Overview

URL 1001-life-insurances.blogspot.com.br/
IP216.58.211.129
ASNAS15169 Google Inc.
Location United States
Report completed2017-11-23 09:46:50 CET
StatusLoading report..
urlquery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2017-11-23 09:53:01 CET 1  94.130.90.152 Client IP ET POLICY Request for Coinhive Browser Monero Miner M2


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-11-23 2 1001-life-insurances.blogspot.com.br/ Malware
2017-11-23 2 1001-life-insurances.blogspot.no/ Malware
2017-11-23 2 1001-life-insurances.blogspot.no/ Malware
2017-11-23 2 coinhive.com/lib/coinhive.min.js Malware
2017-11-23 2 1001-life-insurances.blogspot.no/%3C!--Can%27t%20find%20substitution%20for% (...) Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.58.211.129

Date UQ / IDS / BL URL IP
2018-12-14 13:20:12 +0100
0 - 0 - 2 leticiafelinetransex.blogspot.com/2009/08/fri (...) 216.58.211.129
2018-12-14 13:19:49 +0100
0 - 0 - 4 sakizimu.blogspot.com/2009/07/uykusuzluk-hata (...) 216.58.211.129
2018-12-14 13:19:41 +0100
0 - 0 - 2 bancofotografias.blogspot.no/2009/07/lo-mejor (...) 216.58.211.129
2018-12-14 13:19:28 +0100
0 - 0 - 3 p0rt666.blogspot.com/search/label/anti%20virus 216.58.211.129
2018-12-14 13:19:14 +0100
0 - 0 - 2 nude-boobs-girls.blogspot.no/2012/10/playboy- (...) 216.58.211.129
2018-12-14 13:18:49 +0100
0 - 0 - 2 oshitt-s.blogspot.com.ar/search/label/envivo 216.58.211.129
2018-12-14 13:18:20 +0100
0 - 0 - 1 adjiecheaterhacker.blogspot.com.es/2013/09/ca (...) 216.58.211.129
2018-12-14 13:18:19 +0100
0 - 0 - 2 sexyasianfucked.blogspot.hk/search/label/cute (...) 216.58.211.129
2018-12-14 13:17:54 +0100
0 - 0 - 2 jennywilliams.blogspot.ca/search/label/maker% (...) 216.58.211.129
2018-12-14 13:17:50 +0100
0 - 0 - 3 i-am-a-new-mommy.blogspot.com.es/2012/05 216.58.211.129

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2018-12-14 14:12:08 +0100
0 - 0 - 2 cutecelebswallpaper.blogspot.mx/2012/09/emily (...) 216.58.207.225
2018-12-14 14:11:18 +0100
0 - 2 - 0 redirector.gvt1.com/edgedl/release2/chrome/ab (...) 216.58.207.238
2018-12-14 14:11:11 +0100
0 - 1 - 0 r5---sn-p5qs7n76.gvt1.com/edgedl/release2/chr (...) 74.125.155.219
2018-12-14 14:06:43 +0100
0 - 0 - 2 tecnologiaymuchascosasmas.blogspot.com.es/201 (...) 216.58.207.225
2018-12-14 14:05:38 +0100
0 - 0 - 1 paytodomyessay.blogspot.com/2013/11/macbeth-p (...) 216.58.207.225
2018-12-14 14:04:29 +0100
0 - 0 - 4 crackowrld.blogspot.in/search/label/Windows%2 (...) 216.58.209.129
2018-12-14 14:03:40 +0100
0 - 0 - 5 eclissidelmondo.blogspot.it/2014/11/misterios (...) 216.58.209.129
2018-12-14 14:03:33 +0100
0 - 0 - 2 capitalstrokebulliontips.blogspot.ca/2013/04/ (...) 216.58.209.129
2018-12-14 14:03:08 +0100
0 - 0 - 2 amwayinfovn.blogspot.com/2013/05/7-tac-dung-c (...) 216.58.209.129
2018-12-14 14:02:25 +0100
0 - 0 - 2 rocketmansblazinghotguys.blogspot.com.es/2013 (...) 216.58.209.129

Last 9 reports on domain: 1001-life-insurances.blogspot.com.br

Date UQ / IDS / BL URL IP
2017-11-10 09:42:57 +0100
2 - 0 - 6 1001-life-insurances.blogspot.com.br/ 172.217.22.161
2017-10-29 08:44:05 +0100
2 - 1 - 6 1001-life-insurances.blogspot.com.br/ 74.125.205.132
2017-10-23 13:18:05 +0200
2 - 1 - 5 1001-life-insurances.blogspot.com.br/ 172.217.22.161
2017-10-16 09:28:07 +0200
2 - 1 - 5 1001-life-insurances.blogspot.com.br/ 172.217.22.161
2017-10-13 00:59:35 +0200
2 - 1 - 5 1001-life-insurances.blogspot.com.br/search 172.217.22.161
2017-10-11 09:12:14 +0200
2 - 1 - 5 1001-life-insurances.blogspot.com.br/search/l (...) 173.194.221.132
2017-10-11 09:12:12 +0200
2 - 1 - 5 1001-life-insurances.blogspot.com.br/search/l (...) 173.194.221.132
2017-10-11 09:12:07 +0200
2 - 1 - 4 1001-life-insurances.blogspot.com.br/search/l (...) 173.194.221.132
2017-10-11 09:12:06 +0200
2 - 1 - 5 1001-life-insurances.blogspot.com.br/search/l (...) 173.194.221.132


JavaScript

Executed Scripts (49)


Executed Evals (0)


Executed Writes (5)

#1 JavaScript::Write (size: 103, repeated: 1) - SHA256: 43e0dbb6a890e121a97f6c5e42cd458e143f984ad22caf53bc58f6770cf225f5

                                        < img src = "<!--Can't find substitution for tag [post.thumbnailUrl]-->"
alt = "German Blonde Is The Best" / >
                                    

#2 JavaScript::Write (size: 93, repeated: 1) - SHA256: ba0121b5e642c3d079f978651be1c45ec4fe95e097e6b4a656c224ff6279e072

                                        < img src = "<!--Can't find substitution for tag [post.thumbnailUrl]-->"
alt = "Hot German Wife" / >
                                    

#3 JavaScript::Write (size: 155, repeated: 1) - SHA256: 6ef13738ddad49919d252ff96936c39363efdac1f3a470f6b01dffabe50bf3c3

                                        < img src = "<!--Can't find substitution for tag [post.thumbnailUrl]-->"
alt = "It&#39;s A Party, It&#39;s A Parade, It&#39;s Tons Of Hot Latinas Celebrating" / >
                                    

#4 JavaScript::Write (size: 107, repeated: 1) - SHA256: 69278979d2c31d8bc95a449752180318f630c39cfe2fe74f7ed032e780856bad

                                        < img src = "<!--Can't find substitution for tag [post.thumbnailUrl]-->"
alt = "These Girls Are Party Animals" / >
                                    

#5 JavaScript::Write (size: 102, repeated: 1) - SHA256: 5b44c3079a610d04e4fa82bac6bf53079627594bdaced1df1372f78b40d90a0f

                                        < script src = "/feeds/posts/summary?max-results=1&alt=json-in-script&callback=hitungtotaldata" > < /script>
                                    


HTTP Transactions (88)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: 1001-life-insurances.blogspot.com.br
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.129
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://1001-life-insurances.blogspot.no/
Content-Encoding: gzip
Date: Thu, 23 Nov 2017 08:52:50 GMT
Expires: Thu, 23 Nov 2017 08:52:50 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 186
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   186
Md5:    40376d72626210fd9f477be0168ab59f
Sha1:   b4fc678dda3000ec5e2719068d722fa6e8fb39a5
Sha256: 9f4588e579d47977b73b74d3a8224aa23ec75eeb11b753721c99b83d4c8fe8ea

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET / HTTP/1.1 
Host: 1001-life-insurances.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 23 Nov 2017 08:52:50 GMT
Date: Thu, 23 Nov 2017 08:52:50 GMT
Cache-Control: private, max-age=0
Last-Modified: Sun, 23 Jul 2017 09:58:35 GMT
Etag: W/"aeef99a8903767175deb12c02f9fbe0787f9fa31aaba8834a5ca1d464063413d"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 43914
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   43914
Md5:    509890288a816cad2512a2ae1e85fdcb
Sha1:   2b52b9cae78e16c6ea3870f93a6066e55db6a1e9
Sha256: 37d27daaf07bcb32a04d1afbe57eb609b836541ba680f733cda29e8a9d3014b0

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /css/graddit.css HTTP/1.1 
Host: static.graddit.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         104.28.8.76
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 23 Nov 2017 08:52:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d9ce84b7eec05c465459136c89f2dcc641511427171; expires=Fri, 23-Nov-18 08:52:51 GMT; path=/; domain=.graddit.com; HttpOnly
Last-Modified: Sat, 25 Apr 2015 17:20:22 GMT
Etag: W/"553bccd6-314b"
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Thu, 23 Nov 2017 10:52:51 GMT
Cache-Control: public, max-age=7200
Server: cloudflare-nginx
CF-RAY: 3c22e50b969642c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2337
Md5:    dfa0daa25e78200e40f9571312ec9ae5
Sha1:   568ffde7fb25a6263e31bfa58df1dab40cf8833b
Sha256: 803a55513376be5fab56f6faa9eb38fb8dae0bc428867b15fd59c6c95fedf2e7
                                        
                                            GET /css?family=Oswald HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 23 Nov 2017 08:52:51 GMT
Date: Thu, 23 Nov 2017 08:52:51 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   190
Md5:    e4df1d574b456106ca8e6852e8d033f0
Sha1:   dc963b6fb8da76fa0b78ff4889765170f587260b
Sha256: e29772c81f1fd7e58d3b7ad69a6a12b3b997d18e450bb6e31074ea5516957ab9
                                        
                                            GET /css?family=PT+Sans+Narrow HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 23 Nov 2017 08:52:51 GMT
Date: Thu, 23 Nov 2017 08:52:51 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   212
Md5:    74fe35ac30d4ec2268e9cc775f87eb05
Sha1:   8c0f060669b1a2120dcdc5a8a555f683ca9a571a
Sha256: 6bec4d812b19d90f337c8da2a6c2adacbc596ec4b453851fe7959510a77f31ca
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Nov 2017 08:52:51 GMT
Expires: Mon, 27 Nov 2017 08:52:51 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fa44b28105cff243f0fc2aa48a07da51
Sha1:   3d105bd2e7e258e4aa6317d6691fc920511955c8
Sha256: bdc34baf973bb27bfe6334e25abaaaebd55593a09a64b57e8dc53ef6f3169074
                                        
                                            GET /24211643151/jquery.easing.js HTTP/1.1 
Host: yourjavascript.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         80.241.212.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset: UTF-8
                                        
Server: nginx
Date: Thu, 23 Nov 2017 08:52:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public


--- Additional Info ---
Magic:  UTF-8 Unicode C program text, with CRLF line terminators
Size:   8301
Md5:    a6f75e0c043a2a087837e5c113cc6f7a
Sha1:   c6f74009a95b2d6f9c7b39ec121a4ca53a490a04
Sha256: e4273399cc0bc22e58b35f9f79fdf2705a39ddf4ad918ce852f2624e271d8248
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Nov 2017 08:52:51 GMT
Expires: Mon, 27 Nov 2017 08:52:51 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /static/v1/widgets/3332739511-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7982
Date: Wed, 15 Nov 2017 04:08:23 GMT
Expires: Thu, 15 Nov 2018 04:08:23 GMT
Last-Modified: Tue, 14 Nov 2017 15:31:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 708268
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7982
Md5:    d342012bb968e58616411584557ea607
Sha1:   8e698a3e4a67432fd5b28eb68a7d00ce52bc13f5
Sha256: 4e02127ac31a445d8ebb1681f44c2ceb56e7e55d1d2a443a80962909b0c23467
                                        
                                            GET /jquery-1.8.3.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         151.139.237.113
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Thu, 23 Nov 2017 08:52:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 Oct 2014 00:16:07 GMT
Vary: Accept-Encoding
Etag: W/"54499a47-40f49"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   96625
Md5:    fc345cc666e4723a9d03b2621b12dfb1
Sha1:   a4b0d132bef1430dde86dbf1059670e3074a4439
Sha256: d80cae0232bd6ffe42be7f1559c0f25294b1d3905d1ee4268373ddc79175e320
                                        
                                            GET /jquery-2.1.1.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         151.139.237.113
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Thu, 23 Nov 2017 08:52:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 Oct 2014 00:16:07 GMT
Vary: Accept-Encoding
Etag: W/"54499a47-3c637"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   89265
Md5:    8eda8f2e67f0b05454b9737205d2f334
Sha1:   abc4f5d34a8923bedc92cb6d455165b683636913
Sha256: d86a75d4eae0cf75d997facaa2278440804f14e9f4313f2b99ea4e6415bc0592
                                        
                                            GET /-wqzYVSTa638/UQrc7C0UP3I/AAAAAAAABgU/TgbAOmzXLAs/s1600/home.gif HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "va2f"
Expires: Fri, 24 Nov 2017 08:29:02 GMT
Content-Disposition: inline;filename="home.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:29:02 GMT
Server: fife
Content-Length: 1157
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 1429


--- Additional Info ---
Magic:  GIF image data, version 89a, 21 x 21
Size:   1157
Md5:    4c4d5a137d02ca4414dfe2e76084c7a0
Sha1:   f5b0e9627a211af31faeb95b74f85471c07cc8e5
Sha256: ff33e9e45ece6b5b9099f38e8e0a246865d21330f4f6300f2f9dc6498c7441d6
                                        
                                            GET /-Es4rPAZpSEA/VO-9j025emI/AAAAAAAAAA8/v0-_VsrrI3I/s930/sun%2Blogo.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v10"
Expires: Sun, 19 Nov 2017 11:34:19 GMT
Content-Disposition: inline;filename="sun logo.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:47:26 GMT
Server: fife
Content-Length: 4937
X-XSS-Protection: 1; mode=block
Age: 325
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 50 x 50, 8-bit/color RGBA, non-interlaced
Size:   4937
Md5:    ec96de9adb433356cd5275b700162ca8
Sha1:   129635c9d3a7c80cc6a31fa529720bae1a19ed55
Sha256: c2f14ee0930eb95756034a91fa5e7e27eb22f2201d9de9f0a420a0b967df6a39
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Nov 2017 08:52:51 GMT
Expires: Mon, 27 Nov 2017 08:52:51 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c234079534b37cc5de02d3a42616e000
Sha1:   69636d89be627acb527ea14c17dfd8ec9439c6f8
Sha256: 4918930bf57f27ed5451a6277371e170fdd41ec7f632e87564e8b70c4fa6ad1e
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=400922, public, no-transform, must-revalidate
Last-Modified: Tue, 21 Nov 2017 00:13:03 GMT
Expires: Tue, 28 Nov 2017 00:13:03 GMT
Date: Thu, 23 Nov 2017 08:52:51 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    5112333f315fd89eef0f972d7cc1f5ce
Sha1:   cc8f5aed733b4165b40caa993777fe8f7a50ebfb
Sha256: d86a3e6cc6de3add8ff4f1219c063675f9522111e3a8f0c5ce915ca1c8f533c3
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Wed, 22 Nov 2017 04:47:45 GMT
Expires: Wed, 29 Nov 2017 04:47:45 GMT
Last-Modified: Tue, 21 Nov 2017 15:41:38 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 101106
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=6428404289940887029&zx=4b9aa89a-da4f-4d97-a422-4cfa395f1c98 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Thu, 23 Nov 2017 08:52:51 GMT
Date: Thu, 23 Nov 2017 08:52:51 GMT
Last-Modified: Thu, 23 Nov 2017 08:52:51 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET / HTTP/1.1 
Host: 1001-life-insurances.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/
If-Modified-Since: Sun, 23 Jul 2017 09:58:35 GMT
If-None-Match: W/"aeef99a8903767175deb12c02f9fbe0787f9fa31aaba8834a5ca1d464063413d"

                                         
                                         216.58.211.129
HTTP/1.1 304 Not Modified
                                        
Expires: Thu, 23 Nov 2017 08:52:51 GMT
Date: Thu, 23 Nov 2017 08:52:51 GMT
Cache-Control: private, max-age=0
Etag: W/"aeef99a8903767175deb12c02f9fbe0787f9fa31aaba8834a5ca1d464063413d"
Server: GSE


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /-EZyIk5avkHk/URJ9koETxtI/AAAAAAAAB9s/NNAmTygwDLo/s1600/slider-shadow.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7db"
Expires: Fri, 24 Nov 2017 06:31:58 GMT
Content-Disposition: inline;filename="slider-shadow.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:07:04 GMT
Server: fife
Content-Length: 4689
X-XSS-Protection: 1; mode=block
Age: 2747
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 920 x 37, 8-bit/color RGBA, non-interlaced
Size:   4689
Md5:    1d24b4ff5151e7b8878d56d65f0aa6fa
Sha1:   ec0f914563296f88a244105f9ff2e1f01ff67029
Sha256: 89598e1e429a3cc3e90d4de48e68102c23a333aa6ef00842eac98e98c0b19db5
                                        
                                            GET /ajax/libs/jquery/1.6.2/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.201.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 32245
Date: Thu, 09 Nov 2017 08:29:05 GMT
Expires: Fri, 09 Nov 2018 08:29:05 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1211026
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32245
Md5:    68ab59808bd9d610989e90a6a72de1c9
Sha1:   37e30026185877bbe73d9794a9b30083ae0709fe
Sha256: e730036ff9a2dea35ee12350105dca51535e909c854f51fe0e131a8292f73f6b
                                        
                                            GET /-AIW512aa4Ms/URJ2uXZh45I/AAAAAAAAB9c/QMul0JdxpNs/s1600/outerpic.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7d7"
Expires: Fri, 24 Nov 2017 08:29:58 GMT
Content-Disposition: inline;filename="outerpic.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:29:58 GMT
Server: fife
Content-Length: 573
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 1373


--- Additional Info ---
Magic:  PNG image, 3 x 360, 8-bit/color RGBA, non-interlaced
Size:   573
Md5:    9d6d0849e0f88f04ba6044729a7bf332
Sha1:   91194bb1f839c4ab78e48367084ffb6ca7da5a28
Sha256: 20559eee8ae65c5a706e7c348960d7fad2a08b02e75f4861f6c66b4bf2c452cc
                                        
                                            GET /-IeHXc7J7dZs/URLRwVeKocI/AAAAAAAACFA/OepYPORtIII/s1600/menuh.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v850"
Expires: Fri, 24 Nov 2017 08:29:58 GMT
Content-Disposition: inline;filename="menuh.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:29:58 GMT
Server: fife
Content-Length: 196
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 1373


--- Additional Info ---
Magic:  PNG image, 5 x 60, 8-bit/color RGBA, non-interlaced
Size:   196
Md5:    af8a1d93aa40aadbf1f260df21bc2f80
Sha1:   7b1f56fffb743cf880bcd946851a873fe44855e8
Sha256: 55fb946d0c7e56072bb1855932f6df8583a5c4fa4e78a2ec49f3a352dd4d25c5
                                        
                                            GET /-K4hNJ9YcB7I/URKRQe-RbaI/AAAAAAAAB_c/bGaB_wyqaoA/s1600/dotted.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7f7"
Expires: Fri, 24 Nov 2017 08:30:23 GMT
Content-Disposition: inline;filename="dotted.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:30:23 GMT
Server: fife
Content-Length: 155
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 1348


--- Additional Info ---
Magic:  PNG image, 3 x 3, 8-bit/color RGBA, non-interlaced
Size:   155
Md5:    068bd1f856006d35692c1bdfae79b6a6
Sha1:   b5904975c385f3623cc9d5cf90b555b8e5e9ce7c
Sha256: 68545da4030bd7eac3700eb6c90475da521a97655bae6c755960a66a1b1649cc
                                        
                                            GET /-UzQSVqe350A/URJhGaHsGqI/AAAAAAAAB7s/UVJaEnVxtc8/s1600/body.gif HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "va1c"
Expires: Fri, 24 Nov 2017 08:23:14 GMT
Content-Disposition: inline;filename="body.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:23:14 GMT
Server: fife
Content-Length: 23343
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 1777


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200
Size:   23343
Md5:    6f52f16e0c8869759029f92150fac68f
Sha1:   d7171b0111ecbc51953fb6a6a0fcb639c9aacdb2
Sha256: 0ba65009d2629977348e7cc30414a518b21b8fe7f50351fcead70764219b9bb2
                                        
                                            GET /s/oswald/v16/-g5pDUSRgvxvOl5u-a_WHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Oswald
Origin: http://1001-life-insurances.blogspot.no

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18936
Date: Wed, 15 Nov 2017 03:54:57 GMT
Expires: Thu, 15 Nov 2018 03:54:57 GMT
Last-Modified: Tue, 07 Nov 2017 15:18:39 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 709074


--- Additional Info ---
Magic:  data
Size:   18936
Md5:    ca70f49a133f08485bd05d5cb28ef8b7
Sha1:   9029570f276ed6b7d2895ced7175f958fb6c1c5f
Sha256: a7a4038c6fbb19ba522819188aed0ff204d80e19223b1cab388a290a8d5e47fe
                                        
                                            GET /embed/782501/240_180 HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         78.140.183.138
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: lang=en; expires=Fri, 24-Nov-2017 08:52:51 GMT; Max-Age=86400; path=/; domain=.drtuber.com search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D; expires=Thu, 23-Nov-2017 20:52:51 GMT; Max-Age=43200; path=/; domain=.drtuber.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2149
Md5:    4d8e89a39e40ca747f2b915d6a3f1286
Sha1:   bcbe6a363e20b29d0ba9634f96afc7af71cde731
Sha256: 5ed01702bb239f29e4dbcb7f6392d0517cfbf9a1dc37e2907c5d56fc8b911900
                                        
                                            GET /s/ptsansnarrow/v8/UyYrYy3ltEffJV9QueSi4RdbPw3QSf9R-kE0EsQUn2A.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=PT+Sans+Narrow
Origin: http://1001-life-insurances.blogspot.no

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 43448
Date: Wed, 15 Nov 2017 03:48:19 GMT
Expires: Thu, 15 Nov 2018 03:48:19 GMT
Last-Modified: Wed, 11 Oct 2017 18:30:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 709473


--- Additional Info ---
Magic:  data
Size:   43448
Md5:    60264058b23ab6faa42699a5e0035dd0
Sha1:   14b7e7a94d024e4b3720b28afdf60287ea9a58a5
Sha256: 9cf3e7ccecfc228a2914f09141df6f86084e16da0a9a29b4d38613d6598cac1a
                                        
                                            GET /embed/820318/240_180 HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         78.140.183.138
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: lang=en; expires=Fri, 24-Nov-2017 08:52:52 GMT; Max-Age=86400; path=/; domain=.drtuber.com search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D; expires=Thu, 23-Nov-2017 20:52:52 GMT; Max-Age=43200; path=/; domain=.drtuber.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2170
Md5:    355cb70300610dbb268eec332102bff6
Sha1:   c788110dff0086065fd8fbf064cc325a94e9983b
Sha256: 94df3c23c47ef1a1800709abf18a9d75852665c305df875d3bc1dfa8acfffa07
                                        
                                            GET /templates/base_master/libs/jquery/jquery-1.10.0.min.js?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 27 Aug 2014 14:24:56 GMT
Expires: Sun, 01 Apr 2018 23:40:09 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jrw9Ng=
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38101
Md5:    8b39c49d26aebffb5a023be64d07073c
Sha1:   c83f46bdf04c907b1cb4c7efdd37030014749fd6
Sha256: f42ab01c810ffe56c5b668f90bb0955e4ec3299f9d584e207c7279caa5b31b3c
                                        
                                            GET /218437119/halamanav.js HTTP/1.1 
Host: yourjavascript.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         80.241.212.33
HTTP/1.1 200 OK
Content-Type: text/javascript; charset: UTF-8
                                        
Server: nginx
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public


--- Additional Info ---
Magic:  ASCII C program text, with very long lines, with CRLF line terminators
Size:   5361
Md5:    0b26ad0b1f8e8c99dd6377b77a6606e2
Sha1:   9423d1bb932af7237412b2d39e02a1e55eb23fcf
Sha256: c5c2a9a025bfb657e029f79941deca6f66878ecb129672f20cc774590cb84d81
                                        
                                            GET /embed/813840/240_180 HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.183.138
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: lang=en; expires=Fri, 24-Nov-2017 08:52:52 GMT; Max-Age=86400; path=/; domain=.drtuber.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2166
Md5:    c4e9ca83844621f57f5c730e28af821e
Sha1:   51e3277f7359545a831fd1fbff2942ba1f02fc62
Sha256: f6b3f2fa72e5ea8056d713a24efafc451ee9375a5f0f35bbd6111fc84ab55de5
                                        
                                            GET /templates/base_master/js/html5_video/player.js?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 30 Oct 2017 14:03:52 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvdSM7F5UC+pXF6dvmFXc
Expires: Wed, 11 Apr 2018 21:49:49 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13453
Md5:    e0d5146faa3e770a867c01126d4e2160
Sha1:   c095af712e68cea6a23d9e60c94ec9d9ac71178e
Sha256: 3916e35c5d308c36a67434af24df85a26374444db2b98a1d20a324b81c452e3a
                                        
                                            GET /templates/base_master/js/html5_video/ui-assets.js?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 24 Oct 2016 16:11:41 GMT
Expires: Sun, 01 Apr 2018 23:39:54 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15070
Md5:    056ef0a1440336d618f559edc31e4d51
Sha1:   9ae2e3610c160d89623660efdee1e37e59055f21
Sha256: 8c78f01d2ba764dd4c1549020ccaef166e6a7c3f04e5ead2ac04ac54288a60a4
                                        
                                            GET /templates/base_master/js/jquery.ui.touch-punch.min.js?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 13 Oct 2017 12:57:18 GMT
Expires: Tue, 03 Apr 2018 20:49:29 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   607
Md5:    d2cc48b85ed36c9d3a03501841b8a95f
Sha1:   05e4418170e01112c33d6c71e8be98aa1858427b
Sha256: b9dd2aeb03594d3a485991bdc9c917cfce097f1615ee8b2b4cbff6df153b7d08
                                        
                                            GET /templates/base_master/js/swfobject.js?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 06 Nov 2014 11:37:37 GMT
Expires: Sun, 01 Apr 2018 21:20:15 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2481
Md5:    4fa1c609d3c5b568a40f0cce9ebf6563
Sha1:   5bbcb1dd35e84db379f5ce2ada00dd255072ca52
Sha256: ae5dba59bac5dbe46f5cf41b95a90c84ebd593f38e01e14091e73eafd55b86d3
                                        
                                            GET /templates/base_master/js/jquery.cookie.js?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 06 Nov 2014 11:37:37 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpxyZGTR3eqMPN9B2gQ+pX9WwxPZo9HzULqSoQ==
Expires: Mon, 02 Apr 2018 07:48:54 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   721
Md5:    0a22e00f8de0f58e90d2d8ea21998593
Sha1:   5bd1b8a7757a0b25e230fbc918c9dd5cad50b241
Sha256: 32791a3254f53b00bfc24322d5ded4e8dc22426daa16afce99b74c8a7f0dd6a9
                                        
                                            GET /templates/base_master/js/html5_video/styles.css?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 19 Oct 2017 09:41:03 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpxyZGTR3eqMPN9B2gQ+pX9WwxPZo9HzULqTqQ==
Expires: Sat, 31 Mar 2018 17:26:51 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6223
Md5:    1b323b487357bfd51ddebf0b6beb8254
Sha1:   95438675c48338196c34e0a5bcda5383e74f7c80
Sha256: 4ffc055ca47eef9d10ea951059c9f9c26858524e8313a1042c2d49eb03ed94ba
                                        
                                            GET /templates/drtuber/html5_video/theme.css?v=21.78 HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Tue, 31 Oct 2017 11:03:41 GMT
Expires: Thu, 12 Apr 2018 18:49:35 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRPQJJojIIxlPBJ4TIUlhJw=
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1297
Md5:    28188f3712c66dee03c72e97e26096e0
Sha1:   0c815d0b32ab934a4bda4841a0495535edd0dad6
Sha256: c0e4e7e5f3d7f9feb78eb688dd79e6a31088cf7b574229a1a57bde3253638ed4
                                        
                                            GET /templates/drtuber/css/embed.css?v=21.78 HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 05 Dec 2016 14:53:36 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRPQJJojIIxlPBJ4TIV8RKxXnHKPlRhxE9NM0g==
Expires: Sun, 01 Apr 2018 23:38:09 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   359
Md5:    03d23d2bec9ebd75bbad83a54e480d2f
Sha1:   19d8ca01bfc6c68f9fa56fde61e992a1fb61b072
Sha256: f89db89dbbb72952db1c577f5e3ad6647bb658947b3419b7d9b7fbf00013f2ee
                                        
                                            GET /templates/drtuber/js/jquery.adx.embed.js?v=21.78 HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 01 Jul 2016 13:48:25 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRPQJJojIIxlPBJ4TIV8RKxXnHKPlRhxE9NM0w==
Expires: Sun, 01 Apr 2018 23:38:10 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4497
Md5:    b87e58594206e40e9a7984d7a813a865
Sha1:   089d61f0e460922e5ce512eba090029c8dbd6c32
Sha256: 8d8723fe610a24f65c1fae4ebfd2a94200c29792886e1a6f715da47ffb70e066
                                        
                                            GET /templates/drtuber/css/embed.css?v=21.78 HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/820318/240_180

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 05 Dec 2016 14:53:36 GMT
Expires: Sun, 01 Apr 2018 23:38:09 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jrw9Ng=
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   359
Md5:    03d23d2bec9ebd75bbad83a54e480d2f
Sha1:   19d8ca01bfc6c68f9fa56fde61e992a1fb61b072
Sha256: f89db89dbbb72952db1c577f5e3ad6647bb658947b3419b7d9b7fbf00013f2ee
                                        
                                            GET /templates/drtuber/js/jquery.adx.embed.js?v=21.78 HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/820318/240_180

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 01 Jul 2016 13:48:25 GMT
Expires: Sun, 01 Apr 2018 23:38:10 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jrw9Ng=
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4497
Md5:    b87e58594206e40e9a7984d7a813a865
Sha1:   089d61f0e460922e5ce512eba090029c8dbd6c32
Sha256: 8d8723fe610a24f65c1fae4ebfd2a94200c29792886e1a6f715da47ffb70e066
                                        
                                            GET /templates/drtuber/html5_video/theme.css?v=21.78 HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/820318/240_180

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Tue, 31 Oct 2017 11:03:41 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jqpgi3vf2bjWb2BZCa/TQ==
Expires: Thu, 12 Apr 2018 18:49:35 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1297
Md5:    28188f3712c66dee03c72e97e26096e0
Sha1:   0c815d0b32ab934a4bda4841a0495535edd0dad6
Sha256: c0e4e7e5f3d7f9feb78eb688dd79e6a31088cf7b574229a1a57bde3253638ed4
                                        
                                            GET /feeds/posts/summary?max-results=1&alt=json-in-script&callback=hitungtotaldata HTTP/1.1 
Host: 1001-life-insurances.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Etag: W/"993b82ead52e54b048f0c50cfd18dd880ea014383b4ebb19981b9bee35e6fbe5"
Date: Thu, 23 Nov 2017 08:52:53 GMT
Server: blogger-renderd
Expires: Thu, 23 Nov 2017 08:52:54 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Last-Modified: Sun, 23 Jul 2017 09:58:35 GMT
Content-Encoding: gzip
Content-Length: 12750
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   12750
Md5:    2753ca9fc56a27722fe89ec47b93b2f2
Sha1:   bd3b27c5c3e53a7d26773336b87346eacfe0ea3b
Sha256: fb633f6b747e44459e4a708641b1d0b4905fb4656e2d2523e506a381006b5a46
                                        
                                            GET /templates/drtuber/html5_video/theme.css?v=21.78 HTTP/1.1 
Host: p5.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/813840/240_180

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Tue, 31 Oct 2017 11:03:41 GMT
Expires: Thu, 12 Apr 2018 18:49:35 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRPQJJojIIxlPBJ4TIUlhJw=
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1297
Md5:    28188f3712c66dee03c72e97e26096e0
Sha1:   0c815d0b32ab934a4bda4841a0495535edd0dad6
Sha256: c0e4e7e5f3d7f9feb78eb688dd79e6a31088cf7b574229a1a57bde3253638ed4
                                        
                                            GET /templates/base_master/js/html5_video/switch.js?v=21.78 HTTP/1.1 
Host: static.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Content-Length: 495
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 04 Oct 2017 16:35:42 GMT
Etag: "59d50dde-1ef"
Expires: Wed, 04 Apr 2018 00:27:34 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   495
Md5:    73704ca08d56484366ce8aeb92de9a61
Sha1:   5c4880a2159b6c3afb222ec8cb8507724de19dcc
Sha256: f3033b242fb79a5361b2438930aad894f9e371b8e097bd91ce4e408c5f0097bd
                                        
                                            GET /templates/drtuber/css/embed.css?v=21.78 HTTP/1.1 
Host: p5.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/813840/240_180

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 05 Dec 2016 14:53:36 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRPQJJojIIxlPBJ4TIV8RKxXnHKPlRhxE9NM0g==
Expires: Sun, 01 Apr 2018 23:38:09 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   359
Md5:    03d23d2bec9ebd75bbad83a54e480d2f
Sha1:   19d8ca01bfc6c68f9fa56fde61e992a1fb61b072
Sha256: f89db89dbbb72952db1c577f5e3ad6647bb658947b3419b7d9b7fbf00013f2ee
                                        
                                            GET /templates/drtuber/js/jquery.adx.embed.js?v=21.78 HTTP/1.1 
Host: p5.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/813840/240_180

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 01 Jul 2016 13:48:25 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRPQJJojIIxlPBJ4TIV8RKxXnHKPlRhxE9NM0w==
Expires: Sun, 01 Apr 2018 23:38:10 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4497
Md5:    b87e58594206e40e9a7984d7a813a865
Sha1:   089d61f0e460922e5ce512eba090029c8dbd6c32
Sha256: 8d8723fe610a24f65c1fae4ebfd2a94200c29792886e1a6f715da47ffb70e066
                                        
                                            GET /-6p_AqXL70hQ/UQWPHMObw9I/AAAAAAAABZ0/f2UWIvjFkSQ/s1600/footerli.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v59d"
Expires: Thu, 23 Nov 2017 14:47:41 GMT
Content-Disposition: inline;filename="footerli.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 23 Nov 2017 08:45:14 GMT
Server: fife
Content-Length: 3569
X-XSS-Protection: 1; mode=block
Age: 460
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 4 x 7, 8-bit/color RGBA, interlaced
Size:   3569
Md5:    280d0cd69675c12bf752cceabb1502f7
Sha1:   931dd6d7487c744e2daaa36b565e14775775e4ea
Sha256: a71cc9c7f45d47492b0bf18a95262af257a63a5e5b16bc28dd55e78d686714af
                                        
                                            GET /player/videoplayer.swf?v=21.78 HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/782501/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.183.138
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2017 11:07:08 GMT
Etag: W/"588f1e5c-1e25b"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   123316
Md5:    70ebd041742f550cd3e6f7d87fd540c5
Sha1:   6fc593202c7f1d91aca202d3b2b959a4ad15ae78
Sha256: 8a7b667097f02f63ff46470adc2a039156390f888cbce4afc222d19c9c5059e4
                                        
                                            GET / HTTP/1.1 
Host: www.cebr.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         52.0.7.30
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 23 Nov 2017 8:52:50 GMT
Connection: Keep-Alive
Content-Length: 288
Content-Encoding: gzip
Cache-Control: private, no-cache, no-store, max-age=0
Expires: Mon, 01 Jan 1990 0:00:00 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   288
Md5:    1730178b7fd1df00dedbfed07f26f906
Sha1:   9d54f1fab0c8d5da0ae6781431d96106e90015ce
Sha256: d77a9442e53e632160eed8ae32946ac3fd4ef232acf7e894ad92766f6b982531
                                        
                                            GET / HTTP/1.1 
Host: www.cebr.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         52.0.7.30
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 23 Nov 2017 8:52:55 GMT
Connection: Keep-Alive
Content-Length: 288
Content-Encoding: gzip
Cache-Control: private, no-cache, no-store, max-age=0
Expires: Mon, 01 Jan 1990 0:00:00 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   288
Md5:    1730178b7fd1df00dedbfed07f26f906
Sha1:   9d54f1fab0c8d5da0ae6781431d96106e90015ce
Sha256: d77a9442e53e632160eed8ae32946ac3fd4ef232acf7e894ad92766f6b982531
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Nov 2017 08:52:56 GMT
Server: Apache
Last-Modified: Mon, 20 Nov 2017 09:41:05 GMT
Expires: Mon, 27 Nov 2017 09:41:05 GMT
Etag: 61E0BBD1EA8E8CF8D26CCE472126F0BEB860AD64
Cache-Control: max-age=347888,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9f10599811c071d4b28d21641848cf13
Sha1:   61e0bbd1ea8e8cf8d26cce472126f0beb860ad64
Sha256: d88472373ecd860fe07b06b5109d8355bc903093cd517c1c9355121a6a4df3cb
                                        
                                            GET /player/videoplayer.swf?v=21.78 HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/820318/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D
If-Modified-Since: Mon, 30 Jan 2017 11:07:08 GMT
If-None-Match: W/"588f1e5c-1e25b"

                                         
                                         78.140.183.138
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:56 GMT
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2017 11:07:08 GMT
Etag: "588f1e5c-1e25b"


--- Additional Info ---
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.8
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 14 Nov 2017 08:44:30 GMT
Etag: "60c-55ded653e1e84"
Accept-Ranges: bytes
Content-Length: 1548
Date: Thu, 23 Nov 2017 08:52:56 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1548
Md5:    daa117c244b4288dd26762f5453b48da
Sha1:   ca1c278fb39c4bf57caac9b5715e22da5117d5f0
Sha256: da898c058b631f7fedd990eb9826150a5a78b402544c17cb856172a89b83a9dd
                                        
                                            GET /player_config/?h=6fa8e218b85bf979931dd8ad7433d52d&embed=1&check_speed=1&t=1511427171&ref=http%3A%2F%2F1001-life-insurances.blogspot.no%2F&vkey=8da61143dd901f9b5713&pkey=bb253b5f6dad39ebe58917db54a6eaf3&aid=&domain_id= HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.183.138
HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: lang=en; expires=Fri, 24-Nov-2017 08:52:56 GMT; Max-Age=86400; path=/; domain=.drtuber.com
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4457
Md5:    632874c383427f1af901881610bb223f
Sha1:   6a49b2dd5551f7f100d6371439b051d297147f7d
Sha256: 5a162fb2e850659794aec76167702063d13dc8bdc7fb033a01b642d2f48a92bb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Nov 2017 08:52:56 GMT
Server: Apache
Last-Modified: Mon, 20 Nov 2017 11:43:12 GMT
Expires: Mon, 27 Nov 2017 11:43:12 GMT
Etag: 11004B91144454E88D93A119B0671493B8895369
Cache-Control: max-age=355215,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp13
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    db68061c74459fb6f547e77eeeab3894
Sha1:   11004b91144454e88d93a119b0671493b8895369
Sha256: 84d638072eb08d490de46ba4de92589ea350321ae7fe43b383d12d3f27a00feb
                                        
                                            GET /player/videoplayer.swf?v=21.78 HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.drtuber.com/embed/813840/240_180
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D
If-Modified-Since: Mon, 30 Jan 2017 11:07:08 GMT
If-None-Match: W/"588f1e5c-1e25b"

                                         
                                         78.140.183.138
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:56 GMT
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2017 11:07:08 GMT
Etag: "588f1e5c-1e25b"


--- Additional Info ---
                                        
                                            GET /player_config/?h=0a612466e871eccf40d8ed7cdbee8a2d&embed=1&check_speed=1&t=1511427172&ref=http%3A%2F%2F1001-life-insurances.blogspot.no%2F&vkey=dd389e87899a092f77cb&pkey=362cb1bbeba83de8ef7aef4e890b22ab&aid=&domain_id= HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.183.138
HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: lang=en; expires=Fri, 24-Nov-2017 08:52:56 GMT; Max-Age=86400; path=/; domain=.drtuber.com
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4560
Md5:    fdd29953484e5c24e1556826734fef59
Sha1:   dc93d1dbd5b3c0deaaeda6af5cb7863fe0084c99
Sha256: 2c7b01b43091cf213fe867d92d4f9e6f8ce1ae357e81dc967d1f9014faab4cca
                                        
                                            GET /crossdomain.xml HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:57 GMT
Content-Length: 211
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 09 Dec 2013 15:12:48 GMT
Etag: "52a5ddf0-d3"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksR/TPc8mI5LNvl2Jqp05ty4gLXTJg7QKAjLJ
Expires: Wed, 04 Apr 2018 18:37:54 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  XML document text
Size:   211
Md5:    1f900d0f762fc8b437076655577d6d8c
Sha1:   d12d756ad7b12f944d3a6d6aac4b6834022b16e0
Sha256: e939190aee3e77930a5c574de1d1419922d5545cacff0210e4cc54c74cc3816c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Nov 2017 08:52:57 GMT
Server: Apache
Last-Modified: Mon, 20 Nov 2017 11:43:12 GMT
Expires: Mon, 27 Nov 2017 11:43:12 GMT
Etag: A6D67F8F767A8E11ADCE9C123D842E81A6FCD08D
Cache-Control: max-age=355214,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp13
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bc10b784ffb311635a9af78acbc545ba
Sha1:   a6d67f8f767a8e11adce9c123d842e81a6fcd08d
Sha256: e961c099a5d5809c00cd0de266fcad1e9a29bee3361a4f5bb6745629d55c5b7e
                                        
                                            GET /2zv6 HTTP/1.1 
Host: cnhv.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cebr.info/

                                         
                                         94.130.128.243
HTTP/1.1 200 OK
Content-Type: text/html; Charset=UTF-8;charset=UTF-8
                                        
Server: nginx
Date: Thu, 23 Nov 2017 08:52:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1108
Md5:    b3baa58ee8e668cd4f3e1f9025a30585
Sha1:   4d363334b444e38304cfa4f84b53523193e36bdc
Sha256: a624c960d713020e8318303f625d5505a8316e81cc457670a46dc7e607c7b158
                                        
                                            GET /crossdomain.xml HTTP/1.1 
Host: p2.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:57 GMT
Content-Length: 211
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 09 Dec 2013 15:12:48 GMT
Etag: "52a5ddf0-d3"
Expires: Wed, 04 Apr 2018 18:37:54 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  XML document text
Size:   211
Md5:    1f900d0f762fc8b437076655577d6d8c
Sha1:   d12d756ad7b12f944d3a6d6aac4b6834022b16e0
Sha256: e939190aee3e77930a5c574de1d1419922d5545cacff0210e4cc54c74cc3816c
                                        
                                            GET /media/shortlink.css HTTP/1.1 
Host: cnhv.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cnhv.co/2zv6

                                         
                                         94.130.128.243
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Thu, 23 Nov 2017 08:52:57 GMT
Content-Length: 961
Last-Modified: Tue, 26 Sep 2017 07:47:32 GMT
Connection: keep-alive
Etag: "59ca0614-3c1"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   961
Md5:    2cb84b46522579a06d2cc3b2d29ca39c
Sha1:   7d4ca936c8f476311d43e34e17e6c4311e1523bf
Sha256: 5106a9c761b8783ca6e395c2bb4189a2fdfd129b2ba8c509d5017541f3ad74f2
                                        
                                            GET /templates/drtuber/player/logo_normal.svg HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 22 Jun 2016 13:11:40 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksR/TPc8mI5LNvl2Jqp05ty4gLXTJg7QKAjPA
Expires: Sun, 01 Apr 2018 23:38:13 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1146
Md5:    7ab0ba27e6e7076b4fd1d93e8ba75d0e
Sha1:   de76f744a709965222a6c266d0130a2b08005676
Sha256: 6f8ddc4a94a75a49aa006c4b83340264da5053c7c07da0574c1b2b9994c3ab56
                                        
                                            GET /templates/drtuber/player/logo_hover.svg HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 22 Jun 2016 13:11:40 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRbRLJojIL786F2C+AqzsyHL7XTPYMLM8CCSWA==
Expires: Sun, 01 Apr 2018 23:38:16 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1485
Md5:    82c6de39af179f1a868f09301fc24717
Sha1:   ee7239e799da30fbc3b99bda6ccc710a9afc75ec
Sha256: ea476b91066155007f0b4a2b81f444bf858cafe12a9eb837a7a289e77eee9b89
                                        
                                            GET /player_config/?h=0a612466e871eccf40d8ed7cdbee8a2d&embed=1&check_speed=1&t=1511427172&ref=http%3A%2F%2F1001-life-insurances.blogspot.no%2F&vkey=4e2f33cfa4eeb5ee403d&pkey=3d591b1316558687c0f4923329ab4487&aid=&domain_id= HTTP/1.1 
Host: www.drtuber.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: lang=en; search_filter_new=ch%3D178.1.2.3.4.7.8.5.9.10.169.11.12.13.14.15.16.17.18.28.20.21.22.27.23.24.25.26.30.31.32.181.35.36.37.180.176.38.33.34.39.40.41.42.177.44.43.45.47.48.46.49.50.51.52.53.54.55.56.57.58.179.59.60.61.62.63.64.65.66.69.68.71.67.70.72.73.74.75.182.183.77.76.78.79.80.81.82.84.85.88.86.87.91.90.92.93.94.188.189.190.191.%26hq%3D0%26sort%3Drv%26added%3D%26dur%3D%26rate%3D

                                         
                                         78.140.183.138
HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
                                        
Server: nginx/1.10.2
Date: Thu, 23 Nov 2017 08:52:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: lang=en; expires=Fri, 24-Nov-2017 08:52:57 GMT; Max-Age=86400; path=/; domain=.drtuber.com
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4486
Md5:    2f2cbe136a40c8564f7c8e7308ba7536
Sha1:   d0d899f986b5c6a4702f084f554d24d9cfc2dd04
Sha256: c12f7972019a92959dab300516db3b1c6d91c49d5d257a9323ec80a9c0e41017
                                        
                                            GET /templates/drtuber/player/logo_normal.svg HTTP/1.1 
Host: p2.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 22 Jun 2016 13:11:40 GMT
Expires: Sun, 01 Apr 2018 23:38:13 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1146
Md5:    7ab0ba27e6e7076b4fd1d93e8ba75d0e
Sha1:   de76f744a709965222a6c266d0130a2b08005676
Sha256: 6f8ddc4a94a75a49aa006c4b83340264da5053c7c07da0574c1b2b9994c3ab56
                                        
                                            GET /templates/drtuber/images/bookmark/tw.png HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Content-Length: 2595
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 19 Sep 2014 08:05:07 GMT
Etag: "541be3b3-a23"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksRbRLJojIL786F2C+AqzsyHL7XTPYMLM8CCSWA==
Expires: Sun, 01 Apr 2018 23:38:13 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 44 x 44, 8-bit/color RGBA, non-interlaced
Size:   2595
Md5:    1c04728ba2290b51c564898abdaa43c8
Sha1:   856eb8de0617be8617170cb4528d576cf1a12876
Sha256: c9d92b924551b1ab1b1e30cb66bc8b1fec499d3d28db2cfa1ed9f4bad641b602
                                        
                                            GET /templates/drtuber/images/bookmark/face.png HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Content-Length: 3045
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 19 Sep 2014 08:05:07 GMT
Etag: "541be3b3-be5"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksR/TPc8mI5LNvl2Jqp05ty4gLXTJg7QKAjPA
Expires: Sun, 01 Apr 2018 23:38:13 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 44 x 44, 8-bit/color RGBA, non-interlaced
Size:   3045
Md5:    0b215319f1911258129959a732565b66
Sha1:   045f7cadc691ec6ab204447a7d646f22732b8a71
Sha256: e13b54b95dce8f58a545011b74c323bc9a53debe828a98a0eeecd63db31fea26
                                        
                                            GET /media/videos/tmb/782501/preview/19.jpg HTTP/1.1 
Host: p3.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.178.139
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Content-Length: 26900
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 17 Apr 2013 12:32:51 GMT
Etag: "516e9673-6914"
Expires: Mon, 02 Apr 2018 19:14:21 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbgHeJ9L3DgZkevhWR/xF7xiOYo1pksR/TPc8mI5LNvl2JqsQuCA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc52.123.0\377"
Size:   26900
Md5:    95c54a8b2d6bd91c2bf665aaf729c7ff
Sha1:   9913029598495141a770b1ad8fcd0777729f8098
Sha256: 08c18fe05c8d89325ca74841322c76c9fa541f81702125670157319c830b4f8f
                                        
                                            GET /templates/drtuber/player/logo_hover.svg HTTP/1.1 
Host: p2.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 22 Jun 2016 13:11:40 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jqpgi3vf2bjWb2BZCa/TA==
Expires: Mon, 02 Apr 2018 07:48:52 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1485
Md5:    82c6de39af179f1a868f09301fc24717
Sha1:   ee7239e799da30fbc3b99bda6ccc710a9afc75ec
Sha256: ea476b91066155007f0b4a2b81f444bf858cafe12a9eb837a7a289e77eee9b89
                                        
                                            GET /templates/drtuber/images/bookmark/tw.png HTTP/1.1 
Host: p2.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Content-Length: 2595
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 19 Sep 2014 08:05:07 GMT
Etag: "541be3b3-a23"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jqpgi3vf2bjWb2BZCa+RA==
Expires: Mon, 02 Apr 2018 07:47:29 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 44 x 44, 8-bit/color RGBA, non-interlaced
Size:   2595
Md5:    1c04728ba2290b51c564898abdaa43c8
Sha1:   856eb8de0617be8617170cb4528d576cf1a12876
Sha256: c9d92b924551b1ab1b1e30cb66bc8b1fec499d3d28db2cfa1ed9f4bad641b602
                                        
                                            GET /templates/drtuber/images/bookmark/face.png HTTP/1.1 
Host: p2.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Content-Length: 3045
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 19 Sep 2014 08:05:07 GMT
Etag: "541be3b3-be5"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jqpgi3vf2bjWb2BZCa/TA==
Expires: Sun, 01 Apr 2018 21:32:08 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 44 x 44, 8-bit/color RGBA, non-interlaced
Size:   3045
Md5:    0b215319f1911258129959a732565b66
Sha1:   045f7cadc691ec6ab204447a7d646f22732b8a71
Sha256: e13b54b95dce8f58a545011b74c323bc9a53debe828a98a0eeecd63db31fea26
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Nov 2017 08:52:58 GMT
Server: Apache
Last-Modified: Tue, 21 Nov 2017 19:05:36 GMT
Expires: Tue, 28 Nov 2017 19:05:36 GMT
Etag: F3FA58356DEB93F5B3DD36C0CA86486D713414DC
Cache-Control: max-age=468157,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp13
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8d2611e444e8e8a2b16ce5e5abcd6226
Sha1:   f3fa58356deb93f5b3dd36c0ca86486d713414dc
Sha256: 8cb335aa9d1d19a3a9348dc466599dbad859197c63e417370ca5b33e69168f23
                                        
                                            GET /media/videos/tmb/820318/preview/4.jpg HTTP/1.1 
Host: p2.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Content-Length: 63324
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Sun, 05 May 2013 09:57:36 GMT
Etag: "51862d10-f75c"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvdSM7F5UC+pXF6dvmFXd
Expires: Tue, 03 Apr 2018 11:45:00 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc52.123.0\377"
Size:   63324
Md5:    cba50d9d87f9b72db5fba5481a873e51
Sha1:   261ee21928ec05dea5154740aa3706072ddb8c68
Sha256: a7dacffd6b84d4b08b1dad9003c75c5172d51ce20b68bb92f1853941220fd22b
                                        
                                            GET /crossdomain.xml HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:58 GMT
Content-Length: 211
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 09 Dec 2013 15:12:48 GMT
Etag: "52a5ddf0-d3"
Expires: Wed, 04 Apr 2018 18:37:54 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  XML document text
Size:   211
Md5:    1f900d0f762fc8b437076655577d6d8c
Sha1:   d12d756ad7b12f944d3a6d6aac4b6834022b16e0
Sha256: e939190aee3e77930a5c574de1d1419922d5545cacff0210e4cc54c74cc3816c
                                        
                                            GET /2zv6 HTTP/1.1 
Host: cnhv.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cebr.info/

                                         
                                         94.130.128.243
HTTP/1.1 200 OK
Content-Type: text/html; Charset=UTF-8;charset=UTF-8
                                        
Server: nginx
Date: Thu, 23 Nov 2017 08:52:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1108
Md5:    b3baa58ee8e668cd4f3e1f9025a30585
Sha1:   4d363334b444e38304cfa4f84b53523193e36bdc
Sha256: a624c960d713020e8318303f625d5505a8316e81cc457670a46dc7e607c7b158
                                        
                                            GET /templates/drtuber/player/logo_normal.svg HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 22 Jun 2016 13:11:40 GMT
Expires: Sun, 01 Apr 2018 23:38:13 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpVwdTHU3svMiEoRvY2bxA==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1146
Md5:    7ab0ba27e6e7076b4fd1d93e8ba75d0e
Sha1:   de76f744a709965222a6c266d0130a2b08005676
Sha256: 6f8ddc4a94a75a49aa006c4b83340264da5053c7c07da0574c1b2b9994c3ab56
                                        
                                            GET /templates/drtuber/player/logo_hover.svg HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 22 Jun 2016 13:11:40 GMT
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jqpgi3vf2bjWb2BZCa/TA==
Expires: Mon, 02 Apr 2018 07:48:52 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1485
Md5:    82c6de39af179f1a868f09301fc24717
Sha1:   ee7239e799da30fbc3b99bda6ccc710a9afc75ec
Sha256: ea476b91066155007f0b4a2b81f444bf858cafe12a9eb837a7a289e77eee9b89
                                        
                                            GET /media/coinhive-icon.png HTTP/1.1 
Host: cnhv.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cnhv.co/2zv6

                                         
                                         94.130.128.243
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 23 Nov 2017 08:52:59 GMT
Content-Length: 8501
Last-Modified: Sun, 17 Sep 2017 19:12:44 GMT
Connection: keep-alive
Etag: "59bec92c-2135"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 512 x 512, 8-bit/color RGBA, non-interlaced
Size:   8501
Md5:    13fac981d912ae929117759ef9f2ee56
Sha1:   e46eb6d6aeed95945d4e7ab7148b3c9a253ef604
Sha256: 9ba77246c8ea90838d94d004a5b4330eb72002f515cc1e2a49ac085907a57429
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coinhive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cnhv.co/2zv6

                                         
                                         94.130.90.152
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx
Date: Thu, 23 Nov 2017 08:52:59 GMT
Last-Modified: Wed, 22 Nov 2017 15:48:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a159c50-2278a"
Expires: Thu, 23 Nov 2017 16:52:59 GMT
Cache-Control: max-age=28800
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   44323
Md5:    1a1a34131bc518c08443b15a4b8b2761
Sha1:   b453bba223746268a5343d68eb3ad026633f7474
Sha256: c5b8fd9748dac360a9543b7cd4d57d6f3988b16223072e835592b40860503f7a

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /media/videos/tmb/813840/preview/11.jpg HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:59 GMT
Content-Length: 27885
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 02 May 2013 11:39:58 GMT
Etag: "5182508e-6ced"
Expires: Wed, 04 Apr 2018 09:49:20 GMT
Cache-Control: max-age=14111111
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGpxyZGTR3eqMPN9B2gRnSFE=
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "Lavc52.123.0\377"
Size:   27885
Md5:    f8e9d4ac9d7dccb5cd63ad6f7337831d
Sha1:   e5f8f6e51ffa5d301abd3caf53a41074a7048a44
Sha256: 049e9afffc43bdf6b4d3f554c85dc40d92cd48b1eaf5df07d1873b79f22ce995
                                        
                                            GET /templates/drtuber/images/bookmark/tw.png HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:59 GMT
Content-Length: 2595
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 19 Sep 2014 08:05:07 GMT
Etag: "541be3b3-a23"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jqpgi3vf2bjWb2BZCa+RA==
Expires: Mon, 02 Apr 2018 07:47:29 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 44 x 44, 8-bit/color RGBA, non-interlaced
Size:   2595
Md5:    1c04728ba2290b51c564898abdaa43c8
Sha1:   856eb8de0617be8617170cb4528d576cf1a12876
Sha256: c9d92b924551b1ab1b1e30cb66bc8b1fec499d3d28db2cfa1ed9f4bad641b602
                                        
                                            GET /templates/drtuber/images/bookmark/face.png HTTP/1.1 
Host: p7.drtst.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.166.16
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: ucdn
Date: Thu, 23 Nov 2017 08:52:59 GMT
Content-Length: 3045
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 19 Sep 2014 08:05:07 GMT
Etag: "541be3b3-be5"
X-Ureq-ID: PYMqMNZBGw32sc2V98lMDGMm5QPggNUVoUH7r/l4U7pbBRCbjXSJ9Ioz10WdYQKyNLIP0Itx6VCfGplzbGTR3eG3v9Ra8Jqpgi3vf2bjWb2BZCa/TA==
Expires: Sun, 01 Apr 2018 21:32:08 GMT
Cache-Control: max-age=14111111
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 44 x 44, 8-bit/color RGBA, non-interlaced
Size:   3045
Md5:    0b215319f1911258129959a732565b66
Sha1:   045f7cadc691ec6ab204447a7d646f22732b8a71
Sha256: e13b54b95dce8f58a545011b74c323bc9a53debe828a98a0eeecd63db31fea26
                                        
                                            GET /%3C!--Can%27t%20find%20substitution%20for%20tag%20%5Bpost.thumbnailUrl%5D--%3E HTTP/1.1 
Host: 1001-life-insurances.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         216.58.211.129
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 23 Nov 2017 08:52:53 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 41643
Server: GSE


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /flash/embed_player_v1.3.swf HTTP/1.1 
Host: ph-static.phncdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /flash/embed_player_v1.3.swf HTTP/1.1 
Host: ph-static.phncdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1001-life-insurances.blogspot.no/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---