Overview

URL deixandomelhordemim.blogspot.com/2013/06/amor-de-dinda.html
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 15:37:12 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-13 2 dl.dropbox.com/u/103852546/popup/popup.js Malware
2017-10-13 2 dl.dropbox.com/u/103852546/popup/popup.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-10-20 16:56:09 +0200
0 - 0 - 0 photos-ugc.l.googleusercontent.com 172.217.22.161
2017-10-20 13:41:16 +0200
0 - 0 - 2 4shared-link-download.blogspot.com.br/ 172.217.22.161
2017-10-20 13:37:14 +0200
0 - 0 - 2 choosystory.blogspot.ro/ 172.217.22.161
2017-10-20 13:14:48 +0200
0 - 0 - 3 ianmaulanaa.blogspot.com/2011/05/materialisme (...) 172.217.22.161
2017-10-20 13:03:44 +0200
0 - 0 - 3 azamansaidin.blogspot.my/2011/06/kerja-kerja- (...) 172.217.22.161
2017-10-20 13:00:11 +0200
0 - 0 - 1 palettespinturaypoesia.blogspot.com/2010/12/d (...) 172.217.22.161
2017-10-20 12:54:12 +0200
0 - 0 - 1 firstdrug.blogspot.com/2011/07/blog-post_4116.html 172.217.22.161
2017-10-20 12:48:22 +0200
0 - 0 - 3 miielts.blogspot.com/p/reading_9232.html 172.217.22.161
2017-10-20 12:40:21 +0200
0 - 1 - 0 olhomagic.blogspot.com.br/2012/12/o-que-voce- (...) 172.217.22.161
2017-10-20 12:36:32 +0200
0 - 0 - 3 ikaamalia1807.blogspot.com/2015/03/sistem-per (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-10-21 01:20:00 +0200
0 - 0 - 2 aaakemegood24.com/?2233b=140091 146.148.34.125
2017-10-21 01:16:49 +0200
0 - 0 - 2 dammephim.blogspot.kr/search/label/tin%20phim 108.177.14.132
2017-10-21 01:16:56 +0200
0 - 0 - 2 comunicati-stampa-per-il-turismo.blogspot.ie/ (...) 108.177.14.132
2017-10-21 01:16:46 +0200
0 - 0 - 3 cybertrone01.blogspot.com.tr/2013 108.177.14.132
2017-10-21 01:16:39 +0200
0 - 1 - 3 dafatiro.blogspot.com.tr/2013/10 108.177.14.132
2017-10-21 01:16:38 +0200
0 - 0 - 4 cute-funny-pictures.blogspot.ru/search/label/ (...) 108.177.14.132
2017-10-21 01:15:24 +0200
0 - 0 - 1 fulloftipsmama.blogspot.cl/2012/10/emily-old- (...) 108.177.14.132
2017-10-21 01:13:47 +0200
0 - 0 - 2 food-health-book.blogspot.ca/search 108.177.14.132
2017-10-21 01:09:54 +0200
0 - 0 - 4 hot-trend-world-pictures.blogspot.kr/search/l (...) 108.177.14.132
2017-10-21 01:08:21 +0200
0 - 0 - 3 ilmupengetahuankuw.blogspot.kr/2013/03/downlo (...) 108.177.14.132

No other reports on domain: deixandomelhordemim.blogspot.com



JavaScript

Executed Scripts (105)


Executed Evals (90)

#1 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 4196ecd060eea709ff8c69a41368ff80b0da8a73330e5363f25920bbacfdef07

                                        ((function() {
    var a = 3769612739;
    var b = -1275413453;
    return 418861 + '.' + (a + b)
})())
                                    

#2 JavaScript::Eval (size: 1009, repeated: 1) - SHA256: 22b64c0cb54870e87c64f1e5dca1187126c9bcc8b4d60414f95032a24f7e2c2f

                                        ({
    "__ar": 1,
    "__sf": "h0",
    "payload": {
        "bookNowCTASubtype": null,
        "callToActionType": "CONTACT_US",
        "destinationType": "WEBSITE",
        "cctaID": "1220045374694563",
        "pageID": "1115207571845011",
        "pageUrl": "https:\/\/www.facebook.com\/borboleteza\/",
        "pageName": "Borboleteza",
        "iconName": null,
        "redirect": false,
        "confirmDialog": null,
        "surface": "pagePlugin",
        "url": "https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252FBorboleteza.blogspot.com\u00252F&h=ATP4DFJx7gd-Hj47rrG1Bf7Lf6ypMNPMGdCIaQa1fNZTkjH-Q3ojWnjDi8lidzI-qKJXBYd5qW1t5L7V6I3t2do4mOH1PDbmcdG6XSlpP_aX79Yp6r2jle3KSCxOaJnazpWIj8SfV7YTgX4",
        "userID": "0",
        "buttonLabel": "Contact Us",
        "pagesPlatformAppSpec": {
            "is_web_app": false,
            "url": null,
            "food_drink_multiple_provider": null,
            "service_config_id": null
        },
        "openTableSpecs": {
            "restaurantID": 0,
            "startTimestamp": null
        },
        "contactUsSpecs": {
            "userName": "",
            "userEmail": "",
            "phoneEmailPref": "phone_and_email",
            "privacyLink": ""
        },
        "hovercardSpecs": null,
        "tooltipText": null
    },
    "bootloadable": {},
    "ixData": {},
    "gkxData": {},
    "lid": "6476390661174189990"
})
                                    

#3 JavaScript::Eval (size: 19, repeated: 2) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#4 JavaScript::Eval (size: 38, repeated: 2) - SHA256: d8865e7cdf96e062894a735e8402bba0823fbb0b352bc9c1613f88545aaaa269

                                        0,
function(N) {
    N.I && n(N, 0);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 8da56aec94b129494511119d3cbb605eafe4a7d359236a830caeaf19bf69f61c

                                        0,
function(N) {
    N.W(0);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 2) - SHA256: d705dea63c00804bcdeb81d19215819acdc53502903b55f21e68449af96c2d8e

                                        0,
function(N) {
    N.W(3);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 2) - SHA256: ca496dbc6c0006cb7b8c37fdc5672176e460285e94ffd1e0bdf77f7ab5954522

                                        0,
function(N) {
    N.W(4);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 2) - SHA256: 258a028610b482f8134b5aa34196a8715994606d377b312c7ce4e882efe93916

                                        0,
function(N) {
    N.W(7);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 2) - SHA256: e262737bfa16ff0579e48d601746116f28c6e97e989f91e097c80cdd2b9c6ac0

                                        0,
function(N) {
    O(N, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 64ea34ce9b9037661425ec0068f214aaa3660f2e4ed005536318bab1edeefab6

                                        0,
function(N) {
    O(N, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 0889a733d90052e6677dac5e37f323b10a4254909b55dc3101996027e184f909

                                        0,
function(N) {
    O(N, 4);
}
                                    

#12 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 2f3ad8d6d8f52b69aa7c17aee03da970ff00cdc81823d3bb752f01b47447b9ee

                                        0,
function(N) {
    Y(N, 1);
}
                                    

#13 JavaScript::Eval (size: 31, repeated: 2) - SHA256: ed48435effecf90966c76ede3973f1514cd2939e02f9c98af2155b498d80e37f

                                        0,
function(N) {
    Y(N, 2);
}
                                    

#14 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 7b76f1bc3797b595c426e228d9ad6c3ae76a0fa4c668c457b5ef4b674d23d26f

                                        0,
function(N) {
    Y(N, 4);
}
                                    

#15 JavaScript::Eval (size: 187, repeated: 2) - SHA256: 58062062880dc4a405aa2befc3d160abfb914dd1bb245ff4775aceecc8ad831a

                                        0,
function(N, S) {
    ((S.push(N[0] << 24 | N[1] << 16 | N[2] << 8 | N[3]), S).push(N[4] << 24 | N[5] << 16 | N[6] << 8 | N[7]), S).push(N[8] << 24 | N[9] << 16 | N[10] << 8 | N[11]);
}
                                    

#16 JavaScript::Eval (size: 96, repeated: 2) - SHA256: bd6289e484900a6a3d62e57ecd0e5bc1f530237262ef7e41129057845e8c7824

                                        0,
function(N, S) {
    (N = (S = g(N), N.Y(S)), N[0]).removeEventListener(N[1], N[2], false);
}
                                    

#17 JavaScript::Eval (size: 83, repeated: 2) - SHA256: ccfe2b2634426a82d9d901b59df9906b66c5271ca6147857265bac9fdb849645

                                        0,
function(N, S) {
    M(N, 1, 5) || (S = y(N), E(N, S.o, S.f.apply(S.F, S.T)));
}
                                    

#18 JavaScript::Eval (size: 49, repeated: 2) - SHA256: e0b3b3535abafa809817d78d6802f616c40c0af73ead3dd18a39ae643c32b328

                                        0,
function(N, S) {
    S = N.Y(g(N)), f(N, S);
}
                                    

#19 JavaScript::Eval (size: 125, repeated: 2) - SHA256: 866ef6641de152397e72b2952fdb5853fae4ab20ffbec812280e5abf59a1b5c0

                                        0,
function(N, S) {
    if (void 0 === (S = this.D[N], S)) {
        throw I(this, 30, 0, N), this.h;
    }
    return S();
}
                                    

#20 JavaScript::Eval (size: 78, repeated: 2) - SHA256: fb6357e1d93637e5be85466aeb613b581b2bb291b4b20301dbd7489ea78d831b

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) % N.Y(S));
}
                                    

#21 JavaScript::Eval (size: 78, repeated: 2) - SHA256: 0c17fea695fa875425561e5f9886a8ae1f519cb745f8ce57cb91f6785dc9afca

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) * N.Y(S));
}
                                    

#22 JavaScript::Eval (size: 78, repeated: 2) - SHA256: de1a36abcdef994cd6cbc0ea19c1387a0740f7451d6ec1193a0232e7be7ea29c

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) + N.Y(S));
}
                                    

#23 JavaScript::Eval (size: 78, repeated: 2) - SHA256: 23fe0dd0d2e930a6eb80a7b65957cbfa8e1b22b990f9d665cf696da542e58ad5

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), E)(N, h, N.Y(h) - N.Y(S));
}
                                    

#24 JavaScript::Eval (size: 79, repeated: 2) - SHA256: 68f172c1689f0cbcca3bff2b1cc626bbc18f48069cad96c10a266084d30e7f3c

                                        0,
function(N, S, h) {
    (h = (S = g(N), g(N)), S = N.Y(S), E)(N, h, l(S));
}
                                    

#25 JavaScript::Eval (size: 86, repeated: 2) - SHA256: 0d3f169de6b18bf2168d3addd5695169d46da59df8a22e305c8b8e2959e85b79

                                        0,
function(N, S, h) {
    0 != (h = (S = g(N), g(N)), N.Y(S)) && E(N, 118, N.Y(h));
}
                                    

#26 JavaScript::Eval (size: 121, repeated: 2) - SHA256: 1d9cb755a437ddbc74397a0b18340c51276d6e02718c7387530df4a064f952da

                                        0,
function(N, S, h) {
    M(N, 1, 5) ||
        (S = g(N), h = g(N), E(N, h, function(N) {
            return eval(N);
        }(N.Y(S))));
}
                                    

#27 JavaScript::Eval (size: 86, repeated: 2) - SHA256: b20c58d152801d7c78d4761f7bcc22c6faf5348be598986d1a013f921c3a0dcc

                                        0,
function(N, S, h) {
    S = (h = (S = g(N), g(N)), N).D[S] && N.Y(S), E(N, h, S);
}
                                    

#28 JavaScript::Eval (size: 70, repeated: 2) - SHA256: 7c953af2c92884638579fed343e060adb66bf2de66c2a613eb49f7211964710d

                                        0,
function(N, S, h) {
    S = g(N), h = g(N), E(N, h, "" + N.Y(S));
}
                                    

#29 JavaScript::Eval (size: 244, repeated: 2) - SHA256: 4db5e87085ed6a5fc6f01256b6741fae442ebac59444bfd17c77de5da9612d6b

                                        0,
function(N, S, h) {
    if (3 == N.length) {
        for (h = 0; 3 > h; h++) {
            S[h] += N[h];
        }
        for (N = [13, 8, 13, 12, (h = 0, 16), 5, 3, 10, 15]; 9 > h; h++) {
            S[3](S, h % 3, N[h]);
        }
    }
}
                                    

#30 JavaScript::Eval (size: 133, repeated: 2) - SHA256: b8d5e97b507ab98d81624974487d6f20c31a1e624f444f0391150983ae2f3eb1

                                        0,
function(N, S, h) {
    return h = function() {
        return N;
    }, S = function() {
        return h();
    }, S[this.C] = function(q) {
        N = q;
    }, S;
}
                                    

#31 JavaScript::Eval (size: 292, repeated: 2) - SHA256: 8a465713df9233962fbea99d7b35a4bc236ad9a6f7ef114242bd69e098ae63d4

                                        0,
function(N, S, h, w, k, u, c) {
    if ((S = g(N), h = J(N), w = "", N).D[152]) {
        for (k = N.Y(152), c = k.length, u = 0; h--;) {
            u = (u + J(N)) % c, w += z[k[u]];
        }
    } else {
        for (; h--;) {
            w += z[g(N)];
        }
    }
    E(N, S, w);
}
                                    

#32 JavaScript::Eval (size: 214, repeated: 2) - SHA256: 45bc1def5386fc7181d2f76b88c052e55cc2c788152961d6a972f2299e0bf108

                                        0,
function(N, S, h, z) {
    (((z = (h = (N &= (S = N & 4, 3), g)(this), g(this)), h = this.Y(h), S) &&
            (h = C(("" + h).replace(/\r\n/g, "\n"))), N) &&
        G(this, z, X(h.length, 2)), G)(this, z, h);
}
                                    

#33 JavaScript::Eval (size: 103, repeated: 2) - SHA256: 1044b4064bd4baf34825c4c447e69f701f37a0415661a30023d262ad8804f9e3

                                        0,
function(N, S, h, z) {
    (S = (h = (S = g(N), g)(N), z = g(N), N.Y(S)) == N.Y(h), E)(N, z, +S);
}
                                    

#34 JavaScript::Eval (size: 102, repeated: 2) - SHA256: b4620669c321d4e0a7483ad23662bf639a3b7cae1fc94cb321f23bc0649df381

                                        0,
function(N, S, h, z) {
    (S = (h = (S = g(N), g)(N), z = g(N), N.Y(S)) > N.Y(h), E)(N, z, +S);
}
                                    

#35 JavaScript::Eval (size: 89, repeated: 2) - SHA256: 4f75300bb4ec430dbf366a00cbf45d8493830c83cb5cc1491ce046228c322549

                                        0,
function(N, S, h, z) {
    (S = g(N), h = g(N), z = g(N), E)(N, z, N.Y(S) | N.Y(h));
}
                                    

#36 JavaScript::Eval (size: 90, repeated: 2) - SHA256: 2b178759ca0c02871dad5cbedcca3aaf1f74bb2154f4e64051627ed23d0d3505

                                        0,
function(N, S, h, z) {
    (S = g(N), h = g(N), z = g(N), E)(N, z, N.Y(S) || N.Y(h));
}
                                    

#37 JavaScript::Eval (size: 108, repeated: 2) - SHA256: 2a8a7ceae4a67a0b1239bba7849f4d63bc30d6edc2aff7d508116567b25aac0a

                                        0,
function(N, S, h, z) {
    (h = (z = (h = (S = g(N), g(N)), g(N)), N.Y(h)), S = N.Y(S), E)(N, z, S[h]);
}
                                    

#38 JavaScript::Eval (size: 89, repeated: 2) - SHA256: 3c8d937f4dc252c0fa75c218d201c9e5c6ac0724f3875bc7da8365d299cee219

                                        0,
function(N, S, h, z) {
    (z = (h = (S = g(N), g)(N), g(N)), E)(N, z, N.Y(S) << h);
}
                                    

#39 JavaScript::Eval (size: 89, repeated: 2) - SHA256: 6e1955d9ce190bb94138ed022893969493fa794877facaa7ad18f7c9dbc39740

                                        0,
function(N, S, h, z) {
    (z = (h = (S = g(N), g)(N), g(N)), E)(N, z, N.Y(S) >> h);
}
                                    

#40 JavaScript::Eval (size: 92, repeated: 2) - SHA256: 7f949c59d0ed291e7d4a6f10ebf7f899b38ac1e9e1c9a946385720a7de14b4e0

                                        0,
function(N, S, h, z) {
    (z = (h = (S = g(N), g)(N), g(N)), N).Y(S)[N.Y(h)] = N.Y(z);
}
                                    

#41 JavaScript::Eval (size: 142, repeated: 2) - SHA256: a1210e54732b29d98ec225ac59c5235f4ba70cc589ea2400ac51b31836e57223

                                        0,
function(N, S, h, z) {
    for (; h--;) {
        118 != h && 92 != h && S.D[h] && (S.D[h] = S[z](S[N](h), this));
    }
    S[N] = this;
}
                                    

#42 JavaScript::Eval (size: 243, repeated: 2) - SHA256: d7d68a16d81935c46e23d4cb97cd41e231f9ced8f9a2c3d2c339ae420730ca7c

                                        0,
function(N, S, h, z) {
    if ((S = N.J.pop())) {
        for (h = g(N); 0 < h; h--) {
            z = g(N), S[z] = N.D[z];
        }
        S[S[246] = N.D[246], 108] = N.D[108], N.D = S;
    } else {
        E(N, 118, N.g.length);
    }
}
                                    

#43 JavaScript::Eval (size: 170, repeated: 2) - SHA256: 7fd64224abb6cd92d73abf700e5cbce5e4938290e845991ca4c9a4ce8fa26bce

                                        0,
function(N, S, h, z) {
    try {
        z = N[(S + 2) % 3], N[S] = N[S] - N[(S + 1) % 3] - z ^ (1 == S ? z << h : z >>> h);
    } catch (w) {
        throw w;
    }
}
                                    

#44 JavaScript::Eval (size: 96, repeated: 2) - SHA256: 935aa90223cef086c6918da76f1125ae2c01e6aa62d31b67eef09e815ca48cff

                                        0,
function(N, S, h, z) {
    z = (S = g(N), h = g(N), g)(N), E(N, z, (N.Y(S) in N.Y(h)) + 0);
}
                                    

#45 JavaScript::Eval (size: 220, repeated: 2) - SHA256: 22dd9bb231ad1a1cad77e302b6b56b0e5477fdc01ed6d19b48ba528ce00364c1

                                        0,
function(N, S, h, z, w) {
    (z = (w = (S = (S = g(N), h = g(N), z = g(N), N.Y(S)), N.Y(g(N))), h = N.Y(h), N.Y(z)), 0 !== S) &&
    (z = L(N, z, w, 1, S, h), S.addEventListener(h, z, x), E(N, 235, [S, h, z]));
}
                                    

#46 JavaScript::Eval (size: 242, repeated: 2) - SHA256: 9605a5d40e4ce193f238bccded9cb89a6c20096af9eda73f5c2c5e6cca01b253

                                        0,
function(N, S, h, z, w) {
    for (z = (h = g((S = [], N)), 0); z < h; z++) {
        w = g(N), S.push(N.Y(w));
    }
    (h = g(N), E)(N, h, function(N, h) {
        N.b++;
        try {
            for (h = 0; h < S.length; h++) {
                (0, S[h])(N);
            }
        } finally {
            N.b--;
        }
    });
}
                                    

#47 JavaScript::Eval (size: 138, repeated: 2) - SHA256: 9afb735ab8f875ae8d4a5f2daae3adb1074860c1d51cc3108895a2c66fd7e854

                                        0,
function(N, S, h, z, w) {
    for (z = (w = (h = (S = g(N), J(N)), 0), []); w < h; w++) {
        z.push(g(N));
    }
    E(N, S, z);
}
                                    

#48 JavaScript::Eval (size: 126, repeated: 2) - SHA256: c704a67877b4dc670e63eabc43f3dfc4d5ee4e1fd7fa95ce90def935ac608cc6

                                        0,
function(N, S, h, z, w) {
    w = (z = (h = (S = g(N), g(N)), N).Y(g(N)), N).Y(g(N)), h = N.Y(h), E(N, S, L(N, h, z, w));
}
                                    

#49 JavaScript::Eval (size: 405, repeated: 2) - SHA256: fd6dd425ccea1a87c7c78af367b1421ddaacb2e42c480c27b0a1835f828a6ed7

                                        0,
function(N, S, h, z, w, u) {
    if (!M(N, 1, 255)) {
        if ("object" == (N = (z = (h = (S = (w = (z = (h = (S = g(N), g(N)), g)(N), g)(N), N).Y(S), N.Y(h)), N).Y(z), N).Y(w), l)(S)) {
            for (u in w = [], S) {
                w.push(u);
            }
            S = w;
        }
        for (u = (w = 0, S.length); w < u; w += z) {
            h(S.slice(w, w + z), N);
        }
    }
}
                                    

#50 JavaScript::Eval (size: 220, repeated: 2) - SHA256: 92add830e9909d9df06b406770fe2a6bb58c2796d39444c2c7355be013ed4a08

                                        0,
function(N, S, h, z, w, u) {
    return N = ((u = (h = (z = (w = function() {
        return z();
    }, function() {
        return z[h.V + (w[h.i] === S) - !u[h.i]];
    }), this), h.O), w[h.C] = function(N) {
        z[h.A] = N;
    }, w)[h.C](N), w);
}
                                    

#51 JavaScript::Eval (size: 339, repeated: 2) - SHA256: e224d787c12f546994ba00a091cfd8331434e59a6e74f28dffb8f7df2e217d7a

                                        0,
function(N, S, h, z, w, u, c) {
    M(N, 1, 5) ||
        (S = y(N), w = S.f, z = S.F, h = S.T, c = h.length, 0 == c ? (u = new(z[w])) : 1 == c ? (u = new(z[w])(h[0])) : 2 == c ? (u = new(z[w])(h[0], h[1])) : 3 == c ? (u = new(z[w])(h[0], h[1], h[2])) : 4 == c ? (u = new(z[w])(h[0], h[1], h[2], h[3])) : I(N, 22), E(N, S.o, u));
}
                                    

#52 JavaScript::Eval (size: 39, repeated: 2) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#54 JavaScript::Eval (size: 485, repeated: 2) - SHA256: d2f59596a19a7d054ee79567b809b68f5b8a7845e9592e215726e2d8b9db6bf0

                                        C = function(N, S, h, z, w) {
    for (S = [], z = h = 0; z < N.length; z++) {
        w = N.charCodeAt(z), 128 > w ? (S[h++] = w) : (2048 > w ? (S[h++] = w >> 6 | 192) : (55296 == (w & 64512) &&
            z + 1 < N.length && 56320 == (N.charCodeAt(z + 1) & 64512) ? (w = 65536 + ((w & 1023) << 10) + (N.charCodeAt(++z) & 1023), S[h++] = w >> 18 | 240, S[h++] = w >> 12 & 63 | 128) : (S[h++] = w >> 12 | 224), S[h++] = w >> 6 & 63 | 128), S[h++] = w & 63 | 128);
    }
    return S;
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 3f39d5c348e5b79d06e842c114e6cc571583bbf44e4b0ebfda1a01ec05745d43

                                        D
                                    

#56 JavaScript::Eval (size: 603, repeated: 2) - SHA256: 00fef79c6050452c97025123f0dd2247b88e8cd5db6aa46537e1295248c1f53b

                                        D = function(N, S, h, z, w, q, A) {
    N.b++;
    try {
        for (h = (q = (w = (z = 5001, void 0), 0), N.g.length);
            (--z || N.M) && (q = N.Y(118)) < h;) {
            try {
                E(N, 92, q), A = g(N), (w = N.Y(A)) && w.call ? w(N) : I(N, 21, 0, A), N.j = true, M(N, 0, 2);
            } catch (T) {
                T != N.h && (N.Y(171) ? I(N, 22, T) : E(N, 171, T));
            }
        }
        z || I(N, 33);
    } catch (T) {
        try {
            I(N, 22, T);
        } catch (Z) {
            K(N, Z);
        }
    }
    return (h = N.Y(104), S) && E(N, 118, S), N.b--, h;
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 2) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#58 JavaScript::Eval (size: 325, repeated: 2) - SHA256: 948c0d7b025cd87ed8553ea4b43a2cd04d49839b3638cf8dda494a1e2ca06c77

                                        E = function(N, S, h) {
    if (118 == S || 92 == S) {
        if (N.D[S]) {
            N.D[S][N.C](h);
        } else {
            N.D[S] = N.P(h);
        }
    } else if (190 != S && 11 != S && 45 != S && 246 != S || !N.D[S]) {
        N.D[S] = N.H(h, N.Y);
    }
    10 == S && (N.c = void 0, E(N, 118, N.Y(118) + 4));
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#60 JavaScript::Eval (size: 413, repeated: 2) - SHA256: 179ea18df698fb2b5c98429d89bf3cd83efb5a001f6f02c6343dc074748e3624

                                        G = function(N, S, h, z, w, q) {
    for (N = (z = ((11 == (w = N.Y(S), S) ? (S = function(N, S, h, z) {
                if ((h = (S = w.length, S - 4 >> 3), w).K != h) {
                    h = (h << (z = [0, 0, 0, q], w.K = h, 3)) - 4;
                    try {
                        w.L = v(R(w, h), R(w, h + 4), z);
                    } catch (u) {
                        throw u;
                    }
                }
                w.push(w.L[S & 7] ^ N);
            }, q = N.Y(73)) : (S = function(N) {
                w.push(N);
            }), z) &&
            S(z & 255), 0), h).length; z < N; z++) {
        S(h[z]);
    }
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 2) - SHA256: a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c

                                        I
                                    

#62 JavaScript::Eval (size: 441, repeated: 2) - SHA256: 60f5d814185902aa143025db9d91cb7cd18e23d3d055c6bbfefd30bfc4c91728

                                        I = function(N, S, h, z, w) {
    3 < (h = ((((S = (w = N.Y(92), [S, w >> 8 & 255, w & 255]), void 0) != z &&
                    S.push(z), 0 == N.Y(246).length) &&
                (N.D[246] = void 0, E(N, 246, S)), z = "", h) &&
            (h.message && (z += h.message), h.stack && (z += ":" + h.stack)), N.Y(108)), h) &&
        (z = z.slice(0, h - 3), h -= z.length + 3, z = C(z.replace(/\r\n/g, "\n")), G(N, 11, X(z.length, 2).concat(z), 12)), E(N, 108, h);
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

                                        J
                                    

#64 JavaScript::Eval (size: 85, repeated: 2) - SHA256: 1657d6bb6644193ced8c3309fade21f02a86447bd280edce72c71aa74a0d3372

                                        J = function(N, S) {
    return (S = g(N), S) & 128 && (S = S & 127 | g(N) << 7), S;
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa

                                        L
                                    

#66 JavaScript::Eval (size: 272, repeated: 2) - SHA256: e61e6d33dfdde0a24873b2c97152c41cc9bcadbe579b007d738acd937e5f3be6

                                        L = function(N, S, h, z, w, q) {
    return function() {
        var A = z & 1,
            T = [6, S, h, void 0, w, q, arguments];
        if (z & 2) {
            var Z = (d(N, T), V)(N, true, false, false);
        } else {
            A && N.R.length ? d(N, T) : A ? (d(N, T), V(N, true, false, false)) : (Z = Q(N, T));
        }
        return Z;
    };
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 2) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#68 JavaScript::Eval (size: 78, repeated: 2) - SHA256: 1856d749a0401a6daf21913e195fb7f785f40efa819ddbf36f659ed21e976f87

                                        O = function(N, S, h, z) {
    (z = (h = g(N), g(N)), G)(N, z, X(N.Y(h), S));
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac

                                        R
                                    

#70 JavaScript::Eval (size: 88, repeated: 2) - SHA256: 5a00a7445dbf775544dafd1871b6c79d337c8106fae32b9ccacb6578b4438a2d

                                        R = function(N, S) {
    return N[S] << 24 | N[S + 1] << 16 | N[S + 2] << 8 | N[S + 3];
}
                                    

#71 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#72 JavaScript::Eval (size: 118, repeated: 2) - SHA256: a2b6ef9d55cab74e7def9f57718b0f50a6baa68b0391f31eab7d8d191baa5c61

                                        Y = function(N, S, h, z) {
    for (z = (h = g(N), 0); 0 < S; S--) {
        z = z << 8 | g(N);
    }
    E(N, h, z);
}
                                    

#73 JavaScript::Eval (size: 5960, repeated: 1) - SHA256: 230c2cc3932cec9649845d03ee993555b65a948893daa9732c63dd74529655e1

                                        ["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"]
                                    

#74 JavaScript::Eval (size: 6012, repeated: 1) - SHA256: 736105d148d7025b9b215a4adc97b54290ba6901d7df954450fde273df4a125a

                                        ["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"]
                                    

#75 JavaScript::Eval (size: 2, repeated: 28) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#76 JavaScript::Eval (size: 35, repeated: 2) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#77 JavaScript::Eval (size: 35, repeated: 2) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#78 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#79 JavaScript::Eval (size: 83, repeated: 2) - SHA256: a842dfd17f55363858c13880e44d156189ec1cc58919f44e14669f413d24e6ab

                                        f = function(N, S) {
    (N.J.push(N.D.slice()), N.D[118] = void 0, E)(N, 118, S);
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 2) - SHA256: cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29

                                        g
                                    

#81 JavaScript::Eval (size: 291, repeated: 2) - SHA256: a79d3f0a306497e0058afbd2fd7d4f4cfb0f1b02f57fc7eb5cdcac819fe16b20

                                        g = function(N, S, h) {
    if (!(S = N.Y(118), S in N.g)) {
        throw I(N, 31), N.h;
    }
    return ((void 0 == N.c && (N.c = R(N.g, S - 4), N.s = void 0), N).s != S >> 3 &&
        (N.s = S >> 3, h = [0, 0, 0, N.Y(10)], N.l = v(N.c, N.s, h)), E(N, 118, S + 1), N.g)[S] ^ N.l[S % 8];
}
                                    

#82 JavaScript::Eval (size: 9, repeated: 1) - SHA256: ebf49dcd836f810084c14e0f2dab4dc1768bbdc5980481bf201fcf76771dff7a

                                        navigator
                                    

#83 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#84 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#85 JavaScript::Eval (size: 133, repeated: 2) - SHA256: 0cdccae6cbcac8ced4ae997ee4c805e527a25228d1e13afd3be276c8c8f51efc

                                        r = function(N, S, h) {
    return (h = N.Y(118), N.g && h < N.g.length ? (E(N, 118, N.g.length), f(N, S)) : E(N, 118, S), D)(N, h);
}
                                    

#86 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080

                                        v
                                    

#87 JavaScript::Eval (size: 366, repeated: 2) - SHA256: ab9ee7388c643e1a664dabd064a8041df5be2bcba0aa9c1472b7acc2d128fe6f

                                        v = function(N, S, h, z) {
    try {
        for (z = 0; 79669387488 != z;) {
            N += (S << 4 ^ S >>> 5) + S ^ z + h[z & 3], z += 2489668359, S += (N << 4 ^ N >>> 5) + N ^ z + h[z >>> 11 & 3];
        }
        return [N >>> 24, N >> 16 & 255, N >> 8 & 255, N & 255, S >>> 24, S >> 16 & 255, S >> 8 & 255, S & 255];
    } catch (w) {
        throw w;
    }
}
                                    

#88 JavaScript::Eval (size: 9968, repeated: 1) - SHA256: 2d291e7694d0166261e2aeec9c5a866e62fe26f55b444512c0242f0930870166

                                        var ct_SuLoaded = 1;
var ct_SuUrl = 'http://' + 'ads.egrana' + '.com.br' + '/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137';
var ct_nSuUrl = 'http://' + 'ads.egrana' + '.com.br' + '/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137';
var evaI = eval;
var ct_siteunder = true;
var ct_tag = 1;
(function() {
    var f = navigator.userAgent.toLowerCase().indexOf("firefox");
    var g = navigator.userAgent.toLowerCase().indexOf("msie");
    var h = navigator.userAgent.toLowerCase().indexOf("chrome");
    var i = navigator.userAgent.toLowerCase().indexOf("safari");
    if (h != -1) {
        var j = parseFloat(navigator.userAgent.toLowerCase().substring(h + 7))
    }
    if (i != -1) {
        var k = parseFloat(navigator.userAgent.toLowerCase().substring(i + 7))
    }
    var l = true;
    var m = null;
    var n = null;

    function ct_addListener(a, b, c) {
        if (a) {
            if (a.addEventListener) {
                a.addEventListener(b, c, false);
                return true
            } else if (this.attachEvent) {
                a.attachEvent("on" + b, c);
                return true
            }
        }
        return false
    }

    function ct_removeListener(a, b, c) {
        if (a) {
            if (a.removeEventListener) {
                a.removeEventListener(b, c, false);
                return true
            } else if (this.detachEvent) {
                a.attachEvent("on" + b, c);
                return true
            }
        }
        return false
    }

    function ct_setFocus() {
        l = true
    }

    function ct_setBlur() {
        l = false
    }

    function ct_modal() {
        window.showModalDialog("javascript:window.close()", null, "dialogtop:971009;dialogleft:997115104;dialogWidth:1;dialogHeight:1")
    }

    function ct_showPopupWindow() {
        if (o) return;
        o = true;
        var b = navigator.userAgent.toLowerCase().indexOf("opera");
        if (f != -1) var c = navigator.userAgent.toLowerCase().charAt(f + 8);
        if (c >= 1 && navigator.userAgent.toLowerCase().charAt(f + 9) >= 0) c = 10;
        if (f != -1 && c > 3) {
            ct_pop = window.open("http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137", "adc", "toolbar=1,location=1,directories=1,status=1,scrollbars=1,resizable=1,copyhistory=1,menubar=1,width=" + r + ",height=" + s)
        } else if (h != -1) {
            ct_pop = window.open("http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137", "_blank", "toolbar=1,location=1,directories=1,status=1,scrollbars=1,resizable=1,copyhistory=1,menubar=0,width=" + (r - 10) + ",height=" + (s - 50))
        } else if (i != -1) {
            ct_pop = window.open("http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137", "_blank", "toolbar=1,location=1,directories=1,status=1,scrollbars=1,resizable=1,copyhistory=1,menubar=0,width=" + (r - 10) + ",height=" + (s - 50))
        } else if (b != -1) {
            ct_pop = window.open("http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137", "_blank", "width=350,height=350");
            ct_pop.resizeTo(screen.availWidth - 50, screen.availHeight - 50);
            ct_pop.moveTo(0, 0)
        } else if (g != -1) {
            ct_pop = window.open("http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137", "_blank", "toolbar=0,location=1,directories=1,status=1,scrollbars=1,resizable=1,copyhistory=1,menubar=1,width=" + r + ",height=" + s + ",top=0,left=0");
            ct_pop.blur();
            setTimeout(function() {
                ct_pop.blur();
                window.focus()
            }, 100);
            setTimeout(function() {
                ct_pop.blur();
                window.focus()
            }, 100)
        } else if (f) {
            ct_pop = window.open(ct_nSuUrl, "_blank", "toolbar=1,location=1,directories=1,status=1,scrollbars=1,resizable=1,copyhistory=1,menubar=1,width=" + r + ",height=" + s + ",top=0,left=0")
        }
        if (ct_siteunder) {
            if (g != -1) {
                if (ct_pop.blur) ct_pop.blur();
                ct_pop.opener.window.focus()
            }
            if (h != -1) {
                window.blur()
            } else if (ct_pop.blur) {
                ct_pop.blur()
            }
            if ((h != -1 || g != -1 || b != -1) && window.focus) {
                window.focus();
                setTimeout(function() {
                    window.focus()
                }, 100);
                setTimeout(function() {
                    window.focus()
                }, 150);
                setTimeout(function() {
                    window.focus()
                }, 250);
                setTimeout(function() {
                    window.focus()
                }, 350);
                setTimeout(function() {
                    window.focus()
                }, 750);
                setTimeout(function() {
                    window.focus()
                }, 850);
                setTimeout(function() {
                    window.focus()
                }, 1850)
            }
            if (f != -1 && c > 3) {
                var d = false;
                var p = window.open("http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137");
                p.focus();
                p.close();
                d = true;
                setTimeout(function() {
                    if (a && !l) {
                        var a = false;
                        var p = window.open("http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137");
                        p.focus();
                        p.close();
                        a = true
                    }
                }, 150);
                setTimeout(function() {
                    if (d && !l) ct_modal()
                }, 250);
                setTimeout(function() {
                    if (d && !l) ct_modal()
                }, 350);
                setTimeout(function() {
                    if (d && !l) ct_modal()
                }, 950)
            }
        }
        if (ct_pop) {
            ct_pop.location = ct_nSuUrl
        }
    }

    function ct_hookLinkTags(a, b) {
        if (document.all) {
            var c = document.all.tags("A");
            for (var d = 0; d < c.length; d++) {
                ct_addListener(c(d), "click", function() {
                    ct_showPopupWindow()
                })
            }
            var c = document.all.tags("IFRAME");
            for (var d = 0; d < c.length; d++) {
                ct_addListener(c(d), "click", function() {
                    ct_showPopupWindow()
                })
            }
        } else if (document.getElementsByTagName) {
            var c = document.getElementsByTagName("A");
            for (var d = 0; d < c.length; d++) {
                ct_addListener(c[d], "click", function() {
                    ct_showPopupWindow()
                })
            }
            var c = document.getElementsByTagName("IFRAME");
            for (var d = 0; d < c.length; d++) {
                ct_addListener(c[d], "click", function() {
                    ct_showPopupWindow()
                })
            }
        }
    }

    function ct_removeDocumentEvent() {
        ct_removeListener(document, "mousedown", ct_showPopupWindow2)
    }

    function ct_showPopupWindow2(e) {
        if (e.button != 0) return 141144143141163150;
        m = document.createElement('iframe');
        m.className = "norecord";
        m.id = "frame6164637368";
        m.frameborder = "0";
        m.src = "about:blank";
        m.style.width = "25px";
        m.style.height = "25px";
        m.style.display = "hidden";
        m.style.backgroundColor = "transparent";
        m.style.opacity = 0;
        m.style.cursor = "pointer";
        m.style.position = "absolute";
        m.style.zIndex = 999;
        m.style.top = (e.pageY - 15) + "px";
        m.style.left = (e.pageX - 15) + "px";

        function iframe_mouseup(e) {
            ct_showPopupWindow();
            if (o) {
                if (i != -1 && h == -1 && navigator.userAgent.toLowerCase().indexOf("mobile") != -1) {} else {
                    w2 = top.window.open('http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137')
                }
                if (w2) {
                    w2.close();
                    ct_removeDocumentEvent();
                    ct_removeListener(m.contentDocument, "mouseup", iframe_mouseup)
                }
            }
            window.setTimeout(function() {
                window.hoverElem.click();
                ct_removeListener(m, "load", iframe_load);
                m.parentNode.removeChild(m)
            }, 79)
        }

        function iframe_load(e) {
            ct_addListener(m.contentDocument, "mouseup", iframe_mouseup)
        };
        ct_addListener(m, "load", iframe_load);
        document.body.appendChild(m)
    }

    function ct_showPopupWindow3(e) {
        m = document.createElement('iframe');
        m.id = "frame6164637368";
        m.src = "about:blank";
        m.style.display = "none";
        n = document.createElement('form');
        n.id = "form141144143141163150";
        n.style.display = "none";
        ct_klq = document.createElement('input');
        ct_klq.type = "submit";
        n.appendChild(ct_klq);
        document.body.appendChild(m);
        m.contentDocument.body.appendChild(n);

        function iframe_mouseup2(e) {
            if (i != -1 && h == -1 && navigator.userAgent.toLowerCase().indexOf("mobile") != -1) {} else {
                n.submit()
            }
            ct_showPopupWindow();
            if (o) {
                if (i != -1 && h == -1 && navigator.userAgent.toLowerCase().indexOf("mobile") != -1) {} else {
                    w2 = top.window.open('http://ads.egrana.com.br/exibe_anuncio.php?id=29462&t=popup&view=1&ta=1507902137')
                }
                if (w2) {
                    w2.close();
                    ct_removeListener(document, "mouseup", iframe_mouseup2);
                    m.parentNode.removeChild(m);
                    n.parentNode.removeChild(n)
                }
            }
        }
        ct_addListener(document, "mouseup", iframe_mouseup2)
    }

    function body_check(a) {
        if (document.body) {
            if (t) clearInterval(t);
            a()
        } else if (!t) {
            t = setInterval(function() {
                body_check(a)
            }, 50)
        }
    }
    var o = false;
    var q = false;
    var r = 1024;
    var s = 768;
    var t;
    var u = true;
    if (screen.availWidth) {
        r = screen.availWidth;
        s = screen.availHeight
    }
    if (f != -1) {
        window.focus();
        ct_addListener(document, "click", function() {
            ct_showPopupWindow()
        });
        ct_addListener(document, "focus", function() {
            ct_setFocus()
        });
        ct_addListener(document, "blur", function() {
            ct_setBlur()
        })
    } else if (h != -1) {
        if (j >= 31 || (j >= 30 && navigator.userAgent.toLowerCase().indexOf("windows") == -1)) {
            ct_addListener(document, "mousedown", function(e) {
                if (e.button == 0 && !q && !u) {
                    ct_showPopupWindow();
                    q = true
                } else if (e.button == 0 && !q && u) {
                    m = document.createElement('a');
                    m.id = "a616463736899";
                    m.href = ct_nSuUrl;
                    document.body.appendChild(m);
                    var e = document.createEvent("MouseEvents");
                    e.initMouseEvent("click", true, true, window, 0, 0, 0, 0, 0, true, false, false, true, 0, null);
                    m.dispatchEvent(e);
                    m.parentNode.removeChild(m);
                    q = true
                }
            })
        } else if (j >= 30 && navigator.userAgent.toLowerCase().indexOf("windows") >= 0) {
            ct_addListener(document, "click", function(e) {
                if (e.button == 0 && !q) {
                    document.documentElement.webkitRequestFullscreen(Element.ALLOW_KEYBOARD_INPUT);
                    ct_showPopupWindow();
                    document.webkitCancelFullScreen();
                    q = true
                }
            })
        } else if (j >= 25) {
            ct_addListener(document, "mousedown", function(e) {
                if (e.button == 0) ct_showPopupWindow()
            });
            ct_addListener(document, "mouseup", function(e) {
                if (e.button == 0) {
                    if (!q) {
                        m = document.createElement('a');
                        m.id = "a6164637368";
                        m.href = 'data:text/html;charset=utf-8,' + encodeURI('<scr' + 'ipt>window.close()</scr' + 'ipt>');
                        document.body.appendChild(m);
                        var e = document.createEvent("MouseEvents");
                        e.initMouseEvent("click", true, true, window, 0, 0, 0, 0, 0, true, false, false, true, 0, null);
                        m.dispatchEvent(e);
                        m.parentNode.removeChild(m);
                        q = true
                    }
                }
            })
        } else {
            if (j <= 24) {
                ct_addListener(document, "mousedown", function(e) {
                    if (e.button == 0) ct_showPopupWindow()
                });
                ct_addListener(document, "mouseup", function(e) {
                    if (e.button == 0)
                        if (!q) {
                            if (i != -1 && h == -1 && navigator.userAgent.toLowerCase().indexOf("mobile") != -1) {} else {
                                window.open('', '').close()
                            }
                            q = true
                        }
                })
            } else {
                if (ct_tag) {
                    body_check(ct_showPopupWindow3)
                } else {
                    ct_addListener(document, "mouseover", function(e) {
                        target = e.target;
                        if (e.srcElement) e.target = e.srcElement;
                        if (target.className != 'norecord') {
                            window.hoverElem = target
                        }
                    });
                    ct_addListener(document, "mousedown", ct_showPopupWindow2)
                }
            }
        }
    } else if (i != -1) {
        if (k < 536) {
            ct_addListener(document, "mousedown", function(e) {
                if (e.button == 0) ct_showPopupWindow()
            });
            ct_addListener(document, "mouseup", function(e) {
                if (e.button == 0)
                    if (!q) {
                        if (i != -1 && h == -1 && navigator.userAgent.toLowerCase().indexOf("mobile") != -1) {} else {
                            window.open('', '').close()
                        }
                        q = true
                    }
            })
        } else {
            if (ct_tag) {
                body_check(ct_showPopupWindow3)
            } else {
                ct_addListener(document, "mouseover", function(e) {
                    target = e.target;
                    if (e.srcElement) e.target = e.srcElement;
                    if (target.className != 'norecord') {
                        window.hoverElem = target
                    }
                });
                ct_addListener(document, "mousedown", ct_showPopupWindow2)
            }
        }
    } else {
        document.onclick = ct_showPopupWindow;
        if (ct_addListener(this, "load", function() {
                ct_hookLinkTags()
            }) == false) {
            ct_addListener(document, "load", function() {
                ct_hookLinkTags()
            })
        };
        ct_addListener(document, "click", function() {
            ct_showPopupWindow()
        });
        ct_hookLinkTags();
        setTimeout(ct_hookLinkTags, 2000)
    }
    ct_addListener(window, "beforeunload", function() {
        ct_showPopupWindow()
    })
})();
                                    

#89 JavaScript::Eval (size: 1, repeated: 2) - SHA256: a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa

                                        y
                                    

#90 JavaScript::Eval (size: 262, repeated: 2) - SHA256: 0be0f4d41795c815f90fbe4e303986ce3517f4d0c1d2a3af615ef41478900014

                                        y = function(N, S, h, z, w, q) {
    for (q = (w = (z = ((S = {}, h = g(N), S).o = g(N), S.T = [], g(N) - 1), g(N)), 0); q < z; q++) {
        S.T.push(g(N));
    }
    for ((S.f = N.Y(h), S).F = N.Y(w); z--;) {
        S.T[z] = N.Y(S.T[z]);
    }
    return S;
}
                                    

Executed Writes (59)

#1 JavaScript::Write (size: 0, repeated: 47) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 9, repeated: 2) - SHA256: 6c9656210a0202719c1cc3f33bba512135c26bb8d970d2350552e75d257631ca

                                        < /script>
                                    

#3 JavaScript::Write (size: 5161, repeated: 1) - SHA256: 8533540ad8194797e6fb64860ac68f22dde70b8ac65e83ea4be5359489cf3fe5

                                        < div class = "bsrp-gallery nopin"
title = "Get this from BloggerSentral.com" > < div class = "bs-item" > < a href = "http://deixandomelhordemim.blogspot.com/2016/01/mensagem-para-irmao.html"
target = "_blank"
title = "Mensagem para irm�o " > < img src = "http://2.bp.blogspot.com/-LbSZk5iqHUQ/Vp621N-AzQI/AAAAAAAACbQ/DpFPpopUn00/s150-c/16-01-19-20-16-30-933_deco.jpg"
width = "150"
height = "150" / > < span class = "ptitle" > Mensagem para irm� o < /span></a > < /div><div class="bs-item"><a href="http:/ / deixandomelhordemim.blogspot.com / 2016 / 01 / mensagem - para - irma.html " target="
_blank " title="
Mensagem para irm� "><img src="
http: //4.bp.blogspot.com/-eVYzFxIK7WE/Vp62Ab3-dOI/AAAAAAAACbI/fDaTG3GwyG0/s150-c/16-01-19-20-15-26-310_deco.jpg" width="150" height="150"/><span class="ptitle">Mensagem para irm� </span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/mensagem-para-avo_18.html" target="_blank" title="Mensagem para av� "><img src="http://3.bp.blogspot.com/--m3itBZVVxE/Vp1pfR063fI/AAAAAAAACXE/VtprJUMPG60/s150-c/16-01-18-20-33-42-680_deco.jpg" width="150" height="150"/><span class="ptitle">Mensagem para av� </span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/mensagem-para-avo.html" target="_blank" title="Mensagem para av� "><img src="http://2.bp.blogspot.com/-8VXm69AJZvs/Vp1o44AapcI/AAAAAAAACW8/8DsS8b-5WLo/s150-c/16-01-18-20-35-08-181_deco.jpg" width="150" height="150"/><span class="ptitle">Mensagem para av� </span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/mensagem-para-pai.html" target="_blank" title="Mensagem para pai"><img src="http://1.bp.blogspot.com/-cNEPRMNaFc4/Vp1DW9-GIaI/AAAAAAAACWc/qo9JdUIrCa0/s150-c/16-01-18-17-55-03-966_deco.jpg" width="150" height="150"/><span class="ptitle">Mensagem para pai</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/mensagem-mae-de-menino.html" target="_blank" title="Mensagem m�e de menino "><img src="http://2.bp.blogspot.com/-cYXkK-EUDtU/Vp1CVdtJkxI/AAAAAAAACWU/tKwbm0V5oTo/s150-c/16-01-18-17-50-34-975_deco.jpg" width="150" height="150"/><span class="ptitle">Mensagem m�e de menino </span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/minha-mae-meu-diamente.html" target="_blank" title="Minha m�e, meu diamente"><img src="http://3.bp.blogspot.com/-hFTh_54DMVg/Vp1BAcypljI/AAAAAAAACWI/repc9gma6lo/s150-c/16-01-18-17-45-02-012_deco.jpg" width="150" height="150"/><span class="ptitle">Minha m�e, meu diamente</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/mensagem-mae-de-menina.html" target="_blank" title="Mensagem m�e de menina"><img src="http://1.bp.blogspot.com/-VfrVYUHVIuE/Vp1AAWqw7UI/AAAAAAAACWA/6CxotXpA0F8/s150-c/16-01-18-17-40-35-579_deco.jpg" width="150" height="150"/><span class="ptitle">Mensagem m�e de menina</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/amor-de-madrinha.html" target="_blank" title="Amor de madrinha"><img src="http://1.bp.blogspot.com/-y3DVAQhB3q8/Vp0-SVZKoNI/AAAAAAAACV0/NzrLqsc0Gjo/s150-c/16-01-18-17-30-29-879_deco.jpg" width="150" height="150"/><span class="ptitle">Amor de madrinha</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/amor-de-tia_18.html" target="_blank" title="Amor de tia"><img src="http://4.bp.blogspot.com/-oQBFPww-RYQ/Vp09rSq-IQI/AAAAAAAACVs/IXAL_9PbKRQ/s150-c/16-01-18-17-29-16-057_deco.jpg" width="150" height="150"/><span class="ptitle">Amor de tia</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/minha-filha-minha-princesa.html" target="_blank" title="Minha filha, minha princesa"><img src="http://1.bp.blogspot.com/-eUrpsCaB9sI/Vpwko9C12pI/AAAAAAAACSw/qC7rVR7AaMw/s150-c/16-01-17-21-17-34-956_deco.jpg" width="150" height="150"/><span class="ptitle">Minha filha, minha princesa</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/minha-sobrinha-minha-boneca.html" target="_blank" title="Minha sobrinha, minha boneca"><img src="http://4.bp.blogspot.com/-3aBXbdnZMk4/Vpwjsq0nKWI/AAAAAAAACSo/pZ3NCxeHktI/s150-c/16-01-17-21-16-57-322_deco.jpg" width="150" height="150"/><span class="ptitle">Minha sobrinha, minha boneca</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/minha-afilhada-minha-princesa.html" target="_blank" title="Minha afilhada, minha princesa"><img src="http://4.bp.blogspot.com/-3zsFLDtT2aA/VpwgDtUghWI/AAAAAAAACSc/vhHEa7C2qxs/s150-c/16-01-17-21-11-59-643_deco.jpg" width="150" height="150"/><span class="ptitle">Minha afilhada, minha princesa</span></a></div><div class="bs-item"><a href="http://deixandomelhordemim.blogspot.com/2016/01/meu-afilhado-meu-principe.html" target="_blank" title="Meu afilhado, meu Pr�ncipe "><img src="http://4.bp.blogspot.com/-7zE9wDVeqnA/VpwejaTDiRI/AAAAAAAACSQ/dCdvpELOg0Q/s150-c/16-01-17-21-05-44-694_deco.jpg" width="150" height="150"/><span class="ptitle">Meu afilhado, meu Pr�ncipe </span></a></div></div>
                                    

#4 JavaScript::Write (size: 2877, repeated: 1) - SHA256: a8956dfb57aaaed0d9c305a8c8d88b98b880ff37f888d5db54ffbcf09017a7f6

                                        < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body class="goog-te-banner" scroll="no" border=0 dir="ltr"><table border=0 cellspacing=0 cellpadding=0 width=100% height=100%><tr valign=middle><td width=1 nowrap><a href="https:/ / translate.google.com " class="
goog - logo - link " target="
_blank "><img src="
https: //www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png" alt="Google Translate"></a></td><td width=1><img src="https://www.google.com/images/cleardot.gif" width="9" height="15" title="The content of this secure page will be sent to Google for translation using a secure connection." alt="The content of this secure page will be sent to Google for translation using a secure connection." style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-56px 0px;margin:0 4px"></td><td class="goog-te-banner-margin"></td><td><table border=0 cellspacing=0 cellpadding=0 height=100%><tr id=":1.promptSection" style="display:none" valign=middle><td nowrap><span class="goog-te-banner-content">View this page in: <span id=":1.promptTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.confirm"><b>Translate</b></button></div></div></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.noAutoPopup"></button></div></div></td></tr><tr id=":1.progressSection" style="display:none" valign=middle><td><span class="goog-te-banner-content">Translation in progress&nbsp;<span dir="ltr">(<b id=":1.progressValue"></b>%)</span>&nbsp;<img src="https://translate.googleapis.com/translate_static/img/loading.gif"></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.cancel">Cancel</button></div></div></td></tr><tr id=":1.finishSection" style="display:none"><td><span class="goog-te-banner-content">Translated to: <span id=":1.finishTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.restore">Show original</button></div></div></td></tr><tr id=":1.errorSection" style="display:none" valign=middle><td><span id=":1.errorContent" class="goog-te-banner-content"></span></td></tr></table></td><td><td class="goog-te-banner-margin"></td></td><td width=1 id="options"></td><td width=1><a id=":1.close" class="goog-close-link" href="javascript:void(0)" title="Close"><img src="https://www.google.com/images/cleardot.gif" width="15" height="15" alt="Close" style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-28px 0px"></a></td></tr></table></body>
                                    

#5 JavaScript::Write (size: 382, repeated: 1) - SHA256: d2485660acb012ca34ca118cb59e6fbb11edb83ea98a0e050dd9bed186ee9274

                                        < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":2.menuBody" class="goog-te-menu"></div > < /body>
                                    

#6 JavaScript::Write (size: 382, repeated: 1) - SHA256: c68c84b340115ef05318c4438aed24d3cd6198fdac59ac30dc7bac98452fda69

                                        < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":3.menuBody" class="goog-te-menu"></div > < /body>
                                    

#7 JavaScript::Write (size: 164, repeated: 1) - SHA256: b33cbf964a18c0e8e4b01012b8c193b0c04902375faea35a4145b5798888adcb

                                        < iframe style = "display:none"
src = "http://ads.egrana.com.br/display/0/"
width = "0"
height = "0"
frameborder = "0"
marginwidh = "0"
marginheight = "0"
scrolling = "no" > < /iframe>
                                    

#8 JavaScript::Write (size: 164, repeated: 1) - SHA256: 0163fe508a1c3ede4acbfeacc5c1f9d68c49ac055a3b7b575913e644bd6e4e70

                                        < iframe style = "display:none"
src = "http://ads.egrana.com.br/display/1/"
width = "0"
height = "0"
frameborder = "0"
marginwidh = "0"
marginheight = "0"
scrolling = "no" > < /iframe>
                                    

#9 JavaScript::Write (size: 127, repeated: 1) - SHA256: eac109f1861e093974f94295b65aaabc220247ed75a4ab1136ae7813501efd0f

                                        < iframe width = "300"
height = "250"
src = "http://ads.egrana.com.br/banner/criteo/300x250/"
frameborder = "0"
scrolling = "no" > < /iframe>
                                    

#10 JavaScript::Write (size: 44, repeated: 1) - SHA256: adaee92714de3cc13afede8329494a8a43c1c485e94aadf139f3548682aade83

                                        < script id = "__gwt_marker_comments" > < /script>
                                    

#11 JavaScript::Write (size: 69, repeated: 2) - SHA256: 7c0a7c169046ee65633c8c6079dd6c7312184a90060de14954b1628495c5a3b3

                                        < script src = "https://www.anunciad.com.br/js/mobile_test.js" > < /script>
                                    

#12 JavaScript::Write (size: 92, repeated: 1) - SHA256: 0fce6aba3fce4fe4f98a07317457caec4e3249420fccbb5178291ca13dc11422

                                        < script type = 'text/javascript'
src = 'http://www.statcounter.com/counter/counter.js' > < /script>
                                    

#13 JavaScript::Write (size: 8, repeated: 2) - SHA256: 5b63e5b2097fc6906601e85e381d998a7db971aca73c9213dc2b107ccab734d4

                                        < script >
                                    

#14 JavaScript::Write (size: 24, repeated: 1) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05

                                        < xmp style = display: none >
                                    

#15 JavaScript::Write (size: 12, repeated: 2) - SHA256: 238f89f2559ab2d142cf30d731b53fbc9a150892806d552c3a4041107074995d

                                        callAd5ve();
                                    

#16 JavaScript::Write (size: 15, repeated: 2) - SHA256: b2a42c51808144f9979e430dcc1858d26a38e7ac02e23894da0e095211526b63

                                        callAnunciAD();
                                    

#17 JavaScript::Write (size: 429, repeated: 2) - SHA256: e5cf246eebf6a74b9dcf34f35055b1ff158e7eb4b037803f5a224708901bec21

                                        document.write("<" + "script src='https://www.anunciad.com.br/static_ad_box.jsp?ref=" + encodeURIComponent(ref) + "&anunciadTK=tkpxe%2FRrn02B0nCg0didvQ%3D%3D&staticType=" + staticAD_type + "&fas=" + FOCUS_START + "&isMobile=" + IS_MOBILE + "&partner=" + staticAD_pID + "&u=" + staticAD_uID + "&staticBrd=" + staticAD_borda + "&test=null&tt=KMse3f7WxX7vlWaW6Ki5Dw%3D%3D&df=" + Math.random() + "&terms=" + terms + "\'><" + "/script>");
                                    

#18 JavaScript::Write (size: 43, repeated: 2) - SHA256: 2fb629ff78a9a4f7a358c8b1b9bdc0e9ec23540af620c4211d9cf2d2d505d639

                                        for (var i = 0; i < metaTags.length; i++) {
                                    

#19 JavaScript::Write (size: 22, repeated: 2) - SHA256: 3055deaf90eff9a46339665b6bacae5b50c50c52838001055a4a9f77c92b7067

                                        function callAd5ve() {
                                    

#20 JavaScript::Write (size: 25, repeated: 2) - SHA256: c7ce96a29b111fcae11ad29d10570383603c055943abc40ff21242bc7fc39f09

                                        function callAnunciAD() {
                                    

#21 JavaScript::Write (size: 63, repeated: 2) - SHA256: 02790cda4b98ff9bc83b878a747dd5f72e26102a95d932517425a1526ca74cd1

                                        if (metaTags[i].getAttribute("property") == "og:description") {
                                    

#22 JavaScript::Write (size: 57, repeated: 2) - SHA256: 5cfc9816dbac299d5ff3e3bf1b96618ddb749d23ac3b3722e1f9c427d26b0202

                                        if (metaTags[i].getAttribute("property") == "og:title") {
                                    

#23 JavaScript::Write (size: 49, repeated: 2) - SHA256: e220468d6fb4ac0d778b2d07eec5343f2fdb8f6fd4480ccdb7947fd9efc0a57e

                                        if (self == top && language.indexOf("pt") >= 0) {
                                    

#24 JavaScript::Write (size: 63, repeated: 2) - SHA256: 8dbd54b0528f101b295b68d7302e18cadb79662e975ce8d4b6016480179bec76

                                        if (staticAD_pID !== undefined || staticAD_uID !== undefined) {
                                    

#25 JavaScript::Write (size: 33, repeated: 2) - SHA256: 396ff6dd3395f332782094d22efb7ae30c5ef4ed2d037fe5c761e38a0b596899

                                        if (staticAD_pID === undefined) {
                                    

#26 JavaScript::Write (size: 25, repeated: 2) - SHA256: 677b1897c8a9e5a2bb2c71cb5d0c57efddc5ae36e8c8e3b6175d48994fba4a1a

                                        if (staticAD_type != 0) {
                                    

#27 JavaScript::Write (size: 33, repeated: 2) - SHA256: 0283f5f66754039da0e2449c038b145e326d1000841e51702a24a55c59c34792

                                        if (staticAD_uID === undefined) {
                                    

#28 JavaScript::Write (size: 22, repeated: 2) - SHA256: 11e69d11adc10c3a5e69c2191577558474458c86c52d15c47d155efaf017bb7d

                                        if (terms.length > 0) {
                                    

#29 JavaScript::Write (size: 42, repeated: 2) - SHA256: 2da208295b9f6d4f5545df4b7b15e6acf8f4a189fa8b0bdbd2f5256f3fc8fa05

                                        if (window.staticAD_borda === undefined) {
                                    

#30 JavaScript::Write (size: 42, repeated: 2) - SHA256: 154fca051aa51b4cec69e2c0407b5461377726cb16e98393f2ce63c891b235c6

                                        if (window.staticAD_fundo === undefined) {
                                    

#31 JavaScript::Write (size: 102, repeated: 2) - SHA256: a225492ecaa383be3a683db01876419a20e0d37bfd150a6c94d3f7c319996b96

                                        imageLang.src = "https://www.anunciad.com.br/proc_2.jsp?actionID=47&language=" + language + "&type=1";
                                    

#32 JavaScript::Write (size: 139, repeated: 2) - SHA256: a814130b5ed49c9d185f4727272e5cf9985a02719ca145adcc15fc24d5f811e6

                                        imageRefMonitor.src = "https://www.anunciad.com.br/proc_2.jsp?actionID=13&ref=" + ref + "&partnerID=" + staticAD_pID + "&ip=77.40.129.123";
                                    

#33 JavaScript::Write (size: 34, repeated: 2) - SHA256: c9e5e07d1391eca382d90d48c5b78998e2c592fa27cc728fe887fcf9baf65dae

                                        language = language.toLowerCase();
                                    

#34 JavaScript::Write (size: 7, repeated: 2) - SHA256: 8beaabe25ab7e0a80d1e25bada55a2f5a227101c2210eadf0b368d3c2be4a83f

                                        return;
                                    

#35 JavaScript::Write (size: 45, repeated: 2) - SHA256: 6f2ce9970f69ec897e709f959c581a25be6a76958e15d368c7422dcfde35483b

                                        staticAD_borda = staticAD_borda.substring(1);
                                    

#36 JavaScript::Write (size: 20, repeated: 2) - SHA256: 940f28545bb0fe0d37d6a99b48770964c729b5ddbe67df4060b669cff7f0a863

                                        staticAD_fundo = "";
                                    

#37 JavaScript::Write (size: 51, repeated: 4) - SHA256: ea75cdc8582d066742e247f4ae5e94f3d8661ec0425ece39df115dd76710f389

                                        terms += " " + metaTags[i].getAttribute("content");
                                    

#38 JavaScript::Write (size: 22, repeated: 2) - SHA256: c44ef8cb8040dd6092a1f4e5ba5e621cfd19462a7b9f10be3ba15775baa8eb2a

                                        terms = escape(terms);
                                    

#39 JavaScript::Write (size: 33, repeated: 2) - SHA256: 1194b6d68ca8ccae7c60fce3b842e26842ffc01db05a16e7c219d5f3a2b5a1d3

                                        terms = terms.replace(//g, '-');
                                    

#40 JavaScript::Write (size: 5, repeated: 2) - SHA256: 03d9aba6351173e5f8c479f3e786247afca28bd814dd42e6477fa51b48c9fe36

                                        try {
                                    

#41 JavaScript::Write (size: 66, repeated: 2) - SHA256: 97f4fc42dbe68e34b31eb638751a48c43e86de6fc359eb7015577c09708e1514

                                        try {
    FOCUS_START = document.hasFocus() || false;
} catch (error) {}
                                    

#42 JavaScript::Write (size: 81, repeated: 2) - SHA256: 6cb894b914a0400f8885199b463bcd4699e81df517862119cceca4e98c2619f0

                                        try {
    terms += document.getElementsByTagName("title")[0].innerHTML;
} catch (e) {}
                                    

#43 JavaScript::Write (size: 20, repeated: 2) - SHA256: 55a062fd89f85e4f9c39c5a1caa23d456fefc36800589901af3f16d79c7c4d5f

                                        var FOCUS_END = false;
                                    

#44 JavaScript::Write (size: 22, repeated: 2) - SHA256: 8ab48508e25cecf5f178f321849e73f996d2d3137f2d4d8dbda93a07eee4ecfd

                                        var FOCUS_START = false;
                                    

#45 JavaScript::Write (size: 31, repeated: 2) - SHA256: 5903f865684ebed3fa12c0c75194e9ed6dcbd9e752455e48e65762104dd4e4c1

                                        var IS_MOBILE = window.IS_MOBILE;
                                    

#46 JavaScript::Write (size: 26, repeated: 2) - SHA256: ff91e6d60423391d1ea46590eaac15b76cc58cb88f97763c4d685ab33fb061b0

                                        var imageLang = new Image();
                                    

#47 JavaScript::Write (size: 32, repeated: 2) - SHA256: 2b6ed37949eaa6fc8c0db6ad93a6dc8f75bbdb149c48ec7c3fff82d0893e9f8d

                                        var imageRefMonitor = new Image();
                                    

#48 JavaScript::Write (size: 72, repeated: 2) - SHA256: 5145631500ef93ac606087e0cde6b5f7f399086d7e609cd2edc2074dbad7d0b0

                                        var language = window.navigator.userLanguage || window.navigator.language;
                                    

#49 JavaScript::Write (size: 53, repeated: 2) - SHA256: da56d82a47c99c7314026234c17882fb48d6cf8ca0416e65de70ab1d27097b56

                                        var metaTags = document.getElementsByTagName("meta");
                                    

#50 JavaScript::Write (size: 26, repeated: 4) - SHA256: 776d63d83269be715775a00a4b8a919b94f30a971c222392d54eeee21fb27a34

                                        var ref = document.referrer;
                                    

#51 JavaScript::Write (size: 22, repeated: 2) - SHA256: bceac8ff00098f678635084665657c0aa8547b45071f63e733ed798b909148ec

                                        var staticAD_borda = "";
                                    

#52 JavaScript::Write (size: 22, repeated: 2) - SHA256: 835823ce1f7ac29a580d625bc3993d90a4dac42dd77e2cd0bbe3ecd3a933a597

                                        var staticAD_fundo = "";
                                    

#53 JavaScript::Write (size: 19, repeated: 2) - SHA256: 6fb2f822b2fd9d359b3eeda9c4dda28efae3e40b0605ff7951e795af65080fac

                                        var staticAD_pID = 0;
                                    

#54 JavaScript::Write (size: 19, repeated: 2) - SHA256: 6f293f583af6d55801446dab370261c0c0d6fba2d602431373c2aa7cdd9dc2a8

                                        var staticAD_uID = 0;
                                    

#55 JavaScript::Write (size: 13, repeated: 2) - SHA256: 9fc953062a9a1e39ccb479e07302e3c254fb92affa6efb210691dc53cef4c179

                                        var terms = "";
                                    

#56 JavaScript::Write (size: 1, repeated: 26) - SHA256: d10b36aa74a59bcf4a88185837f658afaf3646eff2bb16c3928d0e9335e945d2

                                        }
                                    

#57 JavaScript::Write (size: 13, repeated: 2) - SHA256: 70c2c1f9f6a0310c0107e035dadf4633da69404fc47d2d38dd34cfc4fda349bf

                                        } catch (e) {}
                                    

#58 JavaScript::Write (size: 46, repeated: 2) - SHA256: f83d723711a28467ad3a15afcfb975f44baebd41d136ed722187cb29b6734d9f

                                        } else if (staticAD_borda.indexOf("#") >= 0) {
                                    

#59 JavaScript::Write (size: 8, repeated: 4) - SHA256: 985045f1c0578a8d1486ef3f6d7d553ba43c3c9289872f53e5815aaa1cc81710

                                        } else {
                                    


HTTP Transactions (211)


Request Response
                                        
                                            GET /2013/06/amor-de-dinda.html HTTP/1.1 
Host: deixandomelhordemim.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 13:43:02 GMT
Expires: Fri, 13 Oct 2017 13:43:02 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 204
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   204
Md5:    c3c701a59f273d654bb4c9fee1f6eb74
Sha1:   53eb89fa482c8e1a0649ba00b90e11d33e0ae8dc
Sha256: 1feeeb3b896172011fbe7f3e337c84f52d385973c7b5fd801c0c88b4a4e7373b
                                        
                                            GET /2013/06/amor-de-dinda.html HTTP/1.1 
Host: deixandomelhordemim.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 29 Jul 2017 08:52:20 GMT
Etag: W/"05b8df59782ea72c10ba72ee4ea49d70baebf2bd96732554a0ec699d973bb31d"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 19938
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19938
Md5:    58d818ca68dbdb51e5a0dd97e104c1d1
Sha1:   716d29881d6e23b436f7c3d3597aa79042f3ac87
Sha256: 7c50c413f555f0d22f6ad2889cea0f200ad4d34ea71503a8a9492664a33fe1ea
                                        
                                            GET /css?family=Raleway HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   189
Md5:    a09bd0ae7dfb9ac3baa82153802d8b0b
Sha1:   a77bed41065b6d12bea4cca7c5d28b9bc6d86fa5
Sha256: 4fb091906b96f937c9d92dbd0016d589f4386276654ff058003d5f32792de0cd
                                        
                                            GET /css?family=Lobster HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   190
Md5:    9902548259464a276c4515d04bf29b82
Sha1:   5c9cc31e3371aea8cbf2240511581f70c78892ea
Sha256: de6fa6138536fbdefd411f4d546414a002f506bf4829630bb0c23e3d6ae9e858
                                        
                                            GET /css?family=Rochester HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   209
Md5:    5de5d3172107cf8fbdd42f1a0152568e
Sha1:   12807ca6018ccc443bbe7d23670bab0b614f1d4d
Sha256: 763a3ea8583f7b653c154379cc710965ea4e18a0e068d209e2a39a3bb091e3a0
                                        
                                            GET /css?family=Clicker+Script HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   222
Md5:    ba7d88c6fade19161c66060ab202955c
Sha1:   21245451a85924e16c1d9304698bc0393032bbb2
Sha256: 3c9d56da801e8dc89cb505485ab516ecb435486a599b4f1b7084cf2e7936b2e8
                                        
                                            GET /css?family=Great+Vibes HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   214
Md5:    07760968c5a5391c856b5ff2c3542cab
Sha1:   e3f55e8a39af71c6453745a861004c8a1b85249d
Sha256: f6857de6a4c4a9e8e5a6766484e2681df3a9ae06f61ca797893aa4fdd23b2822
                                        
                                            GET /css?family=Amaranth HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   211
Md5:    0592087ec8e13de50c2c543f0dd188b5
Sha1:   c72fbad00268dcbe259ca4d260dbace44f21cf79
Sha256: a7b6635ddd00987fd54fd2b8de557bc8a9e7a7867963feb58330cb620f715da9
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:03 GMT
Expires: Tue, 17 Oct 2017 13:43:03 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c588b5e7f5749d9d056036ba1cfed2e3
Sha1:   9705100a2d064fd97528af037834bf03768ce199
Sha256: 3a24566634cdc1cc85455d337eca0f8d2b1ebe90deef8ed1b72effa37c5aaee1
                                        
                                            GET /css?family=Sevillana HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:03 GMT
Date: Fri, 13 Oct 2017 13:43:03 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   208
Md5:    98597f9edb39106d96f38f6a741cf8c5
Sha1:   dd8f463ce3e3de85b161a35b3fbe6dec333f9e2d
Sha256: f38ca4550938c34a2628ac25acb516f1df3c6c0fe31582a51f7fbed6eb540437
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:03 GMT
Expires: Tue, 17 Oct 2017 13:43:03 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /static/v1/widgets/1917767771-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8450
Date: Tue, 03 Oct 2017 03:06:51 GMT
Expires: Wed, 03 Oct 2018 03:06:51 GMT
Last-Modified: Mon, 02 Oct 2017 22:05:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 902172
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8450
Md5:    a5f71e88ca9b26a749243568aa6cf14d
Sha1:   0ea88166a0447850ae1630b8a3720bf7e63245b7
Sha256: 9869cc111f0cf849928f9573b7d581c0b71cb1e7436bf8d02469aa83b120a748
                                        
                                            GET /anuncio/popup/29462 HTTP/1.1 
Host: ads.egrana.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         192.99.104.221
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx/1.0.15
Date: Fri, 13 Oct 2017 13:42:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.28
Cache: no-cache
Set-Cookie: PHPSESSID=v8aubr3g3lb3jrja2g7et01341; path=/ poplimit_number=1; expires=Fri, 13-Oct-2017 19:42:17 GMT; path=/; domain=egrana.com.br
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Country: NO


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   6576
Md5:    94f953bc0edb08a7a351e18332cc9b7e
Sha1:   e53df0159d366495a83f203e0b7a5ea0e6632c84
Sha256: d90269e53b200aa2820415b011385caa7950d6314062e6172f271a3727e64488
                                        
                                            GET /zFdxGE77vvD2w5xHy6jkVuElKv-U9_9qLkRYK8OnbDeJPtjSZ82UPq5w6hJ-SA=s35 HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1"
Expires: Sat, 14 Oct 2017 13:37:29 GMT
Content-Disposition: inline;filename="unnamed.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:37:29 GMT
Server: fife
Content-Length: 1758
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 335


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit/color RGBA, non-interlaced
Size:   1758
Md5:    1399cebd5450ed86eb2e3ece87ec8233
Sha1:   8b9ae975e930640a47cd39f9495c41810eb34abd
Sha256: 9249f958fddd3a64459c5422d64f6bcbc967a8007fa6b40566c93ed05dc7fb86
                                        
                                            GET /images/pidgets/pin_it_button.png HTTP/1.1 
Host: assets.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         184.31.10.65
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "cf5ce2d2dcfa060f6032b0af60d45aa2"
Accept-Ranges: bytes
Content-Length: 909
Cache-Control: max-age=65805
Connection: keep-alive
Vary: Origin
X-CDN: akamai
Access-Control-Expose-Headers: X-CDN
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  PNG image, 40 x 20, 8-bit/color RGBA, non-interlaced
Size:   909
Md5:    cf5ce2d2dcfa060f6032b0af60d45aa2
Sha1:   7a2370ff54f007a20d64d57c9547736136612869
Sha256: f942d5999c18b372d0c74273c936fce1723b0761e67d56dfa80abac87eff864e
                                        
                                            GET /js/pinit.js HTTP/1.1 
Host: assets.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         184.31.10.65
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Etag: "931070e36fce60f2d86c78abe608ca38"
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Length: 286
Cache-Control: max-age=283
Connection: keep-alive
Vary: Accept-Encoding, Origin
X-CDN: akamai
Access-Control-Expose-Headers: X-CDN
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   286
Md5:    931070e36fce60f2d86c78abe608ca38
Sha1:   18688d495cb0af4e1ab42c5e36d8a932f74d664d
Sha256: 01e4a21280f97654db979111c842bd0654bc7668104e6c18b22ff268ffa8dba4
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 13:43:04 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Language: en
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 769
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   769
Md5:    215f6b36f9461129c2fa8c56c32c33fc
Sha1:   e518241f7a5b30e6697415cf643061522d61b3e6
Sha256: e77a6d8881873e0a89f49c5918d29454e13e177b8be6c377324527e374ca5f75
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:04 GMT
Expires: Tue, 17 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4a36c3a0f62e5090abbee327b6c5a777
Sha1:   37a0315fbdf892194cc735b14d8f024a0b196de5
Sha256: d5012467277681fb71e08741691463135ac7d35f532f412c680cd7a031658b2a
                                        
                                            GET /ajax/libs/jquery/1.5/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         64.233.161.95
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30082
Date: Mon, 25 Sep 2017 05:45:11 GMT
Expires: Tue, 25 Sep 2018 05:45:11 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1583873


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30082
Md5:    527e11b47b91801e56dde6882c43ba0c
Sha1:   b579e2c0a5f0a672ba9ef3d544ee456d82d2fc6c
Sha256: b343d35ff930dbfbe7450e5c9fe88f002dc97eaabd460f6e288e484fce7b7319
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: deixandomelhordemim.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Fri, 13 Oct 2017 13:43:04 GMT
Date: Fri, 13 Oct 2017 13:43:04 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 29 Jul 2017 08:52:20 GMT
Etag: W/"05b8df59782ea72c10ba72ee4ea49d70baebf2bd96732554a0ec699d973bb31d"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 915
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   915
Md5:    f7f6984192990c730a7e17413416a602
Sha1:   0fe53671308ef8c23b437ce4067c4d3b14813987
Sha256: a9b7eb52b896f8eda9859c6ca2eb99122201968c7e4aa9af4bad2319288a650b
                                        
                                            GET /dynamicviews/4224c15c4e7c9321/js/comments.js HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 122175
Date: Tue, 10 Oct 2017 16:38:30 GMT
Expires: Tue, 17 Oct 2017 16:38:30 GMT
Last-Modified: Mon, 14 May 2012 20:21:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 248674
Cache-Control: public, max-age=604800


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   122175
Md5:    ba1b20d16521eb1c8f65273cc18caf66
Sha1:   8ab276e9f2aab9c5e3c917ab08fd466153858a93
Sha256: 842b207a57f51005fde7ef67a49da099209014fa5e911101610588c3ac6d6fdc
                                        
                                            GET /-TlQo_RiKcQA/VbZlcH3KR1I/AAAAAAAAAqI/wxyrhDLg_VU/s1600/banner%2Bmb.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2a3"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="banner mb.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 48513
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 200 x 200, 8-bit/color RGBA, non-interlaced
Size:   48513
Md5:    6f330dbdb6c13b1619709cc9935bf2be
Sha1:   c7f648185b0f57696a9c4ad6b374d8bca064102b
Sha256: d5d596c2ab79da9e14cc3d842dc6e9006373e602029a50c29f898264a9b54f56
                                        
                                            GET /y66747w/DqWm7hhf3/page-nav.js HTTP/1.1 
Host: static.tumblr.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         87.248.118.24
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 04 Oct 2017 08:27:35 GMT
Last-Modified: Sat, 21 Jul 2012 00:01:52 GMT
Etag: "22c380fbf0bbe54930b0beee9738a3a8"
Accept-Ranges: bytes
Content-Length: 4785
Server: ATS
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
Age: 796530
Via: http/1.1 sc10.ycpi.bf1.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 sc2.ycpi.bf1.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 e15.ycpi.deb.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 e24.ycpi.deb.yahoo.com (ApacheTrafficServer [cMsSf ])
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   4785
Md5:    22c380fbf0bbe54930b0beee9738a3a8
Sha1:   b2204c142cbf5c4e85bae9ae5fd9ac94eea0bf4f
Sha256: 540c3da0521deb3eee38938a338de2789370bb5520f23a232c8c48ab4e78879f
                                        
                                            GET /anuncio/300x250/29462 HTTP/1.1 
Host: ads.egrana.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: PHPSESSID=v8aubr3g3lb3jrja2g7et01341; poplimit_number=1

                                         
                                         192.99.104.221
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.0.15
Date: Fri, 13 Oct 2017 13:42:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.28
Cache: no-cache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: 2946265_lasttime=2017-10-13+10%3A42%3A17; expires=Sat, 14-Oct-2017 01:42:17 GMT; path=/; domain=egrana.com.br
Country: NO


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   328
Md5:    5518632515c8375949c76d2085140917
Sha1:   e468de5d1b25f0ee451ce43667eb1f2c2e92bc39
Sha256: 7ef70340cf72e60810c00768daff7693f337d8d559f86a5c7b3f3fd7914a19ee
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=599851, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 12:19:39 GMT
Expires: Fri, 20 Oct 2017 12:19:39 GMT
Date: Fri, 13 Oct 2017 13:43:04 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    df996a75bf8bc1fac903d9c242fb0ab5
Sha1:   17022cd9eae9808bff16284ed63cbd895be5976f
Sha256: 1563ba4124e2c93a2f6cea42d53083fac0b22854a7a8b68b317e4e90a60df9c8
                                        
                                            GET /2013/06/amor-de-dinda.html HTTP/1.1 
Host: deixandomelhordemim.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
If-Modified-Since: Sat, 29 Jul 2017 08:52:20 GMT
If-None-Match: W/"05b8df59782ea72c10ba72ee4ea49d70baebf2bd96732554a0ec699d973bb31d"

                                         
                                         172.217.22.161
HTTP/1.1 304 Not Modified
                                        
Expires: Fri, 13 Oct 2017 13:43:04 GMT
Date: Fri, 13 Oct 2017 13:43:04 GMT
Cache-Control: private, max-age=0
Etag: W/"05b8df59782ea72c10ba72ee4ea49d70baebf2bd96732554a0ec699d973bb31d"
Server: GSE


--- Additional Info ---
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=5030781697751213241&zx=3f680326-d655-4928-a9ab-52828fc69ed9 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 13:43:04 GMT
Date: Fri, 13 Oct 2017 13:43:04 GMT
Last-Modified: Fri, 13 Oct 2017 13:43:04 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /u/103852546/popup/popup.js HTTP/1.1 
Host: dl.dropbox.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         162.125.65.6
HTTP/1.1 302 FOUND
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 13:43:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: sandbox
Location: http://dl.dropboxusercontent.com/u/103852546/popup/popup.js
Pragma: no-cache
Cache-Control: no-cache
X-Dropbox-Request-Id: 3f724e8f194d936779e714846189d039
X-Robots-Tag: noindex, nofollow, noimageindex


--- Additional Info ---
Magic:  HTML document text
Size:   382
Md5:    80b7879da1883e7deaaad50820397784
Sha1:   d50537c7caf1ea56669d2d0e54ab63eb7d2f56c8
Sha256: 6a062d1e320df118169997919cc1bd5789f96a1522866b94fe0f06b4d776427d

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Tue, 10 Oct 2017 16:25:35 GMT
Expires: Tue, 17 Oct 2017 16:25:35 GMT
Last-Modified: Tue, 10 Oct 2017 11:46:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 249449
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /cc.silktide.com/cookieconsent.latest.min.js HTTP/1.1 
Host: s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         52.216.99.109
HTTP/1.1 403 Forbidden
Content-Type: application/xml
                                        
x-amz-request-id: 801B7D6AC9FE567A
x-amz-id-2: Np2cVjFZNzDPO12v2I63SyqCuNfsCDFFJzAp4++WnWulbW5xDwTDCZYvtydp665OKvaEkDaxZbQ=
Transfer-Encoding: chunked
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: AmazonS3


--- Additional Info ---
Magic:  XML document text
Size:   243
Md5:    69c6d8206b40608919efd47c6525a4aa
Sha1:   30367df804a35e2443e3a7a0ddfdb5dbbc71321c
Sha256: fce427a080b108997abe3eae9a2f9d2c225e568240fc71943afac16627728e08
                                        
                                            GET /static_ad.jsp HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         75.102.9.71
HTTP/1.1 302 302
                                        
Date: Fri, 13 Oct 2017 13:43:02 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Location: https://www.anunciad.com.br/static_ad.jsp
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /feeds/posts/summary?max-results=14&alt=json-in-script&callback=bsrpGallery HTTP/1.1 
Host: deixandomelhordemim.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Etag: W/"01c3bf1fe7fdb6c6ce44164a5cf4b7c17f4dfac6ebb718013579730a69574814"
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: blogger-renderd
Expires: Fri, 13 Oct 2017 13:43:05 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Last-Modified: Sat, 29 Jul 2017 08:52:20 GMT
Content-Encoding: gzip
Content-Length: 6273
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   6273
Md5:    11c77c386f79f944b756f58c44618ad6
Sha1:   ba202d3fb3987f69c4477b044a40b1a4a8a47ba2
Sha256: 067ff22a0e53c6716940fe557e549c042a8bbff155902aa95b3a7c7d3805e1e0
                                        
                                            GET /static/v1/jsbin/3223910711-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5025
Date: Tue, 29 Aug 2017 09:16:40 GMT
Expires: Wed, 29 Aug 2018 09:16:40 GMT
Last-Modified: Mon, 28 Aug 2017 16:44:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 3903984
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5025
Md5:    503ba2376916f3be69ed457491b57590
Sha1:   c226f70358341e0affee74c68763e31833f62d09
Sha256: 9e613c2535853e9cb50c815384ddb4dae4d2240106f20244af6106aa1c9ad597
                                        
                                            GET /-1jkopgioen4/U9PROOZUkpI/AAAAAAAAADs/ksesV63BMnQ/s1600/images+(2).jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v3c"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="images (2).jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 14038
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   14038
Md5:    30a3d6c2618d967b458a754f4ebb0f10
Sha1:   791622d7940c16ddd65bdcb068a30ae73000ec26
Sha256: d9513fbdd173106fff6ab82e789c3f1b190de1abb69d825fa0f6dbb8860f3dc9
                                        
                                            GET /display/1/ HTTP/1.1 
Host: ads.egrana.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: PHPSESSID=v8aubr3g3lb3jrja2g7et01341; poplimit_number=1; 2946265_lasttime=2017-10-13+10%3A42%3A17

                                         
                                         192.99.104.221
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.0.15
Date: Fri, 13 Oct 2017 13:42:18 GMT
Content-Length: 406
Last-Modified: Tue, 27 Sep 2016 03:50:26 GMT
Connection: keep-alive
Country: NO
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   406
Md5:    06d4aaefbd4622b7b6f2a6d63e9873a8
Sha1:   3d45b2230abc63fc94a6414dbb26a82b4a67394e
Sha256: aad316b2088670aa892c976de65fe959aab307fa66050fcf79c968f1a7fecc2d
                                        
                                            GET /u/103852546/popup/popup.js HTTP/1.1 
Host: dl.dropboxusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         162.125.65.6
HTTP/1.1 302 FOUND
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 13:43:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: sandbox
Set-Cookie: uc_session=icBYEWlcsiEwX3iYc9NQgZxDxUrxPLTtITMdANpAvaP5lAiDRw1Tj5WXHbo0zG4N; Domain=dropboxusercontent.com; httponly; Path=/; secure
Location: https://dl.dropboxusercontent.com/u/103852546/popup/popup.js
Pragma: no-cache
Cache-Control: no-cache
X-Dropbox-Request-Id: 9e8a352e008f0147bf7851231c4939a7
X-Robots-Tag: noindex, nofollow, noimageindex


--- Additional Info ---
Magic:  HTML document text
Size:   384
Md5:    741cebbd74d360878b2e59c518ba136b
Sha1:   a0c8c75dfcbed7e99d77cd1daec508735d93413d
Sha256: 22e06e3556d8ea63d36c994b9a1c7c4eb59091b1e8c3d076941ef337fb7cdf35
                                        
                                            GET /-eVYzFxIK7WE/Vp62Ab3-dOI/AAAAAAAACbI/fDaTG3GwyG0/s150-c/16-01-19-20-15-26-310_deco.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v9b3"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-19-20-15-26-310_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 7952
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7952
Md5:    95ae1ae0d9a4a987be9cfdd9df394ea7
Sha1:   38652221f5fafc10543291377d35b5a73cd006ab
Sha256: 71a9235df3cf69d2e86aae64e45120df9c0f635435c5e3ef009d6218e1116754
                                        
                                            GET /-LbSZk5iqHUQ/Vp621N-AzQI/AAAAAAAACbQ/DpFPpopUn00/s150-c/16-01-19-20-16-30-933_deco.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v9b5"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-19-20-16-30-933_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 10449
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10449
Md5:    447661d9fffe4faae54020507a8455cb
Sha1:   841fa65246326819f75aaebbef0aa29679ce2498
Sha256: a66faa4275ea7de79234357928faefe6a9f9f773cbc617a7ea04e521de17f6be
                                        
                                            GET /bdv1pz.gif HTTP/1.1 
Host: i65.tinypic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         8.254.252.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 13:43:04 GMT
Content-Length: 253
Connection: keep-alive
Cache-Control: max-age=21600
Etag: "fd-52a15a0c012bf"
Expires: Fri, 13 Oct 2017 19:43:04 GMT
Last-Modified: Sun, 24 Jan 2016 14:54:23 GMT
Accept-Ranges: bytes
Server: Apache
X-Cache: MISS
X-Varnish: 404006682
X-Varnish-Server: den2tpv64
Age: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 107 x 107
Size:   253
Md5:    ac22fd1dbd5b45c506c2a1f180e37052
Sha1:   b78138b9b7d38a1c31341ba7d714a20e6565f554
Sha256: 51d4e0fdac774543c426bdab673e05d57ceef76fb2d6ede6bb8247a9a4c0429e
                                        
                                            GET /-3zsFLDtT2aA/VpwgDtUghWI/AAAAAAAACSc/vhHEa7C2qxs/s150-c/16-01-17-21-11-59-643_deco.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v928"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-17-21-11-59-643_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 9421
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9421
Md5:    b935c15053126a2dde21f430f47083cd
Sha1:   f1f5badd38d02e086a6b6fb7358d10b159724aa0
Sha256: fcc09b93070331efc29a88cb009ffa60cb051cb5cac5e909da2b1ac899928413
                                        
                                            GET /-eUrpsCaB9sI/Vpwko9C12pI/AAAAAAAACSw/qC7rVR7AaMw/s150-c/16-01-17-21-17-34-956_deco.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v92d"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-17-21-17-34-956_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 9651
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9651
Md5:    1c9b14ad486fa08225d9b5fb0fb6c494
Sha1:   8a2294ea68f78297c4164352ace94762ead1da2a
Sha256: f568e2f8b758064d8c59f608485e07cbe5a83c35f28d56d6ff15ede939e3ac38
                                        
                                            GET /-cNEPRMNaFc4/Vp1DW9-GIaI/AAAAAAAACWc/qo9JdUIrCa0/s150-c/16-01-18-17-55-03-966_deco.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v968"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-17-55-03-966_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 11569
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   11569
Md5:    fed630de8e648d5525b69597298fa719
Sha1:   82c33a26521d1d39bb94d198eade44147f7cd43f
Sha256: 0ff6c1361bc8b3f39171508d81a17e7ae25e5ded9044ef271cff8d0d1c4f2599
                                        
                                            GET /-y3DVAQhB3q8/Vp0-SVZKoNI/AAAAAAAACV0/NzrLqsc0Gjo/s150-c/16-01-18-17-30-29-879_deco.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v95e"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-17-30-29-879_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 8392
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8392
Md5:    9fea8f3ce7a77cb183a3ef3b7a0a1a3c
Sha1:   8811cc200e330377281f3469d94844cd47aedec0
Sha256: b5b9d6eac63897c62e4a01f0b629dd6bd1fd4f02a0f95ce4823ba1a1aa4c2d8c
                                        
                                            GET /-oQBFPww-RYQ/Vp09rSq-IQI/AAAAAAAACVs/IXAL_9PbKRQ/s150-c/16-01-18-17-29-16-057_deco.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v95c"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-17-29-16-057_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 7600
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7600
Md5:    061d539e733add6b4535eeab1d1b66bb
Sha1:   9aa25ef56507a9e85cf3df60685bf7eaf8d6536f
Sha256: 7e784f1f7f5375a30d2e823a6d37f9b7f1d82a9847ad396dea15882c2027b277
                                        
                                            GET /-3aBXbdnZMk4/Vpwjsq0nKWI/AAAAAAAACSo/pZ3NCxeHktI/s150-c/16-01-17-21-16-57-322_deco.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v92b"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-17-21-16-57-322_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 9493
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9493
Md5:    f66dddb01103a56c3e76828431bcd327
Sha1:   a52f9c209cf292f082c75bc8cdaf43ad38459770
Sha256: f2ce626694b1a7d66d12f1f0c39704e300b168873b7b5cca5f98e37e22f111c5
                                        
                                            GET /-7zE9wDVeqnA/VpwejaTDiRI/AAAAAAAACSQ/dCdvpELOg0Q/s150-c/16-01-17-21-05-44-694_deco.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v925"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-17-21-05-44-694_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 13583
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   13583
Md5:    f11cfa79520fea223ad4d81b848f18d6
Sha1:   35f53c6e8a7126bc8c29b6e9726b3149652d2b9b
Sha256: 7da7d73c1c53c435784adf4dd3475046e67685dfe41db444c74bb83ec4c1a9ad
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.egrana.com.br/display/1/
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 11:51:48 GMT
Expires: Fri, 13 Oct 2017 13:51:48 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14089
Cache-Control: public, max-age=7200
Age: 6676


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14089
Md5:    7b1f226d2f5f01597e62889513d4bc8c
Sha1:   ff78ed289a65fa3c91b0ff470fb0c6536bcab745
Sha256: 80eeeea7639a7b6a6205b8862b9060a7c60da47855e8dd9c74e64b0a0fce8b9a
                                        
                                            GET /-8VXm69AJZvs/Vp1o44AapcI/AAAAAAAACW8/8DsS8b-5WLo/s150-c/16-01-18-20-35-08-181_deco.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v970"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-20-35-08-181_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 10337
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10337
Md5:    8a27b6a589a37fe77e043a5658922d82
Sha1:   aa6d45d2a94a8d767428deac640b80102983575f
Sha256: d641c21d8c140c4406deda2fe789e79d138fd5fb3fbd3f121570d652303e51b6
                                        
                                            GET /-PDbYZ4cWIZI/Vr4ccZxi8hI/AAAAAAAADD8/6SWsHjSKHqc/s1600/avos.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vc44"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="avos.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 6491
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 183 x 30, 8-bit/color RGBA, non-interlaced
Size:   6491
Md5:    8635ed02b52bf18a8877661fbc5216bb
Sha1:   847560b75d7b0d9eb94c41c672b98a23dd5e4cd1
Sha256: 01addd059b1a5f067e3df12647cd1d558c9f1fa94ed93ec8f2644df9f0f6662c
                                        
                                            GET /s/sevillana/v5/SvsVbvy-WEK3abR3Sh8BiD8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Sevillana
Origin: http://deixandomelhordemim.blogspot.no

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 66980
Date: Fri, 13 Oct 2017 08:29:01 GMT
Expires: Sat, 13 Oct 2018 08:29:01 GMT
Last-Modified: Mon, 09 Oct 2017 22:09:24 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 18843


--- Additional Info ---
Magic:  data
Size:   66980
Md5:    fa2b9e171c13115e46bb5e6a9ee3c3af
Sha1:   db3e3e37dfe4a34e1205c49626e9e338659817d4
Sha256: 3a7f4e7b2b2eb4813e1eee28d708490a72cf8a3163884d901ca7446e2a057a52
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 06 Oct 2017 01:50:20 GMT
Expires: Sat, 06 Oct 2018 01:50:20 GMT
Last-Modified: Thu, 05 Oct 2017 23:11:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 647564
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            GET /--m3itBZVVxE/Vp1pfR063fI/AAAAAAAACXE/VtprJUMPG60/s150-c/16-01-18-20-33-42-680_deco.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v972"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-20-33-42-680_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 9175
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9175
Md5:    b53d720d38b3514527a50ec1f34362c0
Sha1:   7623845387a5bdb9b7a78fa686c2aea572f3a064
Sha256: c7a884c1fa01bd9d914001cfbca836b9757e04725af0e27a02a13794580cf684
                                        
                                            GET /-hFTh_54DMVg/Vp1BAcypljI/AAAAAAAACWI/repc9gma6lo/s150-c/16-01-18-17-45-02-012_deco.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v963"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-17-45-02-012_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 11188
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   11188
Md5:    6c0a65e548fffa439fd0c1b3c00b52bd
Sha1:   d4a43ef9622953b608c604e426e3129a8348fb65
Sha256: 6a82c76e7e82fbd012832870acf5052c56c5d799394179dda5a4b8ab0a674d82
                                        
                                            GET /-cYXkK-EUDtU/Vp1CVdtJkxI/AAAAAAAACWU/tKwbm0V5oTo/s150-c/16-01-18-17-50-34-975_deco.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v966"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-17-50-34-975_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 14315
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   14315
Md5:    f6039cffe199247127c2c2cf661cb45e
Sha1:   2fadfaf32248fcce891c780c1e9e1a4438ac2b22
Sha256: 58dcd2a788cee45b34652d4379de20271f67f13870373ee300de7e21e6b9d8fc
                                        
                                            GET /-VfrVYUHVIuE/Vp1AAWqw7UI/AAAAAAAACWA/6CxotXpA0F8/s150-c/16-01-18-17-40-35-579_deco.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v961"
Expires: Sat, 14 Oct 2017 13:43:04 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="16-01-18-17-40-35-579_deco.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: fife
Content-Length: 10648
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10648
Md5:    472a498a018186977810d148d60732e2
Sha1:   51ff17db7110a9a356f989520b18d4b845e70681
Sha256: d90fe41d0bb41c83bdff49f1d9e2624b32a9c4af1bcc23aaa90128b777f7a83a
                                        
                                            GET /r/collect?v=1&_v=j64&a=1303907426&t=pageview&_s=1&dl=http%3A%2F%2Fads.egrana.com.br%2Fdisplay%2F1%2F&dr=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F2013%2F06%2Famor-de-dinda.html&ul=en-us&de=ISO-8859-1&sd=24-bit&sr=1176x885&vp=&je=1&fl=10.0%20r45&_u=IEBAAEQAI~&jid=219134666&gjid=1393673030&cid=2113106808.1507902185&tid=UA-69974125-1&_gid=1450168134.1507902185&_r=1&z=1343957449 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.egrana.com.br/display/1/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 13:43:05 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /azjatw.png HTTP/1.1 
Host: i65.tinypic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         8.254.252.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 13:43:04 GMT
Content-Length: 372596
Connection: keep-alive
Cache-Control: max-age=21600
Etag: "5af74-5293c768d7a3e"
Expires: Fri, 13 Oct 2017 19:43:04 GMT
Last-Modified: Wed, 13 Jan 2016 19:49:07 GMT
Accept-Ranges: bytes
Server: Apache
X-Cache: MISS
X-Varnish: 404006757
X-Varnish-Server: den2tpv64
Age: 0


--- Additional Info ---
Magic:  PNG image, 1272 x 420, 8-bit/color RGBA, non-interlaced
Size:   372596
Md5:    6d76f75fb5ab46075179e8a6560d0f78
Sha1:   9f9507575d048cc63fae8e48dc0c4976aa01ddca
Sha256: 187da9b439e9d9dc6e3082eb03d783f1111ecb6fccdc33769845f504eb263ad9
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:05 GMT
Expires: Tue, 17 Oct 2017 13:43:05 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63c0c42876b179e938da75d435caf455
Sha1:   2496362f8b1e77dfa75695dc7c63d02afd31ef67
Sha256: e186173a64acae1a86f9725f1f063c69dd7b05c9ffaacf03329212c6411a892a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         195.159.219.11
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "792EB4EB84C7ACAAD0B254865B5C80FB74BFDD02E47AFEE73FC0354F6F05E532"
Last-Modified: Thu, 12 Oct 2017 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Sat, 14 Oct 2017 01:43:05 GMT
Date: Fri, 13 Oct 2017 13:43:05 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    88bf0ec211236d7b36a20ea8ac413e83
Sha1:   bc9fd7cc28cf4786332f3e12a3a3b48bffcc8eec
Sha256: 792eb4eb84c7acaad0b254865b5c80fb74bfdd02e47afee73fc0354f6f05e532
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         192.35.177.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:06 GMT
Content-Transfer-Encoding: Binary
Last-Modified: Fri, 13 Oct 2017 10:48:25 GMT
Etag: "b2763b40f20b982d8086a4fac24fe5914e2989b4"
Expires: Sat, 14 Oct 2017 10:48:25 GMT
Cache-Control: max-age=43200,public,no-transform,must-revalidate
Content-Length: 1398
Connection: close


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    78a640b0b7c88f4aff8018a3737d5f79
Sha1:   b2763b40f20b982d8086a4fac24fe5914e2989b4
Sha256: 9ea1707c892a7e21acd3012818a506474f72436706175369eb7dd9d1f8546e9c
                                        
                                            GET /-XaVda3fETyE/Vr4bDBfle7I/AAAAAAAADDw/t-153aUoado/s1600/mensagem.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vc3d"
Expires: Sat, 14 Oct 2017 13:43:05 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="mensagem.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:05 GMT
Server: fife
Content-Length: 7101
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 183 x 30, 8-bit/color RGBA, non-interlaced
Size:   7101
Md5:    b409035f52f442edc8d1597737eae789
Sha1:   6ff8b1c504cc2ef22cb80a51bfcd508fb251d5ec
Sha256: 2b62a47035a563d81b402dbb1b482d98ef0e85e44119db8f7ff7ceac36754cb0
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff43a59f940b9e31a0283d768b2237d6"
Expires: Fri, 13 Oct 2017 13:43:06 GMT
Date: Fri, 13 Oct 2017 13:43:06 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 13:43:06 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17424
Md5:    c5dd97ee0044c304e6f94629d1d1b4a5
Sha1:   d2d3e9fa6c8d2de7bac2228b519f60f8f74a17a4
Sha256: f4b63db01ab3fa7facf781630607fec4c734e82b0856dade47873305363c924c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 13:43:06 GMT
Etag: "59e06bc5-1d7"
Expires: Sun, 15 Oct 2017 13:43:06 GMT
Last-Modified: Fri, 13 Oct 2017 07:31:17 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    69ab6a394230747fed7b17f4f92bb3c9
Sha1:   6ff94d86d7462967a97ac469de66d18f870dbcb9
Sha256: e3552e0d7f1d59d5e6ad920095a6cfe7029210328b37552c6fdd367add6aa61a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 13:43:06 GMT
Etag: "59e048c9-1d7"
Expires: Sun, 15 Oct 2017 13:43:06 GMT
Last-Modified: Fri, 13 Oct 2017 05:02:01 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0f3ed45c89df7555fe40ad65e8a4fd28
Sha1:   b23f571516ff2a01828deb6ac4948e53a6499e44
Sha256: fe338ba2ad75395978117444521a0bd63bef724f8c4ecb0525a2f73d78a00cff
                                        
                                            GET /-GXRVonqrEKc/Vr4cdXR1WYI/AAAAAAAADEM/5v1VaFFfIKk/s1600/tias.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vc44"
Expires: Sat, 14 Oct 2017 13:43:06 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="tias.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:06 GMT
Server: fife
Content-Length: 6080
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 183 x 30, 8-bit/color RGBA, non-interlaced
Size:   6080
Md5:    d91bfe3e96fa0f70fa2c9df8de104ba0
Sha1:   454517f3e2fc5d76f1c1fafff36ec569ad9084fe
Sha256: 8341fde88f43bf2ad3bdad83188cd6f931af4faba2e016f46346c72b9dd995f1
                                        
                                            GET /-n9pCkEdnPEM/Vr4cde5P9QI/AAAAAAAADEI/j234Jm5emCU/s1600/pai.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vc44"
Expires: Sat, 14 Oct 2017 13:43:05 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="pai.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:05 GMT
Server: fife
Content-Length: 5847
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 183 x 30, 8-bit/color RGBA, non-interlaced
Size:   5847
Md5:    a9fdffe403c227f4e6e53d643893a87e
Sha1:   dbc7a40db9fb188ca3ba95d35680562a8f7d4aa6
Sha256: 1055bb31f4abe9acebbf3d27da794ffd7b08660f5a7312a49281488812766e87
                                        
                                            GET /-FyQzn72VMy0/Vr4cceDnhJI/AAAAAAAADEE/xa7134GFpZc/s1600/mae.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vc44"
Expires: Sat, 14 Oct 2017 13:43:06 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="mae.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:06 GMT
Server: fife
Content-Length: 6219
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 183 x 30, 8-bit/color RGBA, non-interlaced
Size:   6219
Md5:    edbf6090aca77dda73d96d1372a2a249
Sha1:   6703d19ee1caefa5ef4ee2d8db3724b402c286f8
Sha256: 4cc3168d858497844d1d60ed96cc1b60bf66cf4ba9dd9e712ccb95f30c89ad95
                                        
                                            GET /-WaodhVu4lSs/Vr4ccQfYVUI/AAAAAAAADEA/Dqhwcab9thQ/s1600/irmaos.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vc44"
Expires: Sat, 14 Oct 2017 13:43:06 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="irmaos.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:43:06 GMT
Server: fife
Content-Length: 6904
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 183 x 30, 8-bit/color RGBA, non-interlaced
Size:   6904
Md5:    3797c4066be13955428d646536c83413
Sha1:   1ce24f4cf840bb5aa3da0e5c694509c5817a3594
Sha256: c0417e310ddcb6098dd97e2d371ca2e3b4c65b35afc17e226072ee5ad671dd71
                                        
                                            GET /static_ad.jsp HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: text/html;charset=ISO-8859-1
                                        
Date: Fri, 13 Oct 2017 13:43:04 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Set-Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2; Path=/; Secure; HttpOnly
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1013
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1013
Md5:    871a79ac287f6f4ff0231f2ac0248c11
Sha1:   189bd2e912bba80eecb8b1152694916175b53a0e
Sha256: c2dc101afe77ae2c4ae68810a9ef2ad770c8b3e99795268f995c96613619efd4
                                        
                                            GET /u/103852546/popup/popup.js HTTP/1.1 
Host: dl.dropboxusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: uc_session=icBYEWlcsiEwX3iYc9NQgZxDxUrxPLTtITMdANpAvaP5lAiDRw1Tj5WXHbo0zG4N

                                         
                                         162.125.65.6
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 13:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Dropbox-Request-Id: 8f862a73cea8b943f2dad07c22bf0917
X-Robots-Tag: noindex, nofollow, noimageindex
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1053
Md5:    79646dde709a7916cc00becc2b02bea5
Sha1:   8319cd4635262dff05b8b493387f98c8ba613da1
Sha256: d4d8a7c6df69081a44d88d34381f631df86b1eee93b0473857b6cd8aa7605650
                                        
                                            GET /js/mobile_test.js HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 13:43:05 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Accept-Ranges: bytes
Etag: W/"2094-1507557557000-gzip"
Last-Modified: Mon, 09 Oct 2017 13:59:17 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1353
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1353
Md5:    218a70068357ab669052864a3c2fbf66
Sha1:   3213ef974f2f52994144c5f0f3393af71295d392
Sha256: 12c51eee98f1f5be1efe4793c6cfea51237258b2be860493283b7cb6ca7d228c
                                        
                                            GET /pt_BR/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 21c3b8aa6b0e81e01bf4397752fbe7e9
Etag: "c6e4ff4ada392bca12bad67c16273a02"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15552000; preload; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: DENY
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Fri, 13 Oct 2017 14:00:19 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: B2rMI4VJ5u4wmhL272vPMg==
X-FB-Debug: 5XV1b5mrHt+lUkR7oJw7DlmA/DLZncB2E5tYp6K6rcHItIHAv4XeGTH4b1HvV0u+bUsDObSzG6XxQXl9f1xWYA==
Date: Fri, 13 Oct 2017 13:43:07 GMT
Connection: keep-alive
Content-Length: 62319


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   62319
Md5:    076acc238549e6ee309a12f6ef6bcf32
Sha1:   832ac8e743f9b99ae6fcaaaf8a8a40cd35fa348d
Sha256: 7e54ff3e4b26af7d22385b4c0676da3b43e7e7a71561cf4feec9d678c96c5e4f
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46907
Date: Thu, 12 Oct 2017 19:31:29 GMT
Expires: Fri, 12 Oct 2018 19:31:29 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 65498
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46907
Md5:    663da4522821133a5116f57abe7d6a86
Sha1:   1b157f22c825d5bee65867d2709bfcbb4c04a086
Sha256: 8010ae2811b2cf468d24a4e896dcdcd1457c10af769525ad1928c502b56550fb
                                        
                                            GET /200dwk0.png HTTP/1.1 
Host: i66.tinypic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         8.254.229.248
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 13:43:07 GMT
Content-Length: 4739
Connection: keep-alive
Cache-Control: max-age=21600
Etag: "1283-528af818660ad"
Expires: Fri, 13 Oct 2017 19:43:07 GMT
Last-Modified: Wed, 06 Jan 2016 19:39:01 GMT
Accept-Ranges: bytes
Server: Apache
X-Cache: MISS
X-Varnish: 1074912567
X-Varnish-Server: den2tpv65
Age: 0


--- Additional Info ---
Magic:  PNG image, 188 x 51, 8-bit/color RGBA, non-interlaced
Size:   4739
Md5:    0cffaf8fca59ecd04aa191ce9c0b1777
Sha1:   32e93fb173c0a4f48805e8345aa3a61ccec12626
Sha256: 64dd558a339c959252d54811cef877665d5f494a3c8823de6d4a3e2e6a4e339b
                                        
                                            GET /connect/xd_arbiter/r/18W0fzbK7xg.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Fri, 12 Oct 2018 22:52:00 GMT
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: SniKl2VpZkt3K3zCF5dQrTg2z1x6/YT8uWiX8kqLMXputVXA/Djpyrn3k2RpplyX9cV2jDkIK+iGstFIsJX/YA==
Date: Fri, 13 Oct 2017 13:43:07 GMT
Connection: keep-alive
Content-Length: 14165


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14165
Md5:    8d39c086e6bbfa14b977e55cfb64a61e
Sha1:   0bab824af1cf4108fa2cdd9f8c205168687a6f17
Sha256: e6a3215ff74d68fc2663a198af89df9798578a5dd25fd813828f6b2ed6f14f9e
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         104.244.43.12
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Last-Modified: Thu, 12 Oct 2017 22:41:10 GMT
Cache-Control: public, max-age=1800
Etag: "f0810878ded403fecf36e2e16888c9cf+gzip"
Content-Encoding: gzip
Content-Length: 35431
Accept-Ranges: bytes
Date: Fri, 13 Oct 2017 13:43:07 GMT
Via: 1.1 varnish
Age: 55
Connection: keep-alive
X-Served-By: cache-tw-sto1-1-TWSTO1
X-Cache: HIT
X-Timer: S1507902187.301695,VS0,VE0
Vary: Accept-Encoding,Host
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35431
Md5:    4799575492e7e01dde0e694e51066af6
Sha1:   b49c865d3b3e0a9fc6b70d80a8c05739cea1610d
Sha256: 1b1105b2dfbc50c8179b780750cd03bb024409352bca1519667c0a91c3b1745e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 13:43:07 GMT
Etag: "59e0aafb-1d7"
Expires: Sun, 15 Oct 2017 13:43:07 GMT
Last-Modified: Fri, 13 Oct 2017 12:00:59 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b0fd7ba0d785319befff114b4822bab4
Sha1:   1aae95f74c736e9e5dca0a38ced04cbd0f907e01
Sha256: c022d59434eb1168cb1ed488cfe8b6451a973100eb85605a991cba006a447b6e
                                        
                                            GET /js/pinit_main.js?0.21793403126361954 HTTP/1.1 
Host: assets.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         184.31.10.65
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Etag: "41ce2e0723c6df13001ba436a0d60969"
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Length: 23641
Cache-Control: max-age=235
Connection: keep-alive
Vary: Accept-Encoding, Origin
X-CDN: akamai
Access-Control-Expose-Headers: X-CDN
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   23641
Md5:    41ce2e0723c6df13001ba436a0d60969
Sha1:   694775685fc4151525edc802115eb9da9fcfbb17
Sha256: 8fbf7b00b836a461cc50ac9aab950d0e37d9c610372c848812377f1e91478302
                                        
                                            GET /connect/xd_arbiter/r/18W0fzbK7xg.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Fri, 12 Oct 2018 22:52:00 GMT
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: SniKl2VpZkt3K3zCF5dQrTg2z1x6/YT8uWiX8kqLMXputVXA/Djpyrn3k2RpplyX9cV2jDkIK+iGstFIsJX/YA==
Date: Fri, 13 Oct 2017 13:43:08 GMT
Connection: keep-alive
Content-Length: 14165


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14165
Md5:    8d39c086e6bbfa14b977e55cfb64a61e
Sha1:   0bab824af1cf4108fa2cdd9f8c205168687a6f17
Sha256: e6a3215ff74d68fc2663a198af89df9798578a5dd25fd813828f6b2ed6f14f9e
                                        
                                            GET /proc_2.jsp?actionID=13&ref=&partnerID=0&ip=77.40.129.123 HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: text/html;charset=ISO-8859-1
                                        
Date: Fri, 13 Oct 2017 13:43:06 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26
Md5:    b755383ca3ae1392ed3e021fb54b8262
Sha1:   31ab1cd8787780f5c4140b663da2adebd64cf2a2
Sha256: e5578838f3dcf67d05e09cfc5578acf666cd007ab78be0829feff811f63c150f
                                        
                                            GET /dmwndv.png HTTP/1.1 
Host: i66.tinypic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         8.254.229.248
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 13:43:08 GMT
Content-Length: 60739
Connection: keep-alive
Cache-Control: max-age=21600
Etag: "ed43-52898ae837eae"
Expires: Fri, 13 Oct 2017 19:43:08 GMT
Last-Modified: Tue, 05 Jan 2016 16:25:11 GMT
Accept-Ranges: bytes
Server: Footprint Distributor V4.11
X-Cache: MISS
X-Varnish: 1062823818
X-Varnish-Server: den2tpv65
Age: 0


--- Additional Info ---
Magic:  PNG image, 400 x 300, 8-bit/color RGB, non-interlaced
Size:   60739
Md5:    f8514d38f0f65c96fc4f3eacfff29f6c
Sha1:   17f554ebe4029ca0b58c43c8c726098ce6f01da3
Sha256: 26004352dcf5bb53aff55b3886fef4a02d4d7270034055d324394e58a5947b6e
                                        
                                            GET /proc_2.jsp?actionID=47&language=en-us&type=1 HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: text/html;charset=ISO-8859-1
                                        
Date: Fri, 13 Oct 2017 13:43:06 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26
Md5:    b755383ca3ae1392ed3e021fb54b8262
Sha1:   31ab1cd8787780f5c4140b663da2adebd64cf2a2
Sha256: e5578838f3dcf67d05e09cfc5578acf666cd007ab78be0829feff811f63c150f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 13:43:08 GMT
Etag: "59e080e6-1d7"
Expires: Sun, 15 Oct 2017 13:43:08 GMT
Last-Modified: Fri, 13 Oct 2017 09:01:26 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    1953bb3593ae49dec4b28e875f26e153
Sha1:   2e3f43a45ad1ca6c658be63a2bb6ffa188909b16
Sha256: 24caba545c22b499de0e2902fa5c3cbdcb18876b847e0af79b8d6f83fd2f6b00
                                        
                                            GET /impression.php/f3467f5d308e59a/?lid=115&payload=%7B%22source%22%3A%22jssdk%22%7D HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         31.13.64.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin, Accept-Encoding
public-key-pins-report-only: max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Encoding: gzip
X-FB-Debug: Hz+j29PRsuh2c+C9OSy1RciqDLbTp/Ng9BN38X1VkzPppVzKvoZIlM2YeH4fjTeEajivo0slTqpE28RfbhNADg==
Date: Fri, 13 Oct 2017 13:43:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57
Md5:    9539fdb766538c525a3e11e03853b8c9
Sha1:   cd658fd453cb9e7af5aede2e9c6050d81c0e2fdc
Sha256: 88882a6963e4a4313761bf5e5be68a015ec125c023fba749a9ec0aca7a9124af
                                        
                                            GET /v1/urls/count.json?url=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F2013%2F06%2Famor-de-dinda.html&callback=PIN_1507902188106.f.callback[0] HTTP/1.1 
Host: widgets.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         151.101.112.84
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Origin: *
Cache-Control: must-revalidate, max-age=887
Expires: Fri, 13 Oct 2017 13:58:08 GMT
VCL-backend-name: pinco_02023385_ec2_pin220_com
Via: 1.1 varnish-v4, 1.1 varnish
X-Content-Type-Options: nosniff
X-Pinterest-Host: widgets.pinterest.com
Transfer-Encoding: chunked
Date: Fri, 13 Oct 2017 13:43:08 GMT
Age: 0
Connection: keep-alive
X-Served-By: cache-hhn1551-HHN
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1507902188.403671,VS0,VE87


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   118
Md5:    8bada994fc6f7806e10c2cc3127f84be
Sha1:   f1f7ca7262b979461b2f34831a62c74bff0e766d
Sha256: ac76d5be2888a186bcf94c79e586208d2142a3b41397552bda8768695f8265fd
                                        
                                            GET /v1/urls/count.json?url=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F2013%2F06%2Famor-de-dinda.html&callback=PIN_1507902188106.f.callback[1] HTTP/1.1 
Host: widgets.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         151.101.112.84
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Origin: *
Cache-Control: must-revalidate, max-age=887
Expires: Fri, 13 Oct 2017 13:58:08 GMT
VCL-backend-name: pinco_02023385_ec2_pin220_com
Via: 1.1 varnish-v4, 1.1 varnish
X-Content-Type-Options: nosniff
X-Pinterest-Host: widgets.pinterest.com
Transfer-Encoding: chunked
Date: Fri, 13 Oct 2017 13:43:08 GMT
Age: 0
Connection: keep-alive
X-Served-By: cache-hhn1541-HHN
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1507902188.393125,VS0,VE98


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   118
Md5:    b82533f71ea3b9301f502fb7f21eaaca
Sha1:   4379bab3791a965fd4c62f5d1ea233f7d662935c
Sha256: d54e5160597e1e63e8173bc67937a4cb6eb75c3766461bebd4e6c111099c29bc
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:08 GMT
Expires: Tue, 17 Oct 2017 13:43:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   782
Md5:    f583dce523495467174e1f28987ab332
Sha1:   e3cb5a4068eb82c1e7202576fcf683c49690d775
Sha256: 1ad9933943c5e568a031f2e33bacd15dfcd0cfef0dc35e99d95fef2b74a4296f
                                        
                                            GET /static_ad.jsp HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         75.102.9.71
HTTP/1.1 302 302
                                        
Date: Fri, 13 Oct 2017 13:43:06 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Location: https://www.anunciad.com.br/static_ad.jsp
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /comment-iframe.g?blogID=5030781697751213241&postID=3578403492890436533&blogspotRpcToken=5162963&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 13:43:09 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: S=blogger=RtGKljBG-8d_UkQFpV6RyqRgdUm9DEWT; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1959
Md5:    88a6f0d968b5f6c516d1ceb0299bf43a
Sha1:   e25dc0ac61cfebfc439300b07ba5ba146d2e3f3f
Sha256: ee534cc7846e33ee6baebef153ddafc047283d8d4d3669415bb95ba70547a2eb
                                        
                                            GET /static/v1/v-css/2218177523-cmtfp.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5030781697751213241&postID=3578403492890436533&blogspotRpcToken=5162963&bpli=1
Cookie: S=blogger=RtGKljBG-8d_UkQFpV6RyqRgdUm9DEWT

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3619
Date: Tue, 29 Aug 2017 11:56:29 GMT
Expires: Wed, 29 Aug 2018 11:56:29 GMT
Last-Modified: Tue, 29 Aug 2017 05:41:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 3894400
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3619
Md5:    f11194c1a58fe620f82a69a80d7d1b69
Sha1:   69a5e7ea4398a61a6a597af0b7a7437107bf0cd0
Sha256: 933d248895e0d8967298b63dd4762e2254d2a47112ac6d5130e5c817bcdc668d
                                        
                                            GET /static/v1/jsbin/1846218021-cmt__pt_br.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5030781697751213241&postID=3578403492890436533&blogspotRpcToken=5162963&bpli=1
Cookie: S=blogger=RtGKljBG-8d_UkQFpV6RyqRgdUm9DEWT

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 31057
Date: Fri, 22 Sep 2017 02:16:56 GMT
Expires: Sat, 22 Sep 2018 02:16:56 GMT
Last-Modified: Thu, 21 Sep 2017 22:48:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1855573
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   31057
Md5:    da22d08efba3599124351978f3289f0b
Sha1:   9d564b9dbaaa28303379afabbb7be48ee6c5b0fe
Sha256: fb6463388d671c58fa319e6de6b8780027f870d63ca399fa2b26ce67dfa2f0f4
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:09 GMT
Expires: Tue, 17 Oct 2017 13:43:09 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f99c8fd2106061228e04e44345827db9
Sha1:   3d8a35a963b5d0481e02b6dad5feb9be33471993
Sha256: 57b59a56c619c145d4800ded6e727e32aa7a48e271c8708424527a7576c14f04
                                        
                                            GET /static_ad.jsp HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: text/html;charset=ISO-8859-1
                                        
Date: Fri, 13 Oct 2017 13:43:07 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1013
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1013
Md5:    871a79ac287f6f4ff0231f2ac0248c11
Sha1:   189bd2e912bba80eecb8b1152694916175b53a0e
Sha256: c2dc101afe77ae2c4ae68810a9ef2ad770c8b3e99795268f995c96613619efd4
                                        
                                            GET /img/cmt/close.gif HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5030781697751213241&postID=3578403492890436533&blogspotRpcToken=5162963&bpli=1
Cookie: S=blogger=RtGKljBG-8d_UkQFpV6RyqRgdUm9DEWT

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 347
Date: Tue, 10 Oct 2017 09:27:15 GMT
Expires: Tue, 17 Oct 2017 09:27:15 GMT
Last-Modified: Tue, 10 Oct 2017 05:05:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 274554
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   347
Md5:    6671b9932cbb79a2c2a018ed2c3bf3fb
Sha1:   40566dd706279a44ebd477df58a4cf75ab99cae8
Sha256: df6cb367e3692c4d2056dd69c54bea18458148ef028ce7b998824f9f49ceafd6
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5030781697751213241&postID=3578403492890436533&blogspotRpcToken=5162963&bpli=1

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Tue, 10 Oct 2017 11:07:02 GMT
Expires: Tue, 17 Oct 2017 11:07:02 GMT
Last-Modified: Mon, 09 Oct 2017 21:49:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 268567
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /js/bg/_7krDbof0JW4elAnpriFoXUhMVT27jq8tLT8egbKKaM.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5030781697751213241&postID=3578403492890436533&blogspotRpcToken=5162963&bpli=1
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4730
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Mon, 02 Oct 2017 11:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 70063
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4730
Md5:    d1c9ce8aab342010cded37ef9793bc5b
Sha1:   70e204f6af3ff559200990e5d2cce71f4d7c9b7d
Sha256: 78fc9bd2efadb30fc1bf35b658c56ce5444502468068457d9adf57bda1309e35
                                        
                                            GET /?guid=kUkPzPkGV43b&tv=2017100302&type=pidget&sub=www&button_count=2&follow_count=0&pin_count=0&profile_count=0&board_count=0&lang=en&via=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F2013%2F06%2Famor-de-dinda.html&callback=PIN_1507902188106.f.callback[2] HTTP/1.1 
Host: log.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         151.101.112.84
HTTP/1.1 200 OK
                                        
Accept-Ranges: bytes, bytes
Age: 0
Set-Cookie: _pinterest_cm=TWc9PSZ2T2F5Qnd2UGQwQ1NaTzVQdmdTdEQzWjl4TVljdlI2VzZaTjBCck5JRis4VHBWLzI0MlgyU0FWMGNKSnhtdUtVMFRvOUFVZmpobnNLRkpkK3J6T2VvUitqdGpFdU5UZktaWkZHQVlhL3FaZTRabXBrdWRjck50NDcrb2JKYVYyYSYzWVhtMnZKblBqbmoyUHQrYzRoNy82dXZ3MVk9; Expires=Sat, 13 Oct 2018 13:43:09 GMT; Domain=.pinterest.com
VCL-backend-name: cookiemonster_prod_docker_0a011250_ec2_pin220_com
Via: 1.1 varnish-v4, 1.1 varnish
X-Pinterest-Host: widgets.pinterest.com
Content-Length: 0
Date: Fri, 13 Oct 2017 13:43:09 GMT
Connection: keep-alive
X-Served-By: cache-hhn1547-HHN
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1507902190.611557,VS0,VE98


--- Additional Info ---
                                        
                                            GET /js/mobile_test.js HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2
If-Modified-Since: Mon, 09 Oct 2017 13:59:17 GMT
If-None-Match: W/"2094-1507557557000-gzip"

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 13:43:07 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Accept-Ranges: bytes
Etag: W/"2094-1507557557000-gzip"
Last-Modified: Mon, 09 Oct 2017 13:59:17 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1353
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1353
Md5:    218a70068357ab669052864a3c2fbf66
Sha1:   3213ef974f2f52994144c5f0f3393af71295d392
Sha256: 12c51eee98f1f5be1efe4793c6cfea51237258b2be860493283b7cb6ca7d228c
                                        
                                            GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=_7krDbof0JW4elAnpriFoXUhMVT27jq8tLT8egbKKaM HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=5030781697751213241&postID=3578403492890436533&blogspotRpcToken=5162963&bpli=1
Cookie: S=blogger=RtGKljBG-8d_UkQFpV6RyqRgdUm9DEWT

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 13:43:09 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4551
Md5:    5f84e2d90b557b082eb1a385d255402a
Sha1:   8d0ca0948f634c48cd448246e3b0a2da941a699c
Sha256: 43e2d1b036d4b74132052ad7d6979c37cf688f841608857071934ba1e3ce36dd
                                        
                                            GET /display/0/ HTTP/1.1 
Host: ads.egrana.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: PHPSESSID=v8aubr3g3lb3jrja2g7et01341; poplimit_number=1; 2946265_lasttime=2017-10-13+10%3A42%3A17; _ga=GA1.3.2113106808.1507902185; _gid=GA1.3.1450168134.1507902185; _gat=1

                                         
                                         192.99.104.221
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.0.15
Date: Fri, 13 Oct 2017 13:42:23 GMT
Content-Length: 876
Last-Modified: Tue, 27 Sep 2016 03:49:48 GMT
Connection: keep-alive
Country: NO
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   876
Md5:    f53e015b73af487de3713407e01a130a
Sha1:   4375036cda3832771baf4b385e5468a94656e59c
Sha256: efc09c0cdf3c91982330505bfe29fe716ef67fbbd66a39c198b40f0bfe78cef0
                                        
                                            GET /banner/criteo/300x250/ HTTP/1.1 
Host: ads.egrana.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: PHPSESSID=v8aubr3g3lb3jrja2g7et01341; poplimit_number=1; 2946265_lasttime=2017-10-13+10%3A42%3A17; _ga=GA1.3.2113106808.1507902185; _gid=GA1.3.1450168134.1507902185; _gat=1

                                         
                                         192.99.104.221
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.0.15
Date: Fri, 13 Oct 2017 13:42:23 GMT
Content-Length: 278
Last-Modified: Fri, 11 Nov 2016 00:02:03 GMT
Connection: keep-alive
Country: NO
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text
Size:   278
Md5:    de8cbca6a76b0e81f49308cdcf0d6054
Sha1:   1fa9b29395133c10ba1c713fa5ab8ebe83124a14
Sha256: b4da2d4c2c717e98dcd01668026f9f37eb3e1ee1e458d137dba454c75c113681
                                        
                                            GET /plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         31.13.64.35
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true
X-FB-Debug: X/mn69qO4CT6tyLmbPs6VnSx2bxrb2g8y/+4s6Dk15WYSljCfeLCZSgrFO+/0LHqAJdG4S3sv0yTilsrV4PehQ==
Date: Fri, 13 Oct 2017 13:43:10 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /2a0j779.png HTTP/1.1 
Host: i68.tinypic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         8.254.229.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 13:43:09 GMT
Content-Length: 2920
Connection: keep-alive
Cache-Control: max-age=21600
Etag: "b68-5293cc82079aa"
Expires: Fri, 13 Oct 2017 19:43:10 GMT
Last-Modified: Wed, 13 Jan 2016 20:11:55 GMT
Accept-Ranges: bytes
Server: Footprint Distributor V4.11
X-Cache: MISS
X-Varnish: 1531365817
X-Varnish-Server: den2tpv63
Age: 1


--- Additional Info ---
Magic:  PNG image, 333 x 40, 8-bit/color RGBA, non-interlaced
Size:   2920
Md5:    fe89732f106f96586aea34364e6ea9a6
Sha1:   55e1231e1813f7c46bc1b80e8814d0019f84f134
Sha256: 830d57bcab5b3785a3740a2e81ca7ac178ee076ffc8b92681a30cb52fe64b0d2
                                        
                                            GET /colored.js HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         146.185.16.146
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.9.6
Date: Fri, 13 Oct 2017 13:43:10 GMT
Last-Modified: Wed, 11 Oct 2017 21:18:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"59de8abb-14d0"
Expires: Fri, 13 Oct 2017 13:44:10 GMT
Cache-Control: max-age=60, private
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2089
Md5:    7789e12a4bc3b05a100d8321642300b0
Sha1:   54646f5367d809cc834d19f48be059d70adf0d44
Sha256: b416e522356f0d72041fed1b4e7cf6b63080b9be1d832d4ca74c7fb64c0086a8
                                        
                                            GET /counter/counter.js HTTP/1.1 
Host: www.statcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.egrana.com.br/display/0/

                                         
                                         174.35.41.122
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 13:43:10 GMT
Server: PWS/8.3.0.8
X-Px: ht h0-s34.p1-arn.cdngp.net
Etag: W/"59034540-7083"
Cache-Control: max-age=43200
Expires: Fri, 13 Oct 2017 18:42:11 GMT
Age: 25259
Content-Length: 10411
Content-Encoding: gzip
Vary: Accept-Encoding
Last-Modified: Fri, 28 Apr 2017 13:36:00 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10411
Md5:    76fd35609823ca67dff9d7be59b45e36
Sha1:   b5d1acf76d05f59c5b237ccd864fe2ac500720ad
Sha256: 0881d77aaf767a2e38bda49eb01953c4a3a18c98b4d794ab74f4acf85352a0fb
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25913
Date: Thu, 12 Oct 2017 19:31:33 GMT
Expires: Fri, 12 Oct 2018 19:31:33 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 65497
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   25913
Md5:    fd21efbec11b2c67b8f0854cbf4311a8
Sha1:   9aa980fab60d633d2f06f6f87886897d736e3347
Sha256: dfff7a03b55ac90c8634260f6386ca821b39cc5dcbf3209d672f6fac6544e293
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&size=medium&annotation=bubble&hl=pt_BR&origin=http%3A%2F%2Fdeixandomelhordemim.blogspot.no&url=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F2013%2F06%2Famor-de-dinda.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 13:43:10 GMT
Date: Fri, 13 Oct 2017 13:43:10 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4049
Md5:    11879fddb09302a042e2cb9fee7a28da
Sha1:   08b4b05eae92c3880ca16a13178089723efce9fa
Sha256: f40f98a63d76854a2464d6de8fa350b51d40cd89862d9def90ce7cafe12f4051
                                        
                                            GET /collect?v=1&_v=j64&a=344315598&t=pageview&_s=1&dl=http%3A%2F%2Fads.egrana.com.br%2Fdisplay%2F0%2F&dr=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F2013%2F06%2Famor-de-dinda.html&ul=en-us&de=ISO-8859-1&sd=24-bit&sr=1176x885&vp=&je=1&fl=10.0%20r45&_u=AACAAEQAI~&jid=&gjid=&cid=2113106808.1507902185&tid=UA-69974125-2&_gid=1450168134.1507902185&z=944437825 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.egrana.com.br/display/0/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 12 Oct 2017 18:15:40 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 70050


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /js/ld/publishertag.js HTTP/1.1 
Host: static.criteo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.egrana.com.br/banner/criteo/300x250/

                                         
                                         178.250.0.74
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Oct 2017 13:43:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"59d37d13-ed54"
Expires: Sat, 14 Oct 2017 13:43:10 GMT
Cache-Control: max-age=86400, public
Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17158
Md5:    2296b4ee2d20008ee9be240a9081be71
Sha1:   ff8951233656408215f9e90cf1440627af39c439
Sha256: c9576c629beb627462b25c5d238fccf79e7bd4b52fd591915773cf2171829ac2
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:10 GMT
Expires: Tue, 17 Oct 2017 13:43:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c26d19cfb2cf80da024dca34a52d07ee
Sha1:   20e7a5a5251819a67413644d22a48cc29e58231b
Sha256: 1d8888fe4341af8b314cdff3bf4ab478b14824141d5bd044a9332a78cec3cf94
                                        
                                            GET /proc_2.jsp?actionID=47&language=en-us&type=1 HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: text/html;charset=ISO-8859-1
                                        
Date: Fri, 13 Oct 2017 13:43:08 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26
Md5:    b755383ca3ae1392ed3e021fb54b8262
Sha1:   31ab1cd8787780f5c4140b663da2adebd64cf2a2
Sha256: e5578838f3dcf67d05e09cfc5578acf666cd007ab78be0829feff811f63c150f
                                        
                                            GET /proc_2.jsp?actionID=13&ref=&partnerID=0&ip=77.40.129.123 HTTP/1.1 
Host: www.anunciad.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: JSESSIONID=3C8AD9E8E4631341E1D4ACAF22C614F2

                                         
                                         75.102.9.71
HTTP/1.1 200 200
Content-Type: text/html;charset=ISO-8859-1
                                        
Date: Fri, 13 Oct 2017 13:43:08 GMT
Server: Apache
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26
Md5:    b755383ca3ae1392ed3e021fb54b8262
Sha1:   31ab1cd8787780f5c4140b663da2adebd64cf2a2
Sha256: e5578838f3dcf67d05e09cfc5578acf666cd007ab78be0829feff811f63c150f
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes/exm=auth,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 903
Date: Thu, 12 Oct 2017 20:30:00 GMT
Expires: Fri, 12 Oct 2018 20:30:00 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 61990
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   903
Md5:    86eef041cfa118f615707b21f13dc01d
Sha1:   419a7e1c5a24df06218f48e143468355c87639e3
Sha256: b6fc531de134b544c4d4ff81876e31d2d87fd004f3dd11e54a42d18c9db47324
                                        
                                            GET /translate_static/js/element/main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1512
Date: Fri, 13 Oct 2017 13:37:24 GMT
Expires: Fri, 13 Oct 2017 14:37:24 GMT
Last-Modified: Thu, 14 Sep 2017 18:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 346
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1512
Md5:    f0face2803929896766489beb403daed
Sha1:   6670aacb37bac6bb335ce13cb4d8f427f567e222
Sha256: 4702156d6e0ba94a770ce765d30be717a51be393b2f34fcdb9ac237e091adbe1
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&size=medium&annotation=bubble&hl=pt_BR&origin=http%3A%2F%2Fdeixandomelhordemim.blogspot.no&url=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F2013%2F06%2Famor-de-dinda.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 18:17:58 GMT
Expires: Fri, 12 Oct 2018 18:17:58 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 69912
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdeixandomelhordemim.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc; GAPS=1:LNlWfiE_b2jdqUxh0qGGrh1DiYxNew:IA9W8dfg6Dj2G3No

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 13:43:10 GMT
Date: Fri, 13 Oct 2017 13:43:10 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy-Report-Only: script-src 'unsafe-inline' https: http:;object-src 'none';base-uri 'none';report-uri /_/cspreport
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   364
Md5:    0912e16bbecae1b7a9dd308e1de74880
Sha1:   e463c6658b4664fc833abb1532ccfc80d3854773
Sha256: 983bdddc052955655e8bbeb1d5e815a84884618819cffa19130d4e00749aaa24
                                        
                                            GET /plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         31.13.64.35
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
public-key-pins-report-only: max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Pragma: no-cache
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: private, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: SOorhnAzgGJs0Mq9jSbYlxVv11GYauhD5KAO7QhsMg+mlW/anNHGjLf06Dpq8+yDHePjW2y6lV1NiPDy+WGygg==
Date: Fri, 13 Oct 2017 13:43:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   52776
Md5:    f6221e8d06c927eca3ba95124e0b59bc
Sha1:   51dffbb58d8b946a1eb094167166f46a3eb6e869
Sha256: 199fe4f8314003cb8f4e448b58861d72c38756f283875d5a950d995a9e4784fc
                                        
                                            GET /element/TE_20170911_00/e/js/element/element_main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 87012
Date: Thu, 12 Oct 2017 20:18:40 GMT
Expires: Fri, 12 Oct 2018 20:18:40 GMT
Last-Modified: Mon, 11 Sep 2017 09:50:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 62671
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   87012
Md5:    cbb78a2bb94e17d53ca2e6bf22af703d
Sha1:   f5e1c8525c0ee3451c1b198231c546a40656ab4e
Sha256: 815ef68dd0a3233c6a7a3522d2c62b05a2aaba850c7aac1f056dfa952ab707ff
                                        
                                            GET /u/103852546/popup/popup.js HTTP/1.1 
Host: dl.dropbox.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         162.125.65.6
HTTP/1.1 302 FOUND
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 13:43:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: sandbox
Location: http://dl.dropboxusercontent.com/u/103852546/popup/popup.js
Pragma: no-cache
Cache-Control: no-cache
X-Dropbox-Request-Id: dba18cf1c4f4a054aa49ef449435b923
X-Robots-Tag: noindex, nofollow, noimageindex


--- Additional Info ---
Magic:  HTML document text
Size:   382
Md5:    80b7879da1883e7deaaad50820397784
Sha1:   d50537c7caf1ea56669d2d0e54ab63eb7d2f56c8
Sha256: 6a062d1e320df118169997919cc1bd5789f96a1522866b94fe0f06b4d776427d

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3619
Date: Fri, 13 Oct 2017 12:44:27 GMT
Expires: Fri, 13 Oct 2017 13:44:27 GMT
Last-Modified: Tue, 03 Jan 2017 23:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 3523
Cache-Control: public, max-age=3600
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3619
Md5:    026feece41808720d7daf983e1aeecad
Sha1:   277a95ad77e6bd2a3be17ea406628fa24c771379
Sha256: 07805211e21a7433cc8c05f820a0f86aca292d9139828a97196540ec60ccfdad
                                        
                                            GET /rsrc.php/v3/yS/r/Z65O4gEW-yl.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Fri, 12 Oct 2018 16:12:27 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: jfmV+ofFCI7ermn+6q0MSw==
X-FB-Debug: I8ixw93SAnZqTOJD46lqxk9IUYcIokqbCQ3WlNAkGx5EZ61Kk29PXv9J69vbxee/fWZJmSysMF4PRGNWcW4HzQ==
Date: Fri, 13 Oct 2017 13:43:11 GMT
Connection: keep-alive
Content-Length: 26241


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26241
Md5:    8df995fa87c5088edeae69feeaad0c4b
Sha1:   211231ae1e490c86f41671017e1e470c321d0d1d
Sha256: 085849d7838de28763d94ed29acacccb5892a8a664c30b174783fc713474aaf4
                                        
                                            GET /u/103852546/popup/popup.js HTTP/1.1 
Host: dl.dropboxusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         162.125.65.6
HTTP/1.1 302 FOUND
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 13:43:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: sandbox
Set-Cookie: uc_session=eKc8YqLYCV3WeYHITjIKDX3k8hBZvOxminHuds7ajAXER9zabMJB7UvOIk0xciFY; Domain=dropboxusercontent.com; httponly; Path=/; secure
Location: https://dl.dropboxusercontent.com/u/103852546/popup/popup.js
Pragma: no-cache
Cache-Control: no-cache
X-Dropbox-Request-Id: 8e53885d3b1b1bf78489035066c4e867
X-Robots-Tag: noindex, nofollow, noimageindex


--- Additional Info ---
Magic:  HTML document text
Size:   384
Md5:    741cebbd74d360878b2e59c518ba136b
Sha1:   a0c8c75dfcbed7e99d77cd1daec508735d93413d
Sha256: 22e06e3556d8ea63d36c994b9a1c7c4eb59091b1e8c3d076941ef337fb7cdf35
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 13:43:11 GMT
Expires: Tue, 17 Oct 2017 13:43:11 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0a14338a299b2c02742cd6f9e33596b0
Sha1:   a69501c94549c32d1b3b25358a2305e9d628ea16
Sha256: c3cc36c99da38011eda1ff5ddf24d8367eb22fd9668046f8c4857ddb55e7b82e
                                        
                                            GET /rsrc.php/v3/y_/r/bxirnlxHghe.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Sat, 13 Oct 2018 00:37:24 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: hj4cMmjoQ6O2k2KKUr18Mw==
X-FB-Debug: HRR9X0zUH7+l44ZQDmzYpP/m5qva9ArvzCiXdGMaGSU2VniS85ol4Blg7xGdhD8aokgx3vJSqHlJYHotnceQlA==
Date: Fri, 13 Oct 2017 13:43:11 GMT
Connection: keep-alive
Content-Length: 77141


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   77141
Md5:    863e1c3268e843a3b693628a52bd7c33
Sha1:   02a6c088896311fddf6943b7f0d01286242db155
Sha256: 1b4d27bbc748167601691008ed5b0467d98c9246b1827d50b954ee17c5a357f0
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdeixandomelhordemim.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 70065
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdeixandomelhordemim.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "862447553fc7f21eefa0f5321e562c86"
Expires: Fri, 13 Oct 2017 13:43:11 GMT
Date: Fri, 13 Oct 2017 13:43:11 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5456
Md5:    ac397d26c01a6b9c4c4d6abbf610a356
Sha1:   1a8c65bc3c48432c46b2310760c418447d2c3a2a
Sha256: 06d9001b61ee40837e6221e22b1b50401463180d73d293a96418bdebd935fa1d
                                        
                                            GET /rsrc.php/v3/yE/r/8MeOXfBTdXA.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Fri, 12 Oct 2018 15:33:34 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: r4upqxb6LmdvLds1FdolyA==
X-FB-Debug: DL1RQ4TDAI51AMhQyLTt95NAPJMwZ9PYPvsAaGZKuLA3iyPuCb0RQRIJNaiPbc1je1v4NtLfNC27Qcbh+ZAksA==
Date: Fri, 13 Oct 2017 13:43:11 GMT
Connection: keep-alive
Content-Length: 10855


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10855
Md5:    af8ba9ab16fa2e676f2ddb3515da25c8
Sha1:   434ac805ab9431fea6896a0fd40171b265d4f850
Sha256: f322cfee9c739185578c61b235c8f99d6c5c8f37100eff1756e313b104dca6f2
                                        
                                            GET /rsrc.php/v3/yy/l/0,cross/YEFRU12WhKa.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Fri, 12 Oct 2018 19:16:19 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: vzy5KL8gt5wKOqxLp/RTJg==
X-FB-Debug: 7D+u1CYbvfbzQDFn9rT89RSAhAwO9CyjPaozezjKtR9iZA9peS/loKN0C/NtaP4UKBhb1NJ81VMx1S9wQBVbAw==
Date: Fri, 13 Oct 2017 13:43:11 GMT
Connection: keep-alive
Content-Length: 8130


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8130
Md5:    bf3cb928bf20b79c0a3aac4ba7f45326
Sha1:   c87aba9307b720ed9e09f4b95bebb4ba5bb05282
Sha256: bcb70da430f2851349d30bb62d3914b066287fc8f1cd7cbb13bd536fb2d3d4af
                                        
                                            GET /t.php?sc_project=10701105&java=1&security=42115fcb&u1=BEA54E2FD5DA4F4DB8187238270BF971&sc_random=0.9468440248165538&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1176&h=885&camefrom=http%3A//deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html&u=http%3A//ads.egrana.com.br/display/0/&t=&rcat=r&rdom=deixandomelhordemim.blogspot.no&rdomg=new&bb=1&sc_snum=1&sess=7a9eb4&p=0&invisible=1 HTTP/1.1 
Host: c.statcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.egrana.com.br/display/0/

                                         
                                         104.20.2.47
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 13:43:11 GMT
Content-Length: 49
Connection: keep-alive
Set-Cookie: __cfduid=de3c970c6fa4c089d3b91a34e149d4d1c1507902191; expires=Sat, 13-Oct-18 13:43:11 GMT; path=/; domain=.statcounter.com; HttpOnly is_unique=sc10701105.1507902191.0; expires=Wed, 12-Oct-2022 13:43:11 GMT; path=/; domain=.statcounter.com is_visitor_unique=1507902191278864183; expires=Sun, 13-Oct-2019 13:43:11 GMT; path=/; domain=.statcounter.com
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: cloudflare-nginx
CF-RAY: 3ad2b9fa964e4273-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    56398e76be6355ad5999b262208a17c9
Sha1:   a1fdee122b95748d81cee426d717c05b5174fe96
Sha256: 2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fdeixandomelhordemim.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=H9oUuihJ7V-Kp-DvRlpNBobhYUCCMrLlO2Jzv5hS8YRLQVPM4epD4y2zAW9dDkeIRYFzMX-NJfpsP5FEVq2vtTmZLKBTtt3rCOmC9t_fY7nG0ur-av886_KGbM5yiSBc

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 18:17:59 GMT
Expires: Fri, 12 Oct 2018 18:17:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 69912
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            GET /followers.g?blogID=5030781697751213241&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByNmYzcxY2MqC3RyYW5zcGFyZW50MgcjZmM3MWNjOgcjNjY2NjY2QgcjZmM3MWNjSgcjZmM3MWNjUgcjZmM3MWNjWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&postID=3578403492890436533&origin=http%3A%2F%2Fdeixandomelhordemim.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: S=blogger=RtGKljBG-8d_UkQFpV6RyqRgdUm9DEWT

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 13:43:11 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3468
Md5:    10a128870fe24edc1621e8888649c481
Sha1:   8ebfbed09f8d6218bc526ad4e6eb739cb2f064c5
Sha256: beb4b47d2a7d634d4246d55fc3d7ceb9c39670c71f2a02e1638c9eb41be4d2a6
                                        
                                            GET /u/103852546/popup/popup.js HTTP/1.1 
Host: dl.dropboxusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html
Cookie: uc_session=eKc8YqLYCV3WeYHITjIKDX3k8hBZvOxminHuds7ajAXER9zabMJB7UvOIk0xciFY

                                         
                                         162.125.65.6
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 13:43:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Dropbox-Request-Id: ce96599595b21bef78785866951ad92b
X-Robots-Tag: noindex, nofollow, noimageindex
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1558
Md5:    cf9beb49f3fd5960066b1c0ffa55157b
Sha1:   971c3f4422b0de4bf2e5cfb4fe8e440bc21cd67a
Sha256: 98252b41b67167b9fe43b948f0bb42da78f925af37c7350f4a52065eb1e5f075
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 13:43:12 GMT
Etag: "59e08a36-1d7"
Expires: Sun, 15 Oct 2017 13:43:12 GMT
Last-Modified: Fri, 13 Oct 2017 09:41:10 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9cdb6f8503e03c1ff8eaa8658dcf274b
Sha1:   045fe9646fea21a622c209b4a4256ff251eb9454
Sha256: 22995d6f3c08764eadfffc78fcf195e5a8a8054a694815861f850c4460fbd1da
                                        
                                            GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com/borboleteza&width=300&colorscheme=light&show_faces=true&border_color=%23ffffff&stream=false&header=false&height=258 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://deixandomelhordemim.blogspot.no/2013/06/amor-de-dinda.html

                                         
                                         31.13.64.35
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fborboleteza&width=300&colorscheme=light&show_faces=true&border_color=%23ffffff&stream=false&header=false&height=258
X-FB-Debug: IIElQ77atdm+GCSlwrHFhuro9XCH0FUFr3OXf3AexJ3q5MszAbvi2VVVJg6FJE+0+OxR3R83g+NO7nWmArHh+g==
Date: Fri, 13 Oct 2017 13:43:12 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /v/t1.0-1/p50x50/17309625_1226324297487031_7305145371675019971_n.jpg?oh=edfe26ab7b2167ab13c521e362d93256&oe=5A3EEEC6 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 20 Mar 2017 18:14:18 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Wed, 11 Oct 2017 20:55:33 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:13 GMT
Connection: keep-alive
Content-Length: 1723


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1723
Md5:    21f3516852d2311902d233754088edd9
Sha1:   82a70928289c9493994de8f09243dba6b62147a2
Sha256: 249ec2279889109ec97d9d470cbd01a15256f751a2a004e76951cb61c3a90610
                                        
                                            GET /v/t1.0-1/p50x50/14063802_1691427277849286_4837555641328224622_n.jpg?oh=86e4d39f26d7fc5f3744e9d334de5101&oe=5A6CDA8C HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 23 Aug 2016 00:17:11 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Mon, 23 Oct 2017 12:24:36 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:13 GMT
Connection: keep-alive
Content-Length: 1956


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1956
Md5:    df2962213acafa4faadd74c55923c6ce
Sha1:   795fe50d92b9463664dfb8b995f6eaca24ad30f8
Sha256: fdfbd83889ba6e42967d5b124bb0393e0d808c288b6c2c03d8ebf4ae87f74bba
                                        
                                            GET /v/t1.0-1/p50x50/14721628_1302219166465437_2615087526964189252_n.jpg?oh=ad7ded9ff4e893509339ad4decd1860e&oe=5A6C147E HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 17 Oct 2016 00:39:52 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Thu, 26 Oct 2017 08:41:30 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:13 GMT
Connection: keep-alive
Content-Length: 2087


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   2087
Md5:    92f60af599bbf2455cb283b872f488fa
Sha1:   120cba959461cb68a3092f26b9dd3f07782f9c51
Sha256: a5a4d024ae8a63fec45d991c15c94e04eb19fcaaf6399f914073f1c3854481cd
                                        
                                            GET /v/t1.0-0/p130x130/12512599_1118502054835992_189809351759576432_n.jpg?oh=5f8b9666394d4f7bc32bb8d4bb9e30c5&oe=5A768AF3 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Fri, 15 Jan 2016 16:56:31 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Fri, 27 Oct 2017 13:43:13 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:14 GMT
Connection: keep-alive
Content-Length: 14839


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   14839
Md5:    bc6ffac9a9177b3f2bc3b1887dda9b27
Sha1:   f393e01b58f4a66a185bdf3eeca2026e689f2310
Sha256: fb6968b45074cb08b51b44a24226868bf24c98f7d234cc03c04ca74437826089
                                        
                                            GET /v/t1.0-1/p50x50/12400553_1118502328169298_4174012648830100801_n.jpg?oh=7816d89c40e00a4a68a193a2c535fdf2&oe=5A84282A HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Fri, 15 Jan 2016 16:57:34 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Fri, 27 Oct 2017 13:43:13 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:13 GMT
Connection: keep-alive
Content-Length: 2036


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   2036
Md5:    9de447e2be2d4715a1c9294d34bf3a40
Sha1:   23712d181fb405d2d8b3b1b2752b1da85b59a5fd
Sha256: c82d647aaa950c8c4166eb7255c7a8ccda15d2d055105bdf6bf94bdf8366b54b
                                        
                                            GET /v/t1.0-1/p50x50/18447476_2003577293241500_5354367036307480077_n.jpg?oh=fb5935a727c82f1c04105b6ecab1af23&oe=5A6BE330 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 15 May 2017 00:31:13 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Sun, 22 Oct 2017 16:36:45 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:13 GMT
Connection: keep-alive
Content-Length: 1878


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1878
Md5:    5b81f50e41b94f149be2c28b79d051b4
Sha1:   bb9bb2d3b6e4a23ce0984758d2c345e6fab40282
Sha256: 90a6f791ddfd4aec35da973d1462edcf84afc4f9d98f86632c6d7a74506fc580
                                        
                                            GET /v/t1.0-1/p50x50/14610966_1754414368112495_27206193279977002_n.jpg?oh=f53bab9654ed86e12ea4100545e40a9a&oe=5A3EDBA1 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Thu, 20 Oct 2016 13:08:11 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Fri, 27 Oct 2017 13:43:14 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:14 GMT
Connection: keep-alive
Content-Length: 1624


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1624
Md5:    938aecefba76275194f65545d795424b
Sha1:   dd58f70d7d9de6e08b4278b08f245d027c994b7b
Sha256: 56401e1bb3afa816fd923f1ea876db0feba81d7410fbfc5bf37adb9353e539b9
                                        
                                            GET /v/t1.0-1/p50x50/22007865_1516576025089948_6952070463530705291_n.jpg?oh=7371541f5918e83d7a4c806f5622aa8b&oe=5A6F443A HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 25 Sep 2017 12:14:42 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Fri, 27 Oct 2017 13:43:13 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:14 GMT
Connection: keep-alive
Content-Length: 1959


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1959
Md5:    d0befa165573dda76d74ecdf3b11072c
Sha1:   5c6b27b776dd65b64f677ecff60c4c3368a41a56
Sha256: 4e608f18552c4a43927899c7db36c239634fc3a134a657b18d139216e2f2d0ef
                                        
                                            GET /v/t1.0-1/p50x50/17309232_875601135916442_3304578540946057198_n.jpg?oh=b131b4e93031e4ef22ad156fdcedb758&oe=5A74D3D1 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fdeixandomelhordemim&width=300&height=300&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 13 Mar 2017 18:46:36 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Expires: Fri, 27 Oct 2017 13:43:13 GMT
Cache-Control: max-age=1209600, no-transform
Date: Fri, 13 Oct 2017 13:43:14 GMT
Connection: keep-alive
Content-Length: 1897


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1897
Md5:    6caa6c16d333537b1546a5021263b1bb
Sha1:   62259676028b31dcc6b5a60dc00556ce30fea6bd
Sha256: 8a8f5501c7154663b319959625fa0ea6f9eeabe4821812a50557ace0d8e6a07c
                                        
                                            GET /rsrc.php/v3/y_/r/ApcBOUT5FoS.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yy/l/0,cross/YEFRU12WhKa.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Tue, 09 Oct 2018 18:59:10 GMT
Content-MD5: Y/eW3MWFNJnkcpEqoXzG3Q==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: y2wk8UbBByjWsDENVs93v+PN+9vBRZg33gBtUJ23RN/DJniZBc/d5+BYLWdPbemtxlMghi/86nexsoqunfRWKQ==
Date: Fri, 13 Oct 2017 13:43:13 GMT
Connection: keep-alive
Content-Length: 573


--- Additional Info ---
Magic:  PNG image, 13 x 39, 8-bit colormap, non-interlaced
Size:   573
Md5:    63f796dcc5853499e472912aa17cc6dd
Sha1:   3d519b48fff2a1d66488eded1fcd58c521f52f86
Sha256: 641e03dfeee60c05e0794bace5fc58d2fba409fee529a114459e44cee0d9d069
                                        
                                            GET /images/branding/product/1x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/pn