2b798148084ad5aa750f205ca8017b28a3f546b44cb9f0960bff3019aa19c44f

                                        0,
function(u, G, J, I, f) {
    for (I = (J = (G = [], S(u)), 0); I < J; I++) {
        f = S(u), G.push(u.F(f));
    }
    J = S(u), T(u, J, function(u, J) {
        u.X++;
        try {
            for (J = 0; J < G.length; J++) {
                (0, G[J])(u);
            }
        } finally {
            u.X--;
        }
    });
}
                                    

#44 JavaScript::Eval (size: 134, repeated: 2) - SHA256: 441ae0ddf2f52a459d59e176c8aa90f8a178bcc9efb5353179917726d46c0536

                                        0,
function(u, G, J, I, f) {
    for (f = (G = S(u), J = k(u), 0), I = []; f < J; f++) {
        I.push(S(u));
    }
    T(u, G, I);
}
                                    

#45 JavaScript::Eval (size: 403, repeated: 2) - SHA256: 739662ec426680cd0cbfe992b5b973ccfec8d5db0eba87cef4c2a716d4487126

                                        0,
function(u, G, J, I, f, R) {
    if (!w(u, 1, 255)) {
        if ("object" == (u = (I = (J = (G = (f = (I = (G = S(u), J = S(u), S(u)), S)(u), u.F(G)), u).F(J), u.F(I)), u.F(f)), v(G))) {
            for (R in f = [], G) {
                f.push(R);
            }
            G = f;
        }
        for (R = (f = 0, G.length); f < R; f += I) {
            J(G.slice(f, f + I), u);
        }
    }
}
                                    

#46 JavaScript::Eval (size: 218, repeated: 2) - SHA256: 52d04bad00c45cd626e8d13d68712b258e668abb82116c212464fbd912b34ee7

                                        0,
function(u, G, J, I, f, R) {
    return u = (((R = (I = function() {
        return I[J.A + (f[J.h] === G) - !R[J.h]];
    }, f = function() {
        return I();
    }, J = this, J).v, f)[J.M] = function(u) {
        I[J.s] = u;
    }, f)[J.M](u), f);
}
                                    

#47 JavaScript::Eval (size: 339, repeated: 2) - SHA256: 634857dd6aec8645f547aa423526592167157d6eb5af23cba95fa2dbe187a8ec

                                        0,
function(u, G, J, I, f, R, b) {
    w(u, 1, 5) ||
        (G = z(u), I = G.w, f = G.g, J = G.J, b = J.length, 0 == b ? (R = new(I[f])) : 1 == b ? (R = new(I[f])(J[0])) : 2 == b ? (R = new(I[f])(J[0], J[1])) : 3 == b ? (R = new(I[f])(J[0], J[1], J[2])) : 4 == b ? (R = new(I[f])(J[0], J[1], J[2], J[3])) : X(u, 22), T(u, G.i, R));
}
                                    

#48 JavaScript::Eval (size: 292, repeated: 2) - SHA256: 5c8fd55fbe3c8de7f705ed231635066504ccbf9c21af0f09cce9f6a947bd886a

                                        0,
function(u, G, J, f, D, R, b) {
    if ((J = (G = S(u), k(u)), f = "", u.B)[74]) {
        for (D = u.F(74), b = D.length, R = 0; J--;) {
            R = (R + k(u)) % b, f += I[D[R]];
        }
    } else {
        for (; J--;) {
            f += I[S(u)];
        }
    }
    T(u, G, f);
}
                                    

#49 JavaScript::Eval (size: 39, repeated: 2) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#50 JavaScript::Eval (size: 1, repeated: 2) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#51 JavaScript::Eval (size: 83, repeated: 2) - SHA256: 20f5626ae130665f06cffcb30f699b808c3ad484fa254ffc9173bf400a4a8325

                                        B = function(u, G) {
    ((u.$.push(u.B.slice()), u).B[37] = void 0, T)(u, 37, G);
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#53 JavaScript::Eval (size: 598, repeated: 2) - SHA256: cd9447cc2c0223b457225051c59d9318e1546e70c4579a3020953c2bfe88b2e0

                                        K = function(u, G, J, I, f, A, n) {
    u.X++;
    try {
        for (J = (I = (f = void 0, 5001), A = 0, u.R.length);
            (--I || u.Y) && (A = u.F(37)) < J;) {
            try {
                T(u, 174, A), n = S(u), (f = u.F(n)) && f.call ? f(u) : X(u, 21, 0, n), u.b = true, w(u, 0, 2);
            } catch (a) {
                a != u.G && (u.F(83) ? X(u, 22, a) : T(u, 83, a));
            }
        }
        I || X(u, 33);
    } catch (a) {
        try {
            X(u, 22, a);
        } catch (E) {
            h(u, E);
        }
    }
    return (J = u.F(160), G) && T(u, 37, G), u.X--, J;
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 2) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#55 JavaScript::Eval (size: 366, repeated: 2) - SHA256: 6ec2f41eb6bb55a4fbbfeb33948dd89ad2700cbab493f084f9d36c784da1e636

                                        O = function(u, G, J, I) {
    try {
        for (I = 0; 79669387488 != I;) {
            u += (G << 4 ^ G >>> 5) + G ^ I + J[I & 3], I += 2489668359, G += (u << 4 ^ u >>> 5) + u ^ I + J[I >>> 11 & 3];
        }
        return [u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255, G >>> 24, G >> 16 & 255, G >> 8 & 255, G & 255];
    } catch (f) {
        throw f;
    }
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#57 JavaScript::Eval (size: 487, repeated: 2) - SHA256: 07d3a371041da0ee139964bccc86954d3995a61cfa7808eecec479c1af91635a

                                        Q = function(u, G, J, I, f) {
    for (I = J = (G = [], 0); I < u.length; I++) {
        f = u.charCodeAt(I), 128 > f ? (G[J++] = f) : (2048 > f ? (G[J++] = f >> 6 | 192) : (55296 == (f & 64512) &&
            I + 1 < u.length && 56320 == (u.charCodeAt(I + 1) & 64512) ? (f = 65536 + ((f & 1023) << 10) + (u.charCodeAt(++I) & 1023), G[J++] = f >> 18 | 240, G[J++] = f >> 12 & 63 | 128) : (G[J++] = f >> 12 | 224), G[J++] = f >> 6 & 63 | 128), G[J++] = f & 63 | 128);
    }
    return G;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#59 JavaScript::Eval (size: 289, repeated: 2) - SHA256: 0f14c151e55efc05d6b6dfd101052a52af86db4f4ec12a145918b7185fa2526e

                                        S = function(u, G, J) {
    if (G = u.F(37), !(G in u.R)) {
        throw X(u, 31), u.G;
    }
    return ((void 0 == u.f && (u.f = Z(u.R, G - 4), u.m = void 0), u).m != G >> 3 &&
        (u.m = G >> 3, J = [0, 0, 0, u.F(20)], u.W = O(u.f, u.m, J)), T(u, 37, G + 1), u.R)[G] ^ u.W[G % 8];
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 2) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#61 JavaScript::Eval (size: 322, repeated: 2) - SHA256: 21db507b7c39a107958863dfd01e27d148573425e6fbf87618a680db79a48861

                                        T = function(u, G, J) {
    if (37 == G || 174 == G) {
        if (u.B[G]) {
            u.B[G][u.M](J);
        } else {
            u.B[G] = u.K(J);
        }
    } else if (2 != G && 249 != G && 52 != G && 192 != G || !u.B[G]) {
        u.B[G] = u.Z(J, u.F);
    }
    20 == G && (u.f = void 0, T(u, 37, u.F(37) + 4));
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 2) - SHA256: a25513c7e0f6eaa80a3337ee18081b9e2ed09e00af8531c8f7bb2542764027e7

                                        U
                                    

#63 JavaScript::Eval (size: 76, repeated: 2) - SHA256: 03bbe17d1603c10f2e83d2bc828029cddd508e534fed3ce337962fe1cc9f7a5f

                                        U = function(u, G, J, I) {
    (J = S(u), I = S(u), p)(u, I, W(u.F(J), G));
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#65 JavaScript::Eval (size: 433, repeated: 2) - SHA256: 249ec97f6a08a830080cf0a04b1fabe53fb731ef012d9c457a48d406fd4a140a

                                        X = function(u, G, J, I, f) {
    (J = (I = ((G = [(f = u.F(174), G), f >> 8 & 255, f & 255], void 0 != I && G.push(I), 0 == u.F(192).length) &&
            (u.B[192] = void 0, T(u, 192, G)), ""), J &&
        (J.message && (I += J.message), J.stack && (I += ":" + J.stack)), u).F(110), 3 < J) &&
    (I = I.slice(0, J - 3), J -= I.length + 3, I = Q(I.replace(/\r\n/g, "\n")), p(u, 249, W(I.length, 2).concat(I), 12)), T(u, 110, J);
}
                                    

#66 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#67 JavaScript::Eval (size: 272, repeated: 2) - SHA256: bd1936dce782bf4a6628f38f3398b55e0114b8c86a0b08950279bfe41fb9e235

                                        Y = function(u, G, J, I, f, A) {
    return function() {
        var n = I & 1,
            a = [6, G, J, void 0, f, A, arguments];
        if (I & 2) {
            var E = (m(u, a), x(u, true, false, false));
        } else {
            n && u.o.length ? m(u, a) : n ? (m(u, a), x(u, true, false, false)) : (E = C(u, a));
        }
        return E;
    };
}
                                    

#68 JavaScript::Eval (size: 1, repeated: 2) - SHA256: bbeebd879e1dff6918546dc0c179fdde505f2a21591c9a9c96e36b054ec5af83

                                        Z
                                    

#69 JavaScript::Eval (size: 88, repeated: 2) - SHA256: a49c76022c8cae4f4a15813834e3e8594a46f673fde11ea6d435513980f4ead5

                                        Z = function(u, G) {
    return u[G] << 24 | u[G + 1] << 16 | u[G + 2] << 8 | u[G + 3];
}
                                    

#70 JavaScript::Eval (size: 2, repeated: 22) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#71 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#72 JavaScript::Eval (size: 116, repeated: 2) - SHA256: f7647d123a1e780762c184effa5b38c3d32e379dda4805849b8e7deac2b8bee4

                                        c = function(u, G, J, I) {
    for (J = S(u), I = 0; 0 < G; G--) {
        I = I << 8 | S(u);
    }
    T(u, J, I);
}
                                    

#73 JavaScript::Eval (size: 35, repeated: 2) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#74 JavaScript::Eval (size: 35, repeated: 2) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#75 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#76 JavaScript::Eval (size: 83, repeated: 2) - SHA256: b79ebc32e75bd298a68006022213b2b762eeb198b27073bae974e5614392c046

                                        k = function(u, G) {
    return G = S(u), G & 128 && (G = G & 127 | S(u) << 7), G;
}
                                    

#77 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#78 JavaScript::Eval (size: 417, repeated: 2) - SHA256: 50c14a20c0baa72a6f9418c3eb35bba90ce0922a0eaf32b48c093e320044626a

                                        p = function(u, G, J, I, f, A) {
    for (u = (I = (((f = u.F(G), 249) == G ? (G = function(u, G, J, I) {
                if ((J = (G = f.length, G - 4) >> 3, f).P != J) {
                    J = (((I = [0, 0, 0, A], f).P = J, J) << 3) - 4;
                    try {
                        f.T = O(Z(f, J), Z(f, J + 4), I);
                    } catch (R) {
                        throw R;
                    }
                }
                f.push(f.T[G & 7] ^ u);
            }, A = u.F(236)) : (G = function(u) {
                f.push(u);
            }), I) &&
            G(I & 255), 0), J.length); I < u; I++) {
        G(J[I]);
    }
}
                                    

#79 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#80 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#81 JavaScript::Eval (size: 130, repeated: 2) - SHA256: 6d7e582508be102dd2bd20c7441d7fc9126b27c22704c18f1f32cfc3c5aef0f1

                                        r = function(u, G, J) {
    return (J = u.F(37), u.R && J < u.R.length ? (T(u, 37, u.R.length), B(u, G)) : T(u, 37, G), K)(u, J);
}
                                    

#82 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#83 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#84 JavaScript::Eval (size: 256, repeated: 2) - SHA256: c19bfe0ed617b3261b22a276af4df0cc446d6fdfb0d336699ecfa771d5da1b28

                                        z = function(u, G, J, I, f, A) {
    for (I = ((G = {}, J = S(u), G).i = S(u), G.J = [], S(u)) - 1, f = S(u), A = 0; A < I; A++) {
        G.J.push(S(u));
    }
    for (G.g = u.F(J), G.w = u.F(f); I--;) {
        G.J[I] = u.F(G.J[I]);
    }
    return G;
}
                                    

Executed Writes (11)

#1 JavaScript::Write (size: 0, repeated: 6) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 2552, repeated: 1) - SHA256: 205fc034cdd368098cd144402d98c36241794427937a464c993e90d989d8d491

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-0731879187820183"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171011/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_format="666x60";google_ad_slot="5673570737";google_ad_host_channel="L0007";google_ad_host="ca-host-pub-1556223355139109";google_ad_client="ca-pub-0731879187820183";google_adsbygoogle_status="done";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=4;google_responsive_formats=3;google_ad_width=666;google_ad_height=60;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=1;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["38893301","21061122"],"loeids":["38893311"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_unit_key="3133928837";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1507891563843;google_pub_vars="JTdCJTIyZ29vZ2xlX2FkX2Zvcm1hdCUyMiUzQSUyMjY2Nng2MCUyMiUyQyUyMmdvb2dsZV9hZF9zbG90JTIyJTNBJTIyNTY3MzU3MDczNyUyMiUyQyUyMmdvb2dsZV9hZF9ob3N0X2NoYW5uZWwlMjIlM0ElMjJMMDAwNyUyMiUyQyUyMmdvb2dsZV9hZF9ob3N0JTIyJTNBJTIyY2EtaG9zdC1wdWItMTU1NjIyMzM1NTEzOTEwOSUyMiUyQyUyMmdvb2dsZV9hZF9jbGllbnQlMjIlM0ElMjJjYS1wdWItMDczMTg3OTE4NzgyMDE4MyUyMiUyQyUyMmdvb2dsZV9hZHNieWdvb2dsZV9zdGF0dXMlMjIlM0ElMjJkb25lJTIyJTJDJTIyZ29vZ2xlX2Z1bGxfd2lkdGhfcmVzcG9uc2l2ZV9hbGxvd2VkJTIyJTNBZmFsc2UlMkMlMjJnb29nbGVfZndyX25vbl9leHBhbnNpb25fcmVhc29uJTIyJTNBNCUyQyUyMmdvb2dsZV9yZXNwb25zaXZlX2Zvcm1hdHMlMjIlM0EzJTJDJTIyZ29vZ2xlX2FkX3dpZHRoJTIyJTNBNjY2JTJDJTIyZ29vZ2xlX2FkX2hlaWdodCUyMiUzQTYwJTJDJTIyZ29vZ2xlX2FkX3Jlc2l6YWJsZSUyMiUzQXRydWUlMkMlMjJnb29nbGVfb3ZlcnJpZGVfZm9ybWF0JTIyJTNBMSUyQyUyMmdvb2dsZV9yZXNwb25zaXZlX2F1dG9fZm9ybWF0JTIyJTNBMSUyQyUyMmdvb2dsZV9sb2FkZXJfZmVhdHVyZXNfdXNlZCUyMiUzQTEyOCUyQyUyMmdvb2dsZV9hZF9tb2RpZmljYXRpb25zJTIyJTNBJTdCJTIycGxsZSUyMiUzQXRydWUlMkMlMjJlaWRzJTIyJTNBJTVCJTIyMzg4OTMzMDElMjIlMkMlMjIyMTA2MTEyMiUyMiU1RCUyQyUyMmxvZWlkcyUyMiUzQSU1QiUyMjM4ODkzMzExJTIyJTVEJTdEJTJDJTIyZ29vZ2xlX2xvYWRlcl91c2VkJTIyJTNBJTIyYWElMjIlMkMlMjJnb29nbGVfcmVhY3RpdmVfdGFnX2ZpcnN0JTIyJTNBZmFsc2UlMkMlMjJnb29nbGVfYWRfdW5pdF9rZXklMjIlM0ElMjIzMTMzOTI4ODM3JTIyJTJDJTIyZ29vZ2xlX2FkX2RvbV9maW5nZXJwcmludCUyMiUzQSUyMjgwNzA0ODM5NCUyMiU3RA==";google_bpp=246;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "https://pagead2.googlesyndication.com/pagead/js/r20171011/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 2350, repeated: 1) - SHA256: dbb9f52bbda4cc7f4cafb696208310cb01d9e4df6637dbc2b3ee0dfe8a83d339

                                        < !doctype html > < html > < body > < script > google_ad_format = "276x600";
google_ad_slot = "4205735538";
google_ad_host_channel = "L0001";
google_ad_host = "ca-host-pub-1556223355139109";
google_ad_client = "ca-pub-0731879187820183";
google_adsbygoogle_status = "done";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 4;
google_ad_width = 276;
google_ad_height = 600;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893301", "21061122"],
    "loeids": ["38893311"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_unit_key = "3941167828";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1507891564102;
google_pub_vars = "JTdCJTIyZ29vZ2xlX2FkX2Zvcm1hdCUyMiUzQSUyMjI3Nng2MDAlMjIlMkMlMjJnb29nbGVfYWRfc2xvdCUyMiUzQSUyMjQyMDU3MzU1MzglMjIlMkMlMjJnb29nbGVfYWRfaG9zdF9jaGFubmVsJTIyJTNBJTIyTDAwMDElMjIlMkMlMjJnb29nbGVfYWRfaG9zdCUyMiUzQSUyMmNhLWhvc3QtcHViLTE1NTYyMjMzNTUxMzkxMDklMjIlMkMlMjJnb29nbGVfYWRfY2xpZW50JTIyJTNBJTIyY2EtcHViLTA3MzE4NzkxODc4MjAxODMlMjIlMkMlMjJnb29nbGVfYWRzYnlnb29nbGVfc3RhdHVzJTIyJTNBJTIyZG9uZSUyMiUyQyUyMmdvb2dsZV9mdWxsX3dpZHRoX3Jlc3BvbnNpdmVfYWxsb3dlZCUyMiUzQWZhbHNlJTJDJTIyZ29vZ2xlX2Z3cl9ub25fZXhwYW5zaW9uX3JlYXNvbiUyMiUzQTQlMkMlMjJnb29nbGVfcmVzcG9uc2l2ZV9mb3JtYXRzJTIyJTNBNCUyQyUyMmdvb2dsZV9hZF93aWR0aCUyMiUzQTI3NiUyQyUyMmdvb2dsZV9hZF9oZWlnaHQlMjIlM0E2MDAlMkMlMjJnb29nbGVfYWRfcmVzaXphYmxlJTIyJTNBdHJ1ZSUyQyUyMmdvb2dsZV9vdmVycmlkZV9mb3JtYXQlMjIlM0ExJTJDJTIyZ29vZ2xlX3Jlc3BvbnNpdmVfYXV0b19mb3JtYXQlMjIlM0ExJTJDJTIyZ29vZ2xlX2xvYWRlcl9mZWF0dXJlc191c2VkJTIyJTNBMTI4JTJDJTIyZ29vZ2xlX2FkX21vZGlmaWNhdGlvbnMlMjIlM0ElN0IlMjJwbGxlJTIyJTNBdHJ1ZSUyQyUyMmVpZHMlMjIlM0ElNUIlMjIzODg5MzMwMSUyMiUyQyUyMjIxMDYxMTIyJTIyJTVEJTJDJTIybG9laWRzJTIyJTNBJTVCJTIyMzg4OTMzMTElMjIlNUQlN0QlMkMlMjJnb29nbGVfbG9hZGVyX3VzZWQlMjIlM0ElMjJhYSUyMiUyQyUyMmdvb2dsZV9yZWFjdGl2ZV90YWdfZmlyc3QlMjIlM0FmYWxzZSUyQyUyMmdvb2dsZV9hZF91bml0X2tleSUyMiUzQSUyMjM5NDExNjc4MjglMjIlMkMlMjJnb29nbGVfYWRfZG9tX2ZpbmdlcnByaW50JTIyJTNBJTIyODA3MDQ4Mzk0JTIyJTdE";
google_bpp = 236;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171011 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#4 JavaScript::Write (size: 2348, repeated: 1) - SHA256: 72816fe744581922acc9a42824d099d44a36eadf03b0e7c4071f3ce6ce6bd117

                                        < !doctype html > < html > < body > < script > google_ad_format = "276x600";
google_ad_slot = "7150303934";
google_ad_host_channel = "L0001";
google_ad_host = "ca-host-pub-1556223355139109";
google_ad_client = "ca-pub-0731879187820183";
google_adsbygoogle_status = "done";
google_full_width_responsive_allowed = false;
google_fwr_non_expansion_reason = 4;
google_responsive_formats = 4;
google_ad_width = 276;
google_ad_height = 600;
google_ad_resizable = true;
google_override_format = 1;
google_responsive_auto_format = 1;
google_loader_features_used = 128;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893301", "21061122"],
    "loeids": ["38893311"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_unit_key = "1347854052";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1507891564338;
google_pub_vars = "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";
google_bpp = 8;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171011 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#5 JavaScript::Write (size: 54, repeated: 2) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#6 JavaScript::Write (size: 32117, repeated: 1) - SHA256: a780f334217afbbc693b42ab18da7f0a3f85fcb4715931232135844d6c0060d6

                                        < !doctype html > < html > < head > < script >
var google_casm = ["", 0, null, 0, 0, null, 1]; < /script><script>(function(){(function(){function c(a){this.t={};this.tick=function(a,b,c){this.t[a]=[void 0!=c?c:(new Date).getTime(),b]};this.tick("start",null,a)}var a,b;window.performance&&(b=(a=window.performance.timing)&&a.responseStart);var d=0<b?new c(b):new c;window.jstiming={Timer:c,load:d};a&&(a=a.navigationStart,0<a&&b>=a&&(window.jstiming.srt=b-a))})();}).call(this);</script > < style > a {
color: #000000 }</style><script>(function(){var h=
function(a, e, b, f, g) {
    if (g) b = a + ("&" + e + "=" + b);
    else {
        var c = "&" + e + "=",
            d = a.indexOf(c);
        0 > d ? b = a + c + b : (d += c.length, c = a.indexOf("&", d), b = 0 <= c ? a.substring(0, d) + b + a.substring(c) : a.substring(0, d) + b)
    }
    return 2E3 < b.length ? void 0 !== f ? h(a, e, f, void 0, g) : a : b
};window.bgz = function(a) {
    if (a = document.getElementById(a)) a.href = h(a.href, "bg", "10")
};
}).call(this);
(function() {
    var f = this,
        g = function(a, b, c) {
            return a.call.apply(a.bind, arguments)
        },
        h = function(a, b, c) {
            if (!a) throw Error();
            if (2 < arguments.length) {
                var d = Array.prototype.slice.call(arguments, 2);
                return function() {
                    var c = Array.prototype.slice.call(arguments);
                    Array.prototype.unshift.apply(c, d);
                    return a.apply(b, c)
                }
            }
            return function() {
                return a.apply(b, arguments)
            }
        },
        k = function(a, b, c) {
            Function.prototype.bind && -1 != Function.prototype.bind.toString().indexOf("native code") ? k = g : k = h;
            return k.apply(null, arguments)
        },
        l = function(a, b) {
            a = a.split(".");
            var c = f;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        };
    var m = document;
    var n = function(a, b) {
        if (!a || !b) return !1;
        if (a.contains && 1 == b.nodeType) return a == b || a.contains(b);
        if ("undefined" != typeof a.compareDocumentPosition) return a == b || !!(a.compareDocumentPosition(b) & 16);
        for (; b && a != b;) b = b.parentNode;
        return b == a
    };
    var p = {
            capture: !0
        },
        r = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a = !1;
            try {
                var b = Object.defineProperty({}, "passive", {get: function() {
                        a = !0
                    }
                });
                f.addEventListener("test", null, b)
            } catch (c) {}
            return a
        });

    function t(a) {
        return a ? a.passive && r() ? a : a.capture || !1 : a
    }
    var u = function(a, b, c, d) {
        a.addEventListener ? a.addEventListener(b, c, t(d)) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var v = function(a, b, c, d, e) {
        window.css ? css(b, c, d, e, void 0) : a && (b = a.href, e ? d = b + ("&" + c + "=" + d) : (e = "&" + c + "=", c = b.indexOf(e), 0 > c ? d = b + e + d : (c += e.length, e = b.indexOf("&", c), d = 0 <= e ? b.substring(0, c) + d + b.substring(e) : b.substring(0, c) + d)), a.href = 2E3 < d.length ? b : d)
    };
    var w = !1,
        x = !1,
        y = null,
        z = function() {
            document.addEventListener && u(document, "click", function(a) {
                y = a
            }, p)
        },
        A = function() {
            var a = y ? y : window.event;
            return a ? w || x ? !1 : (a.preventDefault ? a.preventDefault() : a.returnValue = !1, !0) : !1
        },
        B = function() {
            u(document, "mousedown", function() {
                w = !0
            });
            u(document, "keydown", function() {
                x = !0
            });
            z()
        };
    var D = function(a, b) {
            if (0 > b || parseInt(b, 10) !== b) b = 17;
            C(a, b)
        },
        E = function(a, b) {
            C(a, b || 1)
        },
        F = function(a) {
            C(a, 2)
        },
        G = function(a, b) {
            C(a, b || 0)
        },
        H = {},
        C = function(a, b) {
            H[a] || (H[a] = []);
            var c = H[a][b];
            c || (H[a][b] = !0);
            c || v(document.getElementById(a), a, "nb", b, !0)
        };
    var I = function() {
        this.g = this.h = null;
        m.addEventListener && m.addEventListener("mousedown", k(this.i, this), !0);
        u(m, "DOMContentLoaded", k(function() {
            this.g = m.getElementById("common_15click_anchor")
        }, this))
    };
    I.prototype.i = function(a) {
        this.h = a
    };
    var J = function(a, b, c) {
        var d = a.id || "";
        v(a, d, "nx", b);
        v(a, d, "ny", c)
    };
    var K = [0, 2, 1],
        L = null,
        M = function(a) {
            if (a) {
                var b;
                if (b = window.event || L) {
                    var c;
                    (c = b.which ? 1 << K[b.which - 1] : b.button) && b.shiftKey && (c |= 8);
                    c && b.altKey && (c |= 16);
                    c && b.ctrlKey && (c |= 32);
                    b = c
                } else b = null;
                b && v(a, a.id, "mb", b)
            }
        };
    document.addEventListener && document.addEventListener("mousedown", function(a) {
        L = a
    }, !0);
    window.mb = M;
    var N = {},
        O = function(a) {
            void 0 !== N[a] ? N[a] ++ : N[a] = 1;
            v(document.getElementById(a), a, "nm", N[a])
        };
    l("init_ssb", function(a, b, c, d, e) {
        a && (B(), l("accbk", A));
        b && (l("cla", D), l("cll", E), l("clb", F), l("clh", G));
        if (c) {
            var q = new I;
            l("xy", function(a, b, c) {
                c = c || b;
                var d = a || q.h;
                if (d && b && c && !n(q.g, d.target) && (a = m.querySelector("a.one-point-five-click.rhbutton"), !a || !n(a, d.target))) {
                    var e = Math.round(d.clientX - c.offsetLeft);
                    c = Math.round(d.clientY - c.offsetTop);
                    J(b, e, c);
                    q.g && J(q.g, e, c);
                    a && J(a, e, c)
                }
            })
        }
        d && l("mb", M);
        e && l("ss", O)
    });
}).call(this);
init_ssb(true, false, true, true, true);
if (typeof(ss) === "undefined") {
    ss = function() {};
}

function st(id) {
    var a = document.getElementById(id);
    if (a) {
        xy(window.event, a, document.body);
        mb(a);
    }
    bgz(id);
}

function ha(a, x) {
    if (accbk()) return;
    bgz(a);
}

function hb(u) {
    return bgy(u);
}

function ia(a, e, x) {
    if (accbk()) return;
    bgz(a);
}

function ja(a, x) {
    if (accbk()) return;
    bgz(a);
}

function ga(o, e, x) {
    if (document.getElementById) {
        var a = o.id.substring(1),
            p = "",
            r = "",
            g = e.target,
            t, f, h;
        if (g) {
            t = g.id;
            f = g.parentNode;
            if (f) {
                p = f.id;
                h = f.parentNode;
                if (h) r = h.id;
            }
        } else {
            h = e.srcElement;
            f = h.parentNode;
            if (f) p = f.id;
            t = h.id;
        }
        if (t == a || p == a || r == a) return true;
        ia(a, e, x);
        top.location.href = document.getElementById(a).href;
    }
}(function() {
    if (window.jstiming) {
        window.jstiming.a = {};
        window.jstiming.b = 1;
        var e = function(b, a, c) {
                var f = b.t[a],
                    d = b.t.start;
                if (f && (d || c)) return f = b.t[a][0], d = void 0 != c ? c : d[0], Math.round(f - d)
            },
            l = function(b, a, c) {
                var f = "";
                window.jstiming.srt && (f += "&srt=" + window.jstiming.srt, delete window.jstiming.srt);
                var d = document.getElementById("csi");
                if (d) {
                    var g;
                    void 0 != window.jstiming._bfr ? g = window.jstiming._bfr : (g = d.value, window.jstiming._bfr = g, d.value = 1);
                    if (g) return ""
                }
                var h = b.t,
                    r = h.start,
                    d = [];
                g = [];
                for (var k in h)
                    if ("start" != k && 0 != k.indexOf("_")) {
                        var n = h[k][1];
                        n ? h[n] && g.push(k + "." + e(b, k, h[n][0])) : r && d.push(k + "." + e(b, k))
                    }
                delete h.start;
                if (a)
                    for (var p in a) f += "&" + p + "=" + a[p];
                (a = c) || (a = "https://googleads.g.doubleclick.net/pagead/gen_204");
                return [a, "?v=3", "&s=" + (window.jstiming.sn || "pagead") + "&action=", b.name, g.length ? "&it=" + g.join(",") : "", f, "&rt=", d.join(",")].join("")
            },
            m = function(b, a, c) {
                b = l(b, a, c);
                if (!b) return "";
                a = new Image;
                var f = window.jstiming.b++;
                window.jstiming.a[f] = a;
                a.onload = a.onerror = function() {
                    window.jstiming && delete window.jstiming.a[f]
                };
                a.src = b;
                a = null;
                return b
            };
        window.jstiming.report = function(b, a, c) {
            return m(b, a, c)
        }
    };
    var q = window.jstiming.load,
        t = function(b, a) {
            b = parseInt(b, 10);
            return 0 <= b ? a + b : 0
        },
        u = function(b, a) {
            a = a || {};
            a.id = "csi_pagead";
            a.gqid = "cZngWc24JcaIZsruhugD";
            a.qqid = "CPqX-Oq17dYCFcINGQodAysIHQ";
            window.jstiming.report(b, a)
        };
    window.rptcsi = function(b) {
        q.tick("ol");
        var a = {};
        try {
            a = JSON.parse('{"override":false}')
        } catch (h) {}
        var c = parseInt(a.dt || "1507891564338", 10),
            f = e(q, "start", 0);
        if (!(!c || 0 >= c || c > f)) {
            q.tick("_t0", null, c);
            var d = t(a.bdt || "-1", c);
            d && q.tick("bdt", "_t0", d);
            (d = t(a.dtd || "4620", c)) && q.tick("req", "_t0", d);
            var g = t(a.bpp || "8", c);
            (g || d) && q.tick("bpp", "_t0", g || d);
            (d = t("", c)) && q.tick("redir", "_t0", d);
            q.tick("fb", "_t0", f);
            q.tick("e2e", "_t0", e(q, "ol", 0));
            (f = t(a.zct, c)) && q.tick("zct", "_t0", f);
            (a = t(a.zst, c)) && q.tick("zst", "_t0", a);
            if (a = window.performance && window.performance.timing) q.tick("fs", "_t0", a.fetchStart), q.tick("reqs", "_t0", a.requestStart), q.tick("ress", "_t0", a.responseStart), q.tick("rese", "_t0", a.responseEnd)
        }
        q.name = b || "";
        u(q, {
            e: "828064251"
        })
    };
    window.rptcsiqid = u;
    window.tick = function(b, a) {
        q.t[b] || q.tick(b, a)
    };
}).call(this); < /script><style>html, body {width:100%;height:100%;}body {display:table;text-align:center;}#google_center_div {display:table-cell;}#google_image_div { display:inline-block; }</style > < /head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0" style="background:transparent" onload="rptcsi('loadimgad')"><div id="google_center_div"><div id="google_image_div"style="height: 552px; width: 276px; overflow:hidden; position:relative"><input type="hidden" id="csi"/ > < a id = "aw0"
target = "_top"
href = "/aclk?sa=l&ai=CzzM1cZngWbqbJsKbZIPWoOgB3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAr8Z7Lf9AYE-qAMByAPJBKoEvwFP0IMrpuRXdtltfg7zvp95h5oLoCmqoHHrfGR6oJK1eScLBQRUMtCD2ndKXcGoJ6PZLJ38irv1KBCXSP5bPlb2WtFftrewFlcL-RKnMvrBBoBuTAzNl6JXUKCjWiJytlcT84_ZT7yTW8-DdFxskDgOgrdKGbBmR1jK5zitUIfJ2SB3EBsp5wXr2Y2lpEfQN0xWH4WIAy2jXkiT6-T4Gjlbiz4lS5I___j_u4-eCqpjPqvARH_0or9P8AW9cr3ef6AGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo&num=1&sig=AOD64_09XoTLld9l7d3M-cCRKBpl-WjEGQ&client=ca-pub-0731879187820183&adurl=http://vikaterrassen.no" > < img src = "https://tpc.googlesyndication.com/simgad/1041879530478978771"
border = "0"
width = "276"
alt = ""
class = "img_ad" / > < /a><style>div,ul,li{margin:0;padding:0;}.abgc{display:block;height:15px;overflow:hidden;position:absolute;right:16px;top:0px;text-rendering:geometricPrecision;width:15px;z-index:9020;}.abgb{display:block;height:15px;width:15px;}.abgc{cursor:pointer;}.cbb{background-image: url('https:/ / tpc.googlesyndication.com / pagead / images / x_button_blue2.png ');background-repeat: no-repeat;background-position: top right;cursor:pointer;height:15px;width:15px;z-index:9020;}.cbb:hover{background-image: url('
https: //tpc.googlesyndication.com/pagead/images/x_button_dark.png');cursor:pointer;}.abgb{position:absolute;right:0px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgc img{display:block;}.abgc svg{display:block;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgi{fill-opacity:1.0;fill:#00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:#cdcccc;stroke:none;}.abgtxt{fill:black;font-family:'Arial';font-size:100px;overflow:visible;stroke:none;}</style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div><div id=abgs class=abgs><a id=abgl class=abgl href="https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://windows7canaimaeducativo.blogspot.no/%26gl%3DNO%26hl%3Den%26client%3Dca-pub-0731879187820183%26ai0%3DCzzM1cZngWbqbJsKbZIPWoOgB3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAr8Z7Lf9AYE-qAMByAPJBKoEvwFP0IMrpuRXdtltfg7zvp95h5oLoCmqoHHrfGR6oJK1eScLBQRUMtCD2ndKXcGoJ6PZLJ38irv1KBCXSP5bPlb2WtFftrewFlcL-RKnMvrBBoBuTAzNl6JXUKCjWiJytlcT84_ZT7yTW8-DdFxskDgOgrdKGbBmR1jK5zitUIfJ2SB3EBsp5wXr2Y2lpEfQN0xWH4WIAy2jXkiT6-T4Gjlbiz4lS5I___j_u4-eCqpjPqvARH_0or9P8AW9cr3ef6AGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo&amp;usg=AFQjCNHHe_FomazLjenzy0t44N4f8Ec6CQ" target=_blank></a></div></div><div id="cbb" class="cbb" aria-hidden="true"></div><div id="mute_panel" aria-hidden="true"></div><script>var abgp={hw:15,sw:75,hh:15,sh:15,himg:'https://tpc.googlesyndication.com'+'/pagead/images/adchoices/icon.png',simg:'https://tpc.googlesyndication.com'+'/pagead/images/adchoices/en.png',alt:'AdChoices',t:'AdChoices',tw:53,t2:'',t2w:0,tbo:0,att:'adchoices',ff:'',halign:'right',fe:false,iba:false,lttp:true,uic:true,uit:true,ci:'',icd:{"creatives":[],"height":552,"width":276,"attribution":{"user_feedback_data":{"mute_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","pub_feedback_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","conversion_url":"https://googleads.g.doubleclick.net/pagead/conversion/?ai=CzzM1cZngWbqbJsKbZIPWoOgB3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAr8Z7Lf9AYE-qAMByAPJBKoEvwFP0IMrpuRXdtltfg7zvp95h5oLoCmqoHHrfGR6oJK1eScLBQRUMtCD2ndKXcGoJ6PZLJ38irv1KBCXSP5bPlb2WtFftrewFlcL-RKnMvrBBoBuTAzNl6JXUKCjWiJytlcT84_ZT7yTW8-DdFxskDgOgrdKGbBmR1jK5zitUIfJ2SB3EBsp5wXr2Y2lpEfQN0xWH4WIAy2jXkiT6-T4Gjlbiz4lS5I___j_u4-eCqpjPqvARH_0or9P8AW9cr3ef6AGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026sigh=8j7ZeecoZWw","close_button_token":"1yets6oQcL8I7omwnvUFEN-k398CGNrtxGMiEHZpa2F0ZXJyYXNzZW4ubm8yCAgFExi_nCwUQhdjYS1wdWItMDczMTg3OTE4NzgyMDE4M0gGWAJwAQ","interaction_conversion":{"label":"user_feedback_menu_interaction","label_instance":"","include_close_button_token":false},"survey_header":"What was wrong with this ad?","back_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png","mute_confirmation_header":"Thanks for the feedback!","mute_confirmation_text":"Well review this ad to improve the experience in the future.","pub_feedback_confirmation_header":"Thanks for the feedback!","pub_feedback_confirmation_text":"Well use your feedback to review ads on this site.","undo_text":"Undo","close_message":"{\"msg_type\":\"ablate-me\",\"key_value\":[{\"key\":\"collapse-after-close\",\"value\":\"animate\"},{\"key\":\"secs-to-countdown\",\"value\":\"1\"},{\"key\":\"countdown\",\"value\":\"3\"},{\"key\":\"message-tick\",\"value\":\"1\"}],\"googMsgType\":\"sth\"}","closing_countdown_text":"Closing ad: %1$d","attribution_text":"AdChoices","attribution_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png","attribution_destination_url":"https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://windows7canaimaeducativo.blogspot.no/%26gl%3DNO%26hl%3Den%26client%3Dca-pub-0731879187820183%26ai0%3DCzzM1cZngWbqbJsKbZIPWoOgB3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAr8Z7Lf9AYE-qAMByAPJBKoEvwFP0IMrpuRXdtltfg7zvp95h5oLoCmqoHHrfGR6oJK1eScLBQRUMtCD2ndKXcGoJ6PZLJ38irv1KBCXSP5bPlb2WtFftrewFlcL-RKnMvrBBoBuTAzNl6JXUKCjWiJytlcT84_ZT7yTW8-DdFxskDgOgrdKGbBmR1jK5zitUIfJ2SB3EBsp5wXr2Y2lpEfQN0xWH4WIAy2jXkiT6-T4Gjlbiz4lS5I___j_u4-eCqpjPqvARH_0or9P8AW9cr3ef6AGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026usg=AFQjCNHHe_FomazLjenzy0t44N4f8Ec6CQ","ad_feedback_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","is_rtl_language":false,"feedback_options":[{"text":"Report this ad","conversion":{"label":"user_feedback_menu_option","label_instance":"1","include_close_button_token":true},"survey":{"header":"What was wrong with this ad?","options":[{"text":"Ad covered content","conversion":{"label":"mute_survey_option","label_instance":"3","include_close_button_token":true}},{"text":"Not interested in this ad","conversion":{"label":"mute_survey_option","label_instance":"7","include_close_button_token":true}},{"text":"Seen this ad multiple times","conversion":{"label":"mute_survey_option","label_instance":"2","include_close_button_token":true}},{"text":"Ad was inappropriate","conversion":{"label":"mute_survey_option","label_instance":"8","include_close_button_token":true}}]},"undo_conversion":{"label":"user_feedback_undo","label_instance":"1","include_close_button_token":true}}],"mute_panel_data":{"adchoices_icon_url":"https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png","adchoices_button_text":"AdChoices","closed_message_text":"Ad closed by %1$s","enable_lightbox":false,"google_logo_url":"https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png","report_ad_button_text":"Report this ad","confirmation_text":"We'll try not to show that ad again","settings_button_first":false,"protocol_gstatic_host":"https://www.gstatic.com","jake_mta_context":""},"why_this_ad_token":"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-KCsutKYlopGTHBl7o8_0iQP8ZecXFGQPlOHJTnYNYqvpLR7cKnJUZ2Bt1a478HxZhff4utsVMrPWLG0NVmEA0MexQtnP1s2e6NkHfy7WPITQzU32l1jMllQLW7xJj3zeH-OeO0b2QTinrrspt1s9v9cBpBsQOEoxB3JF43AlEaQ9i5yTGo49ZXWBosn52NghLzzR1o0HxhwMglpFFNDHTt-xj4l3_wheMwGWeN8O5I9mayzkmE34baTKqtqD6lw7TaJbstaXl3r8_Uf2b6mHItBNJGH14dDHQ7fE7kkD01R6LLFpHUtnphZC_PZRGQ,wtHVNpIKbaPV121ffTixMw","why_this_ad_url":"https://www.google.com/ads/preferences/whythisad/en-US/RoOyDD7L4IWn5ZfI/#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-KCsutKYlopGTHBl7o8_0iQP8ZecXFGQPlOHJTnYNYqvpLR7cKnJUZ2Bt1a478HxZhff4utsVMrPWLG0NVmEA0MexQtnP1s2e6NkHfy7WPITQzU32l1jMllQLW7xJj3zeH-OeO0b2QTinrrspt1s9v9cBpBsQOEoxB3JF43AlEaQ9i5yTGo49ZXWBosn52NghLzzR1o0HxhwMglpFFNDHTt-xj4l3_wheMwGWeN8O5I9mayzkmE34baTKqtqD6lw7TaJbstaXl3r8_Uf2b6mHItBNJGH14dDHQ7fE7kkD01R6LLFpHUtnphZC_PZRGQ,wtHVNpIKbaPV121ffTixMw\u00261yets6oQcL8I7omwnvUFEN-k398CGNrtxGMiEHZpa2F0ZXJyYXNzZW4ubm8yCAgFExi_nCwUQhdjYS1wdWItMDczMTg3OTE4NzgyMDE4M0gGWAJwAQ\u0026https://googleads.g.doubleclick.net/pagead/conversion/?ai=CzzM1cZngWbqbJsKbZIPWoOgB3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAr8Z7Lf9AYE-qAMByAPJBKoEvwFP0IMrpuRXdtltfg7zvp95h5oLoCmqoHHrfGR6oJK1eScLBQRUMtCD2ndKXcGoJ6PZLJ38irv1KBCXSP5bPlb2WtFftrewFlcL-RKnMvrBBoBuTAzNl6JXUKCjWiJytlcT84_ZT7yTW8-DdFxskDgOgrdKGbBmR1jK5zitUIfJ2SB3EBsp5wXr2Y2lpEfQN0xWH4WIAy2jXkiT6-T4Gjlbiz4lS5I___j_u4-eCqpjPqvARH_0or9P8AW9cr3ef6AGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026sigh=8j7ZeecoZWw","why_this_ad_text":"Why this ad?"}},"flags":[{"name":"enable_settings_click_collapse","value":"true"},{"name":"jake_ui_extension","value":"jake_default_ui"},{"name":"jake_transition_timeout","value":"-1"}]},opi:false,ti:false,re:false,mob:false,osd:false,il:false,eaca:false,ejar:false,eda:false};</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/abg.js"></script><iframe frameborder=0 height=0 width=0 src="https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211" style="position:absolute"></iframe></div></div><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/client/ext/m_js_controller.js"></script><script>buildAdSlot([[[1,0,276,552,"http://vikaterrassen.no","https://googleads.g.doubleclick.net/pagead/conversion/?ai=CzzM1cZngWbqbJsKbZIPWoOgB3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAr8Z7Lf9AYE-qAMByAPJBKoEvwFP0IMrpuRXdtltfg7zvp95h5oLoCmqoHHrfGR6oJK1eScLBQRUMtCD2ndKXcGoJ6PZLJ38irv1KBCXSP5bPlb2WtFftrewFlcL-RKnMvrBBoBuTAzNl6JXUKCjWiJytlcT84_ZT7yTW8-DdFxskDgOgrdKGbBmR1jK5zitUIfJ2SB3EBsp5wXr2Y2lpEfQN0xWH4WIAy2jXkiT6-T4Gjlbiz4lS5I___j_u4-eCqpjPqvARH_0or9P8AW9cr3ef6AGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026sigh=8j7ZeecoZWw",null,null,null,null,null,null,null,null,"http://vikaterrassen.no",null,null,null,null,null,null,null,"",null,null,null,0,"","",0,0,""]],276,552,0,0,null,"CPqX-Oq17dYCFcINGQodAysIHQ","cZngWc24JcaIZsruhugD",null,"ca-pub-0731879187820183",276,552,0,"_top",null,null,0,"https://tpc.googlesyndication.com",null,0,0,1347854052,[["open_applinks_adding_gclid","False"],["pass_gclid_to_deeplink_url","False"]],null,null,null,null,[1,1,1,1,0,0],null,null,null,null,null,1,null,null,null,null,"https://www.gstatic.com",null,null,[0,0],0]);</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCzzM1cZngWbqbJsKbZIPWoOgB3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAr8Z7Lf9AYE-qAMByAPJBKoEvwFP0IMrpuRXdtltfg7zvp95h5oLoCmqoHHrfGR6oJK1eScLBQRUMtCD2ndKXcGoJ6PZLJ38irv1KBCXSP5bPlb2WtFftrewFlcL-RKnMvrBBoBuTAzNl6JXUKCjWiJytlcT84_ZT7yTW8-DdFxskDgOgrdKGbBmR1jK5zitUIfJ2SB3EBsp5wXr2Y2lpEfQN0xWH4WIAy2jXkiT6-T4Gjlbiz4lS5I___j_u4-eCqpjPqvARH_0or9P8AW9cr3ef6AGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\x26sigh\x3d8j7ZeecoZWw","cZngWc24JcaIZsruhugD","CPqX-Oq17dYCFcINGQodAysIHQ",true,true,true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BdLUmcZngWbqbJsKbZIPWoOgBAO6JsJ71BQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhig_dicAw','',1347854052,true,'la\x3d0\x26alp\x3dai\x26alh\x3d3100794048\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dBdLUmcZngWbqbJsKbZIPWoOgBAO6JsJ71BQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhig_dicAw');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,0,1,0,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CPqX-Oq17dYCFcINGQodAysIHQ"></div><div style="top:0;left:0;width:300px;height:600px;position:absolute;max-width:100%;max-height:100%;pointer-events:none;image-rendering:-moz-crisp-edges;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAACASURBVBjTbZEBDoAwCAPpD/j/axVaOlxEzUa8lcIi/gOM2tXjLPtv1pona4IkT4C7l0uxvTIzjZsOn1naqo3LyYRtyHdJwR9CsETtpd8QPRx9WFWGUx1j9CD9jw+Kd6GuZd+QKeHTF8lJPAXMxAN7gumx73lvQ9ftnJ7XBM/dRjxUFQWTGE1lBgAAAABJRU5ErkJggg==')"></div><script>var ad = buildImageAd(adSlot, 0);adSlot.addAd(ad);adSlot.finalize('google_image_div');</script><script>(function(_){var zk=function(){this.g=[];this.l={}},Ak=function(a){var b=[a.key,a.value];_.q(a.wa)&&b.push(a.wa);return b};zk.prototype.report=function(){for(var a=[],b=0;b<this.g.length;++b)a.push(Ak(this.g[b]));return a};var Bk={};var Ck={1:0,45:0,46:0,48:0,2:1,4:8,5:6,8:11,9:2,6:9,34:25,26:15,3:7,20:12,24:26,33:11,25:0,40:9,36:19},Dk=function(a,b,c,d){var e=Ck[b];4==b&&(b=(d=d.currentTarget)?d.getAttribute("data-absm"):c.getAttribute(b,"data-absm"),"e"==b?e=12:"db"==b?e=29:"dd"==b&&(e=30));(0,window.ja)(a,e)},Ek=function(a){return function(){a()}},Fk=function(a){return a.report()};_.t("registerAd",function(a,b){_.q(Bk[b])||(Bk[b]=new zk);a.registerClickUrlModifier(_.y(Fk,Bk[b]));for(var c=[1,45,46,48,2,4,8,6,9,5,3,20,34,26,24,33,25,40,36],d=0;d<c.length;d++)_.u(window.st)&&a.listen(c[d],"mousedown",Ek(_.y(window.st,b))),a.listen(c[d],"click",_.y(Dk,b));a.listen(15,"click",_.y(Dk,b));_.u(window.st)&&a.listen(15,"mousedown",Ek(_.y(window.st,b)));_.u(window.ss)&&(a.listen(0,"mouseover",Ek(_.y(window.ss,b))),a.listen(0,"focus",Ek(_.y(window.ss,b))),a.listen(1,"focus",Ek(_.y(window.ss,b))),a.listen(1,"mouseover",Ek(_.y(window.ss,b))));return a},void 0);_.t("css",function(a,b,c,d,e){a=Bk[a];_.q(a)&&(!_.q(a.l[b])||d?(d=a.g.length,a.l[b]=d,a.g[d]={key:b,value:c,wa:e}):(b=a.g[a.l[b]],b.value=c,b.wa=e))},void 0);})(window.hydra=window.hydra||{});</script><script>registerAd(ad, 'aw0');</script> <script>(function(){var h=this;var k;var l=function(a,b,c,d,e){if(e)c=a+("&"+b+"="+c);else{var f="&"+b+"=",g=a.indexOf(f);0>g?c=a+f+c:(g+=f.length,f=a.indexOf("&",g),c=0<=f?a.substring(0,g)+c+a.substring(f):a.substring(0,g)+c)}return 2E3<c.length?void 0!==d?l(a,b,d,void 0,e):a:c};var n=function(){this.g="";this.h=m},m={};var p=function(a,b){b instanceof n&&b.constructor===n&&b.h===m?b=b.g:("object"!=typeof b||!b||b instanceof Array||b instanceof Object||Object.prototype.toString.call(b),b="type_error:TrustedResourceUrl");a.src=b};var q=function(a){var b=new n;b.g=a;return b};var r=function(a){this.g=a||h.document||document};var t=function(a,b){var c=window;c.addEventListener?c.addEventListener(a,b,void 0):c.attachEvent&&c.attachEvent("on"+a,b)};var w=function(a){var b=u,c=v;a=a?a:document;var d=(a?new r(9==a.nodeType?a:a.ownerDocument||a.document):k||(k=new r)).g.createElement("SCRIPT");d.type="text/javascript";c&&(void 0!==d.onreadystatechange?d.onreadystatechange=function(){if("complete"==d.readyState||"loaded"==d.readyState)try{c()}catch(f){}}:d.onload=c);p(d,q(b));var e=a.getElementsByTagName("head")[0];if(e)try{h.setTimeout(function(){e.appendChild(d)},0)}catch(f){}};var u,x,y,z,A,B=function(){var a=window,b=B;a.removeEventListener?a.removeEventListener("load",b,void 0):a.detachEvent&&a.detachEvent("onload",b);!A&&(a=document.createElement("IFRAME"),a.frameBorder=0,a.style.height=0,a.style.width=0,a.style.position="absolute",A=a,document.body&&(document.body.appendChild(a),a=A))&&(a=a.contentWindow)&&(y="1",a.document.open(),a.document.write("<!doctype html><html><head></head><body></body></html>"),a.document.close(),w(a.document))},v=function(){var a=A;if(a&&(a=a.contentWindow))if(y="",a.botguard){var b=a.botguard.bg;if(b)try{C(function(){z=new b(x)})}catch(c){y="5"}else y="3"}else y="2"},D=function(){var a=null;try{a=window.rvdt,"number"==typeof a?a=36E5>a?""+a:"M":a=null}catch(b){}return a},F=function(){return["bg",E(),"9"]},C=function(a){window.wrpfc=a;window.wrpfc()},E=function(){var a=z;if(y)return y;if(!a)return"5";if(!a.invoke)return"4";var b;try{C(function(){a.invoke(function(a){b=a})})}catch(c){return"6"}return b&&b.length?3>b.length?"7":1012<b.length?(t("unload",function(){var a=["bg",b],d=["id","bg"];if(d&&a&&d.length&&a.length&&d.length==a.length){for(var e=["https","://","pagead2.googlesyndication.com","/pagead/gen_204"],f="?",g=0;g<d.length;g++)e.push(f+d[g]+"="+a[g]),f="&";a=e.join("");d=window;d.google_image_requests||(d.google_image_requests=[]);e=d.document.createElement("img");e.src=a;d.google_image_requests.push(e)}}),"8"):b:"6"};window.bga=function(a,b,c){u=a;x=b;y="0";c&&window.osdlac&&window.osdlac(F);t("load",B)};window.bgy=function(a){var b=D();b&&(a=l(a,"rvdt",b));return l(a,"bg",E(),"9")};window.bgz=function(a){var b=document.getElementById(a);if(b){var c=D();c&&(window.css?css(a,"rvdt",c,void 0,void 0):b&&(b.href=l(b.href,"rvdt",c,void 0,void 0)));c=E();window.css?css(a,"bg",c,!1,"9"):b&&(b.href=l(b.href,"bg",c,"9",!1))}};}).call(this);bga('https://pagead2.googlesyndication.com/bg/CI_hqThbQjBwoUSK10cIsovHByRI4InaU0wolTzGCLU.js','jKgz96OQnEb2shA1omIk/Fr13+kfCG0Aw4F7ywjohHa439FX+A0rwATKhyGrQPTMMB2fIFygUL2OHDajoO05Bn01HQFnwmz0LOc69381kFyTBNlgFvOBaTl98XidP8HxKoZBy8aB+C917npEaicyHyL5croEFMYXIXZtd/jVBekDKRUUn9ovAfwSUayj8KI6II4xT4MlROTOidvFzOn7m3M1Z0I23WD09UOyiiQp8l81tLd+yeS8ZI6/MEiHBL1lxP3u1o5DFnAgWhYVngCDygr0lIiM4mkvt6hRzWRPdLDwxh52NfSpkwz5wOam4sWNMKA0AMDGy2irik094Xvznw9ypdrp8CXH/FqVci7/WBjvOdE7IrBsNnD/ZyYXX+YWqSa9hTnuXZGywN/Bo+o1sERPw7fjaOkg0ygD3ywRkBNhjMeQPJzsftzqDOC5BSewcGqfZurLGbUnIIIHWVd6lDPFH7eurM+jmiJ2ejsnUi9V+y6zZrIeL10BNwdLr+fhu7AboFIztqi63PdylNibJqsPTjFevWOJ+WeuYw4V9QiZhNaJg313zJ+bS8aCPBmasoCCc+gLMVjqgmxTW8fa6xxgYHPEhYhT1dMLsEoDLvCIkhaeA+2AcuOQTwJM6ohBsTcs3udLTkxvVyOwWwp4qBYTwirYDXYyOrOCBPFoZM7AfpJsyhoUOLgPoqXvGu1fJyMgZedJAIPtyobNXM7k6xYsY7IQg6EbDCQkuNKnjQwmHSpXue4JTIMf5kq8FltH0ItzFKaV57ZXJJ7e2UKkTErpJ/qblRmaOWDpigSJ0T0xhrSEJFfFGUOzaNvVuJQOMyhmxNBNTJ5dt3TwswR47VcshuUtTmkYsbUaEfjoYKiJPViuYhWHqgzfQdAoVcDE2/fWmSNuXL5B9ymPo94rQv6FYQo5hS2AUzeeMtLWStT9DLadDy4lMZwxM+/sg7RrN4FKwyzEWHOMaJDnLRIrMxB/U12oI3SuuubY2g9Pe4KJKwITrkrGwXXUyFdMqqOJQ0Uk//ISoRJL0VKmQNjyTxB7wp786LS1wHiUNKqrwqUCkP5EQ3GURqbB6d8aqzh9bIX8fF55/HXTWyrzhsRE0DGZDrg8hsQxONl6/4+hW4G+7zsLGAvYJvwfTRMJ1vt22e8FOuoByWy9L6dFA6+wvcfaW7qvRVSLjEFC90IIGgzNrNwaWalXsgTD78F4ZDnqLcvFc3MyuPOKyNBK/bQPd40zGUUi6cj8uW7nvUYqLYwYNEkhmOXwTaaUbGQoK56c40gkyypVuAbnYYEGi2ogENYyAzyed3Vt0GjUKYI8FavIu3GmIrwr9avt/oKI0oz/Fe9lRZtIcqXRcYJdcEKTE4vs9ymgG9L97LiorH6O9sZaU3feScGWaZNx0Z8MpbqqJeEOJjiLSqf23op6jK6uNCWpYYGhV0DlpE4ab+xtY0WFj/AcL7prUR2VGxsQ+dh10pMlKr0c615zb57IcQLrSXAXj3odN/kUvQlR0N00Wtpd5OBnMHonFUzrQAZRsm4zOu/LoElEIa2VyvwL6zPJI4w26w5dkuoJBJcTxt7OqQjnMg0jisMeODiIwcDOTRJGUB1PXHMfVJky3S8gRs8U2uLycRRexMFcGolf5I1Z4YNZj7Nqt2bwevxZS7AnSbrXACFNeUzQOq7MZLmYNg/90WpFBMsxgf3fbf9fc8LXmCByjT7S2qIRgmLW4uBmBv24pGBmkx+6V21h3liUrHCgYsE5B5P5jOfwgRinEsPBRDMLzfsWrSX2nEOYU4I8Rqet+pG+eAlxFefr5rjonU9GsI3WEPUy0hG2yLpDrjmvA2nhAzaCQeFhnH4OCjrYEKRVGRaxMU9zJUUrxrqy4Q38MZMMtjZixN2FpBjX0I+1WTDdyVjigg2s5mbf0jYSzuWYB5+nLEZ/VkTEzBSqMpUzBbDx8Zur9/UlsPmwytT/X4E7yARf6ky4n2fSp6bm6Fk9xGAep3J0j3Io6kC0si/tqo8IqA+qsiLhn70akozeRC0PfFfFz2dQLxg3udXvlI9dFLfLoHuya2aBh6P2KR2KdGWE9PGt+GizbeRNTOFDAVsDeEWVpG7JM/gon8+HhvVFNX598zhiIlFj2gft4cl59kUw/DteTxTCQyNpBycKbSq9IQ95zAxleBYzDlfGVrwIvqQ/P2EndjoW21wXVRs+sT1U4cHbPowd965paDASJW7eZzjyQ+T3ki9iL55ONRvoUny0/nqLCgPBa+oan/fawce3ajU6Imun44v+3l4HnZ7kXH2uEN2h+ZI+atfvm5EVZBf1ulXdYy4riHhEZu19Q20UYBtwk3ra7lOr0xFtnBLLGL/YPVoKp+Jc2ta1eyGdGV+1ruQXKYYObehSMpl5KpFwtiNvZnOT3LLBa1ROuRfJ4KRghgbxS0AJ/M03aK2cyr0IARoFubG4f0u5sgSWR08cE4BBG+4vvbvuRQHMqmL4Phq2qMWXybYI03/LO0yZtvlcWHESnP4+hhOoXOefjtAT9kP/2YMIDOIYFihApv0rlczDGMjbI7a7F1fDLs0Re0meMWGTPxwjgk/YMZ1ELy1y0nezL2liLtiZvZohvfgpqFEcdolfpOfZO1DF2F2sN5IuO9QrqEg1clb5oATSiIa08aEGtTqyAnHAGeWeoU3t9yy+G6Yg+u1JNOTqWU99PQah7BAAiepSRJz7Bl8SYOSEHVMkIqhcPJiDBRN4fBPO2Dk0XncrrbV+/UlVm/OTLDn0NmLhyilOxJcvzAX5gcWUudMRDbBavgJTchYPJtZjQZfEqo2ZLWZPG5NrEokdO8gucUMslyMcblQy/2NCcEBqruBo4+1w6Qz4cnU1IFSzl7yOKMom+pQP+ZVg76LOkVYpqppkTWogWMb3Xu9U/GaSi5chzevTZOgZC3QunnM/kP46d5H7QeqPTHAmS3UnLXAo6Jfg52Viy13iLKeVw/a2gSrmCp73DX3wICADs8kAljw4g0oJcBrz44TWFQ8suw9QMcscOu10jRzMHuT6hRJqY/IWgBZhBUIJeHqLV6u+E4AJeVwnJZDYFW/RJo318Ty8WkqpM8EmhiXirwx6ENUzUPJ099CSIwxDH3OsC/GF7Y27Q6WjB96qXUwdxwL9iejGg2cZAurbACDmsRcB/K5M59olSbFd+TXYw7QC3SwdlslMHNeedFLsDKccFXbqXp4RYIJNACoMEhIoJxlFtb1VDOt2gkXcIdOsI4B1vsnML4RzUJGrTLiNgtzoe5/6Tofn7ttURHXyVn8kSs+NK6JWSBL/VMDWDOWtvSZ/AcBfMRNToNFLiTMMBgLudfAIejd0gq4UAdBrBN8EW8fs3U5bqNkcCMuvCvN5gM8qUGz8rt6nYZLm3LXS//6VF3TfuJYdS7HbUvDdyJkmMxA8ZOJLQ1bdXMjsjPIzbLWqCgN744YFbMvYnXqK+V4G9M1ONdfq+933DcrPzvoN2Cmn3cpuPlWm6Ha4c/uwBr8g+gipgwCW34LuZ9OJPofN31gDM1prJ4NWhPc6ZqsNg1dJpR2wRGxoLWGQT6SXJZx1HBjQK39qVViI5tAPbF3Qps5vvJvhkXhiIiH9A8PkuayRjItRHATeVL4LrNP9vbdAVnptEYWjpqhx/vfxrC9aH15CeJLutyf7pVbiHy9sMAM1Ev14VhIuvewSwqH1PW0ZylpA08Y48qxGbI49bGWUwMe0aIdVojqPun76OP3vuJOsPG4RdkCOsRlCKr3jOZwgFCHLPPxDBaOYdV6H3SpG93rnyPYu2HiC8ju8peWqqYxl1RtiqP1kZmgIxTYDM9Odud9+ZO0yIjYplSTghqcLuPkBDxqzGpfgZJXbWPooRO1YIn2uHAYkqVWK5VJ5CAJHYQLmJsGi8jLcE5eumS4QMPeSVwGylX+QtSNM6hRdNthdA3zqLZUlsNGjKZsZmYi7hcIzxE6o2ADhRH0uJ65evb7h9qybcxIyAcNvNI5+MoMEJg2fKEAg3WstsQnItgthI6+GVovkjiuFEHjYAP0piAR92eYLWf2pqqtW58sIoMdHg3zDmFuQFM67I7D3qbhDRg6iof6zM0JzNNwqVNHgCe8h7yyA0kaUtwHjJtzmxH6vxjMPIG0iAcYcUnpLmnLL6mbyeU+cDm0DHBUHiYDqM8NNZrMYTmfPbvwJTm8j0KSHfnnLTxeM6zFu5LplwkM9FoLDINHvhrwD0/Ke2Rr2djMAAdmgMQteX7w2tx7Ok8dJAKFzoVOdkstNetqZ9bbpAQDSQ/6AJa3DNDYkVPq1zmAPpQ3zcWnvk73EMEZpG43/wuAt+/8eo8lDTKgnqS7YYTZwcWW/xKU/vb7QGMfthq4JRyyu0zZoEIA3ThKgiHy7F4lq3b/XapPew0q2sAMPQWsl5mfwEEOJAf8DK2YaqTAR+BkUIgn7pUBfC1YwzzxBTVw6idWOhHjTh8jopFPf1NPyPBWwHL8D4L5k8gir4cKW5YmFMh5oUAJgPe8hsmW2uDtXQ4I8zwO2DXeY4duSgeAZ4l2WrTGTDJNk0QBwRPAPW1DQ4zHzuHBbPajCkP5EdlMWmiAPZ8DCu8PiGhDDm/tH0wEe6RX7JlueZUTkzdQm4eSLsAtTArPO4X2t9BgwiqVf8KJDBTJKtXRJYc+AQ/bWe4ZMRMGqRorJjbCA20J17v9/kmBgfgmU9jhDLxdlyVeojiUR01OmDBEe+fD4q8JMiIXRtj4RTihWaPzsg3Yz8ii+AbVVuPQiSXlMOkou1xWT+sToQqzJbl65pg0OKp0e9XBN1V6CO/M3/ai0gJ5RqIOe4s0BXyLIQW2Txq3I117THFGc6dyLw/uq+D/nSDTDDveNJL+L6XzuDmQPwTUn6hE52nL+MVuR8PaFAPfbFjvhcPAJiYbG1ILT3iWZcM5A2unP0H/ljYqv6SNF5cUi9a/XIfglnuwe76jA7kZEpbr5UlUkvT0FWqsxo9h5FMed3d6REfowmBJtaEad6zmvXjDWdUEoYXur8K2oitnW0bVu0Hl2imHxv1Sy1FbDrxy3q/FE4HkAPxYZb2R2KInUUsY4s9qzpFew35GOO9y8a/nGdj5sFOD2xQbtdcopv1exBQHrjm6cniI398F601dXaadgdJVwcV8JVKUoZTWGerQzzK6NCPCeYJb0U4+dtdeF3dhH9MZwDtKhO8kFBAQ/nHvK7ajFCHPrrVRUnu4kWr2BjwPLAoZYFBUwqY9c35lODxdGdoDwzr+siZ305p7frriQz4kXKHl1rbjvNMr9hCLgotibls1bUjtDjsHk+y0nZsnOoaACExUTRjEokneaG6vbxLSrtBylgIbVBflGJTd5OM3KfKnvV5WSHmQsW/OB/p5DAXEcRRMdU9PxOfTNwKQSzi8GJYXAAJermHER1txkCVSu+rlDvUBxWbwJhuVA7igQ80WA+y7hHreotHX69zYy3ykAIrCFXIIbH3iugFmBlQ+OozumuPgSW7Y5/l+98HWzuwtmqy+lMIMX7RKjnH4tmY6bAiOb1XUF6u77LN/QX/XMToNKoLJ+iTG/nXdInoUQxMxUqDvFUGJHKRVaDrspoQDqlVPtinMyojvOYg2ldGnNe5OaWbU+aR4qm5lCoutbSGfFbnvExrZ8mz6vYKeV6z5AEekEYKINV4mvihNYl7nAAzCMuFKhdiltN3QK5BIBUax6/jmVUEmvCExpfLiwZSIjdVmi+NrRCUf3+Luj6165Pzs+HeFTMJidEEIc1n9tZTyEz5riPDtWaUl+LvW4h6mxOYS1VQy5zb+0yQGtk0ZCc24f0+6doi5vhCXrnCmzUVTODiKjeZY5D0UAGm0rqJJTmmwjpHWZ8P8U9Y+vPsAM03AwDONEPDWHFRLcqSF+ryg/Lj52kzeljWWUIw=');</script></body></html>
                                    

#7 JavaScript::Write (size: 32146, repeated: 1) - SHA256: 4ee2444e8552a0b9b23e031afa04f73752475c4a824126f2ed476fca8f59bd77

                                        < !doctype html > < html > < head > < script >
var google_casm = ["", 0, null, 0, 0, null, 1]; < /script><script>(function(){(function(){function c(a){this.t={};this.tick=function(a,b,c){this.t[a]=[void 0!=c?c:(new Date).getTime(),b]};this.tick("start",null,a)}var a,b;window.performance&&(b=(a=window.performance.timing)&&a.responseStart);var d=0<b?new c(b):new c;window.jstiming={Timer:c,load:d};a&&(a=a.navigationStart,0<a&&b>=a&&(window.jstiming.srt=b-a))})();}).call(this);</script > < style > a {
color: #000000 }</style><script>(function(){var h=
function(a, e, b, f, g) {
    if (g) b = a + ("&" + e + "=" + b);
    else {
        var c = "&" + e + "=",
            d = a.indexOf(c);
        0 > d ? b = a + c + b : (d += c.length, c = a.indexOf("&", d), b = 0 <= c ? a.substring(0, d) + b + a.substring(c) : a.substring(0, d) + b)
    }
    return 2E3 < b.length ? void 0 !== f ? h(a, e, f, void 0, g) : a : b
};window.bgz = function(a) {
    if (a = document.getElementById(a)) a.href = h(a.href, "bg", "10")
};
}).call(this);
(function() {
    var f = this,
        g = function(a, b, c) {
            return a.call.apply(a.bind, arguments)
        },
        h = function(a, b, c) {
            if (!a) throw Error();
            if (2 < arguments.length) {
                var d = Array.prototype.slice.call(arguments, 2);
                return function() {
                    var c = Array.prototype.slice.call(arguments);
                    Array.prototype.unshift.apply(c, d);
                    return a.apply(b, c)
                }
            }
            return function() {
                return a.apply(b, arguments)
            }
        },
        k = function(a, b, c) {
            Function.prototype.bind && -1 != Function.prototype.bind.toString().indexOf("native code") ? k = g : k = h;
            return k.apply(null, arguments)
        },
        l = function(a, b) {
            a = a.split(".");
            var c = f;
            a[0] in c || !c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        };
    var m = document;
    var n = function(a, b) {
        if (!a || !b) return !1;
        if (a.contains && 1 == b.nodeType) return a == b || a.contains(b);
        if ("undefined" != typeof a.compareDocumentPosition) return a == b || !!(a.compareDocumentPosition(b) & 16);
        for (; b && a != b;) b = b.parentNode;
        return b == a
    };
    var p = {
            capture: !0
        },
        r = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a = !1;
            try {
                var b = Object.defineProperty({}, "passive", {get: function() {
                        a = !0
                    }
                });
                f.addEventListener("test", null, b)
            } catch (c) {}
            return a
        });

    function t(a) {
        return a ? a.passive && r() ? a : a.capture || !1 : a
    }
    var u = function(a, b, c, d) {
        a.addEventListener ? a.addEventListener(b, c, t(d)) : a.attachEvent && a.attachEvent("on" + b, c)
    };
    var v = function(a, b, c, d, e) {
        window.css ? css(b, c, d, e, void 0) : a && (b = a.href, e ? d = b + ("&" + c + "=" + d) : (e = "&" + c + "=", c = b.indexOf(e), 0 > c ? d = b + e + d : (c += e.length, e = b.indexOf("&", c), d = 0 <= e ? b.substring(0, c) + d + b.substring(e) : b.substring(0, c) + d)), a.href = 2E3 < d.length ? b : d)
    };
    var w = !1,
        x = !1,
        y = null,
        z = function() {
            document.addEventListener && u(document, "click", function(a) {
                y = a
            }, p)
        },
        A = function() {
            var a = y ? y : window.event;
            return a ? w || x ? !1 : (a.preventDefault ? a.preventDefault() : a.returnValue = !1, !0) : !1
        },
        B = function() {
            u(document, "mousedown", function() {
                w = !0
            });
            u(document, "keydown", function() {
                x = !0
            });
            z()
        };
    var D = function(a, b) {
            if (0 > b || parseInt(b, 10) !== b) b = 17;
            C(a, b)
        },
        E = function(a, b) {
            C(a, b || 1)
        },
        F = function(a) {
            C(a, 2)
        },
        G = function(a, b) {
            C(a, b || 0)
        },
        H = {},
        C = function(a, b) {
            H[a] || (H[a] = []);
            var c = H[a][b];
            c || (H[a][b] = !0);
            c || v(document.getElementById(a), a, "nb", b, !0)
        };
    var I = function() {
        this.g = this.h = null;
        m.addEventListener && m.addEventListener("mousedown", k(this.i, this), !0);
        u(m, "DOMContentLoaded", k(function() {
            this.g = m.getElementById("common_15click_anchor")
        }, this))
    };
    I.prototype.i = function(a) {
        this.h = a
    };
    var J = function(a, b, c) {
        var d = a.id || "";
        v(a, d, "nx", b);
        v(a, d, "ny", c)
    };
    var K = [0, 2, 1],
        L = null,
        M = function(a) {
            if (a) {
                var b;
                if (b = window.event || L) {
                    var c;
                    (c = b.which ? 1 << K[b.which - 1] : b.button) && b.shiftKey && (c |= 8);
                    c && b.altKey && (c |= 16);
                    c && b.ctrlKey && (c |= 32);
                    b = c
                } else b = null;
                b && v(a, a.id, "mb", b)
            }
        };
    document.addEventListener && document.addEventListener("mousedown", function(a) {
        L = a
    }, !0);
    window.mb = M;
    var N = {},
        O = function(a) {
            void 0 !== N[a] ? N[a] ++ : N[a] = 1;
            v(document.getElementById(a), a, "nm", N[a])
        };
    l("init_ssb", function(a, b, c, d, e) {
        a && (B(), l("accbk", A));
        b && (l("cla", D), l("cll", E), l("clb", F), l("clh", G));
        if (c) {
            var q = new I;
            l("xy", function(a, b, c) {
                c = c || b;
                var d = a || q.h;
                if (d && b && c && !n(q.g, d.target) && (a = m.querySelector("a.one-point-five-click.rhbutton"), !a || !n(a, d.target))) {
                    var e = Math.round(d.clientX - c.offsetLeft);
                    c = Math.round(d.clientY - c.offsetTop);
                    J(b, e, c);
                    q.g && J(q.g, e, c);
                    a && J(a, e, c)
                }
            })
        }
        d && l("mb", M);
        e && l("ss", O)
    });
}).call(this);
init_ssb(true, false, true, true, true);
if (typeof(ss) === "undefined") {
    ss = function() {};
}

function st(id) {
    var a = document.getElementById(id);
    if (a) {
        xy(window.event, a, document.body);
        mb(a);
    }
    bgz(id);
}

function ha(a, x) {
    if (accbk()) return;
    bgz(a);
}

function hb(u) {
    return bgy(u);
}

function ia(a, e, x) {
    if (accbk()) return;
    bgz(a);
}

function ja(a, x) {
    if (accbk()) return;
    bgz(a);
}

function ga(o, e, x) {
    if (document.getElementById) {
        var a = o.id.substring(1),
            p = "",
            r = "",
            g = e.target,
            t, f, h;
        if (g) {
            t = g.id;
            f = g.parentNode;
            if (f) {
                p = f.id;
                h = f.parentNode;
                if (h) r = h.id;
            }
        } else {
            h = e.srcElement;
            f = h.parentNode;
            if (f) p = f.id;
            t = h.id;
        }
        if (t == a || p == a || r == a) return true;
        ia(a, e, x);
        top.location.href = document.getElementById(a).href;
    }
}(function() {
    if (window.jstiming) {
        window.jstiming.a = {};
        window.jstiming.b = 1;
        var e = function(b, a, c) {
                var f = b.t[a],
                    d = b.t.start;
                if (f && (d || c)) return f = b.t[a][0], d = void 0 != c ? c : d[0], Math.round(f - d)
            },
            l = function(b, a, c) {
                var f = "";
                window.jstiming.srt && (f += "&srt=" + window.jstiming.srt, delete window.jstiming.srt);
                var d = document.getElementById("csi");
                if (d) {
                    var g;
                    void 0 != window.jstiming._bfr ? g = window.jstiming._bfr : (g = d.value, window.jstiming._bfr = g, d.value = 1);
                    if (g) return ""
                }
                var h = b.t,
                    r = h.start,
                    d = [];
                g = [];
                for (var k in h)
                    if ("start" != k && 0 != k.indexOf("_")) {
                        var n = h[k][1];
                        n ? h[n] && g.push(k + "." + e(b, k, h[n][0])) : r && d.push(k + "." + e(b, k))
                    }
                delete h.start;
                if (a)
                    for (var p in a) f += "&" + p + "=" + a[p];
                (a = c) || (a = "https://googleads.g.doubleclick.net/pagead/gen_204");
                return [a, "?v=3", "&s=" + (window.jstiming.sn || "pagead") + "&action=", b.name, g.length ? "&it=" + g.join(",") : "", f, "&rt=", d.join(",")].join("")
            },
            m = function(b, a, c) {
                b = l(b, a, c);
                if (!b) return "";
                a = new Image;
                var f = window.jstiming.b++;
                window.jstiming.a[f] = a;
                a.onload = a.onerror = function() {
                    window.jstiming && delete window.jstiming.a[f]
                };
                a.src = b;
                a = null;
                return b
            };
        window.jstiming.report = function(b, a, c) {
            return m(b, a, c)
        }
    };
    var q = window.jstiming.load,
        t = function(b, a) {
            b = parseInt(b, 10);
            return 0 <= b ? a + b : 0
        },
        u = function(b, a) {
            a = a || {};
            a.id = "csi_pagead";
            a.gqid = "cpngWaqjAY2IZJPVvPgG";
            a.qqid = "CNyJkeu17dYCFREMGQodI94CtQ";
            window.jstiming.report(b, a)
        };
    window.rptcsi = function(b) {
        q.tick("ol");
        var a = {};
        try {
            a = JSON.parse('{"override":false}')
        } catch (h) {}
        var c = parseInt(a.dt || "1507891564102", 10),
            f = e(q, "start", 0);
        if (!(!c || 0 >= c || c > f)) {
            q.tick("_t0", null, c);
            var d = t(a.bdt || "-1", c);
            d && q.tick("bdt", "_t0", d);
            (d = t(a.dtd || "4661", c)) && q.tick("req", "_t0", d);
            var g = t(a.bpp || "236", c);
            (g || d) && q.tick("bpp", "_t0", g || d);
            (d = t("", c)) && q.tick("redir", "_t0", d);
            q.tick("fb", "_t0", f);
            q.tick("e2e", "_t0", e(q, "ol", 0));
            (f = t(a.zct, c)) && q.tick("zct", "_t0", f);
            (a = t(a.zst, c)) && q.tick("zst", "_t0", a);
            if (a = window.performance && window.performance.timing) q.tick("fs", "_t0", a.fetchStart), q.tick("reqs", "_t0", a.requestStart), q.tick("ress", "_t0", a.responseStart), q.tick("rese", "_t0", a.responseEnd)
        }
        q.name = b || "";
        u(q, {
            e: "828064251"
        })
    };
    window.rptcsiqid = u;
    window.tick = function(b, a) {
        q.t[b] || q.tick(b, a)
    };
}).call(this); < /script><style>html, body {width:100%;height:100%;}body {display:table;text-align:center;}#google_center_div {display:table-cell;}#google_image_div { display:inline-block; }</style > < /head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0" style="background:transparent" onload="rptcsi('loadimgad')"><div id="google_center_div"><div id="google_image_div"style="height: 552px; width: 276px; overflow:hidden; position:relative"><input type="hidden" id="csi"/ > < a id = "aw0"
target = "_top"
href = "/aclk?sa=l&ai=COVeccpngWdyIApGYZKO8i6gL3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAqMIl0_s_4A-qAMByAPJBKoExQFP0BgQPLdF-dI5nqOflk5p-b3M4bmYUfXZ1atQI1EaKeYmK-AX22k7R25_myX9_Az5YVVXPe2627F8T-hk5bfl0DoqhLbC3qzsPJzf6Beo7Awhmv_kLS0bBuHMC6Vc6D99Cf89k6r7GatTLWPgp_nNDhdVRNDlEhfPUI-8gvxtOFhbqbbP7yatxix2aNCIlJUj6zDur6Q3Oz3MHO1pr1ayuvjYVNMsK9X-Whkk1AFbfgpWn65W54t4lMp62V6B8O2KtUmgCaAGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo&num=1&sig=AOD64_1MQPfPGbtoIrm8scs1wUzTqMldKw&client=ca-pub-0731879187820183&adurl=http://vikaterrassen.no" > < img src = "https://tpc.googlesyndication.com/simgad/1041879530478978771"
border = "0"
width = "276"
alt = ""
class = "img_ad" / > < /a><style>div,ul,li{margin:0;padding:0;}.abgc{display:block;height:15px;overflow:hidden;position:absolute;right:16px;top:0px;text-rendering:geometricPrecision;width:15px;z-index:9020;}.abgb{display:block;height:15px;width:15px;}.abgc{cursor:pointer;}.cbb{background-image: url('https:/ / tpc.googlesyndication.com / pagead / images / x_button_blue2.png ');background-repeat: no-repeat;background-position: top right;cursor:pointer;height:15px;width:15px;z-index:9020;}.cbb:hover{background-image: url('
https: //tpc.googlesyndication.com/pagead/images/x_button_dark.png');cursor:pointer;}.abgb{position:absolute;right:0px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgc img{display:block;}.abgc svg{display:block;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgi{fill-opacity:1.0;fill:#00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:#cdcccc;stroke:none;}.abgtxt{fill:black;font-family:'Arial';font-size:100px;overflow:visible;stroke:none;}</style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div><div id=abgs class=abgs><a id=abgl class=abgl href="https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://windows7canaimaeducativo.blogspot.no/%26gl%3DNO%26hl%3Den%26client%3Dca-pub-0731879187820183%26ai0%3DCOVeccpngWdyIApGYZKO8i6gL3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAqMIl0_s_4A-qAMByAPJBKoExQFP0BgQPLdF-dI5nqOflk5p-b3M4bmYUfXZ1atQI1EaKeYmK-AX22k7R25_myX9_Az5YVVXPe2627F8T-hk5bfl0DoqhLbC3qzsPJzf6Beo7Awhmv_kLS0bBuHMC6Vc6D99Cf89k6r7GatTLWPgp_nNDhdVRNDlEhfPUI-8gvxtOFhbqbbP7yatxix2aNCIlJUj6zDur6Q3Oz3MHO1pr1ayuvjYVNMsK9X-Whkk1AFbfgpWn65W54t4lMp62V6B8O2KtUmgCaAGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo&amp;usg=AFQjCNE9KGGrdxTHNJ_GEPUON1795kAbMg" target=_blank></a></div></div><div id="cbb" class="cbb" aria-hidden="true"></div><div id="mute_panel" aria-hidden="true"></div><script>var abgp={hw:15,sw:75,hh:15,sh:15,himg:'https://tpc.googlesyndication.com'+'/pagead/images/adchoices/icon.png',simg:'https://tpc.googlesyndication.com'+'/pagead/images/adchoices/en.png',alt:'AdChoices',t:'AdChoices',tw:53,t2:'',t2w:0,tbo:0,att:'adchoices',ff:'',halign:'right',fe:false,iba:false,lttp:true,uic:true,uit:true,ci:'',icd:{"creatives":[],"height":552,"width":276,"attribution":{"user_feedback_data":{"mute_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","pub_feedback_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","conversion_url":"https://googleads.g.doubleclick.net/pagead/conversion/?ai=COVeccpngWdyIApGYZKO8i6gL3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAqMIl0_s_4A-qAMByAPJBKoExQFP0BgQPLdF-dI5nqOflk5p-b3M4bmYUfXZ1atQI1EaKeYmK-AX22k7R25_myX9_Az5YVVXPe2627F8T-hk5bfl0DoqhLbC3qzsPJzf6Beo7Awhmv_kLS0bBuHMC6Vc6D99Cf89k6r7GatTLWPgp_nNDhdVRNDlEhfPUI-8gvxtOFhbqbbP7yatxix2aNCIlJUj6zDur6Q3Oz3MHO1pr1ayuvjYVNMsK9X-Whkk1AFbfgpWn65W54t4lMp62V6B8O2KtUmgCaAGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026sigh=9gaEUznXJJo","close_button_token":"1yets6oQcL8I7omwnvUFEN-k398CGNrtxGMiEHZpa2F0ZXJyYXNzZW4ubm8yCAgFExi_nCwUQhdjYS1wdWItMDczMTg3OTE4NzgyMDE4M0gGWAJwAQ","interaction_conversion":{"label":"user_feedback_menu_interaction","label_instance":"","include_close_button_token":false},"survey_header":"What was wrong with this ad?","back_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png","mute_confirmation_header":"Thanks for the feedback!","mute_confirmation_text":"Well review this ad to improve the experience in the future.","pub_feedback_confirmation_header":"Thanks for the feedback!","pub_feedback_confirmation_text":"Well use your feedback to review ads on this site.","undo_text":"Undo","close_message":"{\"msg_type\":\"ablate-me\",\"key_value\":[{\"key\":\"collapse-after-close\",\"value\":\"animate\"},{\"key\":\"secs-to-countdown\",\"value\":\"1\"},{\"key\":\"countdown\",\"value\":\"3\"},{\"key\":\"message-tick\",\"value\":\"1\"}],\"googMsgType\":\"sth\"}","closing_countdown_text":"Closing ad: %1$d","attribution_text":"AdChoices","attribution_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png","attribution_destination_url":"https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://windows7canaimaeducativo.blogspot.no/%26gl%3DNO%26hl%3Den%26client%3Dca-pub-0731879187820183%26ai0%3DCOVeccpngWdyIApGYZKO8i6gL3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAqMIl0_s_4A-qAMByAPJBKoExQFP0BgQPLdF-dI5nqOflk5p-b3M4bmYUfXZ1atQI1EaKeYmK-AX22k7R25_myX9_Az5YVVXPe2627F8T-hk5bfl0DoqhLbC3qzsPJzf6Beo7Awhmv_kLS0bBuHMC6Vc6D99Cf89k6r7GatTLWPgp_nNDhdVRNDlEhfPUI-8gvxtOFhbqbbP7yatxix2aNCIlJUj6zDur6Q3Oz3MHO1pr1ayuvjYVNMsK9X-Whkk1AFbfgpWn65W54t4lMp62V6B8O2KtUmgCaAGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026usg=AFQjCNE9KGGrdxTHNJ_GEPUON1795kAbMg","ad_feedback_icon_url":"https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png","is_rtl_language":false,"feedback_options":[{"text":"Report this ad","conversion":{"label":"user_feedback_menu_option","label_instance":"1","include_close_button_token":true},"survey":{"header":"What was wrong with this ad?","options":[{"text":"Seen this ad multiple times","conversion":{"label":"mute_survey_option","label_instance":"2","include_close_button_token":true}},{"text":"Ad was inappropriate","conversion":{"label":"mute_survey_option","label_instance":"8","include_close_button_token":true}},{"text":"Ad covered content","conversion":{"label":"mute_survey_option","label_instance":"3","include_close_button_token":true}},{"text":"Not interested in this ad","conversion":{"label":"mute_survey_option","label_instance":"7","include_close_button_token":true}}]},"undo_conversion":{"label":"user_feedback_undo","label_instance":"1","include_close_button_token":true}}],"mute_panel_data":{"adchoices_icon_url":"https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png","adchoices_button_text":"AdChoices","closed_message_text":"Ad closed by %1$s","enable_lightbox":false,"google_logo_url":"https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png","report_ad_button_text":"Report this ad","confirmation_text":"We'll try not to show that ad again","settings_button_first":false,"protocol_gstatic_host":"https://www.gstatic.com","jake_mta_context":""},"why_this_ad_token":"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-5inBtA3d3T6yUklEN_b4P8aAzU0399TChK7AdMTZLYNYFov9uJKx_yE1pN0FsP01-Z0TybSQJqI53uodcuup2_8XS1_uxTZujkirk4v-70OTK4pZ4SCEZggi3A9-Yum3tfiT5ywhXpgDH3DSELuALw92_rpUEthKXI7rTARWhmVOh9PVnMPsK3cdIYzwobCvu-ObIUz1d7KXQuFgEsOozilJ9eKG61wyfnuTH2d1CKCsZkGiLrqaEYaxezS5ndW-RJGTxW5Uq8cj_IZa9RGrBwyv4Y1P9Ssvub2ig0aFLxhAafqGR8yPKvT6B7PuMEa_o1uKBTM9DKDMfuL6geKg,ZTL-hkpS6D6sfCbsCmLphg","why_this_ad_url":"https://www.google.com/ads/preferences/whythisad/en-US/RoOyDD7L4IWn5ZfI/#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-5inBtA3d3T6yUklEN_b4P8aAzU0399TChK7AdMTZLYNYFov9uJKx_yE1pN0FsP01-Z0TybSQJqI53uodcuup2_8XS1_uxTZujkirk4v-70OTK4pZ4SCEZggi3A9-Yum3tfiT5ywhXpgDH3DSELuALw92_rpUEthKXI7rTARWhmVOh9PVnMPsK3cdIYzwobCvu-ObIUz1d7KXQuFgEsOozilJ9eKG61wyfnuTH2d1CKCsZkGiLrqaEYaxezS5ndW-RJGTxW5Uq8cj_IZa9RGrBwyv4Y1P9Ssvub2ig0aFLxhAafqGR8yPKvT6B7PuMEa_o1uKBTM9DKDMfuL6geKg,ZTL-hkpS6D6sfCbsCmLphg\u00261yets6oQcL8I7omwnvUFEN-k398CGNrtxGMiEHZpa2F0ZXJyYXNzZW4ubm8yCAgFExi_nCwUQhdjYS1wdWItMDczMTg3OTE4NzgyMDE4M0gGWAJwAQ\u0026https://googleads.g.doubleclick.net/pagead/conversion/?ai=COVeccpngWdyIApGYZKO8i6gL3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAqMIl0_s_4A-qAMByAPJBKoExQFP0BgQPLdF-dI5nqOflk5p-b3M4bmYUfXZ1atQI1EaKeYmK-AX22k7R25_myX9_Az5YVVXPe2627F8T-hk5bfl0DoqhLbC3qzsPJzf6Beo7Awhmv_kLS0bBuHMC6Vc6D99Cf89k6r7GatTLWPgp_nNDhdVRNDlEhfPUI-8gvxtOFhbqbbP7yatxix2aNCIlJUj6zDur6Q3Oz3MHO1pr1ayuvjYVNMsK9X-Whkk1AFbfgpWn65W54t4lMp62V6B8O2KtUmgCaAGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026sigh=9gaEUznXJJo","why_this_ad_text":"Why this ad?"}},"flags":[{"name":"enable_settings_click_collapse","value":"true"},{"name":"jake_ui_extension","value":"jake_default_ui"},{"name":"jake_transition_timeout","value":"-1"}]},opi:false,ti:false,re:false,mob:false,osd:false,il:false,eaca:false,ejar:false,eda:false};</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/abg.js"></script><iframe frameborder=0 height=0 width=0 src="https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211" style="position:absolute"></iframe></div></div><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/client/ext/m_js_controller.js"></script><script>buildAdSlot([[[1,0,276,552,"http://vikaterrassen.no","https://googleads.g.doubleclick.net/pagead/conversion/?ai=COVeccpngWdyIApGYZKO8i6gL3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAqMIl0_s_4A-qAMByAPJBKoExQFP0BgQPLdF-dI5nqOflk5p-b3M4bmYUfXZ1atQI1EaKeYmK-AX22k7R25_myX9_Az5YVVXPe2627F8T-hk5bfl0DoqhLbC3qzsPJzf6Beo7Awhmv_kLS0bBuHMC6Vc6D99Cf89k6r7GatTLWPgp_nNDhdVRNDlEhfPUI-8gvxtOFhbqbbP7yatxix2aNCIlJUj6zDur6Q3Oz3MHO1pr1ayuvjYVNMsK9X-Whkk1AFbfgpWn65W54t4lMp62V6B8O2KtUmgCaAGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\u0026sigh=9gaEUznXJJo",null,null,null,null,null,null,null,null,"http://vikaterrassen.no",null,null,null,null,null,null,null,"",null,null,null,0,"","",0,0,""]],276,552,0,0,null,"CNyJkeu17dYCFREMGQodI94CtQ","cpngWaqjAY2IZJPVvPgG",null,"ca-pub-0731879187820183",276,552,0,"_top",null,null,0,"https://tpc.googlesyndication.com",null,0,0,-353799468,[["open_applinks_adding_gclid","False"],["pass_gclid_to_deeplink_url","False"]],null,null,null,null,[1,1,1,1,0,0],null,null,null,null,null,1,null,null,null,null,"https://www.gstatic.com",null,null,[0,0],0]);</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCOVeccpngWdyIApGYZKO8i6gL3NODxkzuibCe9QW57vDIqgEQASCYyKANYMPcpIWYGKABoP3YnAPIAQKpAqMIl0_s_4A-qAMByAPJBKoExQFP0BgQPLdF-dI5nqOflk5p-b3M4bmYUfXZ1atQI1EaKeYmK-AX22k7R25_myX9_Az5YVVXPe2627F8T-hk5bfl0DoqhLbC3qzsPJzf6Beo7Awhmv_kLS0bBuHMC6Vc6D99Cf89k6r7GatTLWPgp_nNDhdVRNDlEhfPUI-8gvxtOFhbqbbP7yatxix2aNCIlJUj6zDur6Q3Oz3MHO1pr1ayuvjYVNMsK9X-Whkk1AFbfgpWn65W54t4lMp62V6B8O2KtUmgCaAGAoAHyIKnY6gHpr4b2AcB0ggHCIBhEAEYArEJjv-hSrXg_hjYEwo\x26sigh\x3d9gaEUznXJJo","cpngWaqjAY2IZJPVvPgG","CNyJkeu17dYCFREMGQodI94CtQ",true,true,true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','B8b1BcpngWdyIApGYZKO8i6gLAO6JsJ71BQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhig_dicAw','',3941167828,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d4068587948\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dB8b1BcpngWdyIApGYZKO8i6gLAO6JsJ71BQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhig_dicAw');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171011/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,0,1,0,0,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CNyJkeu17dYCFREMGQodI94CtQ"></div><div style="top:0;left:0;width:300px;height:600px;position:absolute;max-width:100%;max-height:100%;pointer-events:none;image-rendering:-moz-crisp-edges;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB6SURBVBjTbVCBDcAwCNIP+P/aTVFGm2litBKkRPxHMqo7JvS2KvBNWYhghqba4IURCE3aV3Ogh7tR4p7bk1KyQVbTHcJL/0qeOnIgPtPRcICcgITzX2G6Lx1Eg8U8S7fUfok1pZ/cwdVxO7itoTPk3sGNsbDx5mCGLjxVzQXmrQjzWwAAAABJRU5ErkJggg==')"></div><script>var ad = buildImageAd(adSlot, 0);adSlot.addAd(ad);adSlot.finalize('google_image_div');</script><script>(function(_){var zk=function(){this.g=[];this.l={}},Ak=function(a){var b=[a.key,a.value];_.q(a.wa)&&b.push(a.wa);return b};zk.prototype.report=function(){for(var a=[],b=0;b<this.g.length;++b)a.push(Ak(this.g[b]));return a};var Bk={};var Ck={1:0,45:0,46:0,48:0,2:1,4:8,5:6,8:11,9:2,6:9,34:25,26:15,3:7,20:12,24:26,33:11,25:0,40:9,36:19},Dk=function(a,b,c,d){var e=Ck[b];4==b&&(b=(d=d.currentTarget)?d.getAttribute("data-absm"):c.getAttribute(b,"data-absm"),"e"==b?e=12:"db"==b?e=29:"dd"==b&&(e=30));(0,window.ja)(a,e)},Ek=function(a){return function(){a()}},Fk=function(a){return a.report()};_.t("registerAd",function(a,b){_.q(Bk[b])||(Bk[b]=new zk);a.registerClickUrlModifier(_.y(Fk,Bk[b]));for(var c=[1,45,46,48,2,4,8,6,9,5,3,20,34,26,24,33,25,40,36],d=0;d<c.length;d++)_.u(window.st)&&a.listen(c[d],"mousedown",Ek(_.y(window.st,b))),a.listen(c[d],"click",_.y(Dk,b));a.listen(15,"click",_.y(Dk,b));_.u(window.st)&&a.listen(15,"mousedown",Ek(_.y(window.st,b)));_.u(window.ss)&&(a.listen(0,"mouseover",Ek(_.y(window.ss,b))),a.listen(0,"focus",Ek(_.y(window.ss,b))),a.listen(1,"focus",Ek(_.y(window.ss,b))),a.listen(1,"mouseover",Ek(_.y(window.ss,b))));return a},void 0);_.t("css",function(a,b,c,d,e){a=Bk[a];_.q(a)&&(!_.q(a.l[b])||d?(d=a.g.length,a.l[b]=d,a.g[d]={key:b,value:c,wa:e}):(b=a.g[a.l[b]],b.value=c,b.wa=e))},void 0);})(window.hydra=window.hydra||{});</script><script>registerAd(ad, 'aw0');</script> <script>(function(){var h=this;var k;var l=function(a,b,c,d,e){if(e)c=a+("&"+b+"="+c);else{var f="&"+b+"=",g=a.indexOf(f);0>g?c=a+f+c:(g+=f.length,f=a.indexOf("&",g),c=0<=f?a.substring(0,g)+c+a.substring(f):a.substring(0,g)+c)}return 2E3<c.length?void 0!==d?l(a,b,d,void 0,e):a:c};var n=function(){this.g="";this.h=m},m={};var p=function(a,b){b instanceof n&&b.constructor===n&&b.h===m?b=b.g:("object"!=typeof b||!b||b instanceof Array||b instanceof Object||Object.prototype.toString.call(b),b="type_error:TrustedResourceUrl");a.src=b};var q=function(a){var b=new n;b.g=a;return b};var r=function(a){this.g=a||h.document||document};var t=function(a,b){var c=window;c.addEventListener?c.addEventListener(a,b,void 0):c.attachEvent&&c.attachEvent("on"+a,b)};var w=function(a){var b=u,c=v;a=a?a:document;var d=(a?new r(9==a.nodeType?a:a.ownerDocument||a.document):k||(k=new r)).g.createElement("SCRIPT");d.type="text/javascript";c&&(void 0!==d.onreadystatechange?d.onreadystatechange=function(){if("complete"==d.readyState||"loaded"==d.readyState)try{c()}catch(f){}}:d.onload=c);p(d,q(b));var e=a.getElementsByTagName("head")[0];if(e)try{h.setTimeout(function(){e.appendChild(d)},0)}catch(f){}};var u,x,y,z,A,B=function(){var a=window,b=B;a.removeEventListener?a.removeEventListener("load",b,void 0):a.detachEvent&&a.detachEvent("onload",b);!A&&(a=document.createElement("IFRAME"),a.frameBorder=0,a.style.height=0,a.style.width=0,a.style.position="absolute",A=a,document.body&&(document.body.appendChild(a),a=A))&&(a=a.contentWindow)&&(y="1",a.document.open(),a.document.write("<!doctype html><html><head></head><body></body></html>"),a.document.close(),w(a.document))},v=function(){var a=A;if(a&&(a=a.contentWindow))if(y="",a.botguard){var b=a.botguard.bg;if(b)try{C(function(){z=new b(x)})}catch(c){y="5"}else y="3"}else y="2"},D=function(){var a=null;try{a=window.rvdt,"number"==typeof a?a=36E5>a?""+a:"M":a=null}catch(b){}return a},F=function(){return["bg",E(),"9"]},C=function(a){window.wrpfc=a;window.wrpfc()},E=function(){var a=z;if(y)return y;if(!a)return"5";if(!a.invoke)return"4";var b;try{C(function(){a.invoke(function(a){b=a})})}catch(c){return"6"}return b&&b.length?3>b.length?"7":1012<b.length?(t("unload",function(){var a=["bg",b],d=["id","bg"];if(d&&a&&d.length&&a.length&&d.length==a.length){for(var e=["https","://","pagead2.googlesyndication.com","/pagead/gen_204"],f="?",g=0;g<d.length;g++)e.push(f+d[g]+"="+a[g]),f="&";a=e.join("");d=window;d.google_image_requests||(d.google_image_requests=[]);e=d.document.createElement("img");e.src=a;d.google_image_requests.push(e)}}),"8"):b:"6"};window.bga=function(a,b,c){u=a;x=b;y="0";c&&window.osdlac&&window.osdlac(F);t("load",B)};window.bgy=function(a){var b=D();b&&(a=l(a,"rvdt",b));return l(a,"bg",E(),"9")};window.bgz=function(a){var b=document.getElementById(a);if(b){var c=D();c&&(window.css?css(a,"rvdt",c,void 0,void 0):b&&(b.href=l(b.href,"rvdt",c,void 0,void 0)));c=E();window.css?css(a,"bg",c,!1,"9"):b&&(b.href=l(b.href,"bg",c,"9",!1))}};}).call(this);bga('https://pagead2.googlesyndication.com/bg/CI_hqThbQjBwoUSK10cIsovHByRI4InaU0wolTzGCLU.js','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');</script></body></html>
                                    

#8 JavaScript::Write (size: 1293, repeated: 1) - SHA256: 22d65a01fbac492f5a143db70307b4d21c6b517832aea1217de55b6eeca0b31f

                                        < iframe width = "300"
height = "250"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjGZikZpZpCikAAGjCACGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&refferer=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v&width=300&height=250&randomA=1949462409210&realRef=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" > < /iframe>
                                    

#9 JavaScript::Write (size: 1427, repeated: 1) - SHA256: c4e6e868017b61db5720b40a251510ee67901e9faa35ac5465c0d6b2e6cb44cb

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "666"
height = "60"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&amp;output=html&amp;h=60&amp;slotname=5673570737&amp;adk=3133928837&amp;adf=807048394&amp;w=666&amp;fwrn=4&amp;lmt=1507885093&amp;loeid=38893311&amp;rafmt=1&amp;format=666x60&amp;url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&amp;ea=0&amp;flash=10.0.45&amp;host=ca-host-pub-1556223355139109&amp;h_ch=L0007&amp;fwr=0&amp;resp_fmts=3&amp;wgl=0&amp;dt=1507891563843&amp;bpp=246&amp;fdt=256&amp;idt=3790&amp;shv=r20171011&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=2734194894438&amp;frm=20&amp;ga_vid=1576236141.1507891568&amp;ga_sid=1507891568&amp;ga_hid=778145286&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=77&amp;ady=3433&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893301%2C21061122%2C828064251%2C20040062&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=1&amp;dtd=4465"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 1450, repeated: 1) - SHA256: b30fa8841c93eee47ee48c650161cdd625411b15ecb9250dbc6dd7d3e503a41d

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "276"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&amp;output=html&amp;h=600&amp;slotname=4205735538&amp;adk=3941167828&amp;adf=807048394&amp;w=276&amp;fwrn=4&amp;lmt=1507885093&amp;loeid=38893311&amp;rafmt=1&amp;format=276x600&amp;url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&amp;ea=0&amp;flash=10.0.45&amp;host=ca-host-pub-1556223355139109&amp;h_ch=L0001&amp;fwr=0&amp;resp_fmts=4&amp;wgl=0&amp;dt=1507891564102&amp;bpp=236&amp;fdt=4454&amp;idt=4630&amp;shv=r20171011&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=666x60&amp;correlator=2734194894438&amp;frm=20&amp;ga_vid=1576236141.1507891568&amp;ga_sid=1507891568&amp;ga_hid=778145286&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=807&amp;ady=733&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893301%2C21061122%2C828064251%2C20040062&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=4661"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#11 JavaScript::Write (size: 1479, repeated: 1) - SHA256: 7ce65323a707035810389066502ec96f4fb77336e64a71c6fc5c2d776c983e50

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "276"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&amp;output=html&amp;h=600&amp;slotname=7150303934&amp;adk=1347854052&amp;adf=807048394&amp;w=276&amp;fwrn=4&amp;lmt=1507885093&amp;loeid=38893311&amp;rafmt=1&amp;format=276x600&amp;url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&amp;ea=0&amp;flash=10.0.45&amp;host=ca-host-pub-1556223355139109&amp;h_ch=L0001&amp;fwr=0&amp;resp_fmts=4&amp;wgl=0&amp;dt=1507891564338&amp;bpp=8&amp;fdt=4447&amp;idt=4600&amp;shv=r20171011&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=666x60%2C276x600&amp;correlator=2734194894438&amp;pv_h_ch=L0001&amp;frm=20&amp;ga_vid=1576236141.1507891568&amp;ga_sid=1507891568&amp;ga_hid=778145286&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=807&amp;ady=1377&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893301%2C21061122%2C828064251%2C20040062&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=3&amp;dtd=4620"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (137)


Request Response
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:45:57 GMT
Expires: Tue, 17 Oct 2017 10:45:57 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4a36c3a0f62e5090abbee327b6c5a777
Sha1:   37a0315fbdf892194cc735b14d8f024a0b196de5
Sha256: d5012467277681fb71e08741691463135ac7d35f532f412c680cd7a031658b2a
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=309128, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 00:34:08 GMT
Expires: Tue, 17 Oct 2017 00:34:08 GMT
Date: Fri, 13 Oct 2017 10:45:57 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    fccd40351d25d6f5eecda73fdef9b3d8
Sha1:   0d2d2f37814bb53b7dca796acc9ee278ef6297ba
Sha256: 23e276d6aa20791de9110019cb7992bae490040d4cc3a06678449d1b3f2063e4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:45:57 GMT
Expires: Tue, 17 Oct 2017 10:45:57 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   653
Md5:    3c79813525c2064c216bb95f82ca1b3f
Sha1:   d8f8d2f7129bf036f69d7565838eb58a967456e4
Sha256: 36904ccf24e41a58e8ec231a4540cc9787d87cb418f9fb31e3655f5c30c88333
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:45:57 GMT
Expires: Tue, 17 Oct 2017 10:45:57 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:45:58 GMT
Expires: Tue, 17 Oct 2017 10:45:58 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c588b5e7f5749d9d056036ba1cfed2e3
Sha1:   9705100a2d064fd97528af037834bf03768ce199
Sha256: 3a24566634cdc1cc85455d337eca0f8d2b1ebe90deef8ed1b72effa37c5aaee1
                                        
                                            GET / HTTP/1.1 
Host: windows7canaimaeducativo.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 10:45:58 GMT
Date: Fri, 13 Oct 2017 10:45:58 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 13 Oct 2017 08:58:13 GMT
Etag: W/"14a736c07d34429ba319f77fbad1e3beb41e544294ccfda24d6865a892ec63af"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   12012
Md5:    f9863ed2485b98093e9175c11bc583c9
Sha1:   756d817b0fd6f4a503e8c8b918347843a883e587
Sha256: 4c3636ed3f42f5ae5f10c7deb9053d6e8d84209a28ede1cf109a1ada3c86b3b6
                                        
                                            GET /static/v1/widgets/73244247-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9609
Date: Tue, 03 Oct 2017 00:59:20 GMT
Expires: Wed, 03 Oct 2018 00:59:20 GMT
Last-Modified: Mon, 02 Oct 2017 22:05:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 899198
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9609
Md5:    0f31846649ae2c2c0aaa43f1f2d45662
Sha1:   c4e46209ffa4052f6caa01c7c9408a42859a2e2f
Sha256: 5a95b901eba5846ebff70ffca4ba09c36a157cbc2222155850896da73218f841
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:45:58 GMT
Expires: Tue, 17 Oct 2017 10:45:58 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63c0c42876b179e938da75d435caf455
Sha1:   2496362f8b1e77dfa75695dc7c63d02afd31ef67
Sha256: e186173a64acae1a86f9725f1f063c69dd7b05c9ffaacf03329212c6411a892a
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff43a59f940b9e31a0283d768b2237d6"
Expires: Fri, 13 Oct 2017 10:45:58 GMT
Date: Fri, 13 Oct 2017 10:45:58 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 10:45:58 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17423
Md5:    df210cafcf0432f63b4d1e9017b50492
Sha1:   fb60ebec4c23783d2168550604d871d4efd2a800
Sha256: 282712f4c148ca337b742d000fb85617e37d467f755b4cd563c7ea12451adb95
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: windows7canaimaeducativo.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 10:45:58 GMT
Date: Fri, 13 Oct 2017 10:45:58 GMT
Cache-Control: private, max-age=86400
Last-Modified: Fri, 13 Oct 2017 08:58:13 GMT
Etag: W/"14a736c07d34429ba319f77fbad1e3beb41e544294ccfda24d6865a892ec63af"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=3899665209438036996&zx=12dbb6bb-24db-4e0d-873c-22215aec40cc HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 10:45:58 GMT
Date: Fri, 13 Oct 2017 10:45:58 GMT
Last-Modified: Fri, 13 Oct 2017 10:45:58 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46907
Date: Thu, 12 Oct 2017 19:31:29 GMT
Expires: Fri, 12 Oct 2018 19:31:29 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 54870
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46907
Md5:    663da4522821133a5116f57abe7d6a86
Sha1:   1b157f22c825d5bee65867d2709bfcbb4c04a086
Sha256: 8010ae2811b2cf468d24a4e896dcdcd1457c10af769525ad1928c502b56550fb
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16938
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 54857
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16938
Md5:    6aae7bc152acc744cf63755ed47be736
Sha1:   79cc54dc61a1ef9944e6e5611a334c5bc8f194bf
Sha256: 62fee77a073cb0944c55664aa5c61ee35e83e567fa41155fd9b94b6f4f0a3a1c
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:45:59 GMT
Expires: Tue, 17 Oct 2017 10:45:59 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    816dbd3479ac72bbf29083d1d60e2345
Sha1:   211eba5157d2bc56c2d2b168c28f05924d050da8
Sha256: b8821ac5e989b638e7c1f86893bda713df909c079c55217bda5c14a11a9361dc
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 23:27:48 GMT
Expires: Thu, 26 Oct 2017 23:27:48 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 40691
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=412133, public, no-transform, must-revalidate
Last-Modified: Wed, 11 Oct 2017 05:14:52 GMT
Expires: Wed, 18 Oct 2017 05:14:52 GMT
Date: Fri, 13 Oct 2017 10:45:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    27dcda1a1a66da383ce0a7a440595cce
Sha1:   ab10af6a943f9a2c831a347499bfcb4bcda7816b
Sha256: 5a40bc20d23437192becaba5aed0a2dd9b6358b78ba3f5a11a5ab7338fbddcf8
                                        
                                            GET /proxy/q3cP-y1ue_qBE_Qda_g3C4bJ3EWNSp3Lnn-TR6aRXMgVP-SROEqnjf8RSuXNbMkHVX9fbwCATq7dBks9TRhn_dViSP1_OeNncc5mxONa=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Expires: Sat, 14 Oct 2017 10:45:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: attachment;filename="unnamed.gif"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:45:59 GMT
Server: fife
Content-Length: 74588
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 728 x 90
Size:   74588
Md5:    3a56d397a2f0421cc223ae28402fca6a
Sha1:   dd05c6cf58dcc797fa6e87f596592bffdc9a84d9
Sha256: 4768c00316adb64a493f5ba9d81eec55e08af5a4028c645d4392b2b2e2e2d31b
                                        
                                            GET /navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 10:45:59 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2737
Md5:    9b1056d2fa2506bf27bf6e56bf7fda09
Sha1:   e283c5e8c64000ed30a126ceb46fc1e8ad98d8a4
Sha256: 4a1e42ac182ae844beba1d4054b0b7c0e2543eb70b8e370f85a12348b311dfe6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 10:46:00 GMT
Etag: "59e05fef-1d7"
Expires: Sun, 15 Oct 2017 10:46:00 GMT
Last-Modified: Fri, 13 Oct 2017 06:40:47 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    115853e86c870be7f73a7aca8bf14ec2
Sha1:   10b088f5d68a762f71584b1d1f833d7f5d735fbf
Sha256: ad892b801b24441abf2ed0032c5cc4f08c4d79db6609b3f7414509f30821f568
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 10:46:00 GMT
Etag: "59e06012-1d7"
Expires: Sun, 15 Oct 2017 10:46:00 GMT
Last-Modified: Fri, 13 Oct 2017 06:41:22 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    87737d3a36d0c8a2f3ec701377258197
Sha1:   289ffa90378bbe51038018f4869777f1b54aa6db
Sha256: a7e28aa24d8df8384c64e74ad7cfade902c56da8676f042f31dfe93ee10bb35b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 10:46:00 GMT
Etag: "59e0673e-1d7"
Expires: Sun, 15 Oct 2017 10:46:00 GMT
Last-Modified: Fri, 13 Oct 2017 07:11:58 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6e39f4f21d2d594500e853a81782e443
Sha1:   33c8db9c0db12112db3f284b1b3b6c99639424e1
Sha256: 7a2b557ecf46b43ec10b0d8f1fd24f4cec4febd6c82fa8bcfeefff58434a7113
                                        
                                            GET /pop.js HTTP/1.1 
Host: c1.popads.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         185.76.9.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 10:46:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 06 Sep 2017 19:19:47 GMT
Etag: W/"59b04a53-11aa7"
Expires: Wed, 13 Sep 2017 19:31:07 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Server: CDN77-Turbo
X-Edge-IP: 185.76.9.20
X-Edge-Location: stockholmSE
X-Cache: HIT
X-Age: 141288
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30621
Md5:    0a74ea7e2c31eae9a0e5e694aa67603a
Sha1:   92ada43a290cba520b86bf3ad102f7412d138f55
Sha256: a4cbb3b7dfee16a776245ab8aaef7fd690d4d6894f2b9ec7e2ae4ac7b7da79f4
                                        
                                            GET /e/cm?o=1&p=9&l=ur1&category=amazonhomepage_2017&f=ifr&linkID=a35077ab6a18003ecb42405556f78929&t=010101079-20&tracking_id=010101079-20 HTTP/1.1 
Host: rcm-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         176.32.103.183
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 10:46:00 GMT
Server: Server
P3P: policyref="http://rcm.amazon.com/w3c/p3p-us.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
Cache-Control: no-store
Content-Length: 3016
Cneonction: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   3016
Md5:    302fc5e2c4ebc50040f03c39584dfa28
Sha1:   17f93284b510e6a1d4f24c0d404dc23d49053db3
Sha256: 280a55319be0fa687c740af3039b21523b1e86b3ee2080997dd04e54075b923a
                                        
                                            GET /-GTddvy7jTlU/VfMUkMun3QI/AAAAAAAAE6o/zfwH-ef6Qw4/s640/11-09-2015%2B01-16-31%2Bp-m-.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v13ab"
Expires: Sat, 14 Oct 2017 10:46:00 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="11-09-2015 01-16-31 p-m-.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:00 GMT
Server: fife
Content-Length: 58496
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   58496
Md5:    22c6560e7bf12e778ec1222cc9501de1
Sha1:   4932856962805aae73c2081bfbf80e34b75f6cdf
Sha256: 7f3a94c4c627ec3e31aecdb06f84395edad1e1a8a6810e100981be6e8fff8216
                                        
                                            GET /slider.php?section=General&pub=769592&ga=g&side=left HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:00 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Sun, 01 Jan 1900 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   867
Md5:    fd00db4bf4b89bb40d1a4528b316ce6e
Sha1:   6057cf2ddbe08aa0bb7170701ff28c48192778b9
Sha256: 088a5773db21569bea53721f4f7121f301480c8b4274842812880b0877a45176
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "04daa091e8f5885baefc06708bb31518"
Expires: Fri, 13 Oct 2017 10:46:00 GMT
Date: Fri, 13 Oct 2017 10:46:00 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17436
Md5:    c9b03a87f61296c0fe44650d60bf2853
Sha1:   17df04f5e1a769294fd4bbb1f540f58f8e18a3fb
Sha256: ccdf3c4c18c28c4c925aaef874b30ad8d512c8e8c4259bd7542c0eb7d257ec8f
                                        
                                            GET /img/navbar/arrows-light.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 117
Date: Tue, 10 Oct 2017 12:41:28 GMT
Expires: Tue, 17 Oct 2017 12:41:28 GMT
Last-Modified: Mon, 09 Oct 2017 15:42:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 252272
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 19 x 4, 8-bit/color RGBA, non-interlaced
Size:   117
Md5:    25c2b0cfe0ad4dcda4a0e3727d091d80
Sha1:   b9d16f4311e64648b7970baf00cb9841e3c3351b
Sha256: bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
                                        
                                            GET /-yzJc6hIDpRc/VfMZrQ8E-SI/AAAAAAAAE7Q/nOZHJdNgSLo/s640/20150909_191334.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v13b5"
Expires: Sat, 14 Oct 2017 10:46:00 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="20150909_191334.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:00 GMT
Server: fife
Content-Length: 53569
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   53569
Md5:    d0166e0b9b3285a88daafa5a72cb83b4
Sha1:   201022b66e771dba31aec4e4167c0598f872e3fe
Sha256: c5163662b3003c001cf6a440f8867542c3199414746f238cc8620f2e4405e6b0
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 58976
Date: Thu, 12 Oct 2017 20:13:59 GMT
Expires: Fri, 12 Oct 2018 20:13:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 52321
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   58976
Md5:    19c76688d8c32cad0bc39aa1ebd2de70
Sha1:   7d4321f4521b894dafdcbaaf3b396cf93a00b334
Sha256: 6cf6e0443b0d9b73af2eacfd2910e417875dd16594487563f5596fd230f9dd61
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trustwave.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         195.159.219.9
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 634
Date: Fri, 13 Oct 2017 10:46:01 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   634
Md5:    f9f8b03345d691b4d1cb245eb5b67dfa
Sha1:   77f95addfc33f8edd1256de022899a6b58d8131b
Sha256: ac2362b4104c56a0583fbc52a4cc08f3347136d9152b9d47ebfa352753f1c0c7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trustwave.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         195.159.219.9
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 1683
Date: Fri, 13 Oct 2017 10:46:01 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1683
Md5:    ac695d4f1c454f6d3b859ac77f540033
Sha1:   2b5352ed39712c83e4385ad345f142152146ea64
Sha256: 79ee52c62eb76e48b2471f2e4a69e053c8ea622cfe9cefb08fe12da206c599bd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:01 GMT
Server: Apache
Last-Modified: Thu, 12 Oct 2017 05:28:53 GMT
Expires: Thu, 19 Oct 2017 05:28:53 GMT
Etag: 886C8976E3213CE6A7E36FDA79A29F4C67592F74
Cache-Control: max-age=498771,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e05cdb80e2b76aa8b480b4f941a769cb
Sha1:   886c8976e3213ce6a7e36fda79a29f4c67592f74
Sha256: c7d82ca80855e6ac73e175c21cfecc4991550cffeafb53c9c509efe59c6ae6fa
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:01 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: CAE2D4E36B01556EB5A7DFCAC91643A06697B94B
Cache-Control: max-age=427607,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    b1e50e73281d4487d8b1cf3cdaf74bd5
Sha1:   cae2d4e36b01556eb5a7dfcac91643a06697b94b
Sha256: ba282a3cc79d8121086cb931af7199775bd48fef7699ba80e61d794c382b880c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:01 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: 8A7BC9885D9FFAFD7270D5324F22275F2B2C0D13
Cache-Control: max-age=427607,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d7daaf5088b1b8633e7e0d6600507656
Sha1:   8a7bc9885d9ffafd7270d5324f22275f2b2c0d13
Sha256: 9ea32e88334ce42853f79b00abaff0d4ee00214175cd3e1d189a0aa1b4a4ceba
                                        
                                            GET /img/navbar/icons_peach.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 907
Date: Tue, 10 Oct 2017 16:38:32 GMT
Expires: Tue, 17 Oct 2017 16:38:32 GMT
Last-Modified: Mon, 09 Oct 2017 20:50:39 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 238049
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 46 x 20, 8-bit colormap, non-interlaced
Size:   907
Md5:    3718077fe5eb689b0ded987a52881d06
Sha1:   f0ce5596ef43f850c400cbbc0556697fb3e7b232
Sha256: 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:01 GMT
Expires: Tue, 17 Oct 2017 10:46:01 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c047d5ab2d5867f659e029ee0fbdfcb8
Sha1:   a0dfb1489dcca41f9526d9b78c129ce3a5d3c44c
Sha256: 779e29848b467402cb2d0212a407c472cba50ff750fd16bc931d0f00afd74c42
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fwindows7canaimaeducativo.blogspot.com%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 10:46:01 GMT
Date: Fri, 13 Oct 2017 10:46:01 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4029
Md5:    941a2c2b0db314282e76d2356198f122
Sha1:   9e315b3824e31a962d84c41883dc5a827d49b6f1
Sha256: 38d6bcb14d1a19f5005342b83caf954d34af728082bff6b8b6309a3cb6b3f812
                                        
                                            GET /blogblog/data/1kt/awesomeinc/tabs_gradient_light.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 182
Date: Tue, 10 Oct 2017 12:01:20 GMT
Expires: Tue, 17 Oct 2017 12:01:20 GMT
Last-Modified: Mon, 09 Oct 2017 16:50:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 254681
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 20 x 200, 8-bit/color RGBA, non-interlaced
Size:   182
Md5:    a3c2c1c288eca66ee27f75ea41dcd96f
Sha1:   77dbd443ccabca3cfb43a48a2ccb44f752f5a77a
Sha256: 5e516df49b160c3efcb1ea09dd4c5f5b7c99a23a18a2a882acc379179bdbaacd
                                        
                                            GET /gtag/js?id=UA-9191107-14 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.168
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 13 Oct 2017 10:46:01 GMT
Expires: Fri, 13 Oct 2017 10:46:01 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17899
Md5:    64acdcc311c7186ac5bf14cc3e6d69dd
Sha1:   9c5c1b05aab92f2ef99d418924e921b5f32b783c
Sha256: a0fcf950fd965d7135229dbc829231568af1bf165f0f69d0916ecb77183b69e4
                                        
                                            POST / HTTP/1.1 
Host: gs.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1425
Content-Transfer-Encoding: binary
Cache-Control: max-age=390184, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 23:09:05 GMT
Expires: Tue, 17 Oct 2017 23:09:05 GMT
Date: Fri, 13 Oct 2017 10:46:01 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1425
Md5:    f4214054e18a11584eb77f327f9738e4
Sha1:   b7b2ac61f208fdde775aaaf5459359b9b9806bec
Sha256: 18a3ec2523a3978e9600649f618859afaec2041c4a071ab3af9d97a877a14ba2
                                        
                                            GET /checkInventory.php?w=1507891560&v=3&siteId=2211056&minBid=&popundersPerIP=&blockedCountries=&documentRef=&s=1176,885,1,1176,885 HTTP/1.1 
Host: serve.popads.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.21.13.17
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Set-Cookie: PP_CV=yes; expires=Fri, 13-Oct-2017 11:46:01 GMT; Max-Age=3600 fraudcheck=dc1b2f765321f2d763dbd551df5ce018; expires=Sun, 12-Nov-2017 10:46:01 GMT; Max-Age=2592000; path=/; domain=.popads.net PopAds_CF_Pass=1; expires=Fri, 13-Oct-2017 16:46:01 GMT; Max-Age=21600
Cache-Control: private, no-store, no-cache, must-revalidate, no-transform, max-age=0
Pragma: no-cache
Content-Length: 849
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 13 Oct 2017 10:46:01 GMT
Accept-Ranges: bytes
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   849
Md5:    9644fb3568d596072f7f2639248f5e54
Sha1:   4da045b26e7f9aaa81c4ee2cd5350e27269fa952
Sha256: f464091fa383e6f4618df6c9d1fc164faaf5723a369b6cf58dff8d5d5eeb93b7
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.74.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:01 GMT
Content-Length: 1517
Connection: keep-alive
Set-Cookie: __cfduid=d384ea3c1ebb2010bf9c75680297c46ad1507891561; expires=Sat, 13-Oct-18 10:46:01 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Fri, 13 Oct 2017 08:23:27 GMT
Expires: Tue, 17 Oct 2017 08:23:27 GMT
Etag: "b49e7245e258a2d5f3c9fa662c53d825d2c71ee3"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3ad1b67554ec42b5-OSL


--- Additional Info ---
Magic:  data
Size:   1517
Md5:    d0b3cf3204eef12e7b2c5f81a6da23c1
Sha1:   b49e7245e258a2d5f3c9fa662c53d825d2c71ee3
Sha256: 6bc042a1ff3c21c047fa98a1199fdedf4bc2746aa52dddc60e09c8d4f932a0ce
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fwindows7canaimaeducativo.blogspot.com%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 18:17:58 GMT
Expires: Fri, 12 Oct 2018 18:17:58 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 59283
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            GET /-S_DGlhpXU1c/VfMZjbZ0RpI/AAAAAAAAE7A/pzQvwRlvCkI/s640/20150909_191344.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v13b1"
Expires: Sat, 14 Oct 2017 10:46:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="20150909_191344.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:01 GMT
Server: fife
Content-Length: 36505
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   36505
Md5:    b037a1328f787b4ef137945a6913b875
Sha1:   70f6a041ba56b0c7c3df60ce4945f4d1e8e39426
Sha256: f4527a88aec84f7ead5cd80a85e112993bd39b41b575ba8d954beb83c94d889b
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=309629, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 00:44:27 GMT
Expires: Tue, 17 Oct 2017 00:44:27 GMT
Date: Fri, 13 Oct 2017 10:46:02 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    618740d6efbb3e5aab54fc87aae03605
Sha1:   30bfb25839fc868e8829c21ad7003fbf9ed80d5d
Sha256: 246b79664cb2539862e9bdd66d6d82834234ed0eaaff6aae088301eca3464086
                                        
                                            GET /proxy/gptMRiOULdDTOwAqQAnBhdzyP-eMpuQbHgqmlp14BiHcVfiiKEUoHTpjjj4xqrP6T8ztFJu3ZsbwNWoMK5Uqj4c9ifySl06OxUSyJNh2XugZE7RRtBGL-l0_daI0msf0hzsUT8ageQSKzjJ2pTGQfbFsHvqVHBSUkaiScS2Njw74ZD-H=s0-d HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Expires: Sat, 14 Oct 2017 10:46:02 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: attachment;filename="unnamed.gif"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:02 GMT
Server: fife
Content-Length: 62405
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 250 x 250
Size:   62405
Md5:    341586ee1bf2176a577c7136de63a6bc
Sha1:   fd9359b859c0cba1a9fa06901f6aa88451305d6b
Sha256: 3055e58f5dbf9d3044fb84c030b2b449ddcebd4ca8cd1b30feda6a98a142ff42
                                        
                                            GET /imagens/banner2.gif HTTP/1.1 
Host: www.neobux.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         104.16.40.15
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 10:46:01 GMT
Content-Length: 3883
Connection: keep-alive
Set-Cookie: __cfduid=d6b700146329fe7f8a10fa74d70d7299d1507891561; expires=Sat, 13-Oct-18 10:46:01 GMT; path=/; domain=.neobux.com; HttpOnly
Cf-Bgj: imgq:100
Cf-Polished: origSize=3891
Etag: "7c869b4f4f21cc1:0"
Last-Modified: Thu, 02 Jun 2011 18:03:00 GMT
P3P: CP="No P3P policy because it has been deprecated"
Vary: Accept
X-Powered-By: ASP.NET
CF-Cache-Status: REVALIDATED
Expires: Sat, 21 Oct 2017 10:46:01 GMT
Cache-Control: public, max-age=691200
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad1b672ee694273-OSL


--- Additional Info ---
Magic:  GIF image data, version 87a, 180 x 100
Size:   3883
Md5:    46c09d494dd81e0dcf586dd531591448
Sha1:   0ae63bdd0d0061e605daf6a71cb5cfc33f775c43
Sha256: 1ba2bdc77020f3af9e853ae69d539470bc0951479650555d36c773e38c1d27e4
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=526446, public, no-transform, must-revalidate
Last-Modified: Thu, 12 Oct 2017 13:00:08 GMT
Expires: Thu, 19 Oct 2017 13:00:08 GMT
Date: Fri, 13 Oct 2017 10:46:02 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    2cd42e89f88a3b5797a3be67dde9ea33
Sha1:   8028c53d38e5bd5d18be34bc86ff131f04471d6a
Sha256: b99cc90d82f17ea07211f45d6f2eca9fa8e890e7a1c8ba9c736ea7445d91d7cd
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 06 Oct 2017 01:50:20 GMT
Expires: Sat, 06 Oct 2018 01:50:20 GMT
Last-Modified: Thu, 05 Oct 2017 23:11:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 636942
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            GET /jquery-1.7.2.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         198.232.125.113
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Fri, 13 Oct 2017 10:46:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 Oct 2014 00:16:07 GMT
Vary: Accept-Encoding
Etag: W/"54499a47-17278"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38992
Md5:    da6ef508cdd28923be676fc153c6ac3e
Sha1:   89a2b1ffe93cc09d472f15009deebac21a6e0ec2
Sha256: 935764b9397e58552cbbaee6458fa3a451f0b8cfc8a633bfbf124beab2312b63
                                        
                                            GET /1/associates-ads/1/OP/?cb=1507891560464&p=%7B%22program%22%3A%221%22%2C%22tag%22%3A%22010101079-20%22%2C%22linkCode%22%3A%22ur1%22%2C%22refUrl%22%3A%22https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F%22%2C%22panda%22%3Atrue%7D HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://rcm-na.amazon-adsystem.com/e/cm?o=1&p=9&l=ur1&category=amazonhomepage_2017&f=ifr&linkID=a35077ab6a18003ecb42405556f78929&t=010101079-20&tracking_id=010101079-20

                                         
                                         52.94.225.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
x-amzn-RequestId: b4df8fec-b003-11e7-88d4-6fce5143dd4f
Content-Length: 43
Date: Fri, 13 Oct 2017 10:46:02 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         195.159.219.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "30477AC7AD5711A2CA9E8CD7A02BE99997C7D077898AF4D4E60C6C7FE8D1A821"
Last-Modified: Fri, 13 Oct 2017 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Fri, 13 Oct 2017 22:46:03 GMT
Date: Fri, 13 Oct 2017 10:46:03 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    de529ddb71b49b5901045d71c131aaad
Sha1:   3309bcacad6d9fe3d2b69df502f72bafcc53e7b4
Sha256: 30477ac7ad5711a2ca9e8cd7a02be99997c7d077898af4d4e60c6c7fe8d1a821
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         192.35.177.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:03 GMT
Content-Transfer-Encoding: Binary
Last-Modified: Thu, 12 Oct 2017 22:49:25 GMT
Etag: "953d165e763e17e2bc95184fcf4b5e06330f8ed4"
Expires: Fri, 13 Oct 2017 22:49:25 GMT
Cache-Control: max-age=43200,public,no-transform,must-revalidate
Content-Length: 1398
Connection: close


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    5a154a2c3264bb044b6d0cbb99a64761
Sha1:   953d165e763e17e2bc95184fcf4b5e06330f8ed4
Sha256: 8af9ec9137c77ab6728d3bd0a5369547fca1d075398873849561bcc8801f94c1
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Tue, 10 Oct 2017 15:35:01 GMT
Expires: Tue, 17 Oct 2017 15:35:01 GMT
Last-Modified: Mon, 09 Oct 2017 21:49:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241861
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 10:46:02 GMT
Expires: Fri, 13 Oct 2017 10:46:02 GMT
Cache-Control: private, max-age=3600
Etag: 17258135619533068437
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26138
Md5:    de58973d89896cfe2f829d886bf55505
Sha1:   6bf14e2883704dfe78803d8016d470e8d798144c
Sha256: 04cef437ec65565e3d46c6c96327df74784a067056780c532b3a4d11406af5d0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:04 GMT
Server: Apache
Last-Modified: Fri, 13 Oct 2017 07:19:17 GMT
Expires: Fri, 20 Oct 2017 07:19:17 GMT
Etag: 411FBF83ED96C7FA35C6F6F1780847EEF9874634
Cache-Control: max-age=591792,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fbd3889957768908f778c94c3ffbc2db
Sha1:   411fbf83ed96c7fa35c6f6f1780847eef9874634
Sha256: 33dc8c0fb0d0f1e3ec858d1eb04b2c1505fc543250dc61b563e92c57c4f65902
                                        
                                            GET /images/G/01/img13/associates/amazon_assoc-ads_feature-tile_180x150.png HTTP/1.1 
Host: images-na.ssl-images-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://rcm-na.amazon-adsystem.com/e/cm?o=1&p=9&l=ur1&category=amazonhomepage_2017&f=ifr&linkID=a35077ab6a18003ecb42405556f78929&t=010101079-20&tracking_id=010101079-20

                                         
                                         13.32.69.29
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 2954
Connection: keep-alive
Server: Server
Date: Wed, 16 Aug 2017 11:25:21 GMT
Cache-Control: max-age=86400,public
Last-Modified: Sat, 11 Jan 2014 00:10:15 GMT
Access-Control-Allow-Origin: *
Age: 88674
X-Cache: Hit from cloudfront
Via: 1.1 598d4b0757e5ae0438942d9a6d636120.cloudfront.net (CloudFront)
X-Amz-Cf-Id: pkUKI1EwveeUiHr8X2KnzGyX0IFPjPKpV9gFT9o21Qq-MMSVzvoVWA==


--- Additional Info ---
Magic:  PNG image, 180 x 150, 8-bit colormap, non-interlaced
Size:   2954
Md5:    6f0a83c147a937d0a0fc7fcfdf0fad42
Sha1:   b8fc0e64f9fea5bf69d8d3e7e5e4692866b0b3f3
Sha256: 9a962dbdbc13e6c2545b87a4bf4c125f44b81e62997eb108ac969dc173dabb81
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19422
Date: Thu, 12 Oct 2017 20:26:09 GMT
Expires: Fri, 12 Oct 2018 20:26:09 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 51592
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19422
Md5:    ac80b1c4b4c427abb05209c3cd2e1b8b
Sha1:   3f0e766aa8942538b0b15ea6d3d7c998b7831fae
Sha256: 77f6eded601b1c7c62c6d89c21b359206819c5b7992420ac178362a4f07f3ad0
                                        
                                            GET /but_close.png?1360094895 HTTP/1.1 
Host: ylx-a-img.advertica-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         185.101.140.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 05 Feb 2013 20:08:15 GMT
Etag: W/"511166af-298"
Expires: Sun, 12 Nov 2017 10:46:04 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   692
Md5:    a229d84cb1fdd25bf0282f44ae8516f8
Sha1:   1a63dc70c9a94b1b7c2f10fac122974a30afb55e
Sha256: 44b470d98bad2d3e89d7a9f621fa049ae7cb69a58585bff583f3e29a2b109e25
                                        
                                            GET /private/contadorvisitasgratis.php?c=773d831fcc8f82f7bc16d8d0e3f8b4ec HTTP/1.1 
Host: counter7.01counter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         37.187.249.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 10:46:04 GMT
Server: Apache
X-Powered-By: PHP/5.6.30
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 643
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   643
Md5:    b5d2a4ec6772f67a4bd363aa3a0e3fae
Sha1:   8bc3e87ca76fec6dce0e95907d209f4b54fb93e5
Sha256: 52018957c5dc9b171a4f3bf595ad27fe5b96991ee6f083435b4859a619adaad4
                                        
                                            GET /banner_show.php?section=General&pub=769592&format=300x250&ga=g&slider=4acf4d1d4281d9dbc1177d88c069fd73 HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:04 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Sun, 01 Jan 1900 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Set-Cookie: used_ad648102=1; expires=Sat, 14-Oct-2017 04:00:00 GMT; Max-Age=62036; path=/ total_impressions=1; expires=Sat, 14-Oct-2017 04:00:00 GMT; Max-Age=62036; path=/ cpa_673873=300x250_872392424_5; expires=Sun, 12-Nov-2017 10:46:04 GMT; Max-Age=2592000; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   798
Md5:    55df60724ce7258ed08e76c2dc69211c
Sha1:   d43850748bd6292cd9d60bc587349ad1a73d2a95
Sha256: 5a7b60e69b4a77c54e8e3ec8c004b3a498258c3fa19c2e31ac9e933d7958e96d
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:05 GMT
Expires: Tue, 17 Oct 2017 10:46:05 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0a14338a299b2c02742cd6f9e33596b0
Sha1:   a69501c94549c32d1b3b25358a2305e9d628ea16
Sha256: c3cc36c99da38011eda1ff5ddf24d8367eb22fd9668046f8c4857ddb55e7b82e
                                        
                                            GET /pub-config/r20160913/ca-pub-0731879187820183.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Fri, 13 Oct 2017 10:46:05 GMT
Expires: Fri, 13 Oct 2017 22:46:05 GMT
Cache-Control: public, max-age=43200
Last-Modified: Thu, 12 Oct 2017 20:12:07 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:05 GMT
Expires: Tue, 17 Oct 2017 10:46:05 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1e563f806a20ef3d52596871e2ccc921
Sha1:   37610e9f1787c0d87ac8958461b1e9da167e8243
Sha256: afe71ff42d56cc4dd019854a1e6c7e876e866bf0070ea5d81ba289d63044e451
                                        
                                            GET /pagead/js/r20171011/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 10:46:05 GMT
Expires: Fri, 13 Oct 2017 10:46:05 GMT
Cache-Control: private, max-age=1209600
Etag: 14064587796465248848
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   66905
Md5:    39616cd26952a07c76a945e0bfe1c923
Sha1:   0aafea0bf6a6a8a8cfe010a30759bc84c0c46e85
Sha256: 8f306b4d0c010dc3ad437bb1145d63fcbdd40532d9f9cf3a1fb82a5a9d59f028
                                        
                                            GET /show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/banner_show.php?section=General&pub=769592&format=300x250&ga=g&slider=4acf4d1d4281d9dbc1177d88c069fd73
Cookie: used_ad648102=1; total_impressions=1; cpa_673873=300x250_872392424_5

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:06 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Sun, 01 Jan 1900 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1015
Md5:    394897b49b9246997855768b8a242193
Sha1:   e5890aec6ec14bb397118316ddf44cb3f82ce1a0
Sha256: 909e969e4a0ccba8d3a9e206fb659f50b4a6469ebdc902f9255fabcc5626eeca
                                        
                                            GET /adsid/integrator.js?domain=windows7canaimaeducativo.blogspot.no HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 10:46:06 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=windows7canaimaeducativo.blogspot.no HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 10:46:06 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /proxy/JdgZhcub6vbAGY3I98MHaMVaYuQV5x4C_iviQo2NcttS2lW9ULVZTnuewDdE610fyd2bVMTEuC2_pHx4FRl34YEtjvzY=s0-d HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Expires: Sat, 14 Oct 2017 09:47:11 GMT
Content-Disposition: attachment;filename="unnamed.gif"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 09:47:11 GMT
Server: fife
Content-Length: 43103
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 3533
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60
Size:   43103
Md5:    11d747a83a25a25268fd11491ab17f17
Sha1:   f7d99d8379ab6776718dd49a7780cff91aed71eb
Sha256: 4654f729fd226a6cd6bd9d35fb82e3fa3a9c0effdea9970be63764f0ab0ea63f
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=es&origin=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no&url=http%3A%2F%2Fwindows7canaimaeducativo.blogspot.com%2F2015%2F09%2Fmi-gente.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 10:46:08 GMT
Date: Fri, 13 Oct 2017 10:46:08 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4042
Md5:    bda2638247a86d55640737ce11692070
Sha1:   e511659202e26f37839c2317a852699d2d504bef
Sha256: fd4c9f904044ecff9a229ea1d958298ca03ca9a526ab128ae53904e1eb6cbcdf
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_3 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18760
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 54866
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18760
Md5:    2d797cea7686e8bfdf687e7e3f1185f8
Sha1:   18508fd8d4d7d1a60260f374ff44143287448b43
Sha256: ff5a84ffa0a43f93e1ea6bfd87c95185fd97fdbf8e9c890a9c3bcf854a4aa8af
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:09 GMT
Expires: Tue, 17 Oct 2017 10:46:09 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a352c8963f53bbddb3c2ee43ae62b276
Sha1:   8553e71b2e4c06afea3bf11df2ae53b03e24cc8b
Sha256: 0957480062e48be7163da3a9ec8f5598b368cede5b8822753f40ae78c03b5c9a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:09 GMT
Server: Apache
Last-Modified: Thu, 12 Oct 2017 02:37:27 GMT
Expires: Thu, 19 Oct 2017 02:37:27 GMT
Etag: 292C2063459CCB3B96C64C38C6D66B8F40D3A107
Cache-Control: max-age=488477,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9d88f26331e119729143a69a5784f35e
Sha1:   292c2063459ccb3b96c64c38c6d66b8f40d3a107
Sha256: 3cc5663d1b2585765c120ee259fceb92c32bf63b1a9fa21b27cf8d6624d726f1
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=profile/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8191
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 54867
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8191
Md5:    b0bd9e3d50772d490411c2ca7da0507b
Sha1:   7ac7ef7c35d0939da2b9324f1b6d4517dfe1ac11
Sha256: be8fc68d1c599657b90baa2b8e29e2f4f03d0113315c19aa1e16792df373cd9c
                                        
                                            GET /pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 10:46:09 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 11:01:09 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 10:46:09 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15074
Md5:    abdcd6cf078ce86f2763fe0a012cd581
Sha1:   20c32cde9ce34d23e98ae11e924c1014809e4dfa
Sha256: f1844eb6ab9fcc3e388b24afe0d8b46cad6e0df18094b481aff22908945c8ea2
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coin-hive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v

                                         
                                         94.130.129.243
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:09 GMT
Content-Length: 178
Connection: keep-alive
Location: https://coinhive.com/lib/coinhive.min.js


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /-E1-i_YEBTW0/VfMZtSVIMxI/AAAAAAAAE7Y/s9VY5Cej99k/s640/20150909_191405.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v13b7"
Expires: Sat, 14 Oct 2017 10:46:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="20150909_191405.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:01 GMT
Server: fife
Content-Length: 29563
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   29563
Md5:    9889dd9630140ed3b65f10d4539a9394
Sha1:   9e27b624391be7ff89ac4d9f2502a32c4e6d8d4d
Sha256: b2b53cfd2e6009ef03ecd43b27623414ee09766e1c37b321433de42318e524d4
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 10:46:10 GMT
Date: Fri, 13 Oct 2017 10:46:10 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   362
Md5:    6f81b827434f80066a315a891f5077ab
Sha1:   c264f765657b2f2d5c442cd7bb7539e5789414eb
Sha256: 8203ca0852f1391d0d9bb068af58fa9e3a7a94c22f843a773ee18e89e56b0cdc
                                        
                                            GET /pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=4205735538&adk=3941167828&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564102&bpp=236&fdt=4454&idt=4630&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60&correlator=2734194894438&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=733&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=4661 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 10:46:10 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 11:01:10 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 10:46:10 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   15057
Md5:    ee78dc312ae68bea5d44edc93b47b40b
Sha1:   e640af3ba778d2df070999c4d63dd87f082c2586
Sha256: 14117b8d3f4dd11105e75227b81b917bf13f4b2b4db174077c922c476ab88244
                                        
                                            GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11836
Date: Thu, 12 Oct 2017 18:15:43 GMT
Expires: Thu, 19 Oct 2017 18:15:43 GMT
Last-Modified: Wed, 11 Oct 2017 00:10:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 59427
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   11836
Md5:    c5258804f66599a9b214665cebf5704f
Sha1:   7962a226cafb1c0fe74bcac746e0e05640d7dfbd
Sha256: 6fda3d09a7fb2440e36494cd97b5801b68325ce358972ff8e7c1e124b2d2bee1
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=3899665209438036996&blogName=Error+al+Instalar+Windows+7+en+Canaim...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://windows7canaimaeducativo.blogspot.com/search&blogLocale=es&v=2&homepageUrl=https://windows7canaimaeducativo.blogspot.com/&vt=-1053871263756893689&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 10:46:10 GMT
Date: Fri, 13 Oct 2017 10:46:10 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   363
Md5:    8391b2d55c52b5448cf308020a863620
Sha1:   63464955d06340cf42d68882a9cf44e81c19fe8d
Sha256: 5fdc04219f238d882105fa572a4bf331a6748956d5dcaeb6714cd8c9140f911e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:10 GMT
Server: Apache
Last-Modified: Tue, 10 Oct 2017 21:38:37 GMT
Expires: Tue, 17 Oct 2017 21:38:37 GMT
Etag: EA268C0BB84B544CF397EC465E7DF375EA63A44F
Cache-Control: max-age=384146,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    9ec89b9a32ed439b3c1cae1c482b010f
Sha1:   ea268c0bb84b544cf397ec465e7df375ea63a44f
Sha256: 41a24ebba513437abaf16d4bbda6151c023863a7bbab4101ceaf67c420d3fbd5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:10 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: CA43E1AF07B14215656B6CC8D338EC3E7BA69405
Cache-Control: max-age=427598,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    07882bec5366fb7c671a3e4a9d535c69
Sha1:   ca43e1af07b14215656b6cc8d338ec3e7ba69405
Sha256: a2dd39e7b5cbb93b128105376d809387a202f507a8dcfd94edd7bb78e9bcb0cd
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:10 GMT
Expires: Tue, 17 Oct 2017 10:46:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c2b9bed84744dc8e850d9fe1bc1c19b7
Sha1:   9f76da96e31b40fe8c24314869f344a749f88f6f
Sha256: 37049ab5894046f537ec4849fc7c2d3b11ce63e2e4d59973b845e66361465094
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_slide_menu/exm=auth,gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_4 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2796
Date: Thu, 12 Oct 2017 19:31:43 GMT
Expires: Fri, 12 Oct 2018 19:31:43 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 54867
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2796
Md5:    a0cb0280a2d32fb0dfb1f6aa54fc4506
Sha1:   7f639f15db9d088a82b7903a474ba7fd88986823
Sha256: 2f4c40a0a8410f3ed654b849712db8ac821cb6c0a7e48c830ad0600f5e144609
                                        
                                            GET /-_fwas_6UmhA/VfMZxD8MUAI/AAAAAAAAE7g/kbfNcTaNdGc/s640/20150909_191637.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v13b9"
Expires: Sat, 14 Oct 2017 10:46:02 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="20150909_191637.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:02 GMT
Server: fife
Content-Length: 64299
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   64299
Md5:    c074d1f0d1439d3a3eec15d6ea9257f5
Sha1:   383a16998548e58b67c81fb0fa535640642d77ae
Sha256: 862f78d0c52202cf83dd4fd7b3e6b96f1fd8947f889235eebb96b2cedf0d66fb
                                        
                                            GET /pagead/images/x_button_blue2.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 15:01:07 GMT
Expires: Fri, 13 Oct 2017 15:01:07 GMT
Etag: 291775052866240956
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 71103
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 16 x 15, 8-bit/color RGB, non-interlaced
Size:   145
Md5:    60b7612b7cde75ce329db6a6b0415b23
Sha1:   66c106bf496bb1ca11ecd7dda5816b36e7165a0e
Sha256: bc8347bb6ce7622050ab41f67dda0513db000d96158eceab4cfc01963d27fa58
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "862447553fc7f21eefa0f5321e562c86"
Expires: Fri, 13 Oct 2017 10:46:10 GMT
Date: Fri, 13 Oct 2017 10:46:10 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5456
Md5:    ac397d26c01a6b9c4c4d6abbf610a356
Sha1:   1a8c65bc3c48432c46b2310760c418447d2c3a2a
Sha256: 06d9001b61ee40837e6221e22b1b50401463180d73d293a96418bdebd935fa1d
                                        
                                            GET /trkpx.php?h=e92ae011699e18d49eb7051bf2656f2d HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v
Cookie: used_ad648102=1; total_impressions=1; cpa_673873=300x250_872392424_5

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:10 GMT
Content-Length: 43
Connection: close
Pragma-directive: no-cache
Cache-directive: no-cache
Cache-Control: public, no-cache
Pragma: no-cache
Expires: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /simgad/1041879530478978771 HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 121878
Date: Mon, 18 Sep 2017 17:30:33 GMT
Expires: Tue, 18 Sep 2018 17:30:33 GMT
Last-Modified: Mon, 18 Sep 2017 11:51:14 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 2135737
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   121878
Md5:    a56ee0859b0d32e8ffe48ef1336c9d97
Sha1:   e18d52ab55bfe936ebfceaae089370179b28b31a
Sha256: 55ac698ccf529249b4883e12c4d1898fefae9fb6772b806f139f6def26ad8cf0
                                        
                                            GET /logo_n_small.png?1480628810 HTTP/1.1 
Host: ylx-a-img.advertica-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v

                                         
                                         185.101.140.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2016 21:46:50 GMT
Etag: W/"58409a4a-631"
Expires: Sun, 12 Nov 2017 10:46:10 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1298
Md5:    961dcad940bcae720f8f0ead6409f9d2
Sha1:   7199f8b763df9aec9c55bad14795e2166e6b1501
Sha256: a50a9224daca3d84e35717d2c03bea4a7e9c811b2cc598078de2f9b787ed080a
                                        
                                            GET /aff/pub_s9c2nm.png?1480419364 HTTP/1.1 
Host: ylx-a-img.advertica-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v

                                         
                                         185.101.140.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2016 11:36:04 GMT
Etag: W/"583d6824-68a8"
Expires: Sun, 12 Nov 2017 10:46:10 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26311
Md5:    f46784dcc71c42f9406d242fede794f4
Sha1:   79269678d6fb002908aae6c5616ddd2f94f9691a
Sha256: 0df87463e7f01f1abbb4144ed58c36de50d1fdb3bc56046e0976ab642ed2f1bc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:11 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 14:49:45 GMT
Expires: Wed, 18 Oct 2017 14:49:45 GMT
Etag: B7058C8A38FEAACB6BF7C3C74ECB8B2F02B81B35
Cache-Control: max-age=446013,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    7632b9b83807894c1ad78874e2c1d6f5
Sha1:   b7058c8a38feaacb6bf7c3c74ecb8b2f02b81b35
Sha256: 65e861b249f12214f7d1010d970652ea5abad7aadbee3268f6dffd94c4a2a0e9
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Tue, 10 Oct 2017 13:48:12 GMT
Expires: Tue, 17 Oct 2017 13:48:12 GMT
Last-Modified: Tue, 10 Oct 2017 05:05:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 248279
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /api/vglnk.js HTTP/1.1 
Host: cdn.viglink.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         104.16.160.13
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 13 Oct 2017 10:46:10 GMT
Content-Length: 27416
Connection: keep-alive
Set-Cookie: __cfduid=d95743f8c2d16743eba6fd8d4b8083edf1507891570; expires=Sat, 13-Oct-18 10:46:10 GMT; path=/; domain=.cdn.viglink.com; HttpOnly
x-amz-id-2: TpEUE5HAR5FQCKDnRJ8yJIGPSgyDkjd4QCg8EQ1jkbHzCrt8vHe4+I86a1ayW3CfLKUUycMIg6k=
x-amz-request-id: 2EDEFA3A8696BAE4
Last-Modified: Thu, 05 Oct 2017 15:17:49 GMT
Etag: "eddc595e5e895c875c260f08d86e1c3c"
Cache-Control: public, max-age=60
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 10:47:10 GMT
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad1b6acce79427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Oct 05 16:44:28 2017
Size:   27416
Md5:    eddc595e5e895c875c260f08d86e1c3c
Sha1:   980ec26c9c0e4c7639b06184b2a9ac3969d4c18d
Sha256: 5548e443f4bfa2c912f21f304b122ae1029d05f0c0b724a81cc4e1c86e18f01d
                                        
                                            GET /pagead/js/r20171011/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 23:09:07 GMT
Expires: Wed, 25 Oct 2017 23:09:07 GMT
Etag: 10282765528497536317
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29984
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 128224
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29984
Md5:    0b811cda7ba7007d161c0c3ae48bb01e
Sha1:   2f66db67bb9be244cdebd02e5f7ec371baf64d40
Sha256: 3cffc0e04894be43bc3ff872d93d025af9efeede4a7e700d2d7946f3d1ec1226
                                        
                                            GET /pagead/ads?client=ca-pub-0731879187820183&output=html&h=60&slotname=5673570737&adk=3133928837&adf=807048394&w=666&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=666x60&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0007&fwr=0&resp_fmts=3&wgl=0&dt=1507891563843&bpp=246&fdt=256&idt=3790&shv=r20171011&cbv=r20170110&saldr=aa&correlator=2734194894438&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=77&ady=3433&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=1&dtd=4465 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 10:46:11 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 11:01:11 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 10:46:11 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   369
Md5:    3a0dab2f14b43c6d3bf755084f51bfc5
Sha1:   1a55cd373920c3da99f4b1d6876919ac00f384c3
Sha256: 55be09eb5309d327610603c1908c4fbb0c114ff510c486d57be897d135758029
                                        
                                            GET /images/pixel.gif?ch=1&rn=5.073461275459015 HTTP/1.1 
Host: cdn.viglink.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: __cfduid=d95743f8c2d16743eba6fd8d4b8083edf1507891570

                                         
                                         104.16.160.13
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 10:46:11 GMT
Content-Length: 43
Connection: keep-alive
x-amz-id-2: Gq5rlFwFmG96LNZGxPVYN5UU4DIcaJKH4Y8g+SS3IDFnypDo2IbE//NHQOBGdqgDEjOMUGTL56o=
x-amz-request-id: 42AC7A40B61D6D7C
Last-Modified: Tue, 10 Feb 2015 03:29:39 GMT
Etag: "221d8352905f2c38b3cb2bd191d630b0"
Cache-Control: max-age=15, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad1b6b0d8d8427f-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    221d8352905f2c38b3cb2bd191d630b0
Sha1:   d804b495cb9b84b9007a25b5d85f9ae674004cde
Sha256: 89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
                                        
                                            GET /proxy/bXpzQBTHwlnKXz7uSbV31t8yExaSGcgdQxRF887k17C57M29_RnpOchqEu-B0XR6uui-2j9B9j9PRyx3WjU3RIbqrrx1heSuesr5Uyr-EKccLUs=s0-d HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Expires: Sat, 14 Oct 2017 10:46:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: attachment;filename="unnamed.gif"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:01 GMT
Server: fife
Content-Length: 49848
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 160 x 600
Size:   49848
Md5:    08310fa4d333dd8a20cfb25286ba26fa
Sha1:   ef30cf86639f5051e636d98fb8636638280fd2f1
Sha256: 15d97a5d7e4aa05d4ba513beb237cecdf56bf8665905af8965005e1561e106a2
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 09:50:39 GMT
Expires: Fri, 13 Oct 2017 11:50:39 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14089
Cache-Control: public, max-age=7200
Age: 3333
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14089
Md5:    7b1f226d2f5f01597e62889513d4bc8c
Sha1:   ff78ed289a65fa3c91b0ff470fb0c6536bcab745
Sha256: 80eeeea7639a7b6a6205b8862b9060a7c60da47855e8dd9c74e64b0a0fce8b9a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:12 GMT
Server: Apache
Last-Modified: Tue, 10 Oct 2017 19:05:30 GMT
Expires: Tue, 17 Oct 2017 19:05:30 GMT
Etag: 22CF3E09B330CC08E46EACB09D9F431009E68AA5
Cache-Control: max-age=374957,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    27596f2d321a6d695bb7c397fee419a9
Sha1:   22cf3e09b330cc08e46eacb09d9f431009e68aa5
Sha256: 79ecd8020211bc0d2b0e3901da1be4ca91bc5b79c0740627ffc71909bd1fa83b
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 59446
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /r/collect?v=1&_v=j64&a=778145286&t=pageview&_s=1&dl=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ul=en-us&de=UTF-8&dt=Error%20al%20Instalar%20Windows%207%20en%20Canaima%20Educativo&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IAhAAUQAI~&jid=1522059442&gjid=1310204103&cid=1576236141.1507891568&tid=UA-9191107-14&_gid=1866670515.1507891572&_r=1&gtm=uab&z=1699264923 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 10:46:12 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pagead/html/r20171011/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 23:09:06 GMT
Expires: Wed, 25 Oct 2017 23:09:06 GMT
Etag: 4405804728715842184
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6876
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 128224
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6876
Md5:    be7c2f915fac8b85beacc3dc31b5edf9
Sha1:   d55bd2323fc911dab3a13f3b4eb29cf0340c763c
Sha256: c4288729e52b6c7f622d484d68f8bcbe3961b637450cfd2fb7e6cf166c5b526a
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 18:17:59 GMT
Expires: Fri, 12 Oct 2018 18:17:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 59293
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            GET /pagead/js/r20171011/r20110914/abg.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 16015504446091943127
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25075
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 157834
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25075
Md5:    a03d88a9e456417644032fa19b791050
Sha1:   cf2e160c03fec960af338b9f95aa32f86d30e88c
Sha256: b12f58217d43100ef41209523e5e4eb8562b5c33ce4a4e00f698036faf575b07
                                        
                                            GET /notice.php?p=1408052&interactive=1&pushup=1 HTTP/1.1 
Host: go.mobisla.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         188.42.162.160
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:12 GMT
Content-Length: 154
Connection: keep-alive
Location: https://go.pushnative.com/notice.php?p=1408052&interactive=1&pushup=1
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v

                                         
                                         94.130.90.167
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:12 GMT
Last-Modified: Mon, 02 Oct 2017 14:16:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"59d24a4a-21e45"
Expires: Fri, 13 Oct 2017 18:46:12 GMT
Cache-Control: max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   43383
Md5:    fe144c72a53ead8a0b0960680f396821
Sha1:   dd8415779b4f07aff98c3c3cf9d8d9e5a2dbc0ae
Sha256: c5c84e973e49b5919fd11bcab34ae5a7cbc68acc717f9ddb6f1f122f35d72269

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1796
Date: Thu, 12 Oct 2017 18:15:22 GMT
Expires: Fri, 12 Oct 2018 18:15:22 GMT
Last-Modified: Wed, 04 Jan 2017 15:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 59450
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 168 x 56, 8-bit gray+alpha, non-interlaced
Size:   1796
Md5:    2f9aeeb8a52a48b0a82d2c9553e25e0e
Sha1:   f70f7af90f3d368822d17d6805ea9de47371450e
Sha256: e5c2769cc0c017cdf5046fc91cf37255c139a06ddfd50c7814bd5921e0e30c29
                                        
                                            GET /images/pixel.gif?ch=2&rn=5.073461275459015 HTTP/1.1 
Host: cdn.viglink.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/
Cookie: __cfduid=d95743f8c2d16743eba6fd8d4b8083edf1507891570

                                         
                                         104.16.160.13
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 10:46:12 GMT
Content-Length: 43
Connection: keep-alive
x-amz-id-2: Gq5rlFwFmG96LNZGxPVYN5UU4DIcaJKH4Y8g+SS3IDFnypDo2IbE//NHQOBGdqgDEjOMUGTL56o=
x-amz-request-id: 42AC7A40B61D6D7C
Last-Modified: Tue, 10 Feb 2015 03:29:39 GMT
Etag: "221d8352905f2c38b3cb2bd191d630b0"
Cache-Control: max-age=15, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad1b6b90d944291-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    221d8352905f2c38b3cb2bd191d630b0
Sha1:   d804b495cb9b84b9007a25b5d85f9ae674004cde
Sha256: 89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
                                        
                                            GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjGZikZpZpCikAAGjCACGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&refferer=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v&width=300&height=250 HTTP/1.1 
Host: nurno.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v

                                         
                                         185.66.201.34
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:12 GMT
Transfer-Encoding: chunked
Connection: close
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1264
Md5:    5048300cdd0342565f4a71ce49a8e5e4
Sha1:   b99f480436db33bc414c99b13a6065690d35d837
Sha256: 68dce25be50bac1f0c9faa8f6979ee3aa9d1cb48cfe30249b5467874db73df73
                                        
                                            GET /pagead/images/adchoices/iconx2-000000.png HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 18:15:36 GMT
Expires: Fri, 13 Oct 2017 18:15:36 GMT
Etag: 7710300208861385503
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 557
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 59436
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 30 x 30, 8-bit/color RGBA, non-interlaced
Size:   557
Md5:    c359423d4fa28db149f53fb24731f3d1
Sha1:   8ca7259698e7139f90c54376066cdd1f3ae2e578
Sha256: 43d42ce3a326d3e4ea65c77ba91b1e9d39a8c8fa3da09aa17deb046b27113d68
                                        
                                            POST / HTTP/1.1 
Host: gs.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1425
Content-Transfer-Encoding: binary
Cache-Control: max-age=331079, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 06:39:54 GMT
Expires: Tue, 17 Oct 2017 06:39:54 GMT
Date: Fri, 13 Oct 2017 10:46:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1425
Md5:    0352c8647600e123fe46904388bfb340
Sha1:   3ffc26106e3768a63bd8669ef7dcd9d92309b754
Sha256: 2fe0d49196fe64bef17185fae03bca8609c72649be9867277555994ea6112b20
                                        
                                            GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjGZikZpZpCikAAGjCACGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&refferer=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v&width=300&height=250&randomA=1949462409210&realRef=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 HTTP/1.1 
Host: nurno.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u4021507891564=true&ad=673873&f=300x250&a=395578&s=MDkwNWNmOTRmN2NlYTUzOTdhODE2OWJlODg0OGY2MDM=&u=769592&si=872392424&di=24820814&ci=16&h=e92ae011699e18d49eb7051bf2656f2d&cc=NO&slider=4acf4d1d4281d9dbc1177d88c069fd73&https=1&useAf=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&ar=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v

                                         
                                         185.66.201.34
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:13 GMT
Transfer-Encoding: chunked
Connection: close
Set-Cookie: total_impressions=1; expires=Sat, 14-Oct-2017 03:59:59 GMT; Max-Age=62026 used_ad648102=1; expires=Sat, 14-Oct-2017 03:59:59 GMT; Max-Age=62026; path=/
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   938
Md5:    6e97d99d32f4fd6cf56721671340ac9f
Sha1:   ba3582a3e325a10cf252abce043d2c17e71e64af
Sha256: f01eea33980b081a29350c417c35c7ed48086e6b9b9229a579c50e115df3cec4
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 09:47:39 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 3514
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:13 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121771, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 10:22:34 GMT
Expires: Sat, 14 Oct 2017 22:22:34 GMT
Etag: "7a36efdd50bad3491a920302e3ad655485e35a67"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    5b03a2eaa4ace71d38f0a14f937e4df2
Sha1:   7a36efdd50bad3491a920302e3ad655485e35a67
Sha256: 05c36f0ed42374271024bae326181e32a9c71bc0866cc7fe3c9bf416875ecbc2
                                        
                                            GET /notice.php?p=1408052&interactive=1&pushup=1 HTTP/1.1 
Host: go.pushnative.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         188.42.162.211
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: SeenToday=1; expires=Sat, 14-Oct-2017 10:46:13 GMT; Max-Age=86400; path=/ OAGEO5580f=12%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Sat, 14-Oct-2017 10:46:13 GMT; Max-Age=86400; path=/ oaidts=1507891573; expires=Sat, 13-Oct-2018 10:46:13 GMT; Max-Age=31536000; path=/ OAID=caf692943eb3423d744c0a51f54524cc; expires=Sat, 13-Oct-2018 10:46:13 GMT; Max-Age=31536000; path=/
Content-Encoding: gzip
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /pagead/js/r20171011/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 21:56:31 GMT
Expires: Wed, 25 Oct 2017 21:56:31 GMT
Etag: 9566754754863973915
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3648
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 132582
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3648
Md5:    ae83c6831051fa005b0183ed93561065
Sha1:   a456bc8023b55f1972d00f9b8515d7a6ec157109
Sha256: f23a56e02c8a4ba7f9a735326ed5a2cfb12c41524c4d5b3ba9713530d6cb0302
                                        
                                            GET /pagead/js/r20171011/r20110914/client/ext/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 13725795390477713467
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 18257
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 157835
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   18257
Md5:    751c81bce3836dbddb0df120186b7a5a
Sha1:   d5dd4486d68d766e9837721711af0ed67abfad2c
Sha256: 94543bbd9be264bdabac69b62f17cbc25a43d6416aebbd6df402ea285c372d9b
                                        
                                            GET /pagead/js/r20171011/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 8793262466672836579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 13057
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 157835
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13057
Md5:    e494187b2ec57182d9f8d356c3c5be0c
Sha1:   6c5bace75d4b8549db1aa9254fb6a4380e09b83f
Sha256: 05f7d53ad13376c6a6bde1ba2faa0e15e88d7b8b84d412a48bce236cb13c4010
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 10:46:14 GMT
Expires: Tue, 17 Oct 2017 10:46:14 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f99c8fd2106061228e04e44345827db9
Sha1:   3d8a35a963b5d0481e02b6dad5feb9be33471993
Sha256: 57b59a56c619c145d4800ded6e727e32aa7a48e271c8708424527a7576c14f04
                                        
                                            OPTIONS /api/ping HTTP/1.1 
Host: api.viglink.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://windows7canaimaeducativo.blogspot.no
Access-Control-Request-Method: POST

                                         
                                         54.76.241.44
HTTP/1.1 200 OK
                                        
Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
Date: Fri, 13 Oct 2017 10:46:13 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Server: Apache-Coyote/1.1
Set-Cookie: vglnk.Agent.p=e6400f76d0c8e40782e501c27cb5a0e2; Domain=.viglink.com; Expires=Mon, 11-Oct-2027 10:46:14 GMT; Path=/
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pagead/js/r20171011/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 11 Oct 2017 14:55:38 GMT
Expires: Wed, 25 Oct 2017 14:55:38 GMT
Etag: 11176212102450413199
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1218
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 157835
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1218
Md5:    3e1fe1160846d42504041240ac99abe1
Sha1:   02ec6880848b4f1926bf63676be67f24c15be952
Sha256: 14d566db627806fc4353b915bab1ac3c5b2737cede5cd0b4a3a9a673a92ea183
                                        
                                            GET /pagead/images/transparent.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 11:20:49 GMT
Expires: Fri, 13 Oct 2017 11:20:49 GMT
Etag: 2462972746714251406
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 84325
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   67
Md5:    3f318b569cc43578a73d1c38270b6857
Sha1:   244717a495885a727dc67313ebb1ef7b447dfe7d
Sha256: bdf72009ad226c17f1954ba602292902a780b80af07dbcbab1322bdf5c32be66
                                        
                                            GET /activeview?avi=B8b1BcpngWdyIApGYZKO8i6gLAO6JsJ71BQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhig_dicAw&id=osdim&ti=1&uc=0&tgt=nf&cl=0&r=pv&v=r20171011 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=4205735538&adk=3941167828&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564102&bpp=236&fdt=4454&idt=4630&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60&correlator=2734194894438&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=733&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=4661

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 10:46:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:14 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /activeview?avi=BdLUmcZngWbqbJsKbZIPWoOgBAO6JsJ71BQAAEAE4AcgBAsgDyQSgBgLSCAUIgGEQAcITBhig_dicAw&id=osdim&ti=1&uc=0&tgt=nf&cl=0&r=pv&v=r20171011 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 10:46:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:14 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 13-Oct-2017 11:46:14 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 10:46:14 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: NID=114=l0zfE1jWsv0xjag00VL9gzazkp2Y80jp0sMoaDt2TsAlKxHySdXQZj5pNiZKCvIFCdXCIhlc_pcPeNg93LRnYkccF2C34uREJeHQ0JpuS82mmPGKbM-djOE7r1qcBDOp

                                         
                                         172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:14 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /c/generic/5472_80000ClickToPlayVideo-300x250.gif HTTP/1.1 
Host: aff-a.advertica-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://nurno.com/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjGZikZpZpCikAAGjCACGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_47098f3d5bb63c9dbdcfb475795d659c65a4e648102_1507891564.9822_66301&refferer=1290283566_aHR0cHM6Ly93aW5kb3dzN2NhbmFpbWFlZHVjYXRpdm8uYmxvZ3Nwb3Qubm8v&width=300&height=250&randomA=1949462409210&realRef=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

                                         
                                         185.101.140.1
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Oct 2017 10:46:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 20 Jul 2017 12:21:02 GMT
Etag: W/"5970a02e-7bbb"
Expires: Sun, 12 Nov 2017 10:46:14 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   31201
Md5:    eb4b08b65593a806959c08fc919affea
Sha1:   336eab000784b527d0c800f6b7298df4027b8eb6
Sha256: 6b14dc4435889c732a0bc4eb65e0b9fdf4a7b82f53d40124b1a6d0b194895b67
                                        
                                            GET /pagead/gen_204?v=3&s=pagead&action=loadimgad&it=req.4620,bpp.8,fb.5624,e2e.10362&e=828064251&id=csi_pagead&gqid=cZngWc24JcaIZsruhugD&qqid=CPqX-Oq17dYCFcINGQodAysIHQ&rt=ol.4738 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620
Cookie: test_cookie=CheckForPermission; DSID=NO_DATA

                                         
                                         216.58.211.130
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 10:46:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
                                        
                                            GET /bg/CI_hqThbQjBwoUSK10cIsovHByRI4InaU0wolTzGCLU.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=7150303934&adk=1347854052&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564338&bpp=8&fdt=4447&idt=4600&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60%2C276x600&correlator=2734194894438&pv_h_ch=L0001&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=1377&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=3&dtd=4620

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4704
Date: Thu, 12 Oct 2017 19:45:35 GMT
Expires: Fri, 12 Oct 2018 19:45:35 GMT
Last-Modified: Mon, 09 Oct 2017 08:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54039
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4704
Md5:    bc521259e306c64da951051e6fc8156c
Sha1:   acda8864f8692b9869066c9b1fc2c7b1fd032153
Sha256: 88f0bf3f9944812e62992fa118b7bd3874a1a897d18cd601811847e7500fda42
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; DSID=NO_DATA

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 10:46:14 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Fri, 13-Oct-2017 11:46:14 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"
Expires: Fri, 13 Oct 2017 10:46:14 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pagead/gen_204?v=3&s=pagead&action=loadimgad&it=req.4661,bpp.236,fb.6235,e2e.11170&e=828064251&id=csi_pagead&gqid=cpngWaqjAY2IZJPVvPgG&qqid=CNyJkeu17dYCFREMGQodI94CtQ&rt=ol.4935 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0731879187820183&output=html&h=600&slotname=4205735538&adk=3941167828&adf=807048394&w=276&fwrn=4&lmt=1507885093&loeid=38893311&rafmt=1&format=276x600&url=https%3A%2F%2Fwindows7canaimaeducativo.blogspot.no%2F&ea=0&flash=10.0.45&host=ca-host-pub-1556223355139109&h_ch=L0001&fwr=0&resp_fmts=4&wgl=0&dt=1507891564102&bpp=236&fdt=4454&idt=4630&shv=r20171011&cbv=r20170110&saldr=aa&prev_fmts=666x60&correlator=2734194894438&frm=20&ga_vid=1576236141.1507891568&ga_sid=1507891568&ga_hid=778145286&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=807&ady=733&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C828064251%2C20040062&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=4661
Cookie: test_cookie=CheckForPermission; DSID=NO_DATA

                                         
                                         216.58.211.130
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 10:46:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
                                        
                                            GET /static/v1/v-css/368954415-lightbox_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6541
Date: Tue, 29 Aug 2017 14:12:16 GMT
Expires: Wed, 29 Aug 2018 14:12:16 GMT
Last-Modified: Tue, 29 Aug 2017 12:49:37 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 3875639
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6541
Md5:    b4d05072b89cf2574170f64bdcded69e
Sha1:   af18e0787d801da60edb8d94e76c49ada4498e3a
Sha256: 58b89b1c09589455482e037eab33c5f4021df5ad69445dd01785e2a061d1d6b7
                                        
                                            GET /static/v1/jsbin/2529766792-lbx__es.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://windows7canaimaeducativo.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 129562
Date: Tue, 10 Oct 2017 02:21:05 GMT
Expires: Wed, 10 Oct 2018 02:21:05 GMT
Last-Modified: Mon, 09 Oct 2017 21:49:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000