Overview

URL ninja-saga-hack-insyndicate.blogspot.ca/2012/04/daemon-tools-pro-advanced-5-full-loader.html
IP172.217.21.129
ASNAS15169 Google Inc.
Location United States
Report completed2018-12-01 15:40:24 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-01 2 ninja-saga-hack-insyndicate.blogspot.ca/2012/04/daemon-tools-pro-advanced-5 (...) Malware
2018-12-01 2 ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced- (...) Malware
2018-12-01 2 ninja-saga-hack-insyndicate.blogspot.com/js/cookienotice.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.21.129

Date UQ / IDS / BL URL IP
2019-06-16 17:23:00 +0200
0 - 0 - 0 https://franchcompetregarder.blogspot.com/201 (...) 172.217.21.129
2019-06-14 15:12:10 +0200
0 - 0 - 1 https://neyrecafu1974.blogspot.cz/ 172.217.21.129
2019-06-14 14:59:36 +0200
0 - 0 - 1 https://dichhocalso1970.blogspot.dk/ 172.217.21.129
2019-06-12 17:49:41 +0200
0 - 0 - 0 https://germanyvsspain-hd.blogspot.com/2019/0 (...) 172.217.21.129
2019-06-10 19:13:26 +0200
0 - 0 - 0 https://usopenchampionship2019live.blogspot.com/ 172.217.21.129
2019-06-10 19:13:07 +0200
0 - 0 - 0 https://usopenchampionship2019livestream.blog (...) 172.217.21.129
2019-06-09 22:21:56 +0200
0 - 0 - 2 zhyn-zhay.blogspot.com/search/label/Bola 172.217.21.129
2019-06-09 22:21:36 +0200
0 - 0 - 2 zhyn-zhay.blogspot.com/2013/04/ 172.217.21.129
2019-06-09 20:25:44 +0200
0 - 0 - 0 https://lh3.googleusercontent.com/DMXN_tke8kf (...) 172.217.21.129
2019-06-08 22:33:39 +0200
0 - 0 - 0 limoundewon1972.blogspot.jp 172.217.21.129

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2019-06-17 15:02:56 +0200
0 - 0 - 0 get.securybrowse.com/view?src=raL7j1qwH8L0A45 (...) 130.211.116.49
2019-06-17 15:02:15 +0200
0 - 0 - 0 https://accounts.google.com/AccountChooser?Em (...) 216.58.207.237
2019-06-17 14:36:21 +0200
0 - 0 - 4 https://hetisubsged1981.blogspot.hu/ 216.58.211.129
2019-06-17 14:12:47 +0200
0 - 0 - 0 google.com 216.58.207.206
2019-06-17 13:27:51 +0200
0 - 0 - 0 https://storage.googleapis.com/asharepoint-tr (...) 172.217.21.176
2019-06-17 12:57:44 +0200
0 - 0 - 0 https://storage.googleapis.com/wfaturavivo79/ (...) 172.217.22.176
2019-06-17 12:34:37 +0200
0 - 0 - 0 https://kore-dot-yamm-track.appspot.com/Redir (...) 172.217.21.180
2019-06-17 11:33:03 +0200
0 - 0 - 0 https://youtu.be/XMSuqT7HvFI 172.217.21.142
2019-06-17 11:25:49 +0200
0 - 0 - 0 https://youtu.be/PtmbmEEMeO8 172.217.21.142
2019-06-17 11:08:46 +0200
0 - 0 - 0 https://images.app.goo.gl/ 216.58.207.206

Last 10 reports on domain: ninja-saga-hack-insyndicate.blogspot.ca

Date UQ / IDS / BL URL IP
2019-06-10 20:02:21 +0200
0 - 0 - 4 ninja-saga-hack-insyndicate.blogspot.ca/2011/ (...) 172.217.21.161
2019-06-10 17:08:31 +0200
0 - 0 - 3 ninja-saga-hack-insyndicate.blogspot.ca/2011/ (...) 172.217.20.33
2019-06-10 17:04:48 +0200
0 - 0 - 3 ninja-saga-hack-insyndicate.blogspot.ca/2012/ (...) 172.217.20.33
2019-06-10 16:49:32 +0200
0 - 0 - 3 ninja-saga-hack-insyndicate.blogspot.ca/2013/ (...) 172.217.20.33
2019-06-09 17:53:44 +0200
0 - 0 - 1 ninja-saga-hack-insyndicate.blogspot.ca/searc (...) 172.217.21.161
2019-06-09 17:46:42 +0200
0 - 0 - 3 ninja-saga-hack-insyndicate.blogspot.ca/2011/ (...) 172.217.21.161
2019-06-09 16:46:46 +0200
0 - 0 - 3 ninja-saga-hack-insyndicate.blogspot.ca/2012/ (...) 172.217.21.161
2019-06-09 16:37:43 +0200
0 - 0 - 1 ninja-saga-hack-insyndicate.blogspot.ca/searc (...) 172.217.21.161
2019-06-09 16:37:11 +0200
0 - 0 - 1 ninja-saga-hack-insyndicate.blogspot.ca/searc (...) 172.217.21.161
2019-06-09 16:33:00 +0200
0 - 0 - 1 ninja-saga-hack-insyndicate.blogspot.ca/searc (...) 172.217.21.161


JavaScript

Executed Scripts (78)


Executed Evals (88)

#1 JavaScript::Eval (size: 265, repeated: 3) - SHA256: fdd2120c37da9ce7a58d96be9ef6cb106c1040561b6801c70718faf6fc342e8c

                                        ({
    'bg': [-50, -50, 50, 115],
    '0': [-135, -147, 20, 14],
    '1': [-135, -135, 20, 9],
    '2': [-135, -117, 20, 13],
    '3': [-135, -100, 20, 14],
    '4': [-135, -84, 20, 15],
    '5': [-135, -70, 20, 13],
    '6': [-135, -53, 20, 15],
    '7': [-135, -38, 20, 14],
    '8': [-135, -23, 20, 14],
    '9': [-135, -7, 20, 15],
    ',': [-135, 0, 23, 7]
})
                                    

#2 JavaScript::Eval (size: 264, repeated: 3) - SHA256: 39579f75bcf62085fff19d2e37ddf70e9cf240fdb343e46ee527e3521ab5bb7c

                                        ({
    'bg': [0, -50, 50, 115],
    '0': [-115, 0, 20, 14],
    '1': [-115, -17, 20, 9],
    '2': [-115, -31, 20, 13],
    '3': [-115, -47, 20, 13],
    '4': [-115, -62, 20, 15],
    '5': [-115, -78, 20, 13],
    '6': [-115, -93, 20, 15],
    '7': [-115, -109, 20, 14],
    '8': [-115, -124, 20, 14],
    '9': [-115, -139, 20, 15],
    ',': [-112, -154, 23, 7]
})
                                    

#3 JavaScript::Eval (size: 262, repeated: 3) - SHA256: ff0504e3bd7c9ca7030953a039cc9622891cd31e22cedc2c9d33f8bbb607c74f

                                        ({
    'bg': [0, 0, 115, 50],
    '0': [0, -165, 14, 20],
    '1': [-17, -165, 9, 20],
    '2': [-31, -165, 14, 20],
    '3': [-47, -165, 13, 20],
    '4': [-62, -165, 15, 20],
    '5': [-78, -165, 13, 20],
    '6': [-93, -165, 15, 20],
    '7': [-109, -165, 14, 20],
    '8': [-124, -165, 14, 20],
    '9': [-139, -165, 15, 20],
    ',': [-102, -131, 7, 23]
})
                                    

#4 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#5 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 67900ae67ef2d1e03565d9186903947f1ce5c4eb9051c51f14dce6bc9f24dd44

                                        0,
function(u) {
    O(u, 1);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 1) - SHA256: b2c120c55e4659b35b3460238d19a810a1d85ae30b912ebd2b4f376a92966dfb

                                        0,
function(u) {
    O(u, 2);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 6340ef582aa3fb50f145cae01cf6640f588ae122aaed1ab544dfb71a59190ded

                                        0,
function(u) {
    O(u, 4);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 1) - SHA256: ec58450c20d2e52803eef45fd3023bbc9f1a383d7257d5780d0326c0e64ce24e

                                        0,
function(u) {
    g(u, 1);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: e9774a40cc3b89d6bc7ba894ec56e213103a1f22aee04218967e7a74bcdcca99

                                        0,
function(u) {
    g(u, 2);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 9e0d4864c9c315e969da9d608651c1db12255de08ed6c2959c0179d4c5194433

                                        0,
function(u) {
    g(u, 4);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 20ea640638c270d2588b19c7e0af6afb9769dcb75348509257d5239174d28040

                                        0,
function(u) {
    u.J(0);
}
                                    

#12 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 8699f9a580e46d7a76e6d817f9d0e5475b055c68d70ec931b34969374b5dc21a

                                        0,
function(u) {
    u.J(3);
}
                                    

#13 JavaScript::Eval (size: 30, repeated: 1) - SHA256: df504f7402fc33f37e68fb55ee54a7c34d96fef02c820bc086b574dcaafd504e

                                        0,
function(u) {
    u.J(4);
}
                                    

#14 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 4c586a940171cc5e781bd34a13719867c40f5006101c5ac04b4029c020e1204a

                                        0,
function(u) {
    u.J(7);
}
                                    

#15 JavaScript::Eval (size: 97, repeated: 1) - SHA256: a65eb55255bca638eb78e1f00b387f277755a3b5b6dabf6e0192462332811cf3

                                        0,
function(u, P) {
    (u = (P = u.i(), u.a(P)), u)[0].removeEventListener(u[1], u[2], false);
}
                                    

#16 JavaScript::Eval (size: 52, repeated: 1) - SHA256: 8a9ed19000ec672f7a5368a583ec37affc828bcb14e06c7620ca55e81ebcb34e

                                        0,
function(u, P) {
    G((P = u.a(u.i()), u), P);
}
                                    

#17 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 7d9e67738c641699c3d4a2f8a2000ccb9aed862d5790e35ae4b7e4b1bb28dbb5

                                        0,
function(u, P) {
    J(u, 1, 5) || (P = l(u), b(u, P.b, P.B.apply(P.D, P.c)));
}
                                    

#18 JavaScript::Eval (size: 183, repeated: 1) - SHA256: 96324e1e85b259c2663d9a34a732c58d40615ba347e09618d073ad9c03569b77

                                        0,
function(u, P) {
    P.push(u[0] << 24 | u[1] << 16 | u[2] << 8 | u[3]), P.push(u[4] << 24 | u[5] << 16 | u[6] << 8 | u[7]), P.push(u[8] << 24 | u[9] << 16 | u[10] << 8 | u[11]);
}
                                    

#19 JavaScript::Eval (size: 516, repeated: 1) - SHA256: eec6c72ae14e360b70915762c6958c19eb0ad9378a96192009b47672682bd1e9

                                        0,
function(u, P) {
    if (this.P) {
        return u = u ? this.P().shift() : this.G().shift(), this.P().length ||
            this.G().length || (this.G = this.P = void 0, this.N--), u;
    }
    if (u = this.a(226), !(u in this.U)) {
        throw D(this, 31), this.Y;
    }
    return (b(this, 226, ((void 0 == this.o && (this.o = r(this.U, u - 4), this.j = void 0), this).j != u >> 3 &&
        (this.j = u >> 3, P = [0, 0, 0, this.a(25)], this.v = Q(this.o, this.j, P)), u) + 1), this.U)[u] ^ this.v[u % 8];
}
                                    

#20 JavaScript::Eval (size: 125, repeated: 1) - SHA256: b72fd697e6753f1b8dfbc59ed07f89c8e581c66ef10be1aed9d2f86b675bfdbc

                                        0,
function(u, P) {
    if (void 0 === (P = this.X[u], P)) {
        throw D(this, 30, 0, u), this.Y;
    }
    return P();
}
                                    

#21 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 8295a44b2be3d7fcd1fd5c1312bfb7eaed26772e51ee6202fd0defae3358377e

                                        0,
function(u, P, e) {
    (e = (P = u.i(), u).i(), 0 != u.a(P)) && b(u, 226, u.a(e));
}
                                    

#22 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 6d44babeef7cd9671fe93956c2436c505894373c366439d40056fe18f8250ddc

                                        0,
function(u, P, e) {
    J(u, 1, 5) ||
        (P = u.i(), e = u.i(), b(u, e, function(u) {
            return eval(u);
        }(u.a(P))));
}
                                    

#23 JavaScript::Eval (size: 81, repeated: 1) - SHA256: 23ddd3ea426b29e1818ac8cdce1210342133dea86285dacabbd054961aa37021

                                        0,
function(u, P, e) {
    P = (e = (P = u.i(), u.i()), u.a(P)), b(u, e, k(P));
}
                                    

#24 JavaScript::Eval (size: 74, repeated: 1) - SHA256: 2605292124f712dac18b2aef20535fc7b341b4b45bec7f35f4b25a973587e166

                                        0,
function(u, P, e) {
    b((P = u.i(), e = u.i(), u), e, "" + u.a(P));
}
                                    

#25 JavaScript::Eval (size: 90, repeated: 1) - SHA256: f63d7f26ccdcb2086fc832e085a7f7e6b92a3b8884ea4317dd0724f1b0cf1127

                                        0,
function(u, P, e) {
    b(u, (P = (e = (P = u.i(), u).i(), u).X[P] && u.a(P), e), P);
}
                                    

#26 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 74796df295165fd17614be3eadf2aa3fea02f55c934000dd8c4dc1584511bb65

                                        0,
function(u, P, e) {
    b(u, (e = (P = u.i(), u).i(), e), u.a(e) % u.a(P));
}
                                    

#27 JavaScript::Eval (size: 80, repeated: 1) - SHA256: ce55ac48b7d47011ebeee5cbf293f9a4e094931f66a8d443fef3f3a550104c21

                                        0,
function(u, P, e) {
    b(u, (e = (P = u.i(), u).i(), e), u.a(e) * u.a(P));
}
                                    

#28 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 236ce3a08a8c194bb7c4c00f03664f0ca5afcce8e19677e134de1ee305ad9581

                                        0,
function(u, P, e) {
    b(u, (e = (P = u.i(), u).i(), e), u.a(e) + u.a(P));
}
                                    

#29 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 467c24c5f43f3d950d78ef91493f78b9279925cb4369abdeecf720a05c377cb6

                                        0,
function(u, P, e) {
    b(u, (e = (P = u.i(), u).i(), e), u.a(e) - u.a(P));
}
                                    

#30 JavaScript::Eval (size: 242, repeated: 1) - SHA256: 3cd133eefa95c972c4894a5531d0c0c8c6a4f583d7f8d4f53e107d9a421b805b

                                        0,
function(u, P, e) {
    if (3 == u.length) {
        for (e = 0; 3 > e; e++) {
            P[e] += u[e];
        }
        for (u = [13, 8, 13, 12, 16, 5, 3, 10, 15], e = 0; 9 > e; e++) {
            P[3](P, e % 3, u[e]);
        }
    }
}
                                    

#31 JavaScript::Eval (size: 135, repeated: 1) - SHA256: 307ce204d97589bd36a45192d8bddec0437b0182fa8fb9aa0f02e24541708b9c

                                        0,
function(u, P, e) {
    return (e = function() {
        return u;
    }, P = function() {
        return e();
    }, P)[this.O] = function(H) {
        u = H;
    }, P;
}
                                    

#32 JavaScript::Eval (size: 296, repeated: 1) - SHA256: 4e5da01bb6eb39fa5abfc62e245ac0adc4f522b5ce14d54e4df7fa3ce82703b3

                                        0,
function(u, P, e, C, h, T, f) {
    if ((e = (P = u.i(), z(u)), C = "", u.X)[159]) {
        for (h = u.a(159), T = 0, f = h.length; e--;) {
            T = (T + z(u)) % f, C += m[h[T]];
        }
    } else {
        for (; e--;) {
            C += m[u.i()];
        }
    }
    b(u, P, C);
}
                                    

#33 JavaScript::Eval (size: 95, repeated: 1) - SHA256: 042f35a6d4513364a03ca415fd041e05451f3df5d52d0b86bb6e3cb869aec1bd

                                        0,
function(u, P, e, m) {
    (m = (e = (P = u.i(), u.i()), u.i()), u.a(P))[u.a(e)] = u.a(m);
}
                                    

#34 JavaScript::Eval (size: 208, repeated: 1) - SHA256: 022199e57e286eece4e810ec0434cb1bc365231616fcaea90e7220152605f682

                                        0,
function(u, P, e, m) {
    M(this, ((e = (m = (e = (u &= (P = u & 4, 3), this).i(), this).i(), this).a(e), P && (e = F(("" + e).replace(/\r\n/g, "\n"))), u) &&
        M(this, m, c(e.length, 2)), m), e);
}
                                    

#35 JavaScript::Eval (size: 106, repeated: 1) - SHA256: dc628df34a4328caa45a4a8587cd794a8503685f821b4e36eb2f59db5cdb221f

                                        0,
function(u, P, e, m) {
    b((P = (m = (P = u.i(), e = u.i(), u.i()), u.a(P) == u.a(e)), u), m, +P);
}
                                    

#36 JavaScript::Eval (size: 105, repeated: 1) - SHA256: 8565cd5e9a59acbb4688eb71b6af3ddf785c83fa7095fd76a890116a71a68fd5

                                        0,
function(u, P, e, m) {
    b((P = (m = (P = u.i(), e = u.i(), u.i()), u.a(P) > u.a(e)), u), m, +P);
}
                                    

#37 JavaScript::Eval (size: 111, repeated: 1) - SHA256: 9abc801a258393d87eaa2d4c718e20a59357b859b132e0d8c12292091c9ebf38

                                        0,
function(u, P, e, m) {
    b(u, (e = (m = (e = (P = u.i(), u).i(), u).i(), u.a(e)), P = u.a(P), m), P[e]);
}
                                    

#38 JavaScript::Eval (size: 92, repeated: 1) - SHA256: 985c88faccc11135df1bad22fc7e5ac6184dd63daaed2f0548f0618832220dab

                                        0,
function(u, P, e, m) {
    b(u, (m = (e = (P = u.i(), u.i()), u).i(), m), u.a(P) << e);
}
                                    

#39 JavaScript::Eval (size: 92, repeated: 1) - SHA256: a98d312e942c22a468fdffdc3c74fda705063498a7fa6903f04e0799db4a1cf6

                                        0,
function(u, P, e, m) {
    b(u, (m = (e = (P = u.i(), u.i()), u).i(), m), u.a(P) >> e);
}
                                    

#40 JavaScript::Eval (size: 96, repeated: 1) - SHA256: 415645e96090664c85af33b1c595e564e68e70b6f0ff04cb473763b25453be82

                                        0,
function(u, P, e, m) {
    b(u, (m = (e = (P = u.i(), u.i()), u).i(), m), u.a(P) | u.a(e));
}
                                    

#41 JavaScript::Eval (size: 97, repeated: 1) - SHA256: 012e770fbd856c2d0c1552b92072db77dfdca400591f6301382dadf89dcd86c5

                                        0,
function(u, P, e, m) {
    b(u, (m = (e = (P = u.i(), u.i()), u).i(), m), u.a(P) || u.a(e));
}
                                    

#42 JavaScript::Eval (size: 142, repeated: 1) - SHA256: 9676fede189366e8d35e086eae2d113c847d63121735dda552daac729a13abbd

                                        0,
function(u, P, e, m) {
    for (; e--;) {
        226 != e && 26 != e && P.X[e] && (P.X[e] = P[m](P[u](e), this));
    }
    P[u] = this;
}
                                    

#43 JavaScript::Eval (size: 245, repeated: 1) - SHA256: 0c0e70a28aca0406c97867263d27a00f26c3e6a247107cead6d770c7b5ef9b7c

                                        0,
function(u, P, e, m) {
    if ((P = u.V.pop())) {
        for (e = u.i(); 0 < e; e--) {
            m = u.i(), P[m] = u.X[m];
        }
        (P[P[223] = u.X[223], 45] = u.X[45], u).X = P;
    } else {
        b(u, 226, u.U.length);
    }
}
                                    

#44 JavaScript::Eval (size: 101, repeated: 1) - SHA256: 995324f43c3f81d7f8f0380c22d2c8d7dd7bdecba83cba6193e1bde88bf2ff8f

                                        0,
function(u, P, e, m) {
    m = (e = (P = u.i(), u.i()), u.i()), b(u, m, (u.a(P) in u.a(e)) + 0);
}
                                    

#45 JavaScript::Eval (size: 170, repeated: 1) - SHA256: bfeace688c183a26f0fb0723f43f0255e65a6d892362dd5c8a6b207ee9145be6

                                        0,
function(u, P, e, m) {
    try {
        m = u[(P + 2) % 3], u[P] = u[P] - u[(P + 1) % 3] - m ^ (1 == P ? m << e : m >>> e);
    } catch (C) {
        throw C;
    }
}
                                    

#46 JavaScript::Eval (size: 132, repeated: 1) - SHA256: dc534f76dbed1884ef995ee881c35052d8eba2be796bb42c7401c048b5c75130

                                        0,
function(u, P, e, m, C) {
    (e = (C = (m = (P = u.i(), e = u.i(), u.a(u.i())), u).a(u.i()), u).a(e), b)(u, P, v(u, e, m, C));
}
                                    

#47 JavaScript::Eval (size: 228, repeated: 1) - SHA256: ffa4e0641a5686ca49b7acc3cb38bccf41995f2de32337bcc7f0116d19fa4b71

                                        0,
function(u, P, e, m, C) {
    0 !== (m = (e = (C = (m = (e = (P = u.i(), u).i(), u).i(), P = u.a(P), u.a(u.i())), u).a(e), u).a(m), P) &&
        (m = v(u, m, C, 1, P, e), P.addEventListener(e, m, Y), b(u, 124, [P, e, m]));
}
                                    

#48 JavaScript::Eval (size: 136, repeated: 1) - SHA256: 8cca86d401face0dec03fc3907788bbce5242ede226051500c6b909ad186e35f

                                        0,
function(u, P, e, m, C) {
    for (m = (P = u.i(), e = z(u), []), C = 0; C < e; C++) {
        m.push(u.i());
    }
    b(u, P, m);
}
                                    

#49 JavaScript::Eval (size: 401, repeated: 1) - SHA256: a82e48b2447a57ca3a174e55b5f95c3a94c58a89190868dc5c09a20f98931dd4

                                        0,
function(u, P, e, m, C, T) {
    if (!J(u, 1, 255)) {
        if ((u = (m = (e = (P = (P = u.i(), e = u.i(), m = u.i(), C = u.i(), u).a(P), u).a(e), u).a(m), u.a(C)), "object") == k(P)) {
            for (T in C = [], P) {
                C.push(T);
            }
            P = C;
        }
        for (T = P.length, C = 0; C < T; C += m) {
            e(P.slice(C, C + m), u);
        }
    }
}
                                    

#50 JavaScript::Eval (size: 212, repeated: 1) - SHA256: d9d885cc3f24708b88faf9aa78da0134fef1afd2b2324e658dced6220b4c57b7

                                        0,
function(u, P, e, m, C, T) {
    return T = (m = function() {
        return m[e.$ + (C[e.w] === P) - !T[e.w]];
    }, C = function() {
        return m();
    }, e = this, e.h), C[e.O] = function(u) {
        m[e.L] = u;
    }, C[e.O](u), u = C;
}
                                    

#51 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 1046eccaa4b049dd37ecd814c22ab5dd11ef93dbfc1ce009a3bb323249c0beef

                                        0,
function(u, P, e, m, C, T, f) {
    J(u, 1, 5) ||
        (P = l(u), m = P.D, e = P.c, f = e.length, C = P.B, 0 == f ? (T = new(m[C])) : 1 == f ? (T = new(m[C])(e[0])) : 2 == f ? (T = new(m[C])(e[0], e[1])) : 3 == f ? (T = new(m[C])(e[0], e[1], e[2])) : 4 == f ? (T = new(m[C])(e[0], e[1], e[2], e[3])) : D(u, 22), b(u, P.b, T));
}
                                    

#52 JavaScript::Eval (size: 786, repeated: 1) - SHA256: bbd02ff327570476d7cffb595729aaa755bf82fc0dcc4c6ac8e858d42d3caf63

                                        0,
function(u, P, e, m, C, T, f, t, E, d, X, L, U) {
    for (d = (t = (f = (T = (m = (P = u.i(), e = 0), C = function(P, C) {
            for (; m < P;) {
                e |= u.i() << m, m += 8;
            }
            return e >>= (C = (m -= P, e & (1 << P) - 1), P), C;
        }, C(3)) + 1, C(5)), []), E = 0); d < f; d++) {
        X = C(1), t.push(X), E += X ? 0 : 1;
    }
    for (L = (E = (E - 1).toString(2).length, []), d = 0; d < f; d++) {
        t[d] || (L[d] = C(E));
    }
    for (d = 0; d < f; d++) {
        t[d] && (L[d] = u.i());
    }
    for (d = (U = [], T); d--;) {
        U.push(u.a(u.i()));
    }
    b(u, P, function(u, P, e, m, C) {
        for (P = (u.N++, e = [], []), m = 0; m < f; m++) {
            if (C = L[m], !t[m]) {
                for (; C >= P.length;) {
                    P.push(u.i());
                }
                C = P[C];
            }
            e.push(C);
        }(u.P = u.g(U.slice(), u.i), u).G = u.g(e, u.i);
    });
}
                                    

#53 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f39d5c348e5b79d06e842c114e6cc571583bbf44e4b0ebfda1a01ec05745d43

                                        D
                                    

#55 JavaScript::Eval (size: 428, repeated: 1) - SHA256: 8e23dafc726604ee3b8502d801eaf0867e1a2f40c2b28bab827e4b66ddb1b1f0

                                        D = function(u, P, e, m, C) {
    ((0 == (P = (C = u.a(26), [P, C >> 8 & 255, C & 255]), void 0 != m && P.push(m), u.a(223)).length &&
            (u.X[223] = void 0, b(u, 223, P)), m = "", e) &&
        (e.message && (m += e.message), e.stack && (m += ":" + e.stack)), e = u.a(45), 3 < e &&
        (m = m.slice(0, e - 3), e -= m.length + 3, m = F(m.replace(/\r\n/g, "\n")), M(u, 169, c(m.length, 2).concat(m), 12)), b)(u, 45, e);
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 1) - SHA256: f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9

                                        F
                                    

#57 JavaScript::Eval (size: 487, repeated: 1) - SHA256: 07facf424ea67bed73e14730da742cc53adfcfb075940b506384ff9f6b51e2aa

                                        F = function(u, P, e, m, C) {
    for (m = (P = [], e = 0); m < u.length; m++) {
        C = u.charCodeAt(m), 128 > C ? (P[e++] = C) : (2048 > C ? (P[e++] = C >> 6 | 192) : (55296 == (C & 64512) &&
            m + 1 < u.length && 56320 == (u.charCodeAt(m + 1) & 64512) ? (C = 65536 + ((C & 1023) << 10) + (u.charCodeAt(++m) & 1023), P[e++] = C >> 18 | 240, P[e++] = C >> 12 & 63 | 128) : (P[e++] = C >> 12 | 224), P[e++] = C >> 6 & 63 | 128), P[e++] = C & 63 | 128);
    }
    return P;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#59 JavaScript::Eval (size: 85, repeated: 1) - SHA256: d165e2c8fdf4004b9bb34521e337311e2ff3738462744b433bec814421a938f5

                                        G = function(u, P) {
    ((u.V.push(u.X.slice()), u.X)[226] = void 0, b)(u, 226, P);
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1

                                        M
                                    

#61 JavaScript::Eval (size: 398, repeated: 1) - SHA256: 2fcf87fe4a92138057818a306718eef42439130c4a857861166a98672b380cfa

                                        M = function(u, P, e, m, C, H) {
    for (u = (C = u.a(P), 169 == P ? (P = function(u, P, e, m) {
            if ((P = C.length, e = P - 4 >> 3, C).M != e) {
                e = (m = [0, 0, 0, H], C.M = e, (e << 3) - 4);
                try {
                    C.K = Q(r(C, e), r(C, e + 4), m);
                } catch (T) {
                    throw T;
                }
            }
            C.push(C.K[P & 7] ^ u);
        }, H = u.a(11)) : (P = function(u) {
            C.push(u);
        }), m && P(m & 255), e.length), m = 0; m < u; m++) {
        P(e[m]);
    }
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b

                                        N
                                    

#63 JavaScript::Eval (size: 135, repeated: 1) - SHA256: a2644c4893ee08c2ddc19ee4b625c41f470d6ad4c64588d234b00c4a4f13e4ce

                                        N = function(u, P, e) {
    return Z(u, ((e = u.a(226), u).U && e < u.U.length ? (b(u, 226, u.U.length), G(u, P)) : b(u, 226, P), e));
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 1) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#65 JavaScript::Eval (size: 120, repeated: 1) - SHA256: 6e541d1b12a9446c505098db1250f252d1a96735b2554e0265636cd926fef1e3

                                        O = function(u, P, e, m) {
    for (m = (e = u.i(), 0); 0 < P; P--) {
        m = m << 8 | u.i();
    }
    b(u, e, m);
}
                                    

#66 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#67 JavaScript::Eval (size: 366, repeated: 1) - SHA256: b5939434f2e4980f54d613c81545f26a482488e23b54d2d45ff2a084b65f5858

                                        Q = function(u, P, e, m) {
    try {
        for (m = 0; 79669387488 != m;) {
            u += (P << 4 ^ P >>> 5) + P ^ m + e[m & 3], m += 2489668359, P += (u << 4 ^ u >>> 5) + u ^ m + e[m >>> 11 & 3];
        }
        return [u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255, P >>> 24, P >> 16 & 255, P >> 8 & 255, P & 255];
    } catch (C) {
        throw C;
    }
}
                                    

#68 JavaScript::Eval (size: 1, repeated: 1) - SHA256: bbeebd879e1dff6918546dc0c179fdde505f2a21591c9a9c96e36b054ec5af83

                                        Z
                                    

#69 JavaScript::Eval (size: 638, repeated: 1) - SHA256: 2c6a592e42f53f722634ae720dfda77acc5be28d69f87764bce21a1323c6840c

                                        Z = function(u, P, e, m, C, H, B) {
    u.N++;
    try {
        for (C = (e = (H = 0, m = 5001, u.U.length), void 0);
            (u.I || --m) && (u.P || (H = u.a(226)) < e);) {
            try {
                u.P ? (C = u.i(true)) : (b(u, 26, H), B = u.i(), C = u.a(B)), C && C.call ? C(u) : D(u, 21, 0, B), u.T = true, J(u, 0, 2);
            } catch (x) {
                x != u.Y && (u.a(168) ? D(u, 22, x) : b(u, 168, x));
            }
        }
        m || D(u, 33);
    } catch (x) {
        try {
            D(u, 22, x);
        } catch (I) {
            K(u, I);
        }
    }
    return (e = u.a(113), P) && b(u, 226, P), u.N--, e;
}
                                    

#70 JavaScript::Eval (size: 5020, repeated: 1) - SHA256: 6069dcf8d0bd95168ff14f86528d64205d1302ccd4451ca25f904c24b75e834c

                                        ["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"]
                                    

#71 JavaScript::Eval (size: 2, repeated: 8) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#72 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

                                        b
                                    

#73 JavaScript::Eval (size: 327, repeated: 1) - SHA256: 4ede9215159fc4c69ca2af294218225f2b1b1dfa506e8eaec16971e485459728

                                        b = function(u, P, e) {
    if (226 == P || 26 == P) {
        if (u.X[P]) {
            u.X[P][u.O](e);
        } else {
            u.X[P] = u.H(e);
        }
    } else if (218 != P && 169 != P && 109 != P && 223 != P || !u.X[P]) {
        u.X[P] = u.g(e, u.a);
    }
    25 == P && (u.o = void 0, b(u, 226, u.a(226) + 4));
}
                                    

#74 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#75 JavaScript::Eval (size: 23, repeated: 24) - SHA256: bfbc5bd748cc1f0ee17effbd6fba04cd9385145e74cadaaa16c1e063bd7875b9

                                        e.style.left = amt + 'px'
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29

                                        g
                                    

#77 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 83c5616939c715e3eb960a69872d060d631af0f19dc300d714623df919da112d

                                        g = function(u, P, e, m) {
    M((m = (e = u.i(), u.i()), u), m, c(u.a(e), P));
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0

                                        l
                                    

#79 JavaScript::Eval (size: 265, repeated: 1) - SHA256: 6fd3b0acaaf9c2e0c87aec0037568adbec60e3ffe45c88d700ba7c90adc5322c

                                        l = function(u, P, e, m, C, H) {
    for (H = (C = ((e = (P = {}, u.i()), P.b = u.i(), P).c = [], m = u.i() - 1, u.i()), 0); H < m; H++) {
        P.c.push(u.i());
    }
    for (P.B = u.a(e), P.D = u.a(C); m--;) {
        P.c[m] = u.a(P.c[m]);
    }
    return P;
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#81 JavaScript::Eval (size: 88, repeated: 1) - SHA256: fbe2e75630fa5c4bee739b88a52cba89a5ba89c53b4f2e35c33cc56339c9cb2e

                                        r = function(u, P) {
    return u[P] << 24 | u[P + 1] << 16 | u[P + 2] << 8 | u[P + 3];
}
                                    

#82 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080

                                        v
                                    

#83 JavaScript::Eval (size: 269, repeated: 1) - SHA256: 63c161a262eee1f27b2eddac25f1324512bb64837fcae6dd74e30777172795df

                                        v = function(u, P, e, m, C, H) {
    return function() {
        var B = [6, P, e, void 0, C, H, arguments],
            x = m & 1;
        if (m & 2) {
            var I = R(u, true, false, !(W(u, B), 1));
        } else {
            x && u.A.length ? W(u, B) : x ? (W(u, B), R(u, true, false, false)) : (I = y(u, B));
        }
        return I;
    };
}
                                    

#84 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#85 JavaScript::Eval (size: 24, repeated: 3) - SHA256: 7036c48a6162dea663e3aed25a7f571ff22a65214c681479eff10b1afbb49d5b

                                        wid.style.left = '-50px'
                                    

#86 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#87 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#88 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 3ae4759b6c119ebf2d2a300639a51ef0c293593b9a502ea3adeaeadfd6df3273

                                        z = function(u, P) {
    return P = u.i(), P & 128 && (P = P & 127 | u.i() << 7), P;
}
                                    

Executed Writes (31)

#1 JavaScript::Write (size: 0, repeated: 2) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 7, repeated: 1) - SHA256: 18d93ab9b0358221ec5ff6cd2cfbe48698a854e52f04f4b7686ecb3cd3e12437

                                          < /td>
                                    

#3 JavaScript::Write (size: 7, repeated: 1) - SHA256: 2bfe7e5a42f1421adaecc783b7d78bbd55941b17d018a7319682ca2fde997037

                                          < /tr>
                                    

#4 JavaScript::Write (size: 21, repeated: 1) - SHA256: 036e72bca8bd19be2f2c42b9410fa2ffe8120caed75ae313d4fefef95ea62894

                                          < td align = "center" >
                                    

#5 JavaScript::Write (size: 243, repeated: 1) - SHA256: ada85b159ba322d1918b77bbac4fedf82839e4b468502d1d5293aac2614e8c66

                                         < iframe src = '//kumpulblogger.com/scaframehor.php?mnt=25d9726c037ab7260ed79c367ab9e789&rand=14376994&b=188103'
 marginwidth = '5'
 marginheight = '2'
 width = '600'
 height = '190'
 border = '0'
 frameborder = '0'
 style = 'border:none;'
 scrolling = 'no' > < /iframe>
                                    

#6 JavaScript::Write (size: 174, repeated: 1) - SHA256: a006aec094f162f9bd9e558cde5282fa26164f46a1733cb0bfd7523da3393dd5

                                        -Design by < a href = 'http://anonymous-bunshin.blogspot.com/' > YONDARKNESS < /a> -Original by <a href='http:/ / anonymous - bunshin.blogspot.com ' title='
YONDARKNESS '>YONDARKNESS</a>
                                    

#7 JavaScript::Write (size: 6, repeated: 1) - SHA256: b93fdf5ef8ab0328fdaa4d8bf468aae6af7d5db6c0d3d34a470d36ab2152ec59

                                        < /DIV>
                                    

#8 JavaScript::Write (size: 6, repeated: 1) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#9 JavaScript::Write (size: 7, repeated: 1) - SHA256: c3107a2adbbacc0ce848a3bdee5b370419bf10d2a17d396ef602638419fabc04

                                        < /font>
                                    

#10 JavaScript::Write (size: 8, repeated: 1) - SHA256: 1fe76d6f9e6bcb754dd822ef01eb6e76013d2029d841d52b6a52c7b88a8c7593

                                        < /table>
                                    

#11 JavaScript::Write (size: 5, repeated: 3) - SHA256: b8073d8a2f01abcc6c6b69a83e3a57c34dc786f638df7da5c76b8e1197d16d13

                                        < /td>
                                    

#12 JavaScript::Write (size: 5, repeated: 1) - SHA256: 348845d8804b5c895e2a2938423ed17b2dc4cd3aad9f966c13e0ed89223b2f90

                                        < /ul>
                                    

#13 JavaScript::Write (size: 97, repeated: 1) - SHA256: 485154b44443b22d356ec72f3097a01e5dc125eb9638f459fcdc87c34e31dce7

                                        < DIV ID = "geomap_tool"
STYLE = "position:absolute;top:0;left:0;z-index:200;visibility:hidden" > < /div>
                                    

#14 JavaScript::Write (size: 81, repeated: 1) - SHA256: c1a073d97c5a11ebc4dab1eb766965ab6f127c3686561a6d0a3f68c7481493f1

                                        < DIV ID = "geoslide_tool"
STYLE = "position:relative;z-index:200;visibility:visible" >
                                    

#15 JavaScript::Write (size: 97, repeated: 1) - SHA256: 4c2f924aadeb43ec4f27c08834724041c2c7d4097f96de8e65e5d540443e9671

                                        < DIV ID = "geotoolbar"
style = "height:30px;width:100%;position:fixed;bottom:0;z-index:1000;left:0;" >
                                    

#16 JavaScript::Write (size: 205, repeated: 1) - SHA256: 457a73c0296e1a32f3125c6e31122775a36f410ed9b8f56c018205033c87ff0c

                                        < a href = "http://www.geovisite.com/zoom.php?compte=102106489784&lg=en&p=_total&path=007137&base=geoloc1"
target = "_blank" > < img src = "http://geoloc1.geovisite.com:8080/skin/geotoolbar/zoom.gif"
border = "0" > < /a>
                                    

#17 JavaScript::Write (size: 149, repeated: 1) - SHA256: f412e301b82fbc29a17a103d37f2d783e771ecd1c31b4238778a2035ae413b78

                                        < a href = "javascript:onMouseDown=affiche_geotool('formmail')" > < img src = "http://geoloc1.geovisite.com:8080/skin/geotoolbar/contact.gif"
border = "0" > < /a>
                                    

#18 JavaScript::Write (size: 143, repeated: 1) - SHA256: 09b8409c928e732a04e5a0f0a9db3aa38dfe406ec60bba999de43920784a5d2c

                                        < a href = "javascript:onMouseDown=affiche_geotool('map')" > < img src = "http://geoloc1.geovisite.com:8080/skin/geotoolbar/geomap.gif"
border = "0" > < /a>
                                    

#19 JavaScript::Write (size: 175, repeated: 1) - SHA256: 2e02254650fee198cc5439c9e80727fba66bb497eb9ef214b39c5b05410b4d1f

                                        < body onload = "var js=document.createElement('script');js.src='https://connect.facebook.net/id_ID/all.js?hash=b644c2d75922c810811d9375a561b9ba';document.body.appendChild(js);" >
                                    

#20 JavaScript::Write (size: 375, repeated: 1) - SHA256: 1104b202c2a3b1c66e27fd700096b88d9a0131a613612b33ce1f8a619a4f7469

                                        < iframe id = 'theiframe'
scrolling = 'no'
frameBorder = '0'
allowTransparency = 'true'
src = 'http://www.facebook.com/widgets/like.php?href=http%3A%2F%2Fwww.facebook.com%2FGanzFansPage&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80'
style = 'position:absolute;width:53px;height:23px;overflow:hidden;border:0;opacity:0;filter:alpha(opacity=0);' > < /iframe>
                                    

#21 JavaScript::Write (size: 284, repeated: 1) - SHA256: d0b7239a5039403a94f84c7833a8864d8073e144cab623b7f93c556c95e7fc41

                                        < iframe src = "http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com"
width = "183"
height = "350"
scrolling = "no"
frameborder = "0"
style = "" > < /iframe>
                                    

#22 JavaScript::Write (size: 115, repeated: 1) - SHA256: 071660503f6cf9c2b647fa247611cfd880a6d378165b9bd24d3a7bd537ad4482

                                        < iframe src = "http://www.widgeo.net/hitparade.php?pagexiti=geoiphone"
width = "0"
height = "0"
frameborder = "0" > < /iframe>
                                    

#23 JavaScript::Write (size: 428, repeated: 1) - SHA256: 7dbb8a9da78f58e843a7d09a4717af7f9abeffb4213501b5e467491b62d029ae

                                        < img src = "http://geoloc1.geovisite.com:8080/private/geoloc/pointeur.gif?|102106489784||885*1176|windows+7|en|24|1543675205|||firefox|3||NO|59.912701|10.746100|Oslo|PowerTech+Information+Systems+AS|1543675191|geotoolbar|25200|1543675191|||http%3A//ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html|NULL"
border = "0"
width = "1"
height = "1"
alt = "geotoolbar4"
name = "pointeur_geotoolbar4" >
                                    

#24 JavaScript::Write (size: 258, repeated: 1) - SHA256: 9d558cdc8ca9318bab15f56cc3c585f8d76d82d04ce4eb49428e58872bebea61

                                        < img width = "39"
height = "25"
border = "0"
src = "http://logv33.xiti.com/hit.xiti?s=281802&p=geoiphone&hl=15x39x57&r=1176x885x24x24&ref=http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html"
title = "Internet Audience" >
                                    

#25 JavaScript::Write (size: 693, repeated: 1) - SHA256: 288d4c4ce3b4c63a4fd5b0ea9176b6085d32eee587f6fc89c7822d6032f0d07e

                                        < script type = 'text/javascript' >
    function addEvent(obj, eventName, func) {
        if (obj.attachEvent) {
            obj.attachEvent( & quot; on & quot; + eventName, func);
        } else if (obj.addEventListener) {
            obj.addEventListener(eventName, func, true);
        } else {
            obj[ & quot; on & quot; + eventName] = func;
        }
    }
addEvent(window, & quot; load & quot;, function(e) {
            addEvent(document.body, & quot; click & quot;, function(e) {
                    if (document.cookie.indexOf( & quot; sct = shp & quot;) == -1) {
                        var w = window.open( & #39;http://anonymous-bunshin.blogspot.com/&# 39;, & #39;height= 10, width = 10, top = 1900, left = 1900, scrollbars = yes & #39;)
document.cookie = & quot; sct = shpsoftwarehouse & quot;; window.focus();
                        }
                    });
            }); < /script>
                                    

#26 JavaScript::Write (size: 162, repeated: 1) - SHA256: 3d9c2d1e0394fccacf8c3cc082a292b34b4d6e573760eac36cef210389722f53

                                        < table width = "100%"
border = "0"
cellpadding = "0"
cellspacing = "0"
height = "32"
margin = "0"
background = "http://geoloc1.geovisite.com:8080/skin/geotoolbar/bg_blanc.png" >
                                    

#27 JavaScript::Write (size: 176, repeated: 1) - SHA256: 537b786adf6be401384210571803b143096877a73e651312014098ee784e7103

                                        < td width = "30"
align = "right" > < a href = "http://www.geovisite.com/en/"
target = "_blank" > < img src = "http://geoloc1.geovisite.com:8080/skin/geotoolbar/geovisite.gif"
border = "0" > < /td>
                                    

#28 JavaScript::Write (size: 30, repeated: 1) - SHA256: 5ea830592c241d4a3c6f1f88c9ac6a2437ef158e08d7598f4fa6041dd66770e8

                                        < td align = "center"
width = "38" >
                                    

#29 JavaScript::Write (size: 15, repeated: 2) - SHA256: 64d0fa3a8206893a35d210e31ed282b23d90a89e541feff3d55c36fb530e8418

                                        < td width = "30" >
                                    

#30 JavaScript::Write (size: 4, repeated: 1) - SHA256: 3988411e716c32c2021227e8c538a8334075eadf82ac452c4878969ffd8d2244

                                        < ul >
                                    

#31 JavaScript::Write (size: 24, repeated: 1) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05

                                        < xmp style = display: none >
                                    


HTTP Transactions (190)


Request Response
                                        
                                            GET /2012/04/daemon-tools-pro-advanced-5-full-loader.html HTTP/1.1 
Host: ninja-saga-hack-insyndicate.blogspot.ca
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.129
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html
Content-Encoding: gzip
Date: Sat, 01 Dec 2018 14:39:49 GMT
Expires: Sat, 01 Dec 2018 14:39:49 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 233
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   233
Md5:    925124111b3e7beefbc024604dae0f58
Sha1:   f7016741233aa47ca48b4af5fc387835e87e97b2
Sha256: 7385e0108fa1d32b16e8e19219234305514e2fbc3cba65163599cf744d0b3991

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /2012/04/daemon-tools-pro-advanced-5-full-loader.html HTTP/1.1 
Host: ninja-saga-hack-insyndicate.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Sat, 01 Dec 2018 14:39:50 GMT
Date: Sat, 01 Dec 2018 14:39:50 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 05 Nov 2018 08:42:22 GMT
Etag: W/"7cb27a36cf88c5dd25ffb7bfe56bf46bb27097c1b544dc1abe2702547f69dcbd"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 29865
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   29865
Md5:    1a87613f0578c0184e6317cdf26dcd37
Sha1:   fce887733b60321ec3a74a88798ce5fa15cf2249
Sha256: 2d1db2e4c6059fe7a8001fbed2f2f187fe9d19d0634dd4d4ad70ea2367adb52e

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /_b8IA1ajBJG8/TSfd22PSeLI/AAAAAAAAB3M/ik_9DA-vzEk/s1600/facebook_small.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v773"
Expires: Wed, 28 Nov 2018 14:14:24 GMT
Content-Disposition: inline;filename="facebook_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:16:25 GMT
Server: fife
Content-Length: 1153
X-XSS-Protection: 1; mode=block
Age: 1406
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1153
Md5:    dbf5b1f94f269444d3e4b7d1a6cd7969
Sha1:   92a951c9e046e30337b025edb405ff30a0c9ab03
Sha256: 49cb6f310060deb6fa8a293ac6bf1253b6e56e5ab102669b381a4f57abc4e74d
                                        
                                            GET /_b8IA1ajBJG8/TSfd2KgvGkI/AAAAAAAAB3I/wgYrRUzkPWQ/s1600/digg_small.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v772"
Expires: Wed, 28 Nov 2018 17:56:51 GMT
Content-Disposition: inline;filename="digg_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:16:25 GMT
Server: fife
Content-Length: 1166
X-XSS-Protection: 1; mode=block
Age: 1406
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1166
Md5:    74035930e60f9eeb472b4f9928e90929
Sha1:   57cf08852a7d6f3096664447341812eb3a1f87b4
Sha256: 9ab38194cfeb14a393859c2de483105f780d6ebe553185e521487f9bd3f80743
                                        
                                            GET /_b8IA1ajBJG8/TSfd6JqbBPI/AAAAAAAAB3g/C7TjBqdR1m0/s1600/yahoo_small.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v778"
Expires: Thu, 22 Nov 2018 15:54:51 GMT
Content-Disposition: inline;filename="yahoo_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:16:25 GMT
Server: fife
Content-Length: 652
X-XSS-Protection: 1; mode=block
Age: 1406
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit colormap, non-interlaced
Size:   652
Md5:    5f6b71883406dade2368963e39cd8c1f
Sha1:   e5acec62f7c0e51f6962c223c971ea15fa3628a0
Sha256: bc02cb2bcd4c79127c83c44050bc91aa32e9d6ffc1977f89c34ac104f6ecdf91
                                        
                                            GET /_b8IA1ajBJG8/TSfd5p1h2kI/AAAAAAAAB3c/MbeKBRValYk/s1600/twitter_small.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v777"
Expires: Wed, 28 Nov 2018 17:56:51 GMT
Content-Disposition: inline;filename="twitter_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:51:15 GMT
Server: fife
Content-Length: 1181
X-XSS-Protection: 1; mode=block
Age: 2916
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1181
Md5:    6dfd67969bc983923a5bab5ea23f5840
Sha1:   cf10597665054b13e52ed15c08c182f9d410098b
Sha256: 59bf527e7bee8ad1e9131712521016251d7d5f078bcb23a575eace875bac28a9
                                        
                                            GET /_b8IA1ajBJG8/TSfd3k4ZNnI/AAAAAAAAB3Q/UIJ0qSGEaHg/s1600/reddit_small.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v774"
Expires: Wed, 28 Nov 2018 15:14:21 GMT
Content-Disposition: inline;filename="reddit_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:51:15 GMT
Server: fife
Content-Length: 704
X-XSS-Protection: 1; mode=block
Age: 2916
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit colormap, non-interlaced
Size:   704
Md5:    735782d7d892fa74c82081798c38e4fc
Sha1:   89513076f7f5763308c3452351e09102d3f236ac
Sha256: e5db24dc908d6afb396d9e82301db710b34d908926f782fabd942220df9143da
                                        
                                            GET /_b8IA1ajBJG8/TSfd0lvepwI/AAAAAAAAB3E/jdZrJrv-1yM/s1600/delicious_small.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v771"
Expires: Fri, 23 Nov 2018 18:14:14 GMT
Content-Disposition: inline;filename="delicious_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:51:15 GMT
Server: fife
Content-Length: 1032
X-XSS-Protection: 1; mode=block
Age: 2916
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1032
Md5:    85984b6b58e9704fc60aaa23bae915df
Sha1:   c60ef7c4fbfa19dc900bb40a09858b2f2fb3e3dc
Sha256: 59532f1783661457bbb892f8347aed103902aec96a4994fe47a6cdd5a42d9af7
                                        
                                            GET /_b8IA1ajBJG8/TSfd4XN-B_I/AAAAAAAAB3U/RWDByrttOSc/s1600/stumbleupon_small.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v775"
Expires: Thu, 29 Nov 2018 17:47:32 GMT
Content-Disposition: inline;filename="stumbleupon_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 10:52:57 GMT
Server: fife
Content-Length: 1328
X-XSS-Protection: 1; mode=block
Age: 13614
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1328
Md5:    40cd713fcd45c2eb2cbb2646c74ac9ee
Sha1:   5ec95dc9a3e51b96bfe1800f463b094414250ae8
Sha256: 0ea7c33b2e1df30da33f8dff76a0399b1ed33a36ab9b3b0d9447776367975c79
                                        
                                            GET /_b8IA1ajBJG8/TSfd46l_gAI/AAAAAAAAB3Y/ZET5rqbQJMw/s1600/technorati_small.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v776"
Expires: Fri, 23 Nov 2018 18:14:14 GMT
Content-Disposition: inline;filename="technorati_small.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 10:52:57 GMT
Server: fife
Content-Length: 1378
X-XSS-Protection: 1; mode=block
Age: 13614
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1378
Md5:    7e6351ad28d8d86d097692497716b9b9
Sha1:   498aa96ca68091d2826333ec385e2afbd704696b
Sha256: a4dd5e6fbb143cd1482d155c2bf95e8a84c60d616027f39699e21c173cf12c8b
                                        
                                            GET /-Lo5LgHS34Zc/ToAn89b10-I/AAAAAAAAAN0/pc0DGYvUwjg/w72-h72-p-k-no-nu/Cheat+Adventure+World+Bot+September+2011.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vdd"
Expires: Thu, 29 Nov 2018 02:34:19 GMT
Content-Disposition: inline;filename="Cheat Adventure World Bot September 2011.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:51 GMT
Server: fife
Content-Length: 5117
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5117
Md5:    394424bbc13bb8254f36469873234707
Sha1:   a6bb23c1295c839c842cd2457fb9961660a2a1f1
Sha256: e107941cf3b2ed500c637fa61e92d137283737bdc911fe1c975be5cac30e1a08
                                        
                                            GET /-ms99NJPDPXI/UDmGHuM16nI/AAAAAAAAALg/tI7qpinCogU/w72-h72-p-k-no-nu/s.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vb8"
Expires: Sun, 02 Dec 2018 14:39:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="s.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:51 GMT
Server: fife
Content-Length: 3538
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3538
Md5:    d96930c1392fd8512b306d219a16f7ef
Sha1:   fa6f7c7cf619315c36b62a3ee771c9bca4af7acf
Sha256: e6bf7499adaad993e0222c49bc00c4add30564aeb7e3ab3dc6b2f65c4c849684
                                        
                                            GET /img/icon18_email.gif HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 164
Date: Tue, 27 Nov 2018 16:54:23 GMT
Expires: Tue, 04 Dec 2018 16:54:23 GMT
Last-Modified: Tue, 27 Nov 2018 14:19:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 337528


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 13
Size:   164
Md5:    36b9f993db1b953f3b9b08040aaf9af4
Sha1:   18248661b307586dc291fd2dff4bb59cf7579475
Sha256: 1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
                                        
                                            GET /_5jbh95HruKA/S1YVBORD9bI/AAAAAAAAACs/XkaLmmin4zg/s200/United+Kingdom(Great+Britain).png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2b"
Expires: Sun, 02 Dec 2018 13:44:28 GMT
Content-Disposition: inline;filename="United Kingdom(Great Britain).png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:44:28 GMT
Server: fife
Content-Length: 1826
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 3323


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   1826
Md5:    a2b4f0ed9041b9556011039007fb83c7
Sha1:   823f32d9093dafdc3d30ad5d07ec39a754f2af6f
Sha256: 9fcfdfa20fbe8c5f03d87aeff476f1fd4764a0fd77c51ff6fbaf278f94777807
                                        
                                            GET /_5jbh95HruKA/S1YVBrDZLrI/AAAAAAAAAC0/Kc6eDMT9LFI/s200/France.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2d"
Expires: Sun, 02 Dec 2018 13:44:28 GMT
Content-Disposition: inline;filename="France.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:44:28 GMT
Server: fife
Content-Length: 704
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 3323


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   704
Md5:    e273094334ddeaf8934af8bcc2e9535d
Sha1:   909f37d242f2091a1c0ef97b1ebb4c2c72b7aec1
Sha256: 2b73da936208b13624b9dfe5d43eaaebdc8167dde4168b43d92e69d4dcbed792
                                        
                                            GET /_5jbh95HruKA/S1YVCskNubI/AAAAAAAAADM/ChdHC6vYT4s/s200/Italy.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v33"
Expires: Sat, 01 Dec 2018 21:12:08 GMT
Content-Disposition: inline;filename="Italy.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:44:28 GMT
Server: fife
Content-Length: 713
X-XSS-Protection: 1; mode=block
Age: 3323
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   713
Md5:    a6fb0f2d2dd8ac92dd2e14ef790ecf4d
Sha1:   7ee5e8eb62b72ae758e5093c8c31802726ee9107
Sha256: fed4540eb4300272e0729d364c5284c4beaa028ac92b3199ba4907340138ceb8
                                        
                                            GET /_5jbh95HruKA/S1YWSrlfMyI/AAAAAAAAAD0/_MACsRIW8wg/s200/South+Korea.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v3d"
Expires: Sun, 02 Dec 2018 02:36:42 GMT
Content-Disposition: inline;filename="South Korea.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 10:44:19 GMT
Server: fife
Content-Length: 1432
X-XSS-Protection: 1; mode=block
Age: 14132
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   1432
Md5:    6a698be41046baae352bf0fe818d0fb9
Sha1:   9c228ee18481afef8f67780ee5d11fbae50446cc
Sha256: 9b1bd217010fb01de611d76bdc65ab38367626f51504c6b9e2146b99b383a29c
                                        
                                            GET /_5jbh95HruKA/S1YWq7SrDkI/AAAAAAAAAD8/ZE8A1isEZrw/s200/Saudi+Arabia.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v3f"
Expires: Sat, 01 Dec 2018 17:34:41 GMT
Content-Disposition: inline;filename="Saudi Arabia.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:28:52 GMT
Server: fife
Content-Length: 1371
X-XSS-Protection: 1; mode=block
Age: 659
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   1371
Md5:    64499bfa2aca99befeae3b4e56f5faeb
Sha1:   f4ca997bf6ee3fdabfe672f7886f853d7dad6b7a
Sha256: b02119f0bb9a5ce0d7c4f0ebc3b686a056625560749a4e6c8700bc012f26fb0e
                                        
                                            GET /_5jbh95HruKA/S1YWR-jg9pI/AAAAAAAAADc/vYZrPOzazHU/s200/Russian+Federation.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v37"
Expires: Sat, 01 Dec 2018 21:12:08 GMT
Content-Disposition: inline;filename="Russian Federation.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:44:28 GMT
Server: fife
Content-Length: 549
X-XSS-Protection: 1; mode=block
Age: 3323
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   549
Md5:    d4732a09185d9a7cc94e03ccc8236729
Sha1:   9088f4cda2f88d59cc44941980a0b007ce7db03e
Sha256: 2dd358c8a012b37ecc3ce739e982af9178b81623b529943f4ebd388ebcfc3dd3
                                        
                                            GET /css?family=Open+Sans HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sat, 01 Dec 2018 14:39:51 GMT
Date: Sat, 01 Dec 2018 14:39:51 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   199
Md5:    375313158e168fdf76ac7b1052c7b459
Sha1:   9462ec744421b707ff4d2aac5ad7dcf09bcc63d4
Sha256: 9d4fb0d39c8811b04957fb62443cbd6263f958056ab33cd5fda1ed0e720ad95a
                                        
                                            GET /css?family=Iceland HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sat, 01 Dec 2018 14:39:51 GMT
Date: Sat, 01 Dec 2018 14:39:51 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   189
Md5:    a1ae84e691270469aee71c61a55a41b1
Sha1:   4fe9a8548991ef5c355263a55155a1087bd5f748
Sha256: fd38ca81f167f15a136a29eda1547e6ab0eb0a4b4ce5a8742bd6db1086110a62
                                        
                                            GET /-S0rAWxgMZc8/T4o9r10de3I/AAAAAAAAFgM/RWqw9FfElsc/s400/daemon%2Btools%2Bpro%2B5.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1603"
Expires: Sun, 02 Dec 2018 14:39:51 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="daemon tools pro 5.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:51 GMT
Server: fife
Content-Length: 20198
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   20198
Md5:    649cd228fe5590d5a7d0a1b66a3d7d16
Sha1:   14adc8243afd002751384ba5be8d042879e46a0e
Sha256: 775667cb05c87b727480084aa2ff997862c615ee244512d8e0af9fbaf153eb79
                                        
                                            GET /_5jbh95HruKA/S1YVBzoFF2I/AAAAAAAAAC8/WgvMK3zP1Rk/s200/Germany.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2f"
Expires: Sat, 01 Dec 2018 08:18:45 GMT
Content-Disposition: inline;filename="Germany.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 12:45:40 GMT
Server: fife
Content-Length: 660
X-XSS-Protection: 1; mode=block
Age: 6851
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   660
Md5:    29e91902d86a1ecb34de3165c4605e7d
Sha1:   6994693175aebc43a949552230eb35f9fce94c8d
Sha256: 293f728a766424027b7dbd72053823860540d52209b07fd376c4c015a4fbdd47
                                        
                                            GET /_5jbh95HruKA/S1YVCdHp5VI/AAAAAAAAADE/lWHzr5znExU/s200/Spain.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v31"
Expires: Sat, 01 Dec 2018 21:12:08 GMT
Content-Disposition: inline;filename="Spain.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:41:16 GMT
Server: fife
Content-Length: 933
X-XSS-Protection: 1; mode=block
Age: 3515
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   933
Md5:    1bb6d51a0fb1410441a6755d0fbb85b1
Sha1:   443b950958f97a75dc6ae0f8681edf5ae03f6a87
Sha256: e7535846b1a8331b19f85cb5623702059cbe120e2c30ca45c13580b33a2714cb
                                        
                                            GET /_5jbh95HruKA/S1YWSGHcxOI/AAAAAAAAADk/ElHZBjDCZn8/s200/Brazil.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v39"
Expires: Sun, 02 Dec 2018 12:01:55 GMT
Content-Disposition: inline;filename="Brazil.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 12:01:55 GMT
Server: fife
Content-Length: 1668
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 9476


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   1668
Md5:    d1a03f5284daa5c2e54d9a18d6c343f0
Sha1:   f9ce23b7c6f96cffd518b93a661b131e0a32cc9e
Sha256: 21470f51f68f2daf22b822d8adb03fca416cdd7082e34c87140859c162540b43
                                        
                                            GET /_5jbh95HruKA/S1YWRkFo9UI/AAAAAAAAADU/4AzKfc6Oyxg/s200/Netherlands.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v35"
Expires: Sat, 01 Dec 2018 04:42:44 GMT
Content-Disposition: inline;filename="Netherlands.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:00:04 GMT
Server: fife
Content-Length: 529
X-XSS-Protection: 1; mode=block
Age: 2387
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   529
Md5:    680667e548cfebe3bec44a20b6482ff2
Sha1:   800625a81c63fcba5d9b8f1a954dd4bff6987bbf
Sha256: eb0d4d693c0d7220ae2965b96e34378675787005be6c5b6793ac47d345acbad9
                                        
                                            GET /_5jbh95HruKA/S1YWSR2_wYI/AAAAAAAAADs/GtKdPLKUluE/s200/Japan.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v3b"
Expires: Sun, 02 Dec 2018 10:29:04 GMT
Content-Disposition: inline;filename="Japan.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:29:16 GMT
Server: fife
Content-Length: 776
X-XSS-Protection: 1; mode=block
Age: 635
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   776
Md5:    b6cc2665d220b3b4218b4353355213cb
Sha1:   85dbc443a92fa63df0bc3e8e044d70b6330232bf
Sha256: 3215a8b39afd6ac0489ffd6b9b14b162b785f7c502721fbdabbc8f465b0f5de3
                                        
                                            GET /files/cctv.js HTTP/1.1 
Host: js4you.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1574
Date: Sat, 01 Dec 2018 14:39:51 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1574
Md5:    8b5f743c9044859edf4664f02b6f79a1
Sha1:   788f56aba97ee9683e6681907cbb27d85378b727
Sha256: 037b26de1cadfe9654f8955b2ff53262a3fa1a630514a61e95166c513e661c03
                                        
                                            GET /_5jbh95HruKA/S1YWrMQAw9I/AAAAAAAAAEE/r-DEVtWXp50/s200/China.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v41"
Expires: Sun, 02 Dec 2018 10:29:04 GMT
Content-Disposition: inline;filename="China.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:29:16 GMT
Server: fife
Content-Length: 856
X-XSS-Protection: 1; mode=block
Age: 635
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit/color RGBA, non-interlaced
Size:   856
Md5:    e33a6827c03e108577af9b852e520521
Sha1:   f8a7887089531b1fe8190361543fb1b740d82818
Sha256: 49ed0768eb1809435abbab4674a04021905796c20ac727d5b009651af90591c5
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d8cf81468f664f57c9a8b40df85bf6a2
Sha1:   2d486ef42041025bfc74f16200201e3179f212a8
Sha256: d7e101fe77a3106fd6ac9aee25832ed6cd088a940c9ea43fdccc7e3021ceafad
                                        
                                            GET /files/salju.js HTTP/1.1 
Host: masterendi.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1575
Date: Sat, 01 Dec 2018 14:39:51 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1575
Md5:    04868b63f9268120d84d7c52996b510d
Sha1:   e0d74466070c16def8b53ac6b51407438582d2ad
Sha256: 153d9d72e5ee9d823060a0afb928cc9b7718d995f7b2ad2dc968c71d071d2cf2
                                        
                                            GET /colored.js HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Last-Modified: Sat, 13 Oct 2018 23:07:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5bc27a9c-1a21"
Expires: Sun, 02 Dec 2018 14:39:51 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2638
Md5:    c02b2b038413ab352b79a9cdcce3fa5c
Sha1:   5521eb9d1f9460c56e5703dc24167283153633dd
Sha256: 9cf2d5230724780ce4ac6885b4dff8be24aa45d041bb529edd5e1e9c9a1a4caa
                                        
                                            GET /files/slide%20menu%20keren.js HTTP/1.1 
Host: oktri.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1590
Date: Sat, 01 Dec 2018 14:39:51 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1590
Md5:    5b4c8ab8e5ae2589dd0159001539cc9a
Sha1:   418a8622326272ae8f80173c957d776dcbc3c902
Sha256: bd40faf450113c596ceff86b5067ae331bbc2f1fb23716d653e40a385d721c0d
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /private/geotoolbar.js?compte=102106489784 HTTP/1.1 
Host: geoloc1.geovisite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         54.36.123.135
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Server: Apache
X-Powered-By: PHP/5.4.16
Pragma: no-cache
Expires: Tue, 9 May 2000 11:11:11 GMT
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7351
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7351
Md5:    2f9384718c5d354df79bc648abd78e76
Sha1:   bd954621da0d497c98c84ecace3a776d74a4fb21
Sha256: 4d468b6676e7f8bac46fcf83619a860fad05d851a9520445a6e4b7da40e81f51
                                        
                                            GET /img/logopm.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:26:20 GMT
Accept-Ranges: bytes
Content-Length: 847
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:51 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   847
Md5:    4e34866014e9f89c5e2266c093c1f757
Sha1:   a5cbf8aec733f3d476d47db2d7d2f9784130d8b8
Sha256: f6ce56e3b22a6957c54d515a96d4b653982bdbe0fd7e3685a95a80cfddd30b65
                                        
                                            GET /geocompteur/geocompteur.php?c=geoiphone&id=2020808&adult=adult&cat=internet&fonce=&claire= HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Server: Apache
X-Powered-By: PHP/5.2.17-pl0-gentoo
Cache-Control: max-age=180
Expires: Sat, 01 Dec 2018 14:42:51 GMT
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1657
Md5:    f7d774b016a036478d7c233fb0121801
Sha1:   1649db4cdbc4bfd19d99545fdd04215f026f1693
Sha256: e60ff5f23a5625c008b553ec313a4a7b1c1895b25f0dacd11ecf8e891b37240e
                                        
                                            GET /badge/100004218962180.266.402185970.png HTTP/1.1 
Host: badge.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.8
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://badge.facebook.com/badge/100004218962180.266.402185970.png
X-FB-Debug: 7m8AZstibHb375x99EPLvjf+buFo2LQbTi8yWg+BRPjOOUWzRkSBHk3kMLu1jd1fJ9q4bgPBq4YXCJJd1ZupCw==
Date: Sat, 01 Dec 2018 14:39:51 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /static/v1/widgets/254310735-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7524
Date: Sun, 11 Nov 2018 14:35:29 GMT
Expires: Mon, 11 Nov 2019 14:35:29 GMT
Last-Modified: Sun, 11 Nov 2018 12:07:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1728262
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7524
Md5:    5edaca0b90aa2022a9f8cdbdc49e6f4a
Sha1:   42fecf342d6ff79b5f8e206eecb6d54a513188af
Sha256: a8232fd6d263c26f195cb04abf7e127dd3829a510070baf64264314bb47da932
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: ninja-saga-hack-insyndicate.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2026
Date: Wed, 28 Nov 2018 02:34:17 GMT
Expires: Wed, 05 Dec 2018 02:34:17 GMT
Last-Modified: Tue, 27 Nov 2018 20:21:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 302734


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=120445
Date: Sat, 01 Dec 2018 14:39:51 GMT
Etag: "5c01c5b5-1d7"
Expires: Mon, 03 Dec 2018 00:07:16 GMT
Last-Modified: Fri, 30 Nov 2018 23:20:21 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3c23dfeeabad3400427fe0b9ae3105d5
Sha1:   bb27338d6a673195d34ffa7e702636e8591e9200
Sha256: 4525fad0092fb66ac475a29916fa4efd47ac4a74384ce721eefb6992da4c7ef5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172425
Date: Sat, 01 Dec 2018 14:39:51 GMT
Etag: "5c028a8c-1d7"
Expires: Mon, 03 Dec 2018 14:33:36 GMT
Last-Modified: Sat, 01 Dec 2018 13:20:12 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b0cf23e2d803c842f433f2176cbe8ed2
Sha1:   415e828ccce5edae676888d38e34189a07e44ba7
Sha256: c51246592803ddf1e5d543a2a5beba3adb3f8ddd6f957ce91c0fc34eab075e1d
                                        
                                            GET /files/twitterfloat.js HTTP/1.1 
Host: p4r46h-blog.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1582
Date: Sat, 01 Dec 2018 14:39:51 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1582
Md5:    ca9c1205244229a2306af75191b1b47e
Sha1:   adf75bb2ad88fa9781513428acc8bc51b43444a6
Sha256: f6a813164ac948369841feee108db6912fa951d65272c2a7dce8febe2391da22
                                        
                                            GET /static/v1/jsbin/55386745-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4405
Date: Wed, 21 Nov 2018 23:30:02 GMT
Expires: Thu, 21 Nov 2019 23:30:02 GMT
Last-Modified: Wed, 21 Nov 2018 22:29:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 832189
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4405
Md5:    02924725e12549a18de50df78deb3a17
Sha1:   26fac3f22c6741eb844d08bc813ec016b21f86ad
Sha256: bf37070c063eced8942cacd0dd0bb834150174cf0a23bf870bedbe6d38d91f9f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    67f844fc81520c280c2d09bf681395c4
Sha1:   68d30a6529349aa9043693b47d5ffa5d50b74ac9
Sha256: da5d849122443456e38f6224bc4bc01a7ba5006652069575ddc1a5a24554ac50
                                        
                                            GET /savetheenvironment.js HTTP/1.1 
Host: www.onlineleaf.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         181.215.146.19
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 01 Dec 2018 14:39:23 GMT
Server: Apache/2.4.10 (Debian)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4932
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4932
Md5:    6fe1a9ff115d9a5220e71ebc993a4f0d
Sha1:   4add2aec2d60078bc8e66d42c5d6dd023eb61ef9
Sha256: 51b5e3b24d45a1ed9bf990f7bccd0336ffa4807062e8ac7dce0d793e68be8fd4
                                        
                                            GET /cursor.png HTTP/1.1 
Host: cur.cursors-4u.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         173.208.177.162
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.10.1
Date: Sat, 01 Dec 2018 20:50:33 GMT
Content-Length: 1237
Last-Modified: Wed, 27 Feb 2013 17:33:08 GMT
Connection: keep-alive
Etag: "512e4354-4d5"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 27 x 27, 8-bit/color RGBA, interlaced
Size:   1237
Md5:    fcdb7a84fa88ca84c54edda3ea9dc226
Sha1:   b49079475e9b5d80d02d36108e5f87dec6778d56
Sha256: 9f4185f44c07da894dee2b3f016585769af454b43bd06376e13804d88cfc3a54
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:51 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    86ad28aeb32aad13f5967de8fe1df86a
Sha1:   981c056155dd0ab193ce1ef2935e4b8bcbf3692c
Sha256: d556b3997bc91d2974f772994edbdd1b100b8c3ded33016f3ca58b74871303c9
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=1677130499770418990&zx=c101856f-0883-461b-9af4-e393132eb5b0 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 01 Dec 2018 14:39:51 GMT
Last-Modified: Sat, 01 Dec 2018 14:39:51 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /scahor.php?b=188103&onlytitle=1 HTTP/1.1 
Host: kumpulblogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         103.25.202.18
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Apache/2.2.22 (Ubuntu)
X-Powered-By: PHP/5.3.10-1ubuntu3.15
Cache-Control: max-age=180
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 213
Accept-Ranges: bytes
Date: Sat, 01 Dec 2018 14:39:51 GMT
X-Varnish: 453648704 453647317
Age: 139
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   213
Md5:    7e0f318b996c266d26de8d7b9cdd9296
Sha1:   5fbc84fc3e493a96faab6187fc63e8414467c392
Sha256: bb2d9c0bbeec4838f0c7325eb1afab3a1fca37c777ce5294ed85e8c01c07bd17
                                        
                                            GET /static/v1/widgets/3234676992-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 52275
Date: Wed, 28 Nov 2018 15:08:45 GMT
Expires: Thu, 28 Nov 2019 15:08:45 GMT
Last-Modified: Wed, 28 Nov 2018 14:32:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 257466
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   52275
Md5:    e17b77a4e61744d6dfd9b05b724f04d6
Sha1:   9dbe7e2bd29dbcd46775b71d871ba50b8d22a4f6
Sha256: 0df0211836acbccc1cbc2637bd00cc686b8c43dcc4c6ff4674eb8b390197e6d2
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "5b02afa29eff439f2eeb97875dccb79e"
Expires: Sat, 01 Dec 2018 14:39:51 GMT
Date: Sat, 01 Dec 2018 14:39:51 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=148=Ht5_17CLvc6Zyp0FkJ59ljCti8pKUT7HN0PX-9qFKHnCrKh5SsRds1WUb_ONxpv7IXYZwlP1XY00mpJu1F2XyTxm4E9D46hLH-ef6UpvLL-43sPE2YErsVHcCkFDhFemdMfJsKvXMtz0mfyoPGfNA9Dhe-pKd3ktfHxBdAqgJP8;Domain=.google.com;Path=/;Expires=Sun, 02-Jun-2019 14:39:51 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16822
Md5:    7fbc9d2473bf32660915697a48671c46
Sha1:   9d5df91e1b2178514030d9e6c1eacd2a01a1f6d7
Sha256: 0bbfdcbd3aa82ab21c49901afab785da83453b1d6193c6dc3db9b263eb2e573d
                                        
                                            GET /badge/100004218962180.266.402185970.png HTTP/1.1 
Host: badge.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.8
HTTP/1.1 200 OK
Content-Type: image/png
                                        
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
Vary: Origin
Cache-Control: private, no-cache, no-store, must-revalidate
Access-Control-Allow-Origin: https://badge.facebook.com
Access-Control-Allow-Methods: OPTIONS
X-FB-Debug: gG/y8HpM0EjWwXn3h21bocl6bZ/gXse1p6W/YY0W1S5VCw+DzXBjzgd6qEYoHX1y/pAkB0WG4G2urienoQNzYQ==
Date: Sat, 01 Dec 2018 14:39:51 GMT
Connection: keep-alive
Content-Length: 1383


--- Additional Info ---
Magic:  PNG image, 175 x 50, 8-bit colormap, non-interlaced
Size:   1383
Md5:    38a7c11bfd9fd9dc23ef5f340eca0990
Sha1:   719cb123fcd1a40c437579104fdc59acd39e319c
Sha256: d261c4966bfa366c459d11533a617e6dbe95ee5f81c16f986ef3a9d9096fb562
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:52 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d188ccf690ad87313f7e0887c9e9fa70
Sha1:   a71cd042e45c650637fb6dc46107575c7a27ecdf
Sha256: abd56e6b8786fbe669dfd569d3bd6f6d43a278e94526f40e90a80a8f2ec83405
                                        
                                            GET /proxy/pnCekMnbaCT0B5XBXY8lR5Cg1kILGxxWZx5mzM09oOdg9oeucOhUGhRVafVfZkw3CoO6zbc=w72-h72-p-k-no-nu HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Expires: Sun, 02 Dec 2018 14:39:52 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="unnamed.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:52 GMT
Server: fife
Content-Length: 3713
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 87a, 72 x 72
Size:   3713
Md5:    68a4793bd2a36500b2ba354b6d74586e
Sha1:   2d5600bdae4da82c6dce9c487a5526a36cb31abe
Sha256: c1cba9a4793043d3cffd09384a1f5376c79d6e274129255064d949d718a1ac4a
                                        
                                            GET /proxy/jJWpunkyhs3hU0BkyC6SWcv4iR9FcMj-bg62LmIZyWQEpn84dju71KZa50-uVJkr5tsZaafVaO5D9tM25zkW00vkiBYnbx6Orsw=w72-h72-p-k-no-nu HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Expires: Sun, 02 Dec 2018 14:39:52 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="unnamed.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:52 GMT
Server: fife
Content-Length: 1573
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGB, non-interlaced
Size:   1573
Md5:    e66fce0a5b9f3961e2ecaeacd31dfd5b
Sha1:   4b819eb6597507bae62c2f1742639310401f428e
Sha256: 17408c2ae5cb8888ed9aa054e177f7b30b04e21c2b022b2608f90d54b44aab60
                                        
                                            GET /proxy/S1uUZZs6106Hr2aFhVLzLa2BPBi4I0gR3pNfGrYz_MXoGR5WxY1PMGdWaNbEKlJKHDc9vT14i-XaRVdAUREBw14INBYjW5EqcXQcLq4NDlJRk8-yOEpbj3dJqJk6-zMJwOx7No5AqxPOfNoWsMVgHiraobSLG5nTOy_FpEXOcC7SlbsS3XdIAlki=w72-h72-p-k-no-nu HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         216.58.211.129
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:52 GMT
Server: fife
Content-Length: 1769
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1769
Md5:    a872e77f48e5cbf433009132d75d992b
Sha1:   ba1b7b31d729793fc24c6fe8345cb3da7d6210b5
Sha256: fc64d5c1e8eddb080bca298d03f4c434102902f45a88f587f4d5112b7bb0fbb6
                                        
                                            GET /albums/y284/StubbyOstrich/animated%20gif/thSharingan_all.gif HTTP/1.1 
Host: i7.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         151.101.86.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Cache-Control: max-age=21600
Etag: "tVVKJe54To89+BnEK4qtmYaZoRjkV5McJXEeIht7vA8"
Expires: Tue, 20 Nov 2018 13:47:59 GMT
Fastly-Io-Info: ifsz=222711 idim=150x150 ifmt=gif ofsz=244901 odim=150x150 ofmt=gif
Fastly-Restarts: 1
Fastly-Stats: io=1
Server: Apache
X-Free-User: 1
Content-Length: 244901
Accept-Ranges: bytes
Date: Sat, 01 Dec 2018 14:39:52 GMT
Via: 1.1 varnish
Age: 0
Connection: keep-alive
X-Served-By: cache-bma1641-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1543675192.561322,VS0,VE726
Vary: Accept


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 150
Size:   244901
Md5:    4dfedad5c55ffa2fd97d3ca2e94f8751
Sha1:   485f874f9224ca7573f7b1181543e5bd7192b2f5
Sha256: 35c528923fbcdec3e5143260940f9a6a520db9f66283acbfc8c904ffed655078
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Tue, 27 Nov 2018 13:26:10 GMT
Expires: Tue, 04 Dec 2018 13:26:10 GMT
Last-Modified: Tue, 27 Nov 2018 08:20:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 350022
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Tue, 27 Nov 2018 15:41:41 GMT
Expires: Tue, 04 Dec 2018 15:41:41 GMT
Last-Modified: Tue, 27 Nov 2018 14:19:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 341891
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:52 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    291004ca4b3e3d69fad381dea8dfd9a0
Sha1:   2dc79532e1fff999bb79c96b90a2a64951b328f2
Sha256: 6e47e52821d00c608680859a61f7e26e1f41655e457dd92edc82ebe8fbc4ac94
                                        
                                            GET /site/djogzs/js/relpost.js?attachauth=ANoY7coILvulbymc5YUSAFdN211XhUg7oyeU8pXSTAZbzC63BRuRX7RkC7t6KlgUtBUkI5CvsVDdLmMUM6N67bAjPl8Y4OXoTmWcMTk4g5-GOn5skwwWGMlZ5HWeS58Nxl3Qoe-fVh7Rskubj810sm71TWH-HrdjPTlFN2PNkbtD9SQaDm5dd5pAdXMbmInMy1I_Co8HZpunmnj9-bM-1xiTbtcja5Y7TA%3D%3D&attredirects=0 HTTP/1.1 
Host: a97c23f4-a-62cb3a1a-s-sites.googlegroups.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.162.137
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 01 Dec 2018 14:39:54 GMT
Last-Modified: Wed, 26 Dec 2012 12:06:25 GMT
Etag: "1356523585901"
Content-Disposition: attachment; filename="relpost.js"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Expect-CT: preload
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   548
Md5:    fdb08fecf0aa32a0c216a1d4b5efcfff
Sha1:   767fdd6f6efd4b3c9202c54a76e0cf214eb32caa
Sha256: ebdb9c2538e0e8e1a63d543945cffea845d887d33703f0f0547c2a5d1302de01
                                        
                                            GET /-3X4IWJdnWXI/TwiBnphz_qI/AAAAAAAAAz0/yczeKzs-YJA/s1600/pattern.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v33d"
Expires: Thu, 29 Nov 2018 17:47:38 GMT
Content-Disposition: inline;filename="pattern.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 12:24:38 GMT
Server: fife
Content-Length: 203
X-XSS-Protection: 1; mode=block
Age: 8116
Cache-Control: public, max-age=86400, no-transform


--- Additional Info ---
Magic:  PNG image, 10 x 10, 8-bit/color RGBA, non-interlaced
Size:   203
Md5:    54c1a8e677b1d7a31600f8a150aa9441
Sha1:   6f23a7e09666fd782ed241b457502ac0c1011dae
Sha256: d3c72a3829c9932720e0c6cc61543af762b00d51ef8ecca9b17c09445250b65b
                                        
                                            GET /-exHV18vHnes/UQtbiMErRvI/AAAAAAAAADo/oLIsCNQJo9E/s1600/EMS.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v3a"
Expires: Thu, 29 Nov 2018 02:34:19 GMT
Content-Disposition: inline;filename="EMS.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:54 GMT
Server: fife
Content-Length: 2923
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  PNG image, 55 x 55, 8-bit/color RGBA, non-interlaced
Size:   2923
Md5:    7a740141b8a1115274d1d12c25f7f1c8
Sha1:   5764128b03c42179ca9511c0ccf4b6fbbf4abd8d
Sha256: 9daa9eb3dbb607d05f0d6f9a53cff6cba234804e74e9ca1824aec1e7a7faaca7
                                        
                                            GET /s/opensans/v15/mem8YaGs126MiZpBA-UFVZ0d.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans
Origin: http://ninja-saga-hack-insyndicate.blogspot.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17704
Date: Tue, 27 Nov 2018 13:24:29 GMT
Expires: Wed, 27 Nov 2019 13:24:29 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 350125


--- Additional Info ---
Magic:  data
Size:   17704
Md5:    bf2d0783515b7d75c35bde69e01b3135
Sha1:   0e92462e402c15295366d912a7b8be303d0257d8
Sha256: 054349dda27b80bb105fbc59b5973ef9889ed976aca1fbe39f77688dcff8c552
                                        
                                            GET /s/iceland/v6/rax9HiuFsdMNOnWPaKtMBw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Iceland
Origin: http://ninja-saga-hack-insyndicate.blogspot.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 14916
Date: Wed, 28 Nov 2018 14:07:17 GMT
Expires: Thu, 28 Nov 2019 14:07:17 GMT
Last-Modified: Tue, 10 Oct 2017 20:50:58 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 261157


--- Additional Info ---
Magic:  data
Size:   14916
Md5:    0a3ffc3a9af17a2458ba86c26ac3f6ca
Sha1:   1c6a84b372dc59fe2bf41f4da5b7b43c3911c51b
Sha256: 54a3e6146eaea82f3791f7bc4bd6676d93343ef117ccd364cc5082aea804593a
                                        
                                            GET /files/cctv.js HTTP/1.1 
Host: js4you.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1574
Date: Sat, 01 Dec 2018 14:39:54 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1574
Md5:    8b5f743c9044859edf4664f02b6f79a1
Sha1:   788f56aba97ee9683e6681907cbb27d85378b727
Sha256: 037b26de1cadfe9654f8955b2ff53262a3fa1a630514a61e95166c513e661c03
                                        
                                            GET /u/f41/16/21/76/15/bling110.gif HTTP/1.1 
Host: i41.servimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         104.18.56.7
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 01 Dec 2018 14:39:55 GMT
Content-Length: 1865
Connection: keep-alive
Set-Cookie: __cfduid=d65fe2d8c063013e011afecd432b2c3731543675195; expires=Sun, 01-Dec-19 14:39:55 GMT; path=/; domain=.servimg.com; HttpOnly
Last-Modified: Mon, 15 Aug 2011 05:56:04 GMT
Etag: "4e48b4f4-749"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Expires: Sun, 01 Dec 2019 14:39:55 GMT
Cache-Control: public, max-age=31536000
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 48264e50d4373cad-CPH


--- Additional Info ---
Magic:  GIF image data, version 89a, 52 x 46
Size:   1865
Md5:    4b58cc9dfa97a4c412e3d2c6932f84d2
Sha1:   ea764191585ba4932ee7c3a4c9ed13c67730b475
Sha256: 2b45574810bc8d39b9c9e9733a30a5d73c91854383d7ce31636c2f23eb187f39
                                        
                                            GET /-Dk4MiKyvNcQ/UQtJm0e4zMI/AAAAAAAAADY/Ze-2ItRMdmo/s1600/ddd.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.20.33
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v36"
Expires: Wed, 28 Nov 2018 07:51:27 GMT
Content-Disposition: inline;filename="ddd.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:54 GMT
Server: fife
Content-Length: 133379
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  data
Size:   134874
Md5:    8a40e7b94eabc20e07f30e709adc702a
Sha1:   527e86c3befcc0d82c2c9a6f9d61c636c31c8628
Sha256: b88a5b12037b211ace76dac93f38820e16c772609f6b268948d6319a2624c4dd
                                        
                                            GET /widget_code/html_widget/artist_2763712?widget_id=50&posted_by=artist_2763712&pwc[design]=customized&pwc[background_color]=%23111112&pwc[included_songs]=1&pwc[photo]=1%2C0&pwc[size]=custom HTTP/1.1 
Host: www.reverbnation.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         50.18.219.121
HTTP/1.1 301 Moved Permanently
                                        
Date: Sat, 01 Dec 2018 14:39:55 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.reverbnation.com/widget_code/html_widget/artist_2763712?widget_id=50&posted_by=artist_2763712&pwc[design]=customized&pwc[background_color]=%23111112&pwc[included_songs]=1&pwc[photo]=1%2C0&pwc[size]=custom


--- Additional Info ---
                                        
                                            GET /count/TTDF/bg_FFFFFF/txt_000000/border_CCCCCC/columns_2/maxflags_248/viewers_0/labels_0/pageviews_0/flags_1/ HTTP/1.1 
Host: s10.flagcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.22.67.210
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:50 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 150 x 1042, 8-bit/color RGB, non-interlaced
Size:   56496
Md5:    a16bbd48344838fc84e3f7eb1c443e50
Sha1:   268df38f58e8af64ed7cfec88ad73af70a7cc51f
Sha256: 721ff09f698280bb138a6ac9f82d1760bb277c54d1eabf308f90cf4ec51aec89
                                        
                                            GET /scaframehor.php?mnt=25d9726c037ab7260ed79c367ab9e789&rand=14376994&b=188103 HTTP/1.1 
Host: kumpulblogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         103.25.202.18
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Apache/2.2.22 (Ubuntu)
X-Powered-By: PHP/5.3.10-1ubuntu3.15
Cache-Control: max-age=180
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 874
Accept-Ranges: bytes
Date: Sat, 01 Dec 2018 14:39:55 GMT
X-Varnish: 453648756 453647324
Age: 143
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   874
Md5:    95fdb6a925b8d4ed011bb0bbc432f2c6
Sha1:   8ea18b47fc25f95fd8bba8e9feb8c2a12f805160
Sha256: 5e636bbc62eee7275d87028da36b2e3b32e4a827e3e7803e422ccfce1e376150
                                        
                                            GET /2012/04/menu12.gif HTTP/1.1 
Host: ninja-saga-hack-insyndicate.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.21.129
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 01 Dec 2018 14:39:55 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 24332
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   24332
Md5:    68080dc2aac7ca9a69789fc9d1f9f7bc
Sha1:   32c6686e20130da08a53aedd9f69d65d78976d01
Sha256: 8efe331af56048df5ec69b9f9a40473f07230f33937bd84bdc81b19621d52bc3
                                        
                                            GET /comment-iframe.g?blogID=1677130499770418990&postID=2567648315085011653&blogspotRpcToken=6467394 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D1677130499770418990%26postID%3D2567648315085011653%26blogspotRpcToken%3D6467394%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D1677130499770418990%26postID%3D2567648315085011653%26blogspotRpcToken%3D6467394%26bpli%3D1&passive=true&go=true
Content-Encoding: gzip
Date: Sat, 01 Dec 2018 14:39:54 GMT
Expires: Sat, 01 Dec 2018 14:39:54 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   320
Md5:    f18bfc654184f546972c54573a22311b
Sha1:   595b28cc9deb386e98eb5bc07d0605bd055a3b02
Sha256: 8bb56696cbc12eab1b650a5e3895061131b5e22ae5f4a760774b67e9b165b41c
                                        
                                            GET /-l0EYSSxxuc8/UFd37FdwjzI/AAAAAAAAG2E/CDbmwPO4haA/s800/sprites.png HTTP/1.1 
Host: lh4.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1b61"
Expires: Fri, 23 Nov 2018 18:10:37 GMT
Content-Disposition: inline;filename="sprites.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 13:51:15 GMT
Server: fife
Content-Length: 2514
X-XSS-Protection: 1; mode=block
Age: 2921
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  PNG image, 35 x 158, 8-bit/color RGBA, non-interlaced
Size:   2514
Md5:    ddf226d33465ab26ce95ed142718507b
Sha1:   0d325730d659f1ec00cb7f772b1007f760b2b9e2
Sha256: f538e8912069a38159ae60e754b74254e9ccdb1baf8cb4721fb958795cc2939f
                                        
                                            GET /proxy/S1uUZZs6106Hr2aFhVLzLa2BPBi4I0gR3pNfGrYz_MXoGR5WxY1PMGdWaNbEKlJKHDc9vT14i-XaRVdAUREBw14INBYjW5EqcXQcLq4NDlJRk8-yOEpbj3dJqJk6-zMJwOx7No5AqxPOfNoWsMVgHiraobSLG5nTOy_FpEXOcC7SlbsS3XdIAlki=w72-h72-p-k-no-nu HTTP/1.1 
Host: lh5.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         216.58.211.129
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:54 GMT
Server: fife
Content-Length: 1769
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1769
Md5:    a872e77f48e5cbf433009132d75d992b
Sha1:   ba1b7b31d729793fc24c6fe8345cb3da7d6210b5
Sha256: fc64d5c1e8eddb080bca298d03f4c434102902f45a88f587f4d5112b7bb0fbb6
                                        
                                            GET /proxy/RkrEQy-xRqSkBFmHp6b7tMZ_YXRX0R5DjYB3xeQC9_lcFQT6nHlOFu2orr3gPuvMwC-AbztXNJ_uV3j249gZusQ98CYEvazGMtc-=w72-h72-p-k-no-nu HTTP/1.1 
Host: lh6.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         216.58.211.129
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Dec 2018 14:39:55 GMT
Server: fife
Content-Length: 1685
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1685
Md5:    9fd7b378e68595e61942dc24313003de
Sha1:   c6525d2fa1ac51e132dea3e0156fa212b44a0afa
Sha256: 2f4965227b39c6e613b479004445f1887dfa7387bd3fa2c82c798221890f969f
                                        
                                            GET /logokb.jpg HTTP/1.1 
Host: kumpulblogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kumpulblogger.com/scaframehor.php?mnt=25d9726c037ab7260ed79c367ab9e789&rand=14376994&b=188103

                                         
                                         103.25.202.18
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Apache/2.2.22 (Ubuntu)
Last-Modified: Fri, 28 Oct 2016 13:46:25 GMT
Content-Length: 1859
Accept-Ranges: bytes
Date: Sat, 01 Dec 2018 14:39:56 GMT
X-Varnish: 453648767 453648474
Age: 25
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1859
Md5:    aa12bf73883cdf66396cfe33f51b863d
Sha1:   95c0a5767c5b31b1c2df3076a93b44f78b0482bb
Sha256: 0b8997c6a8e897fc28b9838d1fa57144cf250fa15a619a1c7ec7c8cc92b65dd7
                                        
                                            GET /files/slide%20menu%20keren.js HTTP/1.1 
Host: oktri.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1590
Date: Sat, 01 Dec 2018 14:39:57 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1590
Md5:    5b4c8ab8e5ae2589dd0159001539cc9a
Sha1:   418a8622326272ae8f80173c957d776dcbc3c902
Sha256: bd40faf450113c596ceff86b5067ae331bbc2f1fb23716d653e40a385d721c0d
                                        
                                            GET /files/salju.js HTTP/1.1 
Host: masterendi.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1575
Date: Sat, 01 Dec 2018 14:39:57 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1575
Md5:    04868b63f9268120d84d7c52996b510d
Sha1:   e0d74466070c16def8b53ac6b51407438582d2ad
Sha256: 153d9d72e5ee9d823060a0afb928cc9b7718d995f7b2ad2dc968c71d071d2cf2
                                        
                                            GET /special/spe-2/spe114.cur HTTP/1.1 
Host: cur.cursors-4u.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         173.208.177.162
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Server: nginx/1.10.1
Date: Sat, 01 Dec 2018 20:50:38 GMT
Content-Length: 3262
Last-Modified: Wed, 27 Feb 2013 18:38:38 GMT
Connection: keep-alive
Etag: "512e52ae-cbe"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Lotus 1-2-3
Size:   3262
Md5:    161185b46daa1d8c1fc0226c92f9d347
Sha1:   41fcf842566237f14943caa797dd4be960b63cc8
Sha256: db86c1f105c645bbbc7cc55243197ef12f507dfddda2afc70629b6e82107d0c1
                                        
                                            GET /tab.js HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Last-Modified: Sat, 13 Oct 2018 23:07:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5bc27a9c-6e99"
Expires: Sun, 02 Dec 2018 14:39:57 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18848
Md5:    9fe4bda5e4fe9d390148f7fdb2156fd7
Sha1:   a9fa3ba34685a53c02198c5784d3e6fbda3c00ee
Sha256: ba7ccd634b560d814ca847d108e3d689fafcea6ad57629e6585cff34ed9c9ca5
                                        
                                            GET /hitparade.php?pagexiti=geoiphone HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Server: Apache
X-Powered-By: PHP/5.2.17-pl0-gentoo
Cache-Control: max-age=180
Expires: Sat, 01 Dec 2018 14:42:57 GMT
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text
Size:   1018
Md5:    d2f323689ae78978ef6112bcd01afa78
Sha1:   6f6a3db8af116fe036171b846e2ae34adcdd4fc7
Sha256: 8059617caee854c9f85be4662ac526da75d39f9c5d112d730b5b7dc263d02abf
                                        
                                            GET /badge/100004218962180.266.402185970.png HTTP/1.1 
Host: badge.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.8
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://badge.facebook.com/badge/100004218962180.266.402185970.png
X-FB-Debug: LNrOTZYbc5JOqV3lmN+aps+nA4aUKYwJE5ih/trA+Fucm5nrbMmuAM5xQSL+ucLVKPIHjmlVRNPfz68dlccPiQ==
Date: Sat, 01 Dec 2018 14:39:57 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /files/twitterfloat.js HTTP/1.1 
Host: p4r46h-blog.googlecode.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         64.233.161.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1582
Date: Sat, 01 Dec 2018 14:39:57 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1582
Md5:    ca9c1205244229a2306af75191b1b47e
Sha1:   adf75bb2ad88fa9781513428acc8bc51b43444a6
Sha256: f6a813164ac948369841feee108db6912fa951d65272c2a7dce8febe2391da22
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    523ca60cc7355374c31b9b22634f7e64
Sha1:   029cdf99fe9115c48ac514682a3241165fb3819e
Sha256: f0b4f32f795111a4967bb4dd266e76fd80a3460087c929074569177dfc0f4d6f
                                        
                                            GET /geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Server: Apache
X-Powered-By: PHP/5.2.17-pl0-gentoo
p3p: CP="NOI ADM DEV COM NAV OUR STP"
Set-Cookie: monpays=NO; expires=Fri, 01-Mar-2019 14:39:57 GMT; path=/ pays=Norway; expires=Fri, 01-Mar-2019 14:39:57 GMT; path=/ idcompteurcc_2020808=done; expires=Sun, 02-Dec-2018 14:39:57 GMT; path=/ online_idcompteurcc_2020808=done; expires=Sat, 01-Dec-2018 14:42:57 GMT; path=/ pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; expires=Sat, 01-Dec-2018 14:42:57 GMT; path=/ online_2020808=57; expires=Sat, 01-Dec-2018 14:42:57 GMT; path=/ vj_2020808=5875; expires=Sat, 01-Dec-2018 14:42:57 GMT; path=/ total_2020808=3640639; expires=Sat, 01-Dec-2018 14:42:57 GMT; path=/
Cache-Control: max-age=180
Expires: Sat, 01 Dec 2018 14:42:57 GMT
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   14906
Md5:    db282f6033390fce07b40c64062ceba7
Sha1:   bac1965f4dedde83d319c921b426da4fb404746d
Sha256: 89ec02e9ba7dc69be182724a92a41dea50797171c4b25ec25c1b7581b56df7d3
                                        
                                            GET /tcm.js HTTP/1.1 
Host: www.topcpm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 23:59:42 GMT
Etag: "512020-1149-57331a75c7780"
Accept-Ranges: bytes
Content-Length: 4425
Access-Control-Allow-Origin: *
Connection: close


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   4425
Md5:    0ab78136c6d7d75486dbd5a6056b4a89
Sha1:   754d40dd892be78c250d472408fe231586af119b
Sha256: 811db411a3834da1977a907097250cb928599d0358a97d9ab45f65d8f41df4f6
                                        
                                            GET /geocompteur/css/geo_css.php?c=geoiphone&size= HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Server: Apache
X-Powered-By: PHP/5.2.17-pl0-gentoo
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:57 GMT
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII C program text
Size:   5488
Md5:    0dbbd68286f3f1cfb6e131c1390f9dc6
Sha1:   1eb43847dac38a8231341591201857cb2029f6a4
Sha256: 4390630f55cb03d0a8a729811deccf5a004ae6084a56d40f31a036d362ed3ee9
                                        
                                            GET /widgets/like.php?href=http%3A%2F%2Fwww.facebook.com%2FGanzFansPage&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/widgets/like.php?href=http%3A%2F%2Fwww.facebook.com%2FGanzFansPage&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
X-FB-Debug: deIxSHs8lL57dvgcN22e9v7sHpaUO8KXFWlihe1gw+/tzgD7lwc48RxSCfikdMYA1xojTQ5jvwdB52WhBdR7Lw==
Date: Sat, 01 Dec 2018 14:39:57 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /id_ID/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 5622ad2832133b49e9ae97209e5911c2
Expires: Sat, 01 Dec 2018 14:59:57 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
Etag: "07ac5d4db5e5247ad779144190e5fa42"
X-XSS-Protection: 0
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Content-MD5: N08SkZiHJ5dW34DrIFA+8Q==
X-FB-Debug: M6WBGMFXErVE7PeiIl/NQ4xjH+3AAKy4R+h3e8Tl2olIzLS8Y+jm+kisnqTQj5cVBpapR2ruTWJoI8+XlQk18w==
Date: Sat, 01 Dec 2018 14:39:57 GMT
Connection: keep-alive
Content-Length: 1856


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1856
Md5:    374f12919887279756df80eb20503ef1
Sha1:   e2ed80132f3bd3b2a5a7bef1bb5c6b4b0fcc8294
Sha256: a6df6ad32e35da0db99f11cf3a03f90e319457d58265458b536fe086620dd565
                                        
                                            GET /widgets/orido/Jam-Garuda-Indonesia-4639-8192_134217728.widget?__install_id=1248336094072&__view=expanded HTTP/1.1 
Host: www.widgipedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         38.113.119.45
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Last-Modified: Sun, 11 Sep 2016 12:09:18 GMT
Etag: "25578-2b-53c3a3fb2b780"
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    d3e941fe204d0a9cc5b92782bbf882c8
Sha1:   682a77b3dd546b61ae894285128ffba13a33cf7d
Sha256: 281c5ae8bf152f644e12a943ec5d59681e1950c54fb6c0b3cc77539bf5e69340
                                        
                                            GET /geocompteur/geowidget_js.js HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sat, 01 Dec 2018 14:39:57 GMT
Server: Apache
Last-Modified: Tue, 03 Feb 2015 21:30:55 GMT
Accept-Ranges: bytes
Content-Length: 2217
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:57 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   2217
Md5:    7f9edc3cadc5c61be5c12a3c27d904a3
Sha1:   407df357c73446980d44f1e6f434acdfcf6927cf
Sha256: 550a02e57600ed04fef31e6099660b941e8736d35c641f58a240457dc4df20d0
                                        
                                            GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:19:35 GMT
Accept-Ranges: bytes
Content-Length: 1214
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1214
Md5:    6d2ac5d5c26fbb0f426ef3f52313bad1
Sha1:   aaf79569885e82cb123b9b9db01f7f61de0bf6f7
Sha256: 403f6098533622bffbb7022e9618fff433c15f2755d74592b151193380f48bb9
                                        
                                            GET /geocompteur/shadow/flag_russian%20federation.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:18:48 GMT
Accept-Ranges: bytes
Content-Length: 857
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   857
Md5:    4470ee4b3a4448b55d85100415b71247
Sha1:   3c17120734bb8c667d29079d688ef46bf5f1bdb0
Sha256: e8728b86cd6d9762ddf5bf21a8ecaf25ce918bfd77e71768a22211fcdb103434
                                        
                                            GET /geocompteur/shadow/flag_ecuador.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:03 GMT
Accept-Ranges: bytes
Content-Length: 1025
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1025
Md5:    0e758f4df3f2e6420d19017d9df1a309
Sha1:   75e0ecc48e3e0aaf475954128a47d76576e135e3
Sha256: 07755697c97efd0cdb94c70fa3ac90016a7e79527efc2e9ab860b2f1745ca7d9
                                        
                                            GET /geocompteur/shadow/flag_colombia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:51 GMT
Accept-Ranges: bytes
Content-Length: 763
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   763
Md5:    1460e0d350d09f19b75e23873c98ace6
Sha1:   be1f2178dd504b9efdd9f6b99cbf17609f033555
Sha256: 38212686982fafcd5633b78077fcc0b33cd5362b81b2638f9edd07e7fcd3f8f5
                                        
                                            GET /geocompteur/shadow/flag_norway.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:18:32 GMT
Accept-Ranges: bytes
Content-Length: 1041
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1041
Md5:    c451d2a08d5a5f909f8602fe35cb88ba
Sha1:   eb45e8772b504bdd9cb4b5f4a3fb63175989e704
Sha256: f7939ada27e650aff3510bdb310ebb8d638a12b23e093cf79fd936113a9fb8b5
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.8
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 20 Nov 2018 06:13:48 GMT
Etag: "60e-57b12896a0602"
Accept-Ranges: bytes
Content-Length: 1550
Date: Sat, 01 Dec 2018 14:39:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1550
Md5:    a2e8e89e9111a9f1d6bda9aa1c1ba8a8
Sha1:   17d6d6ecfb0ae2d2981e77641fe44b97d5df98d8
Sha256: f707e4415756215ea61d47cbe251b31d4d98faa13b0b8b5f400c39dd575e777d
                                        
                                            GET /hit.xiti?s=281802&p=geoiphone&hl=15x39x57&r=1176x885x24x24&ref=http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html HTTP/1.1 
Host: logv33.xiti.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/hitparade.php?pagexiti=geoiphone

                                         
                                         54.77.16.179
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Content-Length: 214
Connection: keep-alive
Location: /hit.xiti?s=281802&p=geoiphone&hl=15x39x57&r=1176x885x24x24&ref=http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Set-Cookie: idrxvr=814DDE0D-1410-4AFE-A1CD-777E918B7A26; Path=/; Domain=xiti.com; Expires=Wed, 01 Jan 2020 14:39:58 GMT; HttpOnly


--- Additional Info ---
Magic:  ASCII text
Size:   214
Md5:    f3eb92318cfcea33ca9be4b24a90162a
Sha1:   6eab2ce71af66286fbf637c009b8f156be9aeadd
Sha256: cfacb813ccb9c01646af335633d416147c098ce11f372bdece841d94174fb0a1
                                        
                                            GET /geocompteur/shadow/flag_korea,%20republic%20of.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:49 GMT
Accept-Ranges: bytes
Content-Length: 1163
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1163
Md5:    064c5cac99bc71ee38d6c8a25b47caee
Sha1:   7f99b096f09b19cd4ac673fecacd8d78286e2a65
Sha256: 6e25b47c0dd9d9bc6fcb4d8fc0d56e6a26e4d6834e63fd3859e62028472d4eb1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.201
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149944
Date: Sat, 01 Dec 2018 14:39:58 GMT
Etag: "5c00fc1c-1d7"
Expires: Mon, 03 Dec 2018 08:19:02 GMT
Last-Modified: Fri, 30 Nov 2018 09:00:12 GMT
Server: ECS (lga/1384)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486b.cloudfront.net (CloudFront)
X-Amz-Cf-Id: PtkHpDXXNNk0CEgYkVcP7XL2Fi9y8cAqd0AVQ76t6SsaTlzej5JzGw==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4c70e3af883354e7637894c640df44f6
Sha1:   7d19dd54ea2b7a20525b60f45024d537eca662f5
Sha256: a763eec6071fb753e164b307190119854d8ab275e8b7dbe098557ee90e8f01ec
                                        
                                            GET /geocompteur/shadow/flag_myanmar.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Mon, 09 Feb 2015 22:52:40 GMT
Accept-Ranges: bytes
Content-Length: 949
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   949
Md5:    733ae148c6153dab125da5625e999b87
Sha1:   0d911e6af567c36dd123430eefc663ec9dc66bb4
Sha256: 4c0fd4d0395132d4d108025ae8a70aee738063bca5a1739fc4a865888110b281
                                        
                                            GET /geocompteur/shadow/flag_mongolia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:18:16 GMT
Accept-Ranges: bytes
Content-Length: 992
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   992
Md5:    980de3ec21d49519a35660f1439249df
Sha1:   e372eb842a27cfba9d436ad204477e32b01f2f78
Sha256: f96d57f33a76a7b67926cf7fde10238ac95ddd2a4a80834597bed4c50ea5f4c7
                                        
                                            GET /geocompteur/shadow/flag_tunisia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:19:28 GMT
Accept-Ranges: bytes
Content-Length: 1132
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1132
Md5:    524892dbb80834652d6a41563eaf0c45
Sha1:   295d42455c296ba7e01380ede2e428d8d295295e
Sha256: f24f667fe6961d9d76cd2b025bec4c351989e46b7f1a63a647c0b71ca87c2883
                                        
                                            GET /geocompteur/shadow/flag_guatemala.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:26 GMT
Accept-Ranges: bytes
Content-Length: 1153
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1153
Md5:    5db12601ec81b8db3c19d90d21430049
Sha1:   da63579284808bbe425eb8baf22260e6d8272a95
Sha256: f9d4189670839691473cba6de532aeb7a94aa3d0a0398371237fa0223baf6a0c
                                        
                                            GET /geocompteur/shadow/flag_vietnam.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:19:40 GMT
Accept-Ranges: bytes
Content-Length: 915
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   915
Md5:    de29eaf378c2e4344cd0df65503fa085
Sha1:   1fea45c190e03673279ff7de66936113b0c4408f
Sha256: b1e9c555a53b610a478d24928b29f8113b383040b36f7312b92761561a207307
                                        
                                            GET /hit.xiti?s=281802&p=geoiphone&hl=15x39x57&r=1176x885x24x24&ref=http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html&Rdt=On HTTP/1.1 
Host: logv33.xiti.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/hitparade.php?pagexiti=geoiphone
Cookie: idrxvr=814DDE0D-1410-4AFE-A1CD-777E918B7A26

                                         
                                         54.77.16.179
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Content-Length: 373
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 39 x 25
Size:   373
Md5:    29cb2a1e585dff1f4282449fdbbab2d7
Sha1:   075d147195f9dba1862a6f3990d219d7c4389225
Sha256: 86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
                                        
                                            GET /geocompteur/shadow/flag_serbia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:19:00 GMT
Accept-Ranges: bytes
Content-Length: 901
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   901
Md5:    8dc40d1841db408c9996dd06c8340507
Sha1:   91bd8e87be9a6044be0d82ad9e5ec7f496cea86b
Sha256: 1a89b711cd378058df86bfee9c9fce4800130ccd77e8e5252bbc24f5032c1ebb
                                        
                                            GET /geocompteur/shadow/flag_bulgaria.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:42 GMT
Accept-Ranges: bytes
Content-Length: 913
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   913
Md5:    f1af57188afdfef37889914da2f08762
Sha1:   e9475e4066bf6267cc7fe508f05ed6ca2cb50362
Sha256: 9c68a6629c7495f273e01ed444957d7a07904ea6c1e9093ce2a67b6e7bab1f93
                                        
                                            GET /geocompteur/shadow/flag_el%20salvador.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:04 GMT
Accept-Ranges: bytes
Content-Length: 933
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   933
Md5:    cb6800c3c9ae5f3f5f14efbb9b62a620
Sha1:   cebd67ea8b6e40f6dfe50f3eb5474cf85afc08d4
Sha256: ffad1e854315ab39ee5d1c229a4db10b88e94e66fb6910050dd37bbc1b41a1ee
                                        
                                            GET /geocompteur/shadow/flag_costa%20rica.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:55 GMT
Accept-Ranges: bytes
Content-Length: 1057
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1057
Md5:    9c6171134fab13d554e9718d76a39fa6
Sha1:   cc7aa985041b75b10c80b3181411cf6ec872b5a8
Sha256: 1ae4138fcc4f8f37c4e242339a4f986c4e5454fe91a31d49cc29ee73995392f1
                                        
                                            GET /geocompteur/shadow/flag_indonesia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:36 GMT
Accept-Ranges: bytes
Content-Length: 820
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   820
Md5:    f77ba957fb7c58319b411b146e6bc908
Sha1:   745bb0bcb51f66c68d8440f2393460e9628e0dbd
Sha256: b497c7a1a9112a0fc4b77fd586e189f8e64ba3edbe99711aff5041009db33f02
                                        
                                            GET /geocompteur/shadow/flag_canada.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:46 GMT
Accept-Ranges: bytes
Content-Length: 1148
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1148
Md5:    32779c1c814b6d9a4da074074d682b87
Sha1:   c59ed71d4a41b408607e2f3fdf6c553ea9ca18dd
Sha256: d1e3037d32dba63396ebc7dd655baab213e514052568e66869d037cd26b88e15
                                        
                                            GET /pingjs/?k=e3ku0gzti42i&t=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&c=t&y=&a=0&d=0&v=22&r=8934 HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         67.202.94.86
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   51
Md5:    3432d822098f9939b916db017e46f9ef
Sha1:   1096609a86e019fe1e08d35b364c6c93d0e06b70
Sha256: 70ac257f33610088b392089c4c901fadb29abb075ac166eb97bf1662e37fb6f3
                                        
                                            GET /pingjs/?k=e3ku0gzti42i&t=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&c=t&y=&a=2&d=0&v=22&r=9740 HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         67.202.94.86
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   51
Md5:    5717c5be4042d2536b26301c20f07222
Sha1:   7731a5151bd88922381552eafcf9b6f07a4e2d94
Sha256: 3dbb941cb1926be2fcf902d96af80719ab74625b24ca43996285b1d1e3cad097
                                        
                                            GET /geocompteur/shadow/flag_croatia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:56 GMT
Accept-Ranges: bytes
Content-Length: 1123
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1123
Md5:    86244cb3249414a57018fe48b89667d8
Sha1:   cc3093684f9409666258dd82c96807cd50e3f268
Sha256: 07331eee5cb927d10094b2bb57e6bd0654982a10a1f996e209191f827080c218
                                        
                                            GET /pingjs/?k=e3ku0gzti42i&t=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&c=t&y=&a=1&d=0&v=22&r=120 HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         67.202.94.86
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   51
Md5:    6b139ea010914fcc32535dfcc443f572
Sha1:   0c57ead7c79be2a174b62f5616af2cede28c56fa
Sha256: a58e1d9d16b797aa3c7eff6a81cf16aeac6dec3ac7f1685808cc1d4a2cb6eedb
                                        
                                            GET /geocompteur/shadow/flag_netherlands.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:18:25 GMT
Accept-Ranges: bytes
Content-Length: 892
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   892
Md5:    5a9c4304dd19c9620edaaec690e02661
Sha1:   ed2b9b0708ffb7a4c0c037c3057f55ca3e036c40
Sha256: 6e6d7d6eefa5b68cab90ebfba652f0316ff0ef12127acbf19f1a1d077ee1944c
                                        
                                            GET /geocompteur/shadow/flag_bosnia%20and%20herzegovina.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:38 GMT
Accept-Ranges: bytes
Content-Length: 1116
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1116
Md5:    c3ccf44d61b6d17b271ce35af4d6fc85
Sha1:   c44eff9e7c29d91eee45f49e7f1ecf1eb7202201
Sha256: 446305499d5bc88118fa30543af6f3810edc0d83a5fd04983c7a3bb694473f17
                                        
                                            GET /geocompteur/shadow/flag_georgia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:19 GMT
Accept-Ranges: bytes
Content-Length: 1265
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1265
Md5:    bef041176678fe8614b8afe83d1e01a9
Sha1:   174e5c84914117c36af4ba8f827c6694a3ae7087
Sha256: 8d5eb83a4bd99715c3daf412ae73590adfe19131d4b043becf71754d4efda950
                                        
                                            GET /geocompteur/shadow/flag_albania.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:21 GMT
Accept-Ranges: bytes
Content-Length: 1123
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1123
Md5:    61bcbe39e93d5836f96007dbdbb1a7d6
Sha1:   2f307fa6f8c45a0ff6d86e01f7e6f47dcd4a9cf9
Sha256: 525ed1151f1552df413b334dc9ae6f90f91bfd0e05e93f31d9bde298bbd97363
                                        
                                            GET /geocompteur/shadow/flag_palestinian%20territory.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:18:38 GMT
Accept-Ranges: bytes
Content-Length: 1014
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1014
Md5:    ce2654077a6a2cedf935cbeef8e123e7
Sha1:   187b42ff99c7f4d5b39e3e4fc49a4810fad4ab73
Sha256: 6601ab70b4e5b2cc60bf9ff7c4afe2cb18211f851190370d26895c3b77287fbd
                                        
                                            GET /geocompteur/shadow/flag_australia.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:16:29 GMT
Accept-Ranges: bytes
Content-Length: 1234
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1234
Md5:    8bbf06eeb299a623eb221565626a1242
Sha1:   31fafabcf28b7f75c23925c5d6502f176402c979
Sha256: 1e569dfecd0a2778c8f1b90e86c3061c5e60b80edaed069b84cbfadbc382380d
                                        
                                            GET /geocompteur/shadow/flag_palestine.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:18:36 GMT
Accept-Ranges: bytes
Content-Length: 993
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   993
Md5:    2d4c674339afe31662cded1fbffb97e1
Sha1:   b6ac7343efac6d0e65ad3cfa12898f408675beb4
Sha256: 7badb2f7ae25532d1c1aedbfb943d1b2d0a7dfd621f33253089a80e55ecbd17e
                                        
                                            GET /geocompteur/shadow/flag_germany.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:20 GMT
Accept-Ranges: bytes
Content-Length: 873
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   873
Md5:    9d819ac526bb5d4a61e0eb20bbd47759
Sha1:   546e3ca435db6d415fef55a124ac35f919ddd5c0
Sha256: 3b3edb45a487f4e6d30ac260dfd9c886faf6c53f1ca58c8c3a71d613997991e0
                                        
                                            GET /geocompteur/shadow/flag_japan.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:17:43 GMT
Accept-Ranges: bytes
Content-Length: 902
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   902
Md5:    e2142c570728ab069597108db00b6528
Sha1:   d993ae4e441874396b437c58fa86197bb09a0049
Sha256: 88ad77bf8aaf207cdf1dad3ad9d33ed0c15b661b42b04ae75b65e3d526fd4bfa
                                        
                                            GET /geocompteur/shadow/flag_ukraine.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:19:33 GMT
Accept-Ranges: bytes
Content-Length: 788
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   788
Md5:    3172f9d3a5ddb619c306cdc6cef3e82e
Sha1:   d144598ef95bc8d3ca89dcfd11fb09d98603201d
Sha256: 1963cfc19a4c3be90e3dd4d05c3927dad7e63fe3d371c8beb5005e1de2f78f40
                                        
                                            GET /geocompteur/shadow/flag_europe.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: Apache
Last-Modified: Wed, 11 Feb 2015 19:07:27 GMT
Accept-Ranges: bytes
Content-Length: 1210
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:58 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   1210
Md5:    d2ce55ccbcb02fbf3b6ee5b210ef97dc
Sha1:   fddd2d7075e1e71ac039e801bd23ecc617b786cd
Sha256: 7e330a2140d46386a39522c2142d7382a5d2a7286d88ba5d50b8864e89513ced
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.148
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Sat, 01 Dec 2018 14:39:58 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.7/2018-03-28)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040147.cloudfront.net (CloudFront)
X-Amz-Cf-Id: xCVGR0fzUOkebtpmIMYYGsbagBaqQYvJ3yMCsRMuYCMFtAYMgOuRzw==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    2cbc59de38028d6d91566f5991be250e
Sha1:   afb9f173aad1d77b51a2cabf1ebbbcf7a44bb86d
Sha256: cdf96efe7df80d5d06f3d3ca3cf0e2a0eae110c930872d131120f61fcf8dd540
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.t2UPL-v4NsI.O/m=gapi_iframes/exm=plusone/rt=j/sv=1/d=1/ed=1/am=QQ/rs=AGLTcCNp4MZuwN6M1DIuMNrgVi7_Y_XLXg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html
Cookie: NID=148=Ht5_17CLvc6Zyp0FkJ59ljCti8pKUT7HN0PX-9qFKHnCrKh5SsRds1WUb_ONxpv7IXYZwlP1XY00mpJu1F2XyTxm4E9D46hLH-ef6UpvLL-43sPE2YErsVHcCkFDhFemdMfJsKvXMtz0mfyoPGfNA9Dhe-pKd3ktfHxBdAqgJP8

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1109
Date: Sat, 01 Dec 2018 02:34:44 GMT
Expires: Sun, 01 Dec 2019 02:34:44 GMT
Last-Modified: Thu, 29 Nov 2018 22:34:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 43514
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1109
Md5:    f0a3cc76d10785aad397c33e06c47a84
Sha1:   49975af3307eeb8dfbdf6402db61a66deda93c00
Sha256: e9e7147153625cc2bbb0a59511a3f7ce436a19f453fd2982520605735a1db00a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:58 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0c151c249045c2c1b238043783d7fc13
Sha1:   dc6c187f3cbe9f252ad1e74713c8afe1ec22724a
Sha256: 5744efc5efdff7555a2323068774ff309ca40957699e5f84b926933dbd28af0c
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.t2UPL-v4NsI.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=QQ/rs=AGLTcCNp4MZuwN6M1DIuMNrgVi7_Y_XLXg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html
Cookie: NID=148=Ht5_17CLvc6Zyp0FkJ59ljCti8pKUT7HN0PX-9qFKHnCrKh5SsRds1WUb_ONxpv7IXYZwlP1XY00mpJu1F2XyTxm4E9D46hLH-ef6UpvLL-43sPE2YErsVHcCkFDhFemdMfJsKvXMtz0mfyoPGfNA9Dhe-pKd3ktfHxBdAqgJP8

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46787
Date: Sat, 01 Dec 2018 00:31:40 GMT
Expires: Sun, 01 Dec 2019 00:31:40 GMT
Last-Modified: Thu, 29 Nov 2018 22:34:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 50898
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46787
Md5:    5fdd705527126d6c5f80cf2571a76dc4
Sha1:   6ce07d152883b732c305007fc626d0ff0ebad600
Sha256: 2d382ccbf8a7b86098ae6b6564f58d9b802d9404ea8d4ad785256bc2191d42f3
                                        
                                            GET /badge/100004218962180.266.402185970.png HTTP/1.1 
Host: badge.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.8
HTTP/1.1 200 OK
Content-Type: image/png
                                        
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
Vary: Origin
Cache-Control: private, no-cache, no-store, must-revalidate
Access-Control-Allow-Origin: https://badge.facebook.com
Access-Control-Allow-Methods: OPTIONS
X-FB-Debug: Cny0k7l2OJsMJP6fR5RJO4lu1RmuLo1KPob3CfHHYZT7Gy+hUXCaFVonCqjLsEHqL8gkC4fPtbRcAyAY7xLhcQ==
Date: Sat, 01 Dec 2018 14:39:58 GMT
Connection: keep-alive
Content-Length: 1383


--- Additional Info ---
Magic:  PNG image, 175 x 50, 8-bit colormap, non-interlaced
Size:   1383
Md5:    38a7c11bfd9fd9dc23ef5f340eca0990
Sha1:   719cb123fcd1a40c437579104fdc59acd39e319c
Sha256: d261c4966bfa366c459d11533a617e6dbe95ee5f81c16f986ef3a9d9096fb562
                                        
                                            GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 24715
Date: Tue, 27 Nov 2018 15:35:52 GMT
Expires: Wed, 27 Nov 2019 15:35:52 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 342247
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   24715
Md5:    a345240e5331b52d632b87045a4b27f5
Sha1:   6ccffb3c524b65fe00a3cf40f09862583737be99
Sha256: 336744214634ef8a1412b44de060754c1280890bca5880724e38660b93e72911
                                        
                                            GET /css?family=Open+Sans:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocompteur_html.php?id=2020808&c=geoiphone&size=&nostats=&title=DAEMON%20Tools%20Pro%20Advanced%205%20Full%20Loader&ref=ninja-saga-hack-insyndicate.blogspot.com

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sat, 01 Dec 2018 14:39:59 GMT
Date: Sat, 01 Dec 2018 14:39:59 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   236
Md5:    a69dc56bee7d76d59751f29c4ffe5e31
Sha1:   fd5b78c4b59fdc083aa9c988585521d4d0362b60
Sha256: ae6adafbb4e2e04d3f1cba3c26f0599dc1760c84607e483ddaaf8275f8ef61b9
                                        
                                            GET /id_ID/all.js?hash=b644c2d75922c810811d9375a561b9ba HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 6cde250f9527494e2438f269092c180c
Content-Encoding: gzip
Timing-Allow-Origin: *
Expires: Sun, 01 Dec 2019 13:59:32 GMT
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Etag: "c26d3693f5fadfd9f1096db9f6ac0326"
X-XSS-Protection: 0
Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable
Content-MD5: Vi2274oAo+SxeMhU+Jm1Og==
X-FB-Debug: 3DwDj9+MmQk8qRezywAZYWlecDSay7yE3QzL4OzHkV6vYIeVmj0V7IEzSnTJhm2YlkW3GB73NNtxDYxnBLNtmg==
Date: Sat, 01 Dec 2018 14:39:59 GMT
Connection: keep-alive
Content-Length: 57907


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57907
Md5:    562db6ef8a00a3e4b178c854f899b53a
Sha1:   6ed5383bce008d0a881c423964285aa5f876987e
Sha256: c3b0d544cc28bf626115d15b2389ed6da127d60dd0c8a2f684d87fe74e6da535
                                        
                                            GET /widget_code/html_widget/artist_2763712?widget_id=50&posted_by=artist_2763712&pwc[design]=customized&pwc[background_color]=%23111112&pwc[included_songs]=1&pwc[photo]=1%2C0&pwc[size]=custom HTTP/1.1 
Host: www.reverbnation.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         50.18.219.121
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 01 Dec 2018 14:39:59 GMT
Content-Length: 14521
Connection: keep-alive
Server: Apache
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Expires: PAST DATE
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
RN-APP-EVENTS: 1
X-Request-Id: 0b9634dc-8f83-4c64-8fda-67604fa748eb
X-Runtime: 0.075418
Set-Cookie: _reverbnation_session=95b060ca8adc58cc79f7b52bfb333322; domain=.reverbnation.com; path=/; expires=Sun, 02 Dec 2018 02:39:59 -0000; secure; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
x-ua-compatible: IE=Edge,chrome=1
p3p: CP="DSP ALL COR OUR SAMi UNRi CUR ADM TAI IVA IVD CONo BUS DEM UNI STA LOC NAV COM INT", policyref="/w3c/p3p.xml"


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14521
Md5:    492a544ec810e52e7b564e7507cf3c2c
Sha1:   a5316b7c177888368d7211303ac604d5e24feafe
Sha256: 2499efc4bef19237f36e8ac822dce20bb39d5d0c3ce674d1e2f53c568952b5a7
                                        
                                            GET /comment-iframe.g?blogID=1677130499770418990&postID=2567648315085011653&blogspotRpcToken=6467394&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 01 Dec 2018 14:39:59 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: S=blogger=RiY8IugKOeEK0HRhJ7FSw_TkLTFw4yNk; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1754
Md5:    85b503e36f75e760342adc654778d078
Sha1:   b162f7eaffbd575f28fb3bef1795ec9bc8d322fe
Sha256: 8b7f7b8c67fdefda66552b1dae1cc08c1ced7798694d322c4126a5366a8689c3
                                        
                                            GET /widgets/like.php?href=http%3A%2F%2Fwww.facebook.com%2FGanzFansPage&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=15552000; preload
Pragma: no-cache
X-FB-Debug: MAlax/u4uxSZSijxWwWTm5kO0cG+JITtko8YMqcApiIxs+R2oki1SI2++yUssgCO4rQdRHeYft30jThI2fhW1Q==
Date: Sat, 01 Dec 2018 14:39:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2487
Md5:    d99f8563ba4933fd3e3e2e1c6ab827cf
Sha1:   1c3891e42d7c8cce40dba06344a24b4e2d979e09
Sha256: 45d61cc1f0efaa25519890b317850a6f81a624cccc405a386b262d62eaed4b06
                                        
                                            GET /geocompteur/img/tmp/earth_blue.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/css/geo_css.php?c=geoiphone&size=
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:59 GMT
Server: Apache
Last-Modified: Tue, 07 Mar 2017 02:28:25 GMT
Accept-Ranges: bytes
Content-Length: 3276
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:59 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 36 x 36, 8-bit/color RGBA, non-interlaced
Size:   3276
Md5:    6ac8b557149bf61580a1a91714b12217
Sha1:   3171e1bb6d3051e2ffe2bf9c5b688d167abe8c89
Sha256: 41e369eda7963024a2c921a3c36e594fc1994e91d873789bee1cecbbc429de9c
                                        
                                            GET /geocompteur/img/tmp/geoiphone.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/css/geo_css.php?c=geoiphone&size=
Cookie: monpays=NO; pays=Norway; idcompteurcc_2020808=done; online_idcompteurcc_2020808=done; pays_2020808=United+states%3D1218327%23Russian+federation%3D26781%23Colombia%3D5332%23Norway%3D2652%23Ecuador%3D1915%23Korea%2C+republic+of%3D1366%23Myanmar%3D1327%23Mongolia%3D1229%23Tunisia%3D1137%23Vietnam%3D782%23Guatemala%3D678%23Serbia%3D639%23Bulgaria%3D564%23El+salvador%3D432%23Costa+rica%3D400%23Indonesia%3D286%23Canada%3D270%23Croatia%3D247%23Netherlands%3D208%23Bosnia+and+herzegovina%3D168%23Georgia%3D164%23Palestinian+territory%3D144%23Albania%3D134%23Australia%3D115%23Germany%3D98%23Palestine%3D84%23Japan%3D74%23Europe%3D37%23Ukraine%3D36%23; online_2020808=57; vj_2020808=5875; total_2020808=3640639

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 01 Dec 2018 14:39:59 GMT
Server: Apache
Last-Modified: Thu, 01 Sep 2016 00:44:56 GMT
Accept-Ranges: bytes
Content-Length: 17826
Cache-Control: max-age=3600
Expires: Sat, 01 Dec 2018 15:39:59 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 185 x 378, 8-bit/color RGBA, non-interlaced
Size:   17826
Md5:    a8b6fe5a173e5c3720f39431ffd0c657
Sha1:   bdc6f24376e79a49be1d95d1923ea1ed8ba4b501
Sha256: 840548b7b62e2052c9c566b86aedbd80e3917e2ed70191fde9467f1fa7e3a573
                                        
                                            GET /s/opensans/v15/mem5YaGs126MiZpBA-UN7rgOUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:400,700
Origin: http://www.widgeo.net

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18476
Date: Tue, 27 Nov 2018 17:17:51 GMT
Expires: Wed, 27 Nov 2019 17:17:51 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 336128
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   18476
Md5:    623e3205570002af47fc2b88f9335d19
Sha1:   b5f79d1934da79c8a4ba381092dad82ffb0582cb
Sha256: 5e03e0c7668266486cab9529702019d75c219fcec2b1e82a7c11797ba9b78506
                                        
                                            GET /s/opensans/v15/mem8YaGs126MiZpBA-UFVZ0d.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:400,700
Origin: http://www.widgeo.net

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17704
Date: Tue, 27 Nov 2018 19:34:58 GMT
Expires: Wed, 27 Nov 2019 19:34:58 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 327901
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   17704
Md5:    bf2d0783515b7d75c35bde69e01b3135
Sha1:   0e92462e402c15295366d912a7b8be303d0257d8
Sha256: 054349dda27b80bb105fbc59b5973ef9889ed976aca1fbe39f77688dcff8c552
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:39:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a803532ff4962965b3195ec692c0d430
Sha1:   f25875a83e08e65ea364457af78da1e0db3d9825
Sha256: a89bfaf6084aa55fa1a32190a2d8670f9a5b151e48710953788207c82090b4c4
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1677130499770418990&postID=2567648315085011653&blogspotRpcToken=6467394&bpli=1

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Tue, 27 Nov 2018 11:24:57 GMT
Expires: Tue, 04 Dec 2018 11:24:57 GMT
Last-Modified: Tue, 27 Nov 2018 06:23:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 357302
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /connect/xd_arbiter/r/7LloFuHvA7I.js?version=43 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ninja-saga-hack-insyndicate.blogspot.com/2012/04/daemon-tools-pro-advanced-5-full-loader.html

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Content-Encoding: gzip
Strict-Transport-Security: max-age=15552000; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Sat, 30 Nov 2019 12:43:25 GMT
Cache-Control: public,max-age=31536000,immutable
X-FB-Debug: IifWDKSG6xjWLu2rxPIdhdnqVGy0TD4HxYokeASFR5X7gIbsi54dUzz5Wfk+Q/htm6ez+qsJIfcoVdd+4cfmTA==
Date: Sat, 01 Dec 2018 14:39:59 GMT
Connection: keep-alive
Content-Length: 12739


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12739
Md5:    aeef3c4d4b48171397227af4262a541c
Sha1:   bb9ff1d0e1e753f88a7bdd8c921ca3f021523adb
Sha256: 0b5acf5ca54dd27dc30e92c8b397964ac4abde48e73c179017eb06a83759b2d8
                                        
                                            GET /js/bg/YMzmnwYLVewpqNtAjl_uht1raXi6FifhyBWxdH8tpLc.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=1677130499770418990&postID=2567648315085011653&blogspotRpcToken=6467394&bpli=1
Cookie: NID=148=Ht5_17CLvc6Zyp0FkJ59ljCti8pKUT7HN0PX-9qFKHnCrKh5SsRds1WUb_ONxpv7IXYZwlP1XY00mpJu1F2XyTxm4E9D46hLH-ef6UpvLL-43sPE2YErsVHcCkFDhFemdMfJsKvXMtz0mfyoPGfNA9Dhe-pKd3ktfHxBdAqgJP8

                                         
                                         216.58.207.228
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4963
Date: Wed, 28 Nov 2018 07:13:03 GMT
Expires: Thu, 28 Nov 2019 07:13:03 GMT
Last-Modified: Mon, 26 Nov 2018 11:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 286016
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4963
Md5:    253b6ebc0441287bd1d3ce19fd0ae10e
Sha1:   76a4dab4e75084d85951d191a7b8672fd0428154
Sha256: 949ffe1b4b757e900eb105ea70a8e153cee5a02a13f00357b3e1bf27137af742
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=143016
Date: Sat, 01 Dec 2018 14:39:59 GMT
Etag: "5c0210a2-1d7"
Expires: Mon, 03 Dec 2018 06:23:35 GMT
Last-Modified: Sat, 01 Dec 2018 04:40:02 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c1b95f830075699c8f2a75d66e0fb691
Sha1:   bb1138dca5470bf5a7da5bfbc2b77ed7cb25f421
Sha256: 7eb9f0d2af221ec7cbc4cdb65ac650f0af0cb519243e978f5f816cb2cb990cf5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=156002
Date: Sat, 01 Dec 2018 14:39:59 GMT
Etag: "5c0248ee-1d7"
Expires: Mon, 03 Dec 2018 10:00:01 GMT
Last-Modified: Sat, 01 Dec 2018 08:40:14 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471